Play interactive tour

Edit tour

Analysis Report http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989

Overview

General Information

Sample URL:	http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989
Analysis ID:	336876
Most interesting Screenshot:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)

Found iframes

HTML title does not match URL

Invalid links found

None HTTPS page querying sensitive user data (password, username or email)

Submit button contains javascript call

Suspicious form URL found

Classification

Startup

System is w10x64

iexplore.exe (PID: 5588 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)

iexplore.exe (PID: 4064 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5588 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

Source: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php	HTTP Parser: Iframe src: javascript:null;
Source: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php	HTTP Parser: Iframe src: javascript:null;

Source: http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Title: - does not match URL
Source: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Title: - does not match URL
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Title: - does not match URL
Source: http://ovd.ru/forum/index.php	HTTP Parser: Title: - does not match URL
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Title: - does not match URL
Source: http://ovd.ru/forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Title: - does not match URL
Source: http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Title: - does not match URL
Source: http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Title: - does not match URL
Source: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Title: - does not match URL
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Title: - does not match URL
Source: http://ovd.ru/forum/index.php	HTTP Parser: Title: - does not match URL
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Title: - does not match URL
Source: http://ovd.ru/forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Title: - does not match URL
Source: http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Title: - does not match URL

Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Invalid link: http://perviyshkaf.ru/3d-konstruktor-shkafov-kupe.html
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Invalid link: http://perviyshkaf.ru/garderobnye-komnaty.html

Source: http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Has password / email / username input fields
Source: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Has password / email / username input fields
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Has password / email / username input fields
Source: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php	HTTP Parser: Has password / email / username input fields
Source: http://ovd.ru/forum/index.php	HTTP Parser: Has password / email / username input fields
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Has password / email / username input fields
Source: http://ovd.ru/forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Has password / email / username input fields
Source: http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Has password / email / username input fields
Source: http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Has password / email / username input fields
Source: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Has password / email / username input fields
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Has password / email / username input fields
Source: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php	HTTP Parser: Has password / email / username input fields
Source: http://ovd.ru/forum/index.php	HTTP Parser: Has password / email / username input fields
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Has password / email / username input fields
Source: http://ovd.ru/forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Has password / email / username input fields
Source: http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Has password / email / username input fields

Source: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php	HTTP Parser: On click: LOGINZA.gotoProviderSignIn();
Source: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php	HTTP Parser: On click: LOGINZA.gotoProviderSignIn($('#openid_identity').val());
Source: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php	HTTP Parser: On click: LOGINZA.gotoProviderSignIn();
Source: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php	HTTP Parser: On click: LOGINZA.gotoProviderSignIn($('#openid_identity').val());

Source: http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: login.php?do=login
Source: http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: index.php
Source: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: login.php?do=login
Source: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: index.php
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Form action: login.php?do=login
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Form action: forumdisplay.php
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Form action: index.php
Source: http://ovd.ru/forum/index.php	HTTP Parser: Form action: login.php?do=login
Source: http://ovd.ru/forum/index.php	HTTP Parser: Form action: index.php
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Form action: login.php?do=login
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Form action: forumdisplay.php
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Form action: index.php
Source: http://ovd.ru/forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: login.php?do=login
Source: http://ovd.ru/forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: login.php?do=login
Source: http://ovd.ru/forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: forumdisplay.php
Source: http://ovd.ru/forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: index.php
Source: http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: login.php?do=login
Source: http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: login.php?do=login
Source: http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: forumdisplay.php
Source: http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: index.php
Source: http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: login.php?do=login
Source: http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: index.php
Source: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: login.php?do=login
Source: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: index.php
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Form action: login.php?do=login
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Form action: forumdisplay.php
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Form action: index.php
Source: http://ovd.ru/forum/index.php	HTTP Parser: Form action: login.php?do=login
Source: http://ovd.ru/forum/index.php	HTTP Parser: Form action: index.php
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Form action: login.php?do=login
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Form action: forumdisplay.php
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: Form action: index.php
Source: http://ovd.ru/forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: login.php?do=login
Source: http://ovd.ru/forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: login.php?do=login
Source: http://ovd.ru/forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: forumdisplay.php
Source: http://ovd.ru/forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: index.php
Source: http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: login.php?do=login
Source: http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: login.php?do=login
Source: http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: forumdisplay.php
Source: http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: Form action: index.php

Source: http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: No <meta name="author".. found
Source: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: No <meta name="author".. found
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: No <meta name="author".. found
Source: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php	HTTP Parser: No <meta name="author".. found
Source: http://ovd.ru/forum/index.php	HTTP Parser: No <meta name="author".. found
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: No <meta name="author".. found
Source: http://ovd.ru/forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: No <meta name="author".. found
Source: http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: No <meta name="author".. found
Source: http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: No <meta name="author".. found
Source: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: No <meta name="author".. found
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: No <meta name="author".. found
Source: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php	HTTP Parser: No <meta name="author".. found
Source: http://ovd.ru/forum/index.php	HTTP Parser: No <meta name="author".. found
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: No <meta name="author".. found
Source: http://ovd.ru/forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: No <meta name="author".. found
Source: http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: No <meta name="author".. found

Source: http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: No <meta name="copyright".. found
Source: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: No <meta name="copyright".. found
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: No <meta name="copyright".. found
Source: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php	HTTP Parser: No <meta name="copyright".. found
Source: http://ovd.ru/forum/index.php	HTTP Parser: No <meta name="copyright".. found
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: No <meta name="copyright".. found
Source: http://ovd.ru/forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: No <meta name="copyright".. found
Source: http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: No <meta name="copyright".. found
Source: http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: No <meta name="copyright".. found
Source: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: No <meta name="copyright".. found
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: No <meta name="copyright".. found
Source: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php	HTTP Parser: No <meta name="copyright".. found
Source: http://ovd.ru/forum/index.php	HTTP Parser: No <meta name="copyright".. found
Source: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	HTTP Parser: No <meta name="copyright".. found
Source: http://ovd.ru/forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: No <meta name="copyright".. found
Source: http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 208.100.17.188:443 -> 192.168.2.3:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.100.17.188:443 -> 192.168.2.3:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.100.17.188:443 -> 192.168.2.3:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.100.17.188:443 -> 192.168.2.3:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.163.114.204:443 -> 192.168.2.3:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.163.114.204:443 -> 192.168.2.3:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 46.4.114.109:443 -> 192.168.2.3:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.209.34:443 -> 192.168.2.3:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.209.34:443 -> 192.168.2.3:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.15.175.130:443 -> 192.168.2.3:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.15.175.130:443 -> 192.168.2.3:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.88.21.119:443 -> 192.168.2.3:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.66:443 -> 192.168.2.3:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.66:443 -> 192.168.2.3:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.69.74.8:443 -> 192.168.2.3:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 88.212.252.2:443 -> 192.168.2.3:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 88.212.252.2:443 -> 192.168.2.3:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.69.74.8:443 -> 192.168.2.3:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 193.232.148.156:443 -> 192.168.2.3:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.198.34:443 -> 192.168.2.3:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.198.34:443 -> 192.168.2.3:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 193.232.148.156:443 -> 192.168.2.3:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 89.208.236.251:443 -> 192.168.2.3:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 94.100.180.197:443 -> 192.168.2.3:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 94.100.180.197:443 -> 192.168.2.3:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.34:443 -> 192.168.2.3:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.209.108.46:443 -> 192.168.2.3:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.34:443 -> 192.168.2.3:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.209.108.46:443 -> 192.168.2.3:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.190.117.93:443 -> 192.168.2.3:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.18.16.16:443 -> 192.168.2.3:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.18.16.16:443 -> 192.168.2.3:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.190.117.93:443 -> 192.168.2.3:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.201.152.107:443 -> 192.168.2.3:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.201.152.107:443 -> 192.168.2.3:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.15.175.130:443 -> 192.168.2.3:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.15.175.130:443 -> 192.168.2.3:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.180.98:443 -> 192.168.2.3:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.180.98:443 -> 192.168.2.3:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 109.248.237.37:443 -> 192.168.2.3:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 109.248.237.37:443 -> 192.168.2.3:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.201.243.72:443 -> 192.168.2.3:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.172.81.158:443 -> 192.168.2.3:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.172.81.158:443 -> 192.168.2.3:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.201.243.72:443 -> 192.168.2.3:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.163.37.253:443 -> 192.168.2.3:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.163.37.253:443 -> 192.168.2.3:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 81.222.128.216:443 -> 192.168.2.3:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 81.222.128.216:443 -> 192.168.2.3:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 136.243.148.229:443 -> 192.168.2.3:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 136.243.148.229:443 -> 192.168.2.3:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 176.9.238.190:443 -> 192.168.2.3:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.64.106.147:443 -> 192.168.2.3:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.211.66.35:443 -> 192.168.2.3:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.211.66.35:443 -> 192.168.2.3:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 176.9.238.190:443 -> 192.168.2.3:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.64.106.147:443 -> 192.168.2.3:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.220.27.134:443 -> 192.168.2.3:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.220.27.134:443 -> 192.168.2.3:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.9.245.57:443 -> 192.168.2.3:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.9.245.57:443 -> 192.168.2.3:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.66.147.170:443 -> 192.168.2.3:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.236.171:443 -> 192.168.2.3:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.66.147.170:443 -> 192.168.2.3:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 176.99.5.102:443 -> 192.168.2.3:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.65.2.150:443 -> 192.168.2.3:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 176.99.5.102:443 -> 192.168.2.3:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.236.171:443 -> 192.168.2.3:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.65.2.150:443 -> 192.168.2.3:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.4.87:443 -> 192.168.2.3:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.4.87:443 -> 192.168.2.3:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.172.81.172:443 -> 192.168.2.3:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.172.81.172:443 -> 192.168.2.3:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.148.37.80:443 -> 192.168.2.3:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.148.37.80:443 -> 192.168.2.3:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.16.14:443 -> 192.168.2.3:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.16.14:443 -> 192.168.2.3:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.87.44.207:443 -> 192.168.2.3:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.87.44.207:443 -> 192.168.2.3:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 93.158.134.90:443 -> 192.168.2.3:49828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 93.158.134.90:443 -> 192.168.2.3:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 89.108.119.28:443 -> 192.168.2.3:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 89.108.119.28:443 -> 192.168.2.3:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 5.9.154.76:443 -> 192.168.2.3:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 5.9.154.76:443 -> 192.168.2.3:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.180.204.205:443 -> 192.168.2.3:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.180.204.205:443 -> 192.168.2.3:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.180.204.205:443 -> 192.168.2.3:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.250.36:443 -> 192.168.2.3:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.250.36:443 -> 192.168.2.3:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.154.131.217:443 -> 192.168.2.3:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.154.131.217:443 -> 192.168.2.3:49856 version: TLS 1.2

Networking:

Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)

Show sources

Source: Traffic	Snort IDS: 1998 WEB-PHP calendar.php access 192.168.2.3:49862 -> 91.189.114.9:80
Source: Traffic	Snort IDS: 882 WEB-CGI calendar access 192.168.2.3:49862 -> 91.189.114.9:80

Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.156
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.107

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: openresty/1.13.6.2Date: Thu, 07 Jan 2021 06:32:20 GMTContent-Type: text/html; charset=windows-1251Content-Length: 7909Connection: keep-aliveX-Powered-By: PHP/4.4.9Set-Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; path=/; HttpOnlySet-Cookie: bblastvisit=1610001140; expires=Fri, 07 Jan 2022 06:32:20 GMT; path=/Set-Cookie: bblastactivity=0; expires=Fri, 07 Jan 2022 06:32:20 GMT; path=/Cache-Control: privatePragma: privateContent-Encoding: gzipData Raw: 1f 8b 08 00 00 00 00 00 00 ff d5 5c ed 73 1b c7 79 ff 2c cd e8 7f d8 5c 26 06 68 12 6f 7c 11 45 90 07 8d 45 91 a9 32 7e ab 25 37 ed b8 1e cc 01 38 00 67 1e 70 f0 dd 81 14 65 fb ff ca c7 c6 f5 4c 3a 6e 62 c7 9d ce a4 5f 3a 03 51 44 04 53 24 44 52 71 9c 8e d4 a8 bf 67 77 6f ef 0e 38 02 90 62 b5 0d 15 07 f7 b2 fb ec ee f3 b6 cf db de c6 8f 6e be b3 79 e7 1f de dd 62 4d bf 65 b3 77 df bf f1 e6 ad 4d a6 65 72 b9 9f 2f 6d e6 72 37 ef dc 64 7f ff 37 77 de 7a 93 15 b2 79 76 c7 35 da 9e e5 5b 4e db b0 73 b9 ad b7 35 a6 35 7d bf 53 cc e5 f6 f6 f6 b2 7b 4b 59 c7 6d e4 ee bc 97 bb 4b b0 0a d4 59 5e 66 fc 48 cf 6c cd af 69 a5 2b 97 37 f8 88 77 5b 76 db d3 13 e0 14 d6 d6 d6 44 77 8d d5 2c 57 d7 6c df d5 98 6d b4 1b ba e6 76 05 00 d3 a8 11 a0 96 e9 1b ac 6d b4 4c bc 71 2a 8e ef 69 ac ea b4 7d b3 ed eb 5a db b1 da 35 f3 ee 42 dd b1 6d 67 4f 63 39 d5 81 a6 9e 31 3f ee 5a bb ba b6 29 9a 67 ee ec 77 cc 48 67 df bc eb e7 68 9a eb ac da 34 5c cf f4 f5 3d 80 73 f6 bc 4c 61 71 a5 10 85 26 86 6f 98 6d d3 35 7c 07 33 55 33 d8 bd d1 b5 6d d3 b7 da 6c 29 bb 0a 2c de a0 d9 2e 8b be f1 c9 ef 98 fb 7b 8e 5b 8b 4e ff eb fe 69 ff f1 a3 de c9 e0 74 78 70 d4 5b 60 a7 fd e3 e1 c9 39 3b 3a e8 9d 9e 0f 4e 17 d8 e1 e0 61 ef db 13 36 38 39 ef 9f 3e eb a3 d1 02 1b 9e 1f f6 1f 51 db c7 c3 e3 fe 7f f5 4f 06 df 2e b0 5f f7 ef f7 1f 3d 5b 60 7f 3a ea fd e1 29 3b 7a f2 b8 8f ae 07 fd d3 01 9a 1f 9d a0 ed 61 ff fc ec 68 80 a7 47 4f be 3b c1 d3 a3 e1 c1 e9 53 fa 39 39 1c fc 71 30 3c e9 d3 dd d9 e3 de a3 67 f4 f6 4f e7 43 ba 7f 3c 7c c4 ff ff 7c f8 e8 08 4f cf 7a 98 05 7a d3 d8 7f 18 9e 3e 39 1e c7 4f cd f4 aa ae d5 21 16 8a 60 28 be 48 36 98 be 4a b4 91 cb 0c 57 99 fd df 5e 65 36 9b 8d ae f3 ca 65 50 f3 47 99 0c db bc 7d 9b dd f6 f7 6d d3 6b 9a a6 cf 32 19 62 39 8f 1e 30 1f fc a5 6b 9c ad aa 1e e8 6c d5 74 6d b7 22 f9 a3 4c 8f a8 2d 80 5c b9 9c 7b 9d 45 38 87 03 dd 76 5c 01 98 a5 6e 9a 75 a3 6b fb e2 36 c5 d2 1c bc 55 2b b2 c2 1c 7b 3d 77 e5 72 c5 a9 ed 5f b9 fc c9 95 cb 97 2a 46 75 a7 e1 3a dd 36 5e fe 78 ab 80 7f 8b eb 78 5c 75 6c c7 c5 93 3c ff a3 27 75 c8 00 fa e7 3b 3e db 35 dd 9a d1 36 16 18 f1 f3 2e 7e ed 6e d5 aa e1 37 25 2e 58 03 f2 5c 33 53 0b cc 70 2d c3 5e 60 4d d3 de 05 8b 57 d1 c4 83 8e c8 78 a6 6b d5 09 68 cb 70 1b 56 bb c8 56 3a 77 09 74 e4 ff e8 6d c7 a8 d5 ac 76 a3 c8 f0 06 f7 9f 5d b9 6c 14 6d ab bd b3 c0 68 fe 65 83 ae c5 2a 82 e9 2e e2 6f 6d 33 68 bb 6b 41 1d 99 b5 a0 b9 bc 9d d4 a3 e9 60 6d 98 76 d1 a8 fa d6 ae 19 f4 e4 8f e3 fd b6 b7 97 97 f3 79 31 52 b6 63 34 cc 04
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: openresty/1.13.6.2Date: Thu, 07 Jan 2021 06:33:13 GMTContent-Type: text/html; charset=windows-1251Content-Length: 12631Connection: keep-aliveX-Powered-By: PHP/4.4.9Set-Cookie: bblastactivity=0; expires=Fri, 07 Jan 2022 06:33:13 GMT; path=/Cache-Control: privatePragma: privateContent-Encoding: gzipData Raw: 1f 8b 08 00 00 00 00 00 00 ff ed 7d 6b 73 1b d7 99 e6 67 b9 ca ff e1 04 a9 18 a4 45 dc 79 05 09 ba 2c 99 f2 28 65 3b 59 4b de d9 2d af 8b d5 00 9a 40 9b 00 1a e9 6e 90 a2 ed fc af 7c 9c d1 7a 2a 53 aa c4 8a bc 99 9a fd 32 55 20 45 58 20 48 34 41 30 b2 ec 92 62 ce f3 9e 4b 77 e3 46 81 14 65 71 56 2b 27 44 5f 4e 9f eb fb 3e e7 bd 9d 73 96 7e f1 de 6f ae df fe 9f bf 5d 61 45 a7 5c 62 bf fd e4 da 07 37 af b3 50 24 16 fb c7 d4 f5 58 ec bd db ef b1 ff f1 0f b7 3f fc 80 25 a2 71 76 db d2 2a b6 e1 18 66 45 2b c5 62 2b 1f 85 58 a8 e8 38 d5 74 2c b6 b9 b9 19 dd 4c 45 4d ab 10 bb fd 71 ec 0e e5 95 a0 8f e5 65 c4 09 7c 19 cd 3b f9 d0 f2 9b 6f 2c f1 12 ef 94 4b 15 3b 33 24 9f c4 c2 c2 82 f8 3c c4 f2 86 95 09 95 1c 2b c4 4a 5a a5 90 09 59 35 91 81 ae e5 91 d1 95 a5 5f 44 22 ac 62 b2 9c 96 2b ea ac 88 a7 ba 65 b3 48 84 bf 2b eb 8e 86 c6 39 d5 88 fe bb 9a b1 91 09 fd d6 d2 0a 65 2d c4 72 66 c5 d1 2b 4e 26 54 31 23 fc cb 10 8b 0d ff 62 e5 4e d5 b0 74 3b f0 49 24 31 32 f1 75 aa 44 e4 3a 32 b7 cc 52 e0 93 fe 52 a8 ce 7a 25 3f 7e bd 29 4b d4 37 72 7b ab aa 07 f2 75 f4 3b 4e 8c ba 72 91 e5 8a 9a 65 eb 4e 66 d3 a8 e4 cd 4d 3b 92 48 ce c8 7a 2e f1 5e a8 68 65 3d 13 2a e8 15 dd d2 1c 13 bd e9 75 c1 c6 b5 5a a9 a4 3b 46 85 a5 a2 73 18 e9 6b d4 69 d3 a2 8d 18 a9 c0 d7 eb fa d6 a6 69 e5 83 9d 71 bf d1 69 1c ee d7 db cd 8e bb d3 aa 4f b1 4e e3 c0 6d 77 59 6b a7 de e9 36 3b 53 6c b7 f9 a8 be d7 66 cd 76 b7 d1 79 d6 40 a2 29 e6 76 77 1b fb 94 f6 d0 3d 68 fc d8 68 37 f7 a6 d8 9f 1a db 8d fd 67 53 ec 87 56 fd 6f 4f 59 eb f8 b0 81 4f 77 1a 9d 26 92 b7 da 48 bb db e8 1e b5 9a 78 da 3a 7e dc c6 d3 96 bb d3 79 4a 3f ed dd e6 f7 4d b7 dd a0 bb a3 c3 fa fe 33 7a fb 43 d7 a5 fb 43 77 9f ff ed ba fb 2d 3c 3d aa a3 16 f8 9a ca fe 9b db 39 3e 10 6d 0c b6 30 af db 39 cb a8 12 99 07 7a a8 b7 91 ac f9 fc 56 22 8d 6c a6 df ca e8 cf dd ca 68 34 1a 6c e7 9b 6f 60 34 89 f2 ae df ba c5 6e 39 5b 25 dd 2e ea ba 23 78 65 c9 a6 07 cc 01 7d 65 42 9c ac 72 36 c6 d9 c8 67 42 1b 59 49 1f ab f4 88 98 17 99 bc f9 46 ec 6d 16 a0 1c 9e e9 0d d3 12 19 b3 f0 7b fa 9a 56 2b 39 e2 36 cc 26 78 f6 46 3e cd 12 93 ec ed d8 9b 6f 64 cd fc d6 9b 6f 7c 09 06 ce 6a b9 f5 82 65 d6 2a 78 f9 cb 95 04 fe 4b 2e e2 71 ce 2c 99 16 9e c4 f9 3f 7a b2 06 1e c0 f7 f1 aa c3 36 74 2b af 55 b4 29 46 f4 bc 81 df 52 2d 67 e4 f1 1b 16 17 ac 00 cc c9 eb e1 29 a6 59 86 56 9a 02 2e 94 36 40 e2 39 24 b1 81 63 11 5b b7 8c 35 ca b4 ac 59 05 a3 92 66 33 d5 3b 94 75 e0 0f bd ad 6a f9 bc 51 29 a4 19 de e0 fe f7 6f be a1 a5 4b 46 65 7d 8a 51 fd 57 35 ba 16 ad 50 d5 4d e2 df c2 75 95 76 c3 00 64 ea 79 95 5c de 9e f6 45 d1 44 db 50 ed b4 96 73 8c 0d 5d 7d c9 1f f7 7e 77 e3 c6 f4 74 3c 2e 4a 8a 56 b5 8
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: openresty/1.13.6.2Date: Thu, 07 Jan 2021 06:33:15 GMTContent-Type: text/html; charset=windows-1251Content-Length: 7714Connection: keep-aliveX-Powered-By: PHP/4.4.9Set-Cookie: bblastactivity=0; expires=Fri, 07 Jan 2022 06:33:15 GMT; path=/Cache-Control: privatePragma: privateContent-Encoding: gzipData Raw: 1f 8b 08 00 00 00 00 00 00 ff d5 5c 6b 6f 1b d7 99 fe 6c 03 fe 0f a7 53 34 a4 22 f1 a2 9b 2f 94 46 86 2d 4b 5d 17 71 92 8d 9d bd 20 1b 10 43 72 48 8e 35 e4 30 33 43 c9 72 92 ff d5 8f db 6c 81 2e ba 6d 52 2f 16 e8 7e 59 80 96 c5 35 23 4b b4 2c 37 4d 0b 1b f5 3e ef b9 cd 0c 39 a2 68 37 5e ec ca 4d 39 97 73 de 73 ce 7b bf 9c 33 ab 3f ba f1 c1 fa 9d 7f fc 70 83 35 c3 96 cb 3e fc f8 fa 7b 37 d7 99 91 2b 14 fe 7e 71 bd 50 b8 71 e7 06 fb 87 bf b9 73 eb 3d 36 9f 2f b2 3b be d5 0e 9c d0 f1 da 96 5b 28 6c bc 6f 30 a3 19 86 9d 52 a1 b0 b3 b3 93 df 59 cc 7b 7e a3 70 e7 a3 c2 3d 82 35 4f 9d e5 65 2e 8c f5 cc d7 c2 9a b1 76 e1 fc 2a 1f f1 5e cb 6d 07 66 0a 9c f9 2b 57 ae 88 ee 06 ab 39 be 69 b8 a1 6f 30 d7 6a 37 4c c3 ef 0a 00 b6 55 23 40 2d 3b b4 58 db 6a d9 78 e3 55 bc 30 30 58 d5 6b 87 76 3b 34 8d b6 e7 b4 6b f6 bd b9 ba e7 ba de 8e c1 0a ba 03 4d 3d 67 7f d6 75 b6 4d 63 5d 34 cf dd d9 ed d8 b1 ce a1 7d 2f 2c d0 34 57 58 b5 69 f9 81 1d 9a 3b 00 e7 ed 04 b9 f9 85 e5 f9 38 34 31 7c c3 6e db be 15 7a 98 a9 9e c1 f6 f5 ae eb da a1 d3 66 8b f9 4b c0 e2 75 9a ed 92 e8 9b 9c fc 96 bd bb e3 f9 b5 f8 f4 bf e9 1f f7 9f 3e e9 1d 0d 8e 87 7b 07 bd 39 76 dc 3f 1c 1e 9d b0 83 bd de f1 c9 e0 78 8e ed 0f 1e f7 be 3d 62 83 a3 93 fe f1 cb 3e 1a cd b1 e1 c9 7e ff 09 b5 7d 3a 3c ec ff b9 7f 34 f8 76 8e fd a6 ff b0 ff e4 e5 1c fb d3 41 ef 0f 2f d8 c1 f3 a7 7d 74 dd eb 1f 0f d0 fc e0 08 6d f7 fb 27 cf 0e 06 78 7a f0 fc bb 23 3c 3d 18 ee 1d bf a0 9f a3 fd c1 1f 07 c3 a3 3e dd 3d 7b da 7b f2 92 de fe e9 64 48 f7 4f 87 4f f8 ff 9f 0c 9f 1c e0 e9 b3 1e 66 81 de 34 f6 1f 86 c7 cf 0f c7 f1 53 b3 83 aa ef 74 88 85 62 18 4a 2e 92 0d ce 5e 25 da c8 65 46 ab cc ff 6f af 32 9f cf c7 d7 79 e1 3c a8 f9 a3 5c 8e ad df be cd 6e 87 bb ae 1d 34 6d 3b 64 b9 1c b1 5c 40 0f 58 08 fe 32 0d ce 56 d5 00 74 76 6a a6 b1 5d 91 fc 51 a6 47 d4 16 40 2e 9c 2f bc cb 62 9c c3 81 6e 7a be 00 cc 32 37 ec ba d5 75 43 71 9b 61 59 0e de a9 95 d8 fc 0c 7b b7 70 e1 7c c5 ab ed 5e 38 ff f9 85 f3 e7 2a 56 75 ab e1 7b dd 36 5e fe 78 63 1e ff 16 56 f0 b8 ea b9 9e 8f 27 45 fe 47 4f ea 90 01 f4 2f 76 42 b6 6d fb 35 ab 6d cd 31 e2 e7 6d fc ba dd aa 53 c3 6f 46 5c b0 06 e4 b9 66 67 e6 98 e5 3b 96 3b c7 9a b6 bb 0d 16 af a2 49 00 1d 91 0b 6c df a9 13 d0 96 e5 37 9c 76 89 2d 77 ee 11 e8 d8 ff d1 db 8e 55 ab 39 ed 46 89 e1 0d ee bf bc 70 de 2a b9 4e 7b 6b 8e d1 fc cb 16 5d 8b 55 a8 e9 2e e0 ef ca ba 6a bb ed 40 1d d9 35 d5 5c de 4e ea d1 f4 b0 36 4c bb 64 55 43 67 db 56 3d f9 e3 64 bf cd cd a5 a5 62 51 8c 94 ef 58 0d 3b 05 9d 9b fc 8f 56 a2 e6 a7 d1 89 b5 84 98 58 d8 9c 63 1d e0 cf 11 bd df 06 8e 31 52 3e ac 40 6f d8 7e ca 14 6f cc df 00 cd 53 a7 78 4e 74 02 cd 41 97 c0 73 9d 1a d8
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: openresty/1.13.6.2Date: Thu, 07 Jan 2021 06:33:17 GMTContent-Type: text/html; charset=windows-1251Content-Length: 6709Connection: keep-aliveX-Powered-By: PHP/4.4.9Set-Cookie: bblastactivity=0; expires=Fri, 07 Jan 2022 06:33:17 GMT; path=/Cache-Control: privatePragma: privateContent-Encoding: gzipData Raw: 1f 8b 08 00 00 00 00 00 00 ff d5 5c dd 6f 1b 47 92 7f 96 01 ff 0f 9d 59 6c 48 45 fc 94 64 2b a6 34 32 2c 59 ca 79 11 27 b9 58 b9 bd 83 cf 20 86 e4 88 1c 6b 38 c3 cc 0c 25 cb 49 fe af 7d 5c 2c f6 70 2f 77 b7 bb c0 1e f6 71 29 45 b4 19 49 a4 45 6a 93 cd c2 86 75 bf ea ee e9 19 7e 59 b6 37 3e dc 29 88 c9 e9 e9 ae aa ae af ae ae ea e6 ca 7b b7 3f 5d df fa 97 cf 36 58 2d a8 db ec b3 2f d6 3e be b3 ce b4 74 36 fb cb 85 f5 6c f6 f6 d6 6d f6 cf ff b0 75 f7 63 96 cf e4 d8 96 67 38 be 15 58 ae 63 d8 d9 ec c6 27 1a d3 6a 41 d0 28 64 b3 7b 7b 7b 99 bd 85 8c eb 55 b3 5b 9f 67 1f 11 ac 3c 0d 96 5f d3 41 6c 64 a6 12 54 b4 d5 ab 57 56 38 c6 47 75 db f1 f5 09 70 f2 37 6e dc 10 c3 35 56 b1 3c 5d b3 03 4f 63 b6 e1 54 75 cd 6b 0a 00 a6 51 21 40 75 33 30 40 7f d0 48 9b 5f 36 ad 5d 5d 5b 77 9d c0 74 82 f4 d6 7e c3 d4 58 59 3c e9 5a 60 3e 0a b2 84 75 99 95 6b 86 e7 9b 81 be 67 39 15 77 cf 4f e7 e7 af e5 35 96 55 d0 1c a3 6e ea 5a d5 74 4c cf 08 5c 20 56 40 76 d7 9a b6 6d 06 96 c3 16 32 4b 60 ca 1a 21 5f 14 63 43 5a c4 e8 1d 73 7f cf f5 2a 7e 6c f0 ef da 67 ed 67 27 ad 6e e7 ac 77 78 dc 4a b1 b3 f6 69 af 3b 60 c7 87 ad b3 41 e7 2c c5 8e 3a 4f 5b df 75 59 a7 3b 68 9f bd 68 a3 53 8a f5 06 47 ed 13 ea fb ac 77 da fe 5b bb db f9 2e c5 fe a3 7d d0 3e 79 91 62 3f 1e b7 fe f2 9c 1d 9f 3f 6b 63 e8 61 fb ac 83 ee c7 5d f4 3d 6a 0f fa c7 1d b4 1e 9f 7f df 45 eb 71 ef f0 ec 39 7d 74 8f 3a 3f 74 7a dd 36 3d f5 9f b5 4e 5e d0 db 1f 07 3d 7a 7e d6 3b e1 ff 0e 7a 27 c7 68 ed b7 40 05 46 13 ee bf f4 ce ce 4f c7 f9 53 31 fd b2 67 35 48 23 a6 4e 92 75 2e 9f 25 fa c8 69 46 b3 cc fc 6f cf 32 93 c9 c4 e7 79 f5 0a a4 f9 5e 3a cd d6 ef dd 63 f7 82 7d db f4 6b a6 19 b0 74 9a 94 c4 a7 06 16 40 bf a4 5a 95 7d c8 d9 aa e8 da 6e 49 ea 47 91 9a a8 2f 80 5c bd 92 fd 80 c5 34 87 03 dd 74 3d 01 98 25 6e 9b db 46 d3 0e c4 63 82 25 39 78 ab 52 60 f9 59 f6 41 f6 ea 95 92 5b d9 bf 7a e5 ab ab 57 66 4a 46 79 a7 ea b9 4d 07 2f 7f b6 91 c7 7f f3 cb 68 2e bb b6 eb a1 25 c7 ff a8 65 1b 5a 8f f1 b9 46 c0 76 4d af 62 38 46 8a 91 3e ef e2 d3 6e 96 ad 0a 3e 13 e2 0b ab c2 3c 2b 66 22 c5 0c cf 32 ec 14 ab 99 f6 2e 54 bc 8c 2e 3e 4c 3e ed 9b 9e b5 4d 40 eb 86 57 b5 9c 02 bb d6 78 44 a0 63 ff d0 db 86 51 a9 58 4e b5 c0 f0 06 cf df 5c bd 62 14 6c cb d9 49 31 a2 bf 68 d0 77 31 8b 90 dc 79 fc dd 58 0f fb ee 5a f0 2e 66 25 ec 2e 1f 5f 35 a2 e6 62 6e 20 bb 60 94 03 6b d7 0c 47 f2 e6 e1 71 9b 9b 8b 8b b9 9c c0 94 69 18 55 73 02 3b 37 f9 1f cd 24 a4 4f b1 13 73 09 40 58 50 4b b1 06 f8 67 89 d1 ef 82 c7 c0 94 09 4a f0 1b a6 37 81 c4 db f9 db 90 f9 44 12 67 c4 20 c8 1c 72 f1 5d db aa 40 1d d6 f2 37 3e 94 fc cd 04 65 23 98 00 f2 c3 eb 37 d6 d6 36 59 d3 b3 93 56 1d 8c f1 b3 50 87 8a
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: openresty/1.13.6.2Date: Thu, 07 Jan 2021 06:33:20 GMTContent-Type: text/html; charset=windows-1251Content-Length: 12631Connection: keep-aliveX-Powered-By: PHP/4.4.9Set-Cookie: bblastactivity=0; expires=Fri, 07 Jan 2022 06:33:20 GMT; path=/Cache-Control: privatePragma: privateContent-Encoding: gzipData Raw: 1f 8b 08 00 00 00 00 00 00 ff ed 7d 6b 73 1b d7 99 e6 67 b9 ca ff e1 04 a9 18 a4 45 dc 79 05 09 ba 2c 99 f2 28 65 3b 59 4b de d9 2d af 8b d5 00 9a 40 9b 00 1a e9 6e 90 a2 ed fc af 7c 9c d1 7a 2a 53 aa c4 8a bc 99 9a fd 32 55 20 45 58 20 48 34 41 30 b2 ec 92 62 ce f3 9e 4b 77 e3 46 81 14 65 71 56 2b 27 44 5f 4e 9f eb fb 3e e7 bd 9d 73 96 7e f1 de 6f ae df fe 9f bf 5d 61 45 a7 5c 62 bf fd e4 da 07 37 af b3 50 24 16 fb c7 d4 f5 58 ec bd db ef b1 ff f1 0f b7 3f fc 80 25 a2 71 76 db d2 2a b6 e1 18 66 45 2b c5 62 2b 1f 85 58 a8 e8 38 d5 74 2c b6 b9 b9 19 dd 4c 45 4d ab 10 bb fd 71 ec 0e e5 95 a0 8f e5 65 c4 09 7c 19 cd 3b f9 d0 f2 9b 6f 2c f1 12 ef 94 4b 15 3b 33 24 9f c4 c2 c2 82 f8 3c c4 f2 86 95 09 95 1c 2b c4 4a 5a a5 90 09 59 35 91 81 ae e5 91 d1 95 a5 5f 44 22 ac 62 b2 9c 96 2b ea ac 88 a7 ba 65 b3 48 84 bf 2b eb 8e 86 c6 39 d5 88 fe bb 9a b1 91 09 fd d6 d2 0a 65 2d c4 72 66 c5 d1 2b 4e 26 54 31 23 fc cb 10 8b 0d ff 62 e5 4e d5 b0 74 3b f0 49 24 31 32 f1 75 aa 44 e4 3a 32 b7 cc 52 e0 93 fe 52 a8 ce 7a 25 3f 7e bd 29 4b d4 37 72 7b ab aa 07 f2 75 f4 3b 4e 8c ba 72 91 e5 8a 9a 65 eb 4e 66 d3 a8 e4 cd 4d 3b 92 48 ce c8 7a 2e f1 5e a8 68 65 3d 13 2a e8 15 dd d2 1c 13 bd e9 75 c1 c6 b5 5a a9 a4 3b 46 85 a5 a2 73 18 e9 6b d4 69 d3 a2 8d 18 a9 c0 d7 eb fa d6 a6 69 e5 83 9d 71 bf d1 69 1c ee d7 db cd 8e bb d3 aa 4f b1 4e e3 c0 6d 77 59 6b a7 de e9 36 3b 53 6c b7 f9 a8 be d7 66 cd 76 b7 d1 79 d6 40 a2 29 e6 76 77 1b fb 94 f6 d0 3d 68 fc d8 68 37 f7 a6 d8 9f 1a db 8d fd 67 53 ec 87 56 fd 6f 4f 59 eb f8 b0 81 4f 77 1a 9d 26 92 b7 da 48 bb db e8 1e b5 9a 78 da 3a 7e dc c6 d3 96 bb d3 79 4a 3f ed dd e6 f7 4d b7 dd a0 bb a3 c3 fa fe 33 7a fb 43 d7 a5 fb 43 77 9f ff ed ba fb 2d 3c 3d aa a3 16 f8 9a ca fe 9b db 39 3e 10 6d 0c b6 30 af db 39 cb a8 12 99 07 7a a8 b7 91 ac f9 fc 56 22 8d 6c a6 df ca e8 cf dd ca 68 34 1a 6c e7 9b 6f 60 34 89 f2 ae df ba c5 6e 39 5b 25 dd 2e ea ba 23 78 65 c9 a6 07 cc 01 7d 65 42 9c ac 72 36 c6 d9 c8 67 42 1b 59 49 1f ab f4 88 98 17 99 bc f9 46 ec 6d 16 a0 1c 9e e9 0d d3 12 19 b3 f0 7b fa 9a 56 2b 39 e2 36 cc 26 78 f6 46 3e cd 12 93 ec ed d8 9b 6f 64 cd fc d6 9b 6f 7c 09 06 ce 6a b9 f5 82 65 d6 2a 78 f9 cb 95 04 fe 4b 2e e2 71 ce 2c 99 16 9e c4 f9 3f 7a b2 06 1e c0 f7 f1 aa c3 36 74 2b af 55 b4 29 46 f4 bc 81 df 52 2d 67 e4 f1 1b 16 17 ac 00 cc c9 eb e1 29 a6 59 86 56 9a 02 2e 94 36 40 e2 39 24 b1 81 63 11 5b b7 8c 35 ca b4 ac 59 05 a3 92 66 33 d5 3b 94 75 e0 0f bd ad 6a f9 bc 51 29 a4 19 de e0 fe f7 6f be a1 a5 4b 46 65 7d 8a 51 fd 57 35 ba 16 ad 50 d5 4d e2 df c2 75 95 76 c3 00 64 ea 79 95 5c de 9e f6 45 d1 44 db 50 ed b4 96 73 8c 0d 5d 7d c9 1f f7 7e 77 e3 c6 f4 74 3c 2e 4a 8a 56 b5 8
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: openresty/1.13.6.2Date: Thu, 07 Jan 2021 06:33:22 GMTContent-Type: text/html; charset=windows-1251Content-Length: 8270Connection: keep-aliveX-Powered-By: PHP/4.4.9Set-Cookie: bblastactivity=0; expires=Fri, 07 Jan 2022 06:33:22 GMT; path=/Cache-Control: privatePragma: privateContent-Encoding: gzipData Raw: 1f 8b 08 00 00 00 00 00 00 ff d5 5c eb 73 1b d7 75 ff 2c cd e8 7f b8 d9 4c 0c d0 24 00 82 a4 44 09 24 a8 b1 28 32 55 c6 8f d4 92 9b 76 5c 0f 66 01 2c 80 35 17 58 78 77 41 8a b2 fd 7f e5 63 a3 7a 26 9d 34 2f b5 9d 49 bf 64 06 a2 84 08 22 09 88 8f 38 4e 46 aa d5 df b9 af dd 05 96 20 a4 58 9d 94 8e 02 60 f7 de 73 cf bd e7 71 cf eb de d5 ef dd fc 60 fd ce 3f fd 78 83 35 82 a6 c3 7e fc d1 8d 77 6f ad 33 23 93 cb fd 64 71 3d 97 bb 79 e7 26 fb c7 bf bb f3 de bb 2c 9f 9d 67 77 3c b3 e5 db 81 ed b6 4c 27 97 db 78 df 60 46 23 08 da 85 5c 6e 67 67 27 bb b3 98 75 bd 7a ee ce 87 b9 bb 04 2b 4f 9d e5 d7 4c 10 e9 99 ad 06 55 63 ed d2 c5 55 3e e2 dd a6 d3 f2 8b 09 70 f2 d7 ae 5d 13 dd 0d 56 b5 bd a2 e1 04 9e c1 1c b3 55 2f 1a 5e 47 00 b0 cc 2a 01 6a 5a 81 c9 5a 66 d3 c2 1b b7 ec 06 be c1 2a 6e 2b b0 5a 41 d1 68 b9 76 ab 6a dd 9d ab b9 8e e3 ee 18 2c a7 3b 10 ea 19 eb b3 8e bd 5d 34 d6 45 f3 cc 9d dd b6 15 e9 1c 58 77 83 1c a1 b9 c2 2a 0d d3 f3 ad a0 b8 03 70 ee 8e 9f c9 2f 5c ce 47 a1 89 e1 eb 56 cb f2 cc c0 05 a6 1a 83 ed 1b 1d c7 b1 02 bb c5 16 b3 cb 58 c5 1b 84 ed 92 e8 1b 47 7e cb da dd 71 bd 6a 14 fd df f4 8e 7a cf 0e ba 83 fe d1 70 6f bf 3b c7 8e 7a 87 c3 c1 09 db df eb 1e 9d f4 8f e6 d8 e3 fe 93 ee d3 01 eb 0f 4e 7a 47 2f 7a 68 34 c7 86 27 8f 7b 07 d4 f6 d9 f0 b0 f7 97 de a0 ff 74 8e fd b2 f7 b0 77 f0 62 8e fd 79 bf fb c7 e7 6c ff f4 59 0f 5d f7 7a 47 7d 34 df 1f a0 ed e3 de c9 f1 7e 1f 4f f7 4f bf 1e e0 e9 fe 70 ef e8 39 7d 0c 1e f7 ff d4 1f 0e 7a f4 eb f8 59 f7 e0 05 bd fd f3 c9 90 7e 3f 1b 1e f0 ff 3f 19 1e ec e3 e9 71 17 58 a0 37 8d fd c7 e1 d1 e9 e1 f8 fa 54 2d bf e2 d9 6d 62 a1 c8 0a c5 27 c9 fa e7 cf 12 6d e4 34 c3 59 66 ff af 67 99 cd 66 a3 f3 bc 74 11 d4 fc 5e 26 c3 d6 6f df 66 b7 83 5d c7 f2 1b 96 15 b0 4c 86 58 ce a7 07 2c 00 7f 15 0d ce 56 15 1f 74 b6 ab 45 63 bb 2c f9 a3 44 8f a8 2d 80 5c ba 98 7b 9b 45 38 87 03 dd 74 3d 01 98 a5 6e 5a 35 b3 e3 04 e2 67 8a a5 39 78 bb 5a 60 f9 19 f6 76 ee d2 c5 b2 5b dd bd 74 f1 f3 4b 17 2f 94 cd ca 56 dd 73 3b 2d bc fc fe 46 1e ff 2d ac e0 71 c5 75 5c 0f 4f e6 f9 1f 3d a9 41 06 d0 7f be 1d b0 6d cb ab 9a 2d 73 8e 11 3f 6f e3 d3 e9 54 ec 2a 3e 53 e2 0b ab 43 9e ab 56 6a 8e 99 9e 6d 3a 73 ac 61 39 db 60 f1 0a 9a f8 d0 11 19 df f2 ec 1a 01 6d 9a 5e dd 6e 15 d8 e5 f6 5d 02 1d f9 3f 7a db 36 ab 55 bb 55 2f 30 bc c1 ef 2f 2f 5d 34 0b 8e dd da 9a 63 84 7f c9 a4 ef 62 16 0a dd 05 fc 5d 5b 57 6d b7 6d a8 23 ab aa 9a cb 9f 93 7a 34 5c cc 0d 68 17 cc 4a 60 6f 5b aa 27 7f 1c ef b7 b9 b9 b4 34 3f 2f 46 ca b6 cd ba 95 b0 9c 9b fc 8f 66 a2 f0 d3 cb 89 b9 04 40 2c 68 cc b1 36 d6 cf 16 bd df c4 1a 63 a4 6c 50 86 de b0 bc 04 14 6f e6 6f 82 e6 89 28 5e 10 9d 40 73 d0 c5 77 1d bb 0a
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: openresty/1.13.6.2Date: Thu, 07 Jan 2021 06:33:23 GMTContent-Type: text/html; charset=windows-1251Content-Length: 8273Connection: keep-aliveX-Powered-By: PHP/4.4.9Set-Cookie: bblastactivity=0; expires=Fri, 07 Jan 2022 06:33:23 GMT; path=/Cache-Control: privatePragma: privateContent-Encoding: gzipData Raw: 1f 8b 08 00 00 00 00 00 00 ff d5 5c eb 73 1b d7 75 ff 2c cd e8 7f b8 d9 4c 0c d0 24 00 82 a4 44 09 24 a8 b1 24 32 55 c6 af 5a 72 d3 8e eb c1 2c 80 05 b0 e6 02 0b ef 2e 48 51 b6 ff af 7c 6c 54 cf a4 93 26 71 d4 76 26 fd 92 19 88 12 22 88 24 20 3e e2 28 19 a9 56 7f e7 be 76 17 58 82 90 62 75 52 3a 0a 80 dd 7b cf 3d f7 9e c7 3d af 7b 57 7f 70 e3 83 eb b7 ff e9 c3 75 d6 08 9a 0e fb f0 e3 6b ef de bc ce 8c 4c 2e f7 d3 c5 eb b9 dc 8d db 37 d8 3f fe dd ed f7 de 65 f9 ec 3c bb ed 99 2d df 0e 6c b7 65 3a b9 dc fa fb 06 33 1a 41 d0 2e e4 72 db db db d9 ed c5 ac eb d5 73 b7 3f ca dd 21 58 79 ea 2c bf 66 82 48 cf 6c 35 a8 1a 6b 17 ce af f2 11 ef 34 9d 96 5f 4c 80 93 bf 72 e5 8a e8 6e b0 aa ed 15 0d 27 f0 0c e6 98 ad 7a d1 f0 3a 02 80 65 56 09 50 d3 0a 4c d6 32 9b 16 de b8 65 37 f0 0d 56 71 5b 81 d5 0a 8a 46 cb b5 5b 55 eb ce 5c cd 75 1c 77 db 60 39 dd 81 50 cf 58 9f 77 ec ad a2 71 5d 34 cf dc de 69 5b 91 ce 81 75 27 c8 11 9a 2b ac d2 30 3d df 0a 8a db 00 e7 6e fb 99 fc c2 c5 7c 14 9a 18 be 6e b5 2c cf 0c 5c 60 aa 31 d8 ba d6 71 1c 2b b0 5b 6c 31 bb 8c 55 bc 46 d8 2e 89 be 71 e4 37 ad 9d 6d d7 ab 46 d1 ff a6 77 d8 7b ba df 1d f4 0f 87 bb 7b dd 39 76 d8 3b 18 0e 8e d9 de 6e f7 f0 b8 7f 38 c7 1e f5 1f 77 9f 0c 58 7f 70 dc 3b 7c d1 43 a3 39 36 3c 7e d4 db a7 b6 4f 87 07 bd bf f4 06 fd 27 73 ec 57 bd 07 bd fd 17 73 ec cf 7b dd 3f 3e 67 7b 27 4f 7b e8 ba db 3b ec a3 f9 de 00 6d 1f f5 8e 8f f6 fa 78 ba 77 f2 ed 00 4f f7 86 bb 87 cf e9 63 f0 a8 ff a7 fe 70 d0 a3 5f 47 4f bb fb 2f e8 ed 9f 8f 87 f4 fb e9 70 9f ff ff f1 70 7f 0f 4f 8f ba c0 02 bd 69 ec 3f 0e 0f 4f 0e c6 d7 a7 6a f9 15 cf 6e 13 0b 45 56 28 3e 49 d6 3f 7b 96 68 23 a7 19 ce 32 fb 7f 3d cb 6c 36 1b 9d e7 85 f3 a0 e6 0f 32 19 76 fd d6 2d 76 2b d8 71 2c bf 61 59 01 cb 64 88 e5 7c 7a c0 02 f0 57 d1 e0 6c 55 f1 41 67 bb 5a 34 b6 ca 92 3f 4a f4 88 da 02 c8 85 f3 b9 b7 59 84 73 38 d0 0d d7 13 80 59 ea 86 55 33 3b 4e 20 7e a6 58 9a 83 b7 ab 05 96 9f 61 6f e7 2e 9c 2f bb d5 9d 0b e7 bf b8 70 fe 5c d9 ac 6c d6 3d b7 d3 c2 cb 1f ae e7 f1 df c2 0a 1e 57 5c c7 f5 f0 64 9e ff d1 93 1a 64 00 fd e7 db 01 db b2 bc aa d9 32 e7 18 f1 f3 16 3e 9d 4e c5 ae e2 33 25 be b0 3a e4 b9 6a a5 e6 98 e9 d9 a6 33 c7 1a 96 b3 05 16 af a0 89 0f 1d 91 f1 2d cf ae 11 d0 a6 e9 d5 ed 56 81 5d 6c df 21 d0 91 ff a3 b7 6d b3 5a b5 5b f5 02 c3 1b fc fe ea c2 79 b3 e0 d8 ad cd 39 46 f8 97 4c fa 2e 66 a1 d0 5d c0 df 95 eb aa ed 96 0d 75 64 55 55 73 f9 73 52 8f 86 8b b9 01 ed 82 59 09 ec 2d 4b f5 e4 8f e3 fd 36 36 96 96 e6 e7 c5 48 d9 b6 59 b7 12 96 73 83 ff d1 4c 14 7e 7a 39 31 97 00 88 05 8d 39 d6 c6 fa d9 a2 f7 9b 58 63 8c 94 0d ca d0 1b 96 97 80 e2 8d fc 0d d0 3c 11 c5 73 a2 13 68 0e ba f8 ae 63 57
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: openresty/1.13.6.2Date: Thu, 07 Jan 2021 06:33:25 GMTContent-Type: text/html; charset=windows-1251Content-Length: 12631Connection: keep-aliveX-Powered-By: PHP/4.4.9Set-Cookie: bblastactivity=0; expires=Fri, 07 Jan 2022 06:33:25 GMT; path=/Cache-Control: privatePragma: privateContent-Encoding: gzipData Raw: 1f 8b 08 00 00 00 00 00 00 ff ed 7d 6b 73 1b d7 99 e6 67 b9 ca ff e1 04 a9 18 a4 45 dc 79 05 09 ba 2c 99 f2 28 65 3b 59 4b de d9 2d af 8b d5 00 9a 40 9b 00 1a e9 6e 90 a2 ed fc af 7c 9c d1 7a 2a 53 aa c4 8a bc 99 9a fd 32 55 20 45 58 20 48 34 41 30 b2 ec 92 62 ce f3 9e 4b 77 e3 46 81 14 65 71 56 2b 27 44 5f 4e 9f eb fb 3e e7 bd 9d 73 96 7e f1 de 6f ae df fe 9f bf 5d 61 45 a7 5c 62 bf fd e4 da 07 37 af b3 50 24 16 fb c7 d4 f5 58 ec bd db ef b1 ff f1 0f b7 3f fc 80 25 a2 71 76 db d2 2a b6 e1 18 66 45 2b c5 62 2b 1f 85 58 a8 e8 38 d5 74 2c b6 b9 b9 19 dd 4c 45 4d ab 10 bb fd 71 ec 0e e5 95 a0 8f e5 65 c4 09 7c 19 cd 3b f9 d0 f2 9b 6f 2c f1 12 ef 94 4b 15 3b 33 24 9f c4 c2 c2 82 f8 3c c4 f2 86 95 09 95 1c 2b c4 4a 5a a5 90 09 59 35 91 81 ae e5 91 d1 95 a5 5f 44 22 ac 62 b2 9c 96 2b ea ac 88 a7 ba 65 b3 48 84 bf 2b eb 8e 86 c6 39 d5 88 fe bb 9a b1 91 09 fd d6 d2 0a 65 2d c4 72 66 c5 d1 2b 4e 26 54 31 23 fc cb 10 8b 0d ff 62 e5 4e d5 b0 74 3b f0 49 24 31 32 f1 75 aa 44 e4 3a 32 b7 cc 52 e0 93 fe 52 a8 ce 7a 25 3f 7e bd 29 4b d4 37 72 7b ab aa 07 f2 75 f4 3b 4e 8c ba 72 91 e5 8a 9a 65 eb 4e 66 d3 a8 e4 cd 4d 3b 92 48 ce c8 7a 2e f1 5e a8 68 65 3d 13 2a e8 15 dd d2 1c 13 bd e9 75 c1 c6 b5 5a a9 a4 3b 46 85 a5 a2 73 18 e9 6b d4 69 d3 a2 8d 18 a9 c0 d7 eb fa d6 a6 69 e5 83 9d 71 bf d1 69 1c ee d7 db cd 8e bb d3 aa 4f b1 4e e3 c0 6d 77 59 6b a7 de e9 36 3b 53 6c b7 f9 a8 be d7 66 cd 76 b7 d1 79 d6 40 a2 29 e6 76 77 1b fb 94 f6 d0 3d 68 fc d8 68 37 f7 a6 d8 9f 1a db 8d fd 67 53 ec 87 56 fd 6f 4f 59 eb f8 b0 81 4f 77 1a 9d 26 92 b7 da 48 bb db e8 1e b5 9a 78 da 3a 7e dc c6 d3 96 bb d3 79 4a 3f ed dd e6 f7 4d b7 dd a0 bb a3 c3 fa fe 33 7a fb 43 d7 a5 fb 43 77 9f ff ed ba fb 2d 3c 3d aa a3 16 f8 9a ca fe 9b db 39 3e 10 6d 0c b6 30 af db 39 cb a8 12 99 07 7a a8 b7 91 ac f9 fc 56 22 8d 6c a6 df ca e8 cf dd ca 68 34 1a 6c e7 9b 6f 60 34 89 f2 ae df ba c5 6e 39 5b 25 dd 2e ea ba 23 78 65 c9 a6 07 cc 01 7d 65 42 9c ac 72 36 c6 d9 c8 67 42 1b 59 49 1f ab f4 88 98 17 99 bc f9 46 ec 6d 16 a0 1c 9e e9 0d d3 12 19 b3 f0 7b fa 9a 56 2b 39 e2 36 cc 26 78 f6 46 3e cd 12 93 ec ed d8 9b 6f 64 cd fc d6 9b 6f 7c 09 06 ce 6a b9 f5 82 65 d6 2a 78 f9 cb 95 04 fe 4b 2e e2 71 ce 2c 99 16 9e c4 f9 3f 7a b2 06 1e c0 f7 f1 aa c3 36 74 2b af 55 b4 29 46 f4 bc 81 df 52 2d 67 e4 f1 1b 16 17 ac 00 cc c9 eb e1 29 a6 59 86 56 9a 02 2e 94 36 40 e2 39 24 b1 81 63 11 5b b7 8c 35 ca b4 ac 59 05 a3 92 66 33 d5 3b 94 75 e0 0f bd ad 6a f9 bc 51 29 a4 19 de e0 fe f7 6f be a1 a5 4b 46 65 7d 8a 51 fd 57 35 ba 16 ad 50 d5 4d e2 df c2 75 95 76 c3 00 64 ea 79 95 5c de 9e f6 45 d1 44 db 50 ed b4 96 73 8c 0d 5d 7d c9 1f f7 7e 77 e3 c6 f4 74 3c 2e 4a 8a 56 b5 8

Source: global traffic	HTTP traffic detected: GET /forum/register.php?a=act&u=84666&i=25545989 HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /forum/clientscript/yui/yahoo-dom-event/yahoo-dom-event.js?v=370b4 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Source: global traffic	HTTP traffic detected: GET /forum/clientscript/yui/connection/connection-min.js?v=370b4 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Source: global traffic	HTTP traffic detected: GET /forum/clientscript/ame.js HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Source: global traffic	HTTP traffic detected: GET /forum/clientscript/vbulletin_global.js?v=370b4 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Source: global traffic	HTTP traffic detected: GET /forum/rek1.js HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Source: global traffic	HTTP traffic detected: GET /forum/images/misc/vbulletin3_logo_white.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Source: global traffic	HTTP traffic detected: GET /forum/clientscript/vbulletin_md5.js?v=370b4 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Source: global traffic	HTTP traffic detected: GET /podelis.js HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Source: global traffic	HTTP traffic detected: GET /forum/images/misc/navbits_start.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Source: global traffic	HTTP traffic detected: GET /forum/images/misc/navbits_finallink_ltr.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Source: global traffic	HTTP traffic detected: GET /forum/cron.php?s=8848772e8198313ee133bfa7158b7b6c&rand=961090 HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Source: global traffic	HTTP traffic detected: GET /images/banners/garderobnye_uno.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Source: global traffic	HTTP traffic detected: GET /images/banners/sozday_shkaf_kupe.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Source: global traffic	HTTP traffic detected: GET /images/banners/kotkopi2g.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Source: global traffic	HTTP traffic detected: GET /js/widget.js HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: loginza.ruConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /forum/openidlogin.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Source: global traffic	HTTP traffic detected: GET /1x1.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Source: global traffic	HTTP traffic detected: GET /social.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Source: global traffic	HTTP traffic detected: GET /forum/images/gradients/gradient_tcat.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Source: global traffic	HTTP traffic detected: GET /forum/images/gradients/gradient_panelsurround.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Source: global traffic	HTTP traffic detected: GET /forum/images/gradients/gradient_panel.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1
Source: global traffic	HTTP traffic detected: GET /index.php?searchword=&option=com_search&Itemid=0 HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1
Source: global traffic	HTTP traffic detected: GET /search.html?searchword= HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Source: global traffic	HTTP traffic detected: GET /forum/favicon.ico HTTP/1.1User-Agent: AutoItHost: ovd.ruCookie: __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utma=6288621.793673561.1610033541.1610033541.1610033541.1; bblastactivity=0; __utmb=6288621.1.10.1610033541; bblastvisit=1610001140; __utmt=1
Source: global traffic	HTTP traffic detected: GET /index.php?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Source: global traffic	HTTP traffic detected: GET /templates/_system/css/general.css HTTP/1.1Accept: text/css, /Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Source: global traffic	HTTP traffic detected: GET /templates/biz_blue_ii/images/space.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Source: global traffic	HTTP traffic detected: GET /templates/biz_blue_ii/css/template.css HTTP/1.1Accept: text/css, /Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Source: global traffic	HTTP traffic detected: GET /dom/CHto-luchshe-metallocherepitsa-ili-ondulin.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Source: global traffic	HTTP traffic detected: GET /pictures/141.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Source: global traffic	HTTP traffic detected: GET /pictures/minimalizm.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Source: global traffic	HTTP traffic detected: GET /cache/wo/07b4b16172.js HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Source: global traffic	HTTP traffic detected: GET /pictures/akrilovaya_vanna.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Source: global traffic	HTTP traffic detected: GET /pictures/planirovka_kuhni.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Source: global traffic	HTTP traffic detected: GET /pictures/otdelka_komnaty.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Source: global traffic	HTTP traffic detected: GET /pictures/armstrong_laminate.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Source: global traffic	HTTP traffic detected: GET /templates/biz_blue_ii/images/mod_lr.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Source: global traffic	HTTP traffic detected: GET /templates/biz_blue_ii/images/mod_bottom.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Source: global traffic	HTTP traffic detected: GET /templates/biz_blue_ii/images/header.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Source: global traffic	HTTP traffic detected: GET /templates/biz_blue_ii/images/shadow.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Source: global traffic	HTTP traffic detected: GET /top100.cnt?438738 HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: counter.rambler.ruConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /aci.js HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.acint.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /templates/biz_blue_ii/images/s.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Source: global traffic	HTTP traffic detected: GET /templates/biz_blue_ii/images/readon.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Source: global traffic	HTTP traffic detected: GET /top100/banner-88x31-rambler-gray2.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: top100-images.rambler.ruConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cgi-bin/hotlog/count?0.11948515321103914&s=90390&im=134&r=&pg=http%3A//ovd.ru/index.php%3Fs%3D8848772e8198313ee133bfa7158b7b6c&c=Y&j=Y&wh=1280x1024&px=24&js=1.3& HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: hit5.hotlog.ruConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cgi-bin/hotlog/count?0.11948515321103914&s=90390&im=134&r=&pg=http%3A//ovd.ru/index.php%3Fs%3D8848772e8198313ee133bfa7158b7b6c&c=Y&j=Y&wh=1280x1024&px=24&js=1.3&&hl_ignore=Y HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: hit5.hotlog.ruConnection: Keep-AliveCookie: hotcli=a5a145f0fb782e2c11ee1de7bbbf8be1
Source: global traffic	HTTP traffic detected: GET /hit/?v=0.3.0&uid=5574be45-a7ff-46d8-a54c-9f941462aa89&dp=10&tz=-08%3A00&nc=78865322&u=http%3A%2F%2Fovd.ru%2Findex.php%3Fs%3D8848772e8198313ee133bfa7158b7b6c&r=&rs=1280x1024&t=%D0%9D%D0%B0%20%D0%B3%D0%BB%D0%B0%D0%B2%D0%BD%D1%83%D1%8E&oE=1&oP=1&dT=2021-01-07T07%3A32%3A40.946&fu=6123ba1a-1144-4046-8498-22475292c4e5 HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.acint.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /mc/?dp=10 HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.acint.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /metrika/watch.js HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: mc.yandex.ruConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /ping/?v=0.3.0&uid=5574be45-a7ff-46d8-a54c-9f941462aa89&dp=10&tz=-08%3A00&nc=63752476&dT=2021-01-07T07%3A32%3A44.365 HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.acint.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /check/ HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: utl-utils.ruConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /banners/click12.html HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /garderobnye-komnaty.html HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateConnection: Keep-AliveHost: perviyshkaf.ru
Source: global traffic	HTTP traffic detected: GET /banners/click17.html HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /3d-konstruktor-shkafov-kupe.html HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateConnection: Keep-AliveHost: perviyshkaf.ru
Source: global traffic	HTTP traffic detected: GET /api/widget?token_url=http://ovd.ru/forum/vb_loginza.php HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateConnection: Keep-AliveHost: loginza.ru
Source: global traffic	HTTP traffic detected: GET /css/widget_style.css?v1.0.9 HTTP/1.1Accept: text/css, /Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.phpAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: loginza.ruConnection: Keep-AliveCookie: sid=rta120dn4viv7jbvmqlds6ndq3
Source: global traffic	HTTP traffic detected: GET /js/widget_plugins.js HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.phpAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: loginza.ruConnection: Keep-AliveCookie: sid=rta120dn4viv7jbvmqlds6ndq3
Source: global traffic	HTTP traffic detected: GET /js/widget_api.pack.js?rev=20110902vk HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.phpAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: loginza.ruConnection: Keep-AliveCookie: sid=rta120dn4viv7jbvmqlds6ndq3
Source: global traffic	HTTP traffic detected: GET /img/widget/footer_bg.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.phpAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: loginza.ruConnection: Keep-AliveCookie: sid=rta120dn4viv7jbvmqlds6ndq3
Source: global traffic	HTTP traffic detected: GET /img/widget/coner_sprite.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.phpAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: loginza.ruConnection: Keep-AliveCookie: sid=rta120dn4viv7jbvmqlds6ndq3
Source: global traffic	HTTP traffic detected: GET /img/widget/grey_dot.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.phpAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: loginza.ruConnection: Keep-AliveCookie: sid=rta120dn4viv7jbvmqlds6ndq3
Source: global traffic	HTTP traffic detected: GET /img/widget/loading.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.phpAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: loginza.ruConnection: Keep-AliveCookie: sid=rta120dn4viv7jbvmqlds6ndq3
Source: global traffic	HTTP traffic detected: GET /img/widget/arrow_sprite.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.phpAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: loginza.ruConnection: Keep-AliveCookie: sid=rta120dn4viv7jbvmqlds6ndq3
Source: global traffic	HTTP traffic detected: GET /img/widget/button_bg.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.phpAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: loginza.ruConnection: Keep-AliveCookie: sid=rta120dn4viv7jbvmqlds6ndq3
Source: global traffic	HTTP traffic detected: GET /img/widget/field_bg.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.phpAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: loginza.ruConnection: Keep-AliveCookie: sid=rta120dn4viv7jbvmqlds6ndq3
Source: global traffic	HTTP traffic detected: GET /img/widget/overlay.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.phpAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: loginza.ruConnection: Keep-AliveCookie: sid=rta120dn4viv7jbvmqlds6ndq3
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: loginza.ruConnection: Keep-AliveCookie: sid=rta120dn4viv7jbvmqlds6ndq3; _ym_uid=1610033587112486313; _ym_d=1610033587
Source: global traffic	HTTP traffic detected: GET /img/widget/provider_bg.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.phpAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: loginza.ruConnection: Keep-AliveCookie: sid=rta120dn4viv7jbvmqlds6ndq3; _ym_uid=1610033587112486313; _ym_d=1610033587
Source: global traffic	HTTP traffic detected: GET /img/widget/providers_sprite.png?linkedin HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.phpAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: loginza.ruConnection: Keep-AliveCookie: sid=rta120dn4viv7jbvmqlds6ndq3; _ym_uid=1610033587112486313; _ym_d=1610033587
Source: global traffic	HTTP traffic detected: GET /img/widget/providers_ico_sprite.png?linkedin HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.phpAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: loginza.ruConnection: Keep-AliveCookie: sid=rta120dn4viv7jbvmqlds6ndq3; _ym_uid=1610033587112486313; _ym_d=1610033587
Source: global traffic	HTTP traffic detected: GET /img/exchange.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.phpAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: loginza.ruConnection: Keep-AliveCookie: sid=rta120dn4viv7jbvmqlds6ndq3; _ym_uid=1610033587112486313; _ym_d=1610033587
Source: global traffic	HTTP traffic detected: GET /img/widget/loading_small.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.phpAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: loginza.ruConnection: Keep-AliveCookie: sid=rta120dn4viv7jbvmqlds6ndq3; _ym_uid=1610033587112486313; _ym_d=1610033587
Source: global traffic	HTTP traffic detected: GET /forum/index.php?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/images/buttons/collapse_tcat.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/images/statusicon/forum_old.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/images/icons/icon1.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/images/buttons/lastpost.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/clientscript/vbulletin_read_marker.js?v=370b4 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/images/buttons/collapse_thead.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/images/misc/whos_online.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/images/misc/stats.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/images/statusicon/forum_new.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/images/gradients/gradient_thead.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6cAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.3.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /search.html?searchword= HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.3.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/register.php?a=act&u=84666&i=25545989 HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.3.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/register.php?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.4.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/register.php?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.4.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/register.php?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.4.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/register.php?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.4.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/faq.php?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.5.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.5.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.5.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.6.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.7.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/forumdisplay.php?s=8848772e8198313ee133bfa7158b7b6c&do=markread HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.8.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /forum/index.php HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: ovd.ruConnection: Keep-AliveCookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001205; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.8.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2

Source: ti[1].js.2.dr	String found in binary or memory: a},getGuid:function(){return this.guid?this.guid:J(g.location.toString())},twitter:function(a,b,c){return r("img",{src:I+"t.png",title:"tweet this",id:a,onclick:function(a){g.open(n.protocol+"twitter.com/home?status="+encodeURIComponent(gb(l.getContentFor(c),l.getGuid(),c)),"tweet","width=723,height=251");x(b,l.getGuid(),l.words)}})},facebook:function(a,b,c){return r("img",{src:I+"fb.png",title:"share on Facebook",id:a,onclick:function(a){a=["https://www.facebook.com/dialog/feed?app_id=158472647611546&link=", equals www.facebook.com (Facebook)
Source: podelis[1].js.2.dr	String found in binary or memory: case 2: return 'http://www.facebook.com/sharer.php?u='+url; equals www.facebook.com (Facebook)
Source: ti[1].js.2.dr	String found in binary or memory: encodeURIComponent(K(l.getGuid(),c)),"&description=",encodeURIComponent(aa(140,l.getContentFor(c))),"&redirect_uri=",encodeURIComponent(eb)].join("");g.open(a,"fbshare","width=985,height=450");x(b,l.getGuid(),l.words)}})},linkedin:function(a,b,c){return r("img",{src:I+"li.png",title:"share on LinkedIn",id:a,onclick:function(a){a=[n.protocol+"www.linkedin.com/shareArticle?mini=true","&url=",encodeURIComponent(K(l.getGuid(),c)),"&title=",W];l.getContentFor(c)&&(a.push("&summary="),a.push(encodeURIComponent(aa(255, equals www.linkedin.com (Linkedin)

Source: unknown

DNS traffic detected: queries for: ovd.ru

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 07 Jan 2021 06:32:58 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: keep-aliveKeep-Alive: timeout=10Vary: Accept-EncodingServer: ApacheContent-Encoding: gzipData Raw: 63 66 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4c 8e bb 0e c2 30 0c 45 f7 7e 85 e9 4e 0d 88 31 ca 00 6d 05 52 79 08 85 81 31 28 a6 45 94 b8 24 01 d4 bf a7 81 85 f1 da f7 71 c4 28 df 2d d5 69 5f c0 4a 6d 2a d8 1f 17 d5 7a 09 e9 18 71 5d a8 12 31 57 f9 ef 33 cb 26 88 c5 36 95 89 68 c2 bd 95 a2 21 6d 06 11 ae a1 25 39 9f cc 61 cb 01 4a 7e 5a 23 f0 77 4c 04 7e 4d e2 cc a6 8f b9 a9 fc f3 0c 2a 11 9d 54 0d 81 a3 c7 93 7c 20 03 c7 43 05 58 b3 63 e3 83 7e 39 ee b8 c5 5a 3b 43 8e cf b6 a7 f1 8d ef 56 87 3e 8b 08 f0 d6 1e ec 50 78 89 85 c0 16 42 73 f5 e0 c9 bd c8 65 02 bb 08 f0 9d 1e c6 22 72 f2 01 00 00 ff ff 03 00 c0 6f f9 b7 ed 00 00 00 0d 0a Data Ascii: cfL0E~N1mRy1(E$q(-i_Jm*zq]1W3&6h!m%9aJ~Z#wL~M*T| CXc~9Z;CV>PxBse"ro

Source: watch[1].js.2.dr	String found in binary or memory: http://127.0.0.1
Source: podelis[1].js.2.dr	String found in binary or memory: http://bobrdobr.ru/addext.html?url=
Source: search[1].htm0.2.dr	String found in binary or memory: http://click.hotlog.ru/?90390
Source: podelis[1].js.2.dr	String found in binary or memory: http://connect.mail.ru/share?share_url=
Source: search[1].htm0.2.dr	String found in binary or memory: http://counter.rambler.ru/top100.cnt?438738
Source: podelis[1].js.2.dr	String found in binary or memory: http://del.icio.us/post?v=4&noui&jump=close&url=
Source: connection-min[1].js.2.dr	String found in binary or memory: http://developer.yahoo.net/yui/license.txt
Source: podelis[1].js.2.dr	String found in binary or memory: http://friendfeed.com/?title=
Source: f[1].txt0.2.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: search[1].htm0.2.dr	String found in binary or memory: http://hit5.hotlog.ru/cgi-bin/hotlog/count?
Source: search[1].htm0.2.dr	String found in binary or memory: http://hit5.hotlog.ru/cgi-bin/hotlog/count?s=90390&im=134
Source: jquery.min[1].js.2.dr	String found in binary or memory: http://jquery.com/
Source: jquery.min[1].js.2.dr	String found in binary or memory: http://jquery.org/license
Source: widget[1].htm.2.dr	String found in binary or memory: http://loginza.ru
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://loginza.ru/api/
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_Root
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr, ~DFFCDA20ED063141AF.TMP.1.dr	String found in binary or memory: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php
Source: loginza[1].xml.2.dr	String found in binary or memory: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php"
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php2Login
Source: ~DFFCDA20ED063141AF.TMP.1.dr	String found in binary or memory: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.phphkafov-kupe.html
Source: imagestore.dat.2.dr	String found in binary or memory: http://loginza.ru/favicon.ico~
Source: widget[1].htm.2.dr	String found in binary or memory: http://loginza.ru/features-and-benefits
Source: rek1[1].js.2.dr	String found in binary or memory: http://loginza.ru/js/widget.js
Source: template[1].css.2.dr	String found in binary or memory: http://mambasana.ru
Source: widget_plugins[1].js.2.dr	String found in binary or memory: http://markusbordihn.de)
Source: podelis[1].js.2.dr	String found in binary or memory: http://memori.ru/link/?sm=1&u_data
Source: memberlist[1].htm.2.dr	String found in binary or memory: http://ovd.ru
Source: search[1].htm0.2.dr	String found in binary or memory: http://ovd.ru/
Source: podelis[1].js.2.dr	String found in binary or memory: http://ovd.ru/1x1.gif
Source: memberlist[1].htm.2.dr	String found in binary or memory: http://ovd.ru/banners/click12.html
Source: memberlist[1].htm.2.dr	String found in binary or memory: http://ovd.ru/banners/click15.html
Source: memberlist[1].htm.2.dr	String found in binary or memory: http://ovd.ru/banners/click17.html
Source: index[1].htm.2.dr	String found in binary or memory: http://ovd.ru/cache/wo/07b4b16172.js
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/for
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/for3d-konstruktor-shkafov-kupe.htmlRoot
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/for=8848772e8198313ee133bfa7158b7b6cfa7158b7b6cRoot
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forRoot
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/fordex.php?s=8848772e8198313ee133bfa7158b7b6cnza.phpRoot
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/fordex.phphp?s=8848772e8198313ee133bfa7158b7b6ccRoot
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forgarderobnye-komnaty.htmla7158b7b6cRoot
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forgister.php?a=act&u=84666&i=255459898b7b6cnza.phpRoot
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forgister.php?s=8848772e8198313ee133bfa7158b7b6cRoot
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forlendar.php?s=8848772e8198313ee133bfa7158b7b6ccRoot
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/formberlist.php?s=8848772e8198313ee133bfa7158b7b6cRoot
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forp?s=8848772e8198313ee133bfa7158b7b6cRoot
Source: search[1].htm0.2.dr	String found in binary or memory: http://ovd.ru/forum
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forum/?s
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6c
Source: ~DFFCDA20ED063141AF.TMP.1.dr	String found in binary or memory: http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6cfa7158b7b6c
Source: ~DFFCDA20ED063141AF.TMP.1.dr	String found in binary or memory: http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6cfa7158b7b6c6423641&pi=t.ma~as.4913834163&w=16
Source: ~DFFCDA20ED063141AF.TMP.1.dr	String found in binary or memory: http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6cfa7158b7b6ct=1%3A32776%2C2%3A32776%2C9%3A3277
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forum/ca
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c
Source: ~DFFCDA20ED063141AF.TMP.1.dr	String found in binary or memory: http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6cc
Source: ~DFFCDA20ED063141AF.TMP.1.dr	String found in binary or memory: http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6ccA32776%2C9%3A32776%2C10%3A32%2C1
Source: register[1].htm.2.dr	String found in binary or memory: http://ovd.ru/forum/cron.php?s=8848772e8198313ee133bfa7158b7b6c&rand=961090
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forum/in
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forum/index.php
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c
Source: ~DFFCDA20ED063141AF.TMP.1.dr	String found in binary or memory: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6cnza.php
Source: ~DFFCDA20ED063141AF.TMP.1.dr	String found in binary or memory: http://ovd.ru/forum/index.phphp?s=8848772e8198313ee133bfa7158b7b6cc1%3A32776%2C2%3A32776%2C9%3A32776
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forum/me
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr, ~DFFCDA20ED063141AF.TMP.1.dr	String found in binary or memory: http://ovd.ru/forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c
Source: rek1[1].js.2.dr	String found in binary or memory: http://ovd.ru/forum/openidlogin.png
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forum/re
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989
Source: ~DFFCDA20ED063141AF.TMP.1.dr	String found in binary or memory: http://ovd.ru/forum/register.php?a=act&u=84666&i=255459898b7b6cnza.php
Source: ~DFFCDA20ED063141AF.TMP.1.dr	String found in binary or memory: http://ovd.ru/forum/register.php?a=act&u=84666&i=255459898b7b6cnza.php1&pi=t.ma~as.4913834163&w=169&
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989Root
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forum/register.php?s=8848772e8198313ee133bfa7158b7b6c
Source: ~DFFCDA20ED063141AF.TMP.1.dr	String found in binary or memory: http://ovd.ru/forum/register.php?s=8848772e8198313ee133bfa7158b7b6ca.phpA32776%2C9%3A32776%2C10%3A32
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forum/register.php?s=8848772e8198313ee133bfa7158b7b6cb
Source: memberlist[1].htm.2.dr	String found in binary or memory: http://ovd.ru/forum/rek1.js
Source: widget[1].htm.2.dr, {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forum/vb_loginza.php
Source: faq[1].htm.2.dr	String found in binary or memory: http://ovd.ru/forum?s=8848772e8198313ee133bfa7158b7b6c
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/forwidget?token_url=http://ovd.ru/forum/vb_loginza.phpRoot
Source: memberlist[1].htm.2.dr	String found in binary or memory: http://ovd.ru/images/banners/garderobnye_uno.gif
Source: memberlist[1].htm.2.dr	String found in binary or memory: http://ovd.ru/images/banners/kotkopi2g.jpg
Source: index[1].htm.2.dr, memberlist[1].htm.2.dr	String found in binary or memory: http://ovd.ru/images/banners/sozday_shkaf_kupe.jpg
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/index.ph
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://ovd.ru/index.phgister.php?a=act&u=84666&i=25545989
Source: memberlist[1].htm.2.dr	String found in binary or memory: http://ovd.ru/index.php
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr, ~DFFCDA20ED063141AF.TMP.1.dr	String found in binary or memory: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c
Source: ovd[1].xml.2.dr	String found in binary or memory: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c"
Source: memberlist[1].htm.2.dr	String found in binary or memory: http://ovd.ru/podelis.js
Source: podelis[1].js.2.dr	String found in binary or memory: http://ovd.ru/social.png)
Source: f[1].txt0.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: vbulletin_md5[1].js.2.dr	String found in binary or memory: http://pajhome.org.uk/crypt/md5
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://perviyshkaf.ru/
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr, ~DFFCDA20ED063141AF.TMP.1.dr	String found in binary or memory: http://perviyshkaf.ru/3d-konstruktor-shkafov-kupe.html
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://perviyshkaf.ru/3d-konstruktor-shkafov-kupe.html$HTTP
Source: ~DFFCDA20ED063141AF.TMP.1.dr	String found in binary or memory: http://perviyshkaf.ru/3d-konstruktor-shkafov-kupe.html6c
Source: ~DFFCDA20ED063141AF.TMP.1.dr	String found in binary or memory: http://perviyshkaf.ru/3d-konstruktor-shkafov-kupe.htmlobnye-komnaty.html
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://perviyshkaf.ru/garderobnye-komnaty.html
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: http://perviyshkaf.ru/garderobnye-komnaty.html$HTTP
Source: ~DFFCDA20ED063141AF.TMP.1.dr	String found in binary or memory: http://perviyshkaf.ru/garderobnye-komnaty.htmla7158b7b6c
Source: ~DFFCDA20ED063141AF.TMP.1.dr	String found in binary or memory: http://perviyshkaf.ru/garderobnye-komnaty.htmla7158b7b6c~
Source: jquery.min[1].js.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: zp[2].js.2.dr	String found in binary or memory: http://stackoverflow.com/questions/1060008/is-there-a-way-to-detect-if-a-browser-window-is-not-curre
Source: memberlist[1].htm.2.dr	String found in binary or memory: http://tcr.tynt.com/ti.js
Source: search[1].htm0.2.dr	String found in binary or memory: http://top100-images.rambler.ru/top100/banner-88x31-rambler-gray2.gif
Source: search[1].htm0.2.dr	String found in binary or memory: http://top100.rambler.ru/top100/
Source: podelis[1].js.2.dr	String found in binary or memory: http://twitter.com/home?status=
Source: podelis[1].js.2.dr	String found in binary or memory: http://vkontakte.ru/share.php?url=
Source: f[1].txt0.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: widget_plugins[1].js.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: ga[2].js.2.dr	String found in binary or memory: http://www.google-analytics.com
Source: podelis[1].js.2.dr	String found in binary or memory: http://www.google.com/bookmarks/mark?op=add&bkmk=
Source: podelis[1].js.2.dr	String found in binary or memory: http://www.livejournal.com/update.bml?event=
Source: podelis[1].js.2.dr	String found in binary or memory: http://www.mister-wong.ru/index.php?action=addurl&bm_url=
Source: podelis[1].js.2.dr	String found in binary or memory: http://www.odnoklassniki.ru/dk?st.cmd=addShare&st.s=1&st._surl=
Source: widget_plugins[1].js.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: memberlist[1].htm.2.dr	String found in binary or memory: http://www.vbhelp.org
Source: vbulletin_global[1].js.2.dr	String found in binary or memory: http://www.vbulletin.com
Source: vbulletin_global[1].js.2.dr	String found in binary or memory: http://www.vbulletin.com/license.html
Source: mc[1].htm.2.dr	String found in binary or memory: https://0100007F09ABF65FFE0029A40224C90B-sp.ops.beeline.ru/p?ssp=sp&id=0100007F09ABF65FFE0029A40224C
Source: mc[1].htm.2.dr	String found in binary or memory: https://ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
Source: mc[1].htm.2.dr	String found in binary or memory: https://ad.mail.ru/cm.gif?p=48&id=0100007F09ABF65FFE0029A40224C90B
Source: mc[1].htm.2.dr	String found in binary or memory: https://ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3F
Source: mc[1].htm.2.dr	String found in binary or memory: https://ads.betweendigital.com/match?bidder_id=73&external_user_id=0100007F09ABF65FFE0029A40224C90B
Source: f[1].txt.2.dr	String found in binary or memory: https://adsense.com.
Source: f[1].txt.2.dr	String found in binary or memory: https://adservice.google.com
Source: mc[1].htm.2.dr	String found in binary or memory: https://adx.com.ru/sape-sync?uid=0100007F09ABF65FFE0029A40224C90B
Source: f[1].txt.2.dr	String found in binary or memory: https://attestation.android.com
Source: f[1].txt0.2.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: f[1].txt0.2.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/%
Source: mc[1].htm.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=agentstvo_sape_limited&google_hm=AQAAfwmr9l_-ACmkAiTJC
Source: mc[1].htm.2.dr	String found in binary or memory: https://dm.hybrid.ai/match?id=106&vid=0100007F09ABF65FFE0029A40224C90B
Source: mc[1].htm.2.dr	String found in binary or memory: https://exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fma
Source: widget[1].htm.2.dr	String found in binary or memory: https://favicon.yandex.net/favicon/ovd.ru
Source: mc[1].htm.2.dr	String found in binary or memory: https://fcgi.gnezdo.ru/cookie_matching_ssp/Sape-dsp/0100007F09ABF65FFE0029A40224C90B
Source: f[1].txt0.2.dr	String found in binary or memory: https://fundingchoicesmessages.google.com/uf/%
Source: f[1].txt0.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: ~DFFCDA20ED063141AF.TMP.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/ads?guci=1.2.0.0.2.2.0.0&client=ca-pub-2867059600462301&o
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/r20201203/r20190131/zrt_lookup.html
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/r20201203/r20190131/zrt_lookup.html#
Source: rek1[1].js.2.dr	String found in binary or memory: https://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php
Source: mc[1].htm.2.dr	String found in binary or memory: https://match.new-programmatic.com/userbind?src=sape&id=0100007F09ABF65FFE0029A40224C90B
Source: watch[1].js.2.dr	String found in binary or memory: https://mc.yandex.
Source: f[1].txt0.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: sodar2[1].js.2.dr, runner[1].htm.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/%
Source: f[1].txt0.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=
Source: f[1].txt0.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/expansion_embed.js
Source: f[1].txt.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204
Source: f[1].txt.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=
Source: f[1].txt0.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=gfp_cw_status
Source: f[1].txt0.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=imerr&err=
Source: f[1].txt.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: runner[1].htm.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=219
Source: sodar2[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=220
Source: f[1].txt.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/
Source: f[1].txt.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/managed/adsense/
Source: f[1].txt0.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/osd.js
Source: f[1].txt0.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: ti[1].js.2.dr	String found in binary or memory: https://plus.google.com/share?url=
Source: mc[1].htm.2.dr	String found in binary or memory: https://px.adhigh.net/p/cm/sape?u=0100007F09ABF65FFE0029A40224C90B
Source: mc[1].htm.2.dr	String found in binary or memory: https://relap.io/partners/sprcs?uid=0100007F09ABF65FFE0029A40224C90B
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://s.click.aliexpress.com/e/_ASg0I7
Source: mc[1].htm.2.dr	String found in binary or memory: https://s.uuidksinc.net/match/396/0100007F09ABF65FFE0029A40224C90B
Source: mc[1].htm.2.dr, {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://s3.advarkads.com/modules/match/frame.html?id=8113-1-1&uid=0100007F09ABF65FFE0029A40224C90B
Source: mc[1].htm.2.dr	String found in binary or memory: https://sape-sync.rutarget.ru/sync
Source: mc[1].htm.2.dr	String found in binary or memory: https://sm.rtb.mts.ru/p?ssp=sape&id=0100007F09ABF65FFE0029A40224C90B
Source: ga[2].js.2.dr	String found in binary or memory: https://ssl.google-analytics.com
Source: ga[2].js.2.dr	String found in binary or memory: https://ssl.google-analytics.com/j/__utm.gif
Source: mc[1].htm.2.dr	String found in binary or memory: https://ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7
Source: mc[1].htm.2.dr	String found in binary or memory: https://ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=153&external_id=0100007F09ABF65FFE0029A40224C90B
Source: mc[1].htm.2.dr	String found in binary or memory: https://stat.adlabs.ru/merge_gpsid/?sid=50&id=0100007F09ABF65FFE0029A40224C90B
Source: ga[2].js.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect?
Source: mc[1].htm.2.dr	String found in binary or memory: https://sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573
Source: mc[1].htm.2.dr	String found in binary or memory: https://sync.dmp.otm-r.com/match/sape?id=0100007F09ABF65FFE0029A40224C90B
Source: mc[1].htm.2.dr	String found in binary or memory: https://sync.republer.com/match?dsp=sape
Source: mc[1].htm.2.dr	String found in binary or memory: https://tag.digitaltarget.ru/adcm.js
Source: adcm[1].js.2.dr	String found in binary or memory: https://tag.digitaltarget.ru/processor.js?i=
Source: sodar2[1].js.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: f[1].txt0.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/%
Source: sodar2[1].js.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/220/runner.html
Source: aci[1].js.2.dr	String found in binary or memory: https://traffic.sape.ru/policy_en.html
Source: mc[1].htm.2.dr	String found in binary or memory: https://ut.rktch.com/matchspm?pi=1000005&pui=0100007F09ABF65FFE0029A40224C90B
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://w.uptolike.com/widgets/v1/impression.html?110d1c9f2486cfe91a5e43ca6a2a8120
Source: search[1].htm0.2.dr, index[1].htm.2.dr	String found in binary or memory: https://w.uptolike.com/widgets/v1/zp.js?pid=1274718
Source: search[1].htm0.2.dr, index[1].htm.2.dr	String found in binary or memory: https://w.uptolike.com/widgets/v1/zp.js?pid=lf1db54ae24b663ed8c33e3838260a7ac9ea99656b
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://w.uptolike.com/widgets/v1/zp/support.html
Source: sape[1].htm.2.dr	String found in binary or memory: https://www.acint.net/match?dp=126&euid=49c2caac-6f8f-45ca-5efd-14e1bc299b4c
Source: {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.acint.net/mc/?dp=10&tc=1
Source: ga[2].js.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences?
Source: sodar2[1].js.2.dr	String found in binary or memory: https://www.google.com
Source: f[1].txt.2.dr	String found in binary or memory: https://www.google.com/adsense
Source: ga[2].js.2.dr	String found in binary or memory: https://www.google.com/analytics/web/inpage/pub/inpage.js?
Source: sodar2[1].js.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: f[1].txt0.2.dr	String found in binary or memory: https://www.googletagservices.com/activeview/js/current/osd.js
Source: f[1].txt0.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/arrow_left_24px_grey_800.svg
Source: f[1].txt0.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/close_24px_grey_700.svg
Source: f[1].txt0.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/gpp_good_24px_blue_600.svg
Source: f[1].txt0.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/gpp_good_24px_grey_800.svg
Source: widget[1].htm.2.dr	String found in binary or memory: https://yandex.st/jquery/1.4.2/jquery.min.js
Source: watch[1].js.2.dr	String found in binary or memory: https://yandexmetrica.com
Source: watch[1].js.2.dr	String found in binary or memory: https://yastatic.net/metrika-static-watch/assessor-init.js
Source: watch[1].js.2.dr	String found in binary or memory: https://yastatic.net/s3/gdpr/popup/v2/

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443

Source: unknown	HTTPS traffic detected: 208.100.17.188:443 -> 192.168.2.3:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.100.17.188:443 -> 192.168.2.3:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.100.17.188:443 -> 192.168.2.3:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.100.17.188:443 -> 192.168.2.3:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.163.114.204:443 -> 192.168.2.3:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.163.114.204:443 -> 192.168.2.3:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 46.4.114.109:443 -> 192.168.2.3:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.209.34:443 -> 192.168.2.3:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.209.34:443 -> 192.168.2.3:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.15.175.130:443 -> 192.168.2.3:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.15.175.130:443 -> 192.168.2.3:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.88.21.119:443 -> 192.168.2.3:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.66:443 -> 192.168.2.3:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.66:443 -> 192.168.2.3:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.69.74.8:443 -> 192.168.2.3:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 88.212.252.2:443 -> 192.168.2.3:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 88.212.252.2:443 -> 192.168.2.3:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.69.74.8:443 -> 192.168.2.3:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 193.232.148.156:443 -> 192.168.2.3:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.198.34:443 -> 192.168.2.3:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.198.34:443 -> 192.168.2.3:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 193.232.148.156:443 -> 192.168.2.3:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 89.208.236.251:443 -> 192.168.2.3:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 94.100.180.197:443 -> 192.168.2.3:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 94.100.180.197:443 -> 192.168.2.3:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.34:443 -> 192.168.2.3:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.209.108.46:443 -> 192.168.2.3:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.34:443 -> 192.168.2.3:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.209.108.46:443 -> 192.168.2.3:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.190.117.93:443 -> 192.168.2.3:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.18.16.16:443 -> 192.168.2.3:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.18.16.16:443 -> 192.168.2.3:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.190.117.93:443 -> 192.168.2.3:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.201.152.107:443 -> 192.168.2.3:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.201.152.107:443 -> 192.168.2.3:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.15.175.130:443 -> 192.168.2.3:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.15.175.130:443 -> 192.168.2.3:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.180.98:443 -> 192.168.2.3:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.180.98:443 -> 192.168.2.3:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 109.248.237.37:443 -> 192.168.2.3:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 109.248.237.37:443 -> 192.168.2.3:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.201.243.72:443 -> 192.168.2.3:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.172.81.158:443 -> 192.168.2.3:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.172.81.158:443 -> 192.168.2.3:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.201.243.72:443 -> 192.168.2.3:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.163.37.253:443 -> 192.168.2.3:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.163.37.253:443 -> 192.168.2.3:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 81.222.128.216:443 -> 192.168.2.3:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 81.222.128.216:443 -> 192.168.2.3:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 136.243.148.229:443 -> 192.168.2.3:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 136.243.148.229:443 -> 192.168.2.3:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 176.9.238.190:443 -> 192.168.2.3:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.64.106.147:443 -> 192.168.2.3:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.211.66.35:443 -> 192.168.2.3:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.211.66.35:443 -> 192.168.2.3:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 176.9.238.190:443 -> 192.168.2.3:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.64.106.147:443 -> 192.168.2.3:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.220.27.134:443 -> 192.168.2.3:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.220.27.134:443 -> 192.168.2.3:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.9.245.57:443 -> 192.168.2.3:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.9.245.57:443 -> 192.168.2.3:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.66.147.170:443 -> 192.168.2.3:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.236.171:443 -> 192.168.2.3:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.66.147.170:443 -> 192.168.2.3:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 176.99.5.102:443 -> 192.168.2.3:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.65.2.150:443 -> 192.168.2.3:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 176.99.5.102:443 -> 192.168.2.3:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.236.171:443 -> 192.168.2.3:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.65.2.150:443 -> 192.168.2.3:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.4.87:443 -> 192.168.2.3:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.4.87:443 -> 192.168.2.3:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.172.81.172:443 -> 192.168.2.3:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.172.81.172:443 -> 192.168.2.3:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.148.37.80:443 -> 192.168.2.3:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.148.37.80:443 -> 192.168.2.3:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.16.14:443 -> 192.168.2.3:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.16.14:443 -> 192.168.2.3:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.87.44.207:443 -> 192.168.2.3:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.87.44.207:443 -> 192.168.2.3:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 93.158.134.90:443 -> 192.168.2.3:49828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 93.158.134.90:443 -> 192.168.2.3:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 89.108.119.28:443 -> 192.168.2.3:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 89.108.119.28:443 -> 192.168.2.3:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 5.9.154.76:443 -> 192.168.2.3:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 5.9.154.76:443 -> 192.168.2.3:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.180.204.205:443 -> 192.168.2.3:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.180.204.205:443 -> 192.168.2.3:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.180.204.205:443 -> 192.168.2.3:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.250.36:443 -> 192.168.2.3:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.250.36:443 -> 192.168.2.3:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.154.131.217:443 -> 192.168.2.3:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.154.131.217:443 -> 192.168.2.3:49856 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@3/164@57/51

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF4141CBD9521846FE.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: unknown	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5588 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5588 CREDAT:17410 /prefetch:2	Jump to behavior

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Windows\SysWOW64\Macromed\Flash\ss.cfg

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Drive-by Compromise1	Scripting1	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	File and Directory Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol4	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Scripting1	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol5	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Obfuscated Files or Information1	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Ingress Tool Transfer4	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989	0%	Avira URL Cloud	safe

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Link
s3.advarkads.com	0%	Virustotal	Browse
x01.aidata.io	0%	Virustotal	Browse
adx.com.ru	0%	Virustotal	Browse
sync3.adsniper.ru	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
http://ovd.ru/forum/register.php?s=8848772e8198313ee133bfa7158b7b6cb	0%	Avira URL Cloud	safe
http://www.vbhelp.org	0%	Avira URL Cloud	safe
https://www.acint.net/match?dp=126&euid=49c2caac-6f8f-45ca-5efd-14e1bc299b4c	0%	Avira URL Cloud	safe
http://ovd.ru/forum/in	0%	Avira URL Cloud	safe
http://ovd.ru/forum/images/buttons/collapse_tcat.gif	0%	Avira URL Cloud	safe
http://ovd.ru/templates/biz_blue_ii/css/template.css	0%	Avira URL Cloud	safe
http://ovd.ru/images/banners/kotkopi2g.jpg	0%	Avira URL Cloud	safe
http://ovd.ru/index.phgister.php?a=act&u=84666&i=25545989	0%	Avira URL Cloud	safe
http://ovd.ru/pictures/141.jpg	0%	Avira URL Cloud	safe
http://ovd.ru/forum/register.php?s=8848772e8198313ee133bfa7158b7b6ca.phpA32776%2C9%3A32776%2C10%3A32	0%	Avira URL Cloud	safe
http://ovd.ru/forum/images/statusicon/forum_new.gif	0%	Avira URL Cloud	safe
http://ovd.ru/templates/biz_blue_ii/images/mod_bottom.gif	0%	Avira URL Cloud	safe
http://ovd.ru/index.php?searchword=&option=com_search&Itemid=0	0%	Avira URL Cloud	safe
https://sape-sync.rutarget.ru/sync	0%	Avira URL Cloud	safe
http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c"	0%	Avira URL Cloud	safe
http://ovd.ru/forum/register.php?a=act&u=84666&i=255459898b7b6cnza.php	0%	Avira URL Cloud	safe
http://mambasana.ru	0%	Avira URL Cloud	safe
http://ovd.ru/templates/biz_blue_ii/images/shadow.jpg	0%	Avira URL Cloud	safe
http://127.0.0.1	0%	Avira URL Cloud	safe
http://www.mister-wong.ru/index.php?action=addurl&bm_url=	0%	Avira URL Cloud	safe
http://perviyshkaf.ru/3d-konstruktor-shkafov-kupe.html6c	0%	Avira URL Cloud	safe
https://sync.dmp.otm-r.com/match/sape?id=0100007F09ABF65FFE0029A40224C90B	0%	Avira URL Cloud	safe
http://ovd.ru/forum/cron.php?s=8848772e8198313ee133bfa7158b7b6c&rand=961090	0%	Avira URL Cloud	safe
http://perviyshkaf.ru/garderobnye-komnaty.htmla7158b7b6c~	0%	Avira URL Cloud	safe
http://ovd.ru/images/banners/sozday_shkaf_kupe.jpg	0%	Avira URL Cloud	safe
http://ovd.ru/forgister.php?s=8848772e8198313ee133bfa7158b7b6cRoot	0%	Avira URL Cloud	safe
http://ovd.ru/forum/forumdisplay.php?s=8848772e8198313ee133bfa7158b7b6c&do=markread	0%	Avira URL Cloud	safe
http://ovd.ru/forum/images/misc/whos_online.gif	0%	Avira URL Cloud	safe
http://ovd.ru/forum/images/misc/navbits_start.gif	0%	Avira URL Cloud	safe
http://ovd.ru/forum/vb_loginza.php	0%	Avira URL Cloud	safe
http://ovd.ru/forum/favicon.ico	0%	Avira URL Cloud	safe
http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6cc	0%	Avira URL Cloud	safe
http://ovd.ru/forum/rek1.js	0%	Avira URL Cloud	safe
http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6ccA32776%2C9%3A32776%2C10%3A32%2C1	0%	Avira URL Cloud	safe
http://ovd.ru/1x1.gif	0%	Avira URL Cloud	safe
http://ovd.ru/forgister.php?a=act&u=84666&i=255459898b7b6cnza.phpRoot	0%	Avira URL Cloud	safe
https://tag.digitaltarget.ru/adcm.js	0%	Avira URL Cloud	safe
http://ovd.ru/images/banners/garderobnye_uno.gif	0%	Avira URL Cloud	safe
http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6cfa7158b7b6ct=1%3A32776%2C2%3A32776%2C9%3A3277	0%	Avira URL Cloud	safe
http://ovd.ru/formberlist.php?s=8848772e8198313ee133bfa7158b7b6cRoot	0%	Avira URL Cloud	safe
http://ovd.ru/forp?s=8848772e8198313ee133bfa7158b7b6cRoot	0%	Avira URL Cloud	safe
http://perviyshkaf.ru/3d-konstruktor-shkafov-kupe.htmlobnye-komnaty.html	0%	Avira URL Cloud	safe
https://adx.com.ru/sape-sync?uid=0100007F09ABF65FFE0029A40224C90B	0%	Avira URL Cloud	safe
http://ovd.ru/pictures/otdelka_komnaty.jpg	0%	Avira URL Cloud	safe
http://ovd.ru/cache/wo/07b4b16172.js	0%	Avira URL Cloud	safe
http://ovd.ru/pictures/armstrong_laminate.jpg	0%	Avira URL Cloud	safe
http://ovd.ru/forum/images/gradients/gradient_thead.gif	0%	Avira URL Cloud	safe
http://ovd.ru/forlendar.php?s=8848772e8198313ee133bfa7158b7b6ccRoot	0%	Avira URL Cloud	safe
https://s3.advarkads.com/modules/match/frame.html?id=8113-1-1&uid=0100007F09ABF65FFE0029A40224C90B	0%	Avira URL Cloud	safe
http://ovd.ru/social.png)	0%	Avira URL Cloud	safe
https://www.google.%/ads/ga-audiences?	0%	URL Reputation	safe
https://www.google.%/ads/ga-audiences?	0%	URL Reputation	safe
https://www.google.%/ads/ga-audiences?	0%	URL Reputation	safe
http://ovd.ru/templates/_system/css/general.css	0%	Avira URL Cloud	safe
http://ovd.ru/forum/images/misc/stats.gif	0%	Avira URL Cloud	safe
http://ovd.ru/forum/index.phphp?s=8848772e8198313ee133bfa7158b7b6cc1%3A32776%2C2%3A32776%2C9%3A32776	0%	Avira URL Cloud	safe
https://www.acint.net/mc/?dp=10&tc=1	0%	Avira URL Cloud	safe
http://pajhome.org.uk/crypt/md5	0%	Avira URL Cloud	safe
http://ovd.ru	0%	Avira URL Cloud	safe
https://ut.rktch.com/matchspm?pi=1000005&pui=0100007F09ABF65FFE0029A40224C90B	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
s3.advarkads.com	104.22.4.87	true	false	0%, Virustotal, Browse	unknown
x01.aidata.io	89.108.119.28	true	false	0%, Virustotal, Browse	unknown
adx.com.ru	176.9.238.190	true	false	0%, Virustotal, Browse	unknown
sync3.adsniper.ru	31.172.81.172	true	false	0%, Virustotal, Browse	unknown
pagead.l.doubleclick.net	142.250.180.98	true	false		high
an.yandex.ru	93.158.134.90	true	false		high
ssp.adriver.ru	81.222.128.216	true	false		high
perviyshkaf.ru	90.156.201.82	true	false		unknown
ru2.republer.com	194.190.117.93	true	false		unknown
favicon.yandex.net	87.250.250.36	true	false		high
acint.net	195.201.243.72	true	false		unknown
semantiqo.com	5.9.154.76	true	false		unknown
utl-utils.ru	78.24.221.88	true	false		unknown
r.mail.ru	94.100.180.197	true	false		high
ut.rktch.com	176.99.5.102	true	false		unknown
exchange.buzzoola.com	116.202.236.171	true	false		high
redirect.frontend.weborama.fr	35.190.16.14	true	false		high
ad.adriver.ru	195.209.108.46	true	false		high
top100.rambler.ru	81.19.89.1	true	false		high
www.acint.net	46.4.114.109	true	false		unknown
relap.io	95.163.37.253	true	false		high
mc.yandex.ru	77.88.21.119	true	false		high
sync.1dmp.io	136.243.148.229	true	false		unknown
stat.adlabs.ru	109.248.237.37	true	false		high
de.tynt.com	208.100.17.188	true	false		high
adlmerge.com	95.211.66.35	true	false		unknown
sm.rtb.mts.ru	217.66.147.170	true	false		high
tech.rtb.mts.ru	213.87.44.207	true	false		high
ssp-rtb.sape.ru	159.69.74.8	true	false		high
catch-all.hotlog.ru	89.208.236.251	true	false		high
sync.bumlam.com	31.172.81.158	true	false		unknown
fcgi.gnezdo.ru	185.148.37.80	true	false		high
sync.rutarget.ru	80.64.106.147	true	false		unknown
pagead46.l.doubleclick.net	142.250.180.162	true	false		high
ovd.ru	91.189.114.9	true	true		unknown
ssp.ads.betweendigital.com	88.212.252.2	true	false		high
dm.hybrid.ai	37.18.16.16	true	false		unknown
s.uuidksinc.net	31.220.27.134	true	false		high
w.uptolike.com	95.163.114.204	true	false		high
tag.digitaltarget.ru	185.15.175.130	true	false		unknown
loginza.ru	213.180.204.205	true	false		high
dmg.digitaltarget.ru	185.15.175.130	true	false		unknown
0100007f09abf65ffe0029a40224c90b-sp.ops.beeline.ru	37.9.245.57	true	false		high
counter.rambler.ru	81.19.89.16	true	false		high
partnerad.l.doubleclick.net	216.58.206.66	true	false		high
match.new-programmatic.com	217.65.2.150	true	false		unknown
ic.tynt.com	208.100.17.188	true	false		high
api.advarkads.com	188.42.29.81	true	false		unknown
yandex.st	178.154.131.217	true	false		unknown
top100-images.rambler.ru	unknown	unknown	false		high
ad.mail.ru	unknown	unknown	false		high
sc.tynt.com	unknown	unknown	false		high
cm.g.doubleclick.net	unknown	unknown	false		high
s.click.aliexpress.com	unknown	unknown	false		high
px.adhigh.net	unknown	unknown	false		high
tcr.tynt.com	unknown	unknown	false		high
googleads.g.doubleclick.net	unknown	unknown	false		high
sape-sync.rutarget.ru	unknown	unknown	false		unknown
www.googletagservices.com	unknown	unknown	false		high
adservice.google.co.uk	unknown	unknown	false		unknown
sync.dmp.otm-r.com	unknown	unknown	false		unknown
ads.betweendigital.com	unknown	unknown	false		high
sync.republer.com	unknown	unknown	false		unknown
sonar.semantiqo.com	unknown	unknown	false		unknown
hit5.hotlog.ru	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://hit5.hotlog.ru/cgi-bin/hotlog/count?0.11948515321103914&s=90390&im=134&r=&pg=http%3A//ovd.ru/index.php%3Fs%3D8848772e8198313ee133bfa7158b7b6c&c=Y&j=Y&wh=1280x1024&px=24&js=1.3&&hl_ignore=Y	false		high
http://ovd.ru/forum/register.php?s=8848772e8198313ee133bfa7158b7b6c	true		unknown
http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c	true		unknown
http://ovd.ru/forum/images/buttons/collapse_tcat.gif	true	Avira URL Cloud: safe	unknown
http://ovd.ru/templates/biz_blue_ii/css/template.css	true	Avira URL Cloud: safe	unknown
http://loginza.ru/js/widget_api.pack.js?rev=20110902vk	false		high
http://ovd.ru/forum/index.php	true		unknown
http://loginza.ru/img/widget/providers_sprite.png?linkedin	false		high
http://ovd.ru/images/banners/kotkopi2g.jpg	true	Avira URL Cloud: safe	unknown
http://ovd.ru/pictures/141.jpg	true	Avira URL Cloud: safe	unknown
http://ovd.ru/forum/images/statusicon/forum_new.gif	true	Avira URL Cloud: safe	unknown
http://loginza.ru/img/widget/loading_small.gif	false		high
http://ovd.ru/templates/biz_blue_ii/images/mod_bottom.gif	true	Avira URL Cloud: safe	unknown
http://ovd.ru/index.php?searchword=&option=com_search&Itemid=0	true	Avira URL Cloud: safe	unknown
http://perviyshkaf.ru/3d-konstruktor-shkafov-kupe.html	true		unknown
http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php	false		high
http://ovd.ru/templates/biz_blue_ii/images/shadow.jpg	true	Avira URL Cloud: safe	unknown
http://ovd.ru/images/banners/sozday_shkaf_kupe.jpg	true	Avira URL Cloud: safe	unknown
http://mc.yandex.ru/metrika/watch.js	false		high
http://loginza.ru/img/widget/grey_dot.gif	false		high
http://ovd.ru/forum/forumdisplay.php?s=8848772e8198313ee133bfa7158b7b6c&do=markread	true	Avira URL Cloud: safe	unknown
http://ovd.ru/forum/images/misc/whos_online.gif	true	Avira URL Cloud: safe	unknown
http://ovd.ru/forum/images/misc/navbits_start.gif	true	Avira URL Cloud: safe	unknown
http://ovd.ru/forum/favicon.ico	true	Avira URL Cloud: safe	unknown
http://loginza.ru/img/widget/footer_bg.gif	false		high
http://loginza.ru/img/widget/field_bg.gif	false		high
http://ovd.ru/forum/rek1.js	true	Avira URL Cloud: safe	unknown
http://ovd.ru/1x1.gif	true	Avira URL Cloud: safe	unknown
http://ovd.ru/forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c	true		unknown
http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c	true		unknown
http://ovd.ru/images/banners/garderobnye_uno.gif	true	Avira URL Cloud: safe	unknown
http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c	true		unknown
http://loginza.ru/img/exchange.png	false		high
http://ovd.ru/pictures/otdelka_komnaty.jpg	true	Avira URL Cloud: safe	unknown
http://ovd.ru/cache/wo/07b4b16172.js	true	Avira URL Cloud: safe	unknown
http://ovd.ru/pictures/armstrong_laminate.jpg	true	Avira URL Cloud: safe	unknown
http://ovd.ru/forum/images/gradients/gradient_thead.gif	true	Avira URL Cloud: safe	unknown
http://ovd.ru/templates/_system/css/general.css	true	Avira URL Cloud: safe	unknown
http://ovd.ru/forum/images/misc/stats.gif	true	Avira URL Cloud: safe	unknown
http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://ovd.ru/forum/register.php?s=8848772e8198313ee133bfa7158b7b6cb	{86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	false	Avira URL Cloud: safe	unknown
http://www.vbhelp.org	memberlist[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://www.acint.net/match?dp=126&euid=49c2caac-6f8f-45ca-5efd-14e1bc299b4c	sape[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7	mc[1].htm.2.dr	false		high
http://loginza.ru	widget[1].htm.2.dr	false		high
http://ovd.ru/forum/in	{86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fma	mc[1].htm.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php	widget_plugins[1].js.2.dr	false		high
http://www.livejournal.com/update.bml?event=	podelis[1].js.2.dr	false		high
http://ovd.ru/index.phgister.php?a=act&u=84666&i=25545989	{86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://w.uptolike.com/widgets/v1/zp/support.html	{86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	false		high
https://cdn.ampproject.org/amp4ads-host-v0.js	f[1].txt0.2.dr	false		high
http://ovd.ru/forum/register.php?s=8848772e8198313ee133bfa7158b7b6ca.phpA32776%2C9%3A32776%2C10%3A32	~DFFCDA20ED063141AF.TMP.1.dr	false	Avira URL Cloud: safe	unknown
https://w.uptolike.com/widgets/v1/zp.js?pid=1274718	search[1].htm0.2.dr, index[1].htm.2.dr	false		high
https://ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691	mc[1].htm.2.dr	false		high
http://click.hotlog.ru/?90390	search[1].htm0.2.dr	false		high
https://sape-sync.rutarget.ru/sync	mc[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://relap.io/partners/sprcs?uid=0100007F09ABF65FFE0029A40224C90B	mc[1].htm.2.dr	false		high
http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c"	ovd[1].xml.2.dr	false	Avira URL Cloud: safe	unknown
http://ovd.ru/forum/register.php?a=act&u=84666&i=255459898b7b6cnza.php	~DFFCDA20ED063141AF.TMP.1.dr	false	Avira URL Cloud: safe	unknown
http://mambasana.ru	template[1].css.2.dr	false	Avira URL Cloud: safe	unknown
https://s.uuidksinc.net/match/396/0100007F09ABF65FFE0029A40224C90B	mc[1].htm.2.dr	false		high
https://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php	rek1[1].js.2.dr	false		high
http://127.0.0.1	watch[1].js.2.dr	false	Avira URL Cloud: safe	unknown
http://www.mister-wong.ru/index.php?action=addurl&bm_url=	podelis[1].js.2.dr	false	Avira URL Cloud: safe	unknown
http://perviyshkaf.ru/3d-konstruktor-shkafov-kupe.html6c	~DFFCDA20ED063141AF.TMP.1.dr	false	Avira URL Cloud: safe	unknown
https://sync.dmp.otm-r.com/match/sape?id=0100007F09ABF65FFE0029A40224C90B	mc[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
http://top100.rambler.ru/top100/	search[1].htm0.2.dr	false		high
http://ovd.ru/forum/cron.php?s=8848772e8198313ee133bfa7158b7b6c&rand=961090	register[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
http://perviyshkaf.ru/garderobnye-komnaty.htmla7158b7b6c~	~DFFCDA20ED063141AF.TMP.1.dr	false	Avira URL Cloud: safe	unknown
http://ovd.ru/forgister.php?s=8848772e8198313ee133bfa7158b7b6cRoot	{86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://w.uptolike.com/widgets/v1/impression.html?110d1c9f2486cfe91a5e43ca6a2a8120	{86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	false		high
https://stats.g.doubleclick.net/j/collect?	ga[2].js.2.dr	false		high
http://ovd.ru/forum/vb_loginza.php	widget[1].htm.2.dr, {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	false	Avira URL Cloud: safe	unknown
http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.phphkafov-kupe.html	~DFFCDA20ED063141AF.TMP.1.dr	false		high
http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6cc	~DFFCDA20ED063141AF.TMP.1.dr	false	Avira URL Cloud: safe	unknown
http://googleads.g.doubleclick.net	f[1].txt0.2.dr	false		high
http://www.vbulletin.com/license.html	vbulletin_global[1].js.2.dr	false		high
http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6ccA32776%2C9%3A32776%2C10%3A32%2C1	~DFFCDA20ED063141AF.TMP.1.dr	false	Avira URL Cloud: safe	unknown
http://ovd.ru/forgister.php?a=act&u=84666&i=255459898b7b6cnza.phpRoot	{86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://tag.digitaltarget.ru/adcm.js	mc[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6cfa7158b7b6ct=1%3A32776%2C2%3A32776%2C9%3A3277	~DFFCDA20ED063141AF.TMP.1.dr	false	Avira URL Cloud: safe	unknown
http://ovd.ru/formberlist.php?s=8848772e8198313ee133bfa7158b7b6cRoot	{86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	false	Avira URL Cloud: safe	unknown
http://ovd.ru/forp?s=8848772e8198313ee133bfa7158b7b6cRoot	{86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	false	Avira URL Cloud: safe	unknown
http://perviyshkaf.ru/3d-konstruktor-shkafov-kupe.htmlobnye-komnaty.html	~DFFCDA20ED063141AF.TMP.1.dr	false	Avira URL Cloud: safe	unknown
https://adx.com.ru/sape-sync?uid=0100007F09ABF65FFE0029A40224C90B	mc[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://fcgi.gnezdo.ru/cookie_matching_ssp/Sape-dsp/0100007F09ABF65FFE0029A40224C90B	mc[1].htm.2.dr	false		high
https://googleads.g.doubleclick.net/pagead/ads?guci=1.2.0.0.2.2.0.0&client=ca-pub-2867059600462301&o	~DFFCDA20ED063141AF.TMP.1.dr	false		high
http://www.odnoklassniki.ru/dk?st.cmd=addShare&st.s=1&st._surl=	podelis[1].js.2.dr	false		high
http://ovd.ru/forlendar.php?s=8848772e8198313ee133bfa7158b7b6ccRoot	{86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://s3.advarkads.com/modules/match/frame.html?id=8113-1-1&uid=0100007F09ABF65FFE0029A40224C90B	mc[1].htm.2.dr, {86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	false	Avira URL Cloud: safe	unknown
http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_Root	{86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	false		high
http://ovd.ru/social.png)	podelis[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.%/ads/ga-audiences?	ga[2].js.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	low
http://loginza.ru/features-and-benefits	widget[1].htm.2.dr	false		high
http://ovd.ru/forum/index.phphp?s=8848772e8198313ee133bfa7158b7b6cc1%3A32776%2C2%3A32776%2C9%3A32776	~DFFCDA20ED063141AF.TMP.1.dr	false	Avira URL Cloud: safe	unknown
https://www.acint.net/mc/?dp=10&tc=1	{86660043-50FD-11EB-90E4-ECF4BB862DED}.dat.1.dr	false	Avira URL Cloud: safe	unknown
http://pajhome.org.uk/crypt/md5	vbulletin_md5[1].js.2.dr	false	Avira URL Cloud: safe	unknown
http://ovd.ru	memberlist[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://ut.rktch.com/matchspm?pi=1000005&pui=0100007F09ABF65FFE0029A40224C90B	mc[1].htm.2.dr	false	Avira URL Cloud: safe	unknown

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
194.190.117.93	unknown	Russian Federation	204600	REPUBLER-ASRU	false
81.19.89.1	unknown	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
217.66.147.170	unknown	Russian Federation	29209	SPBMTS-ASMalayaMonetnayaStreet2-ARU	false
90.156.201.82	unknown	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
176.99.5.102	unknown	Russian Federation	49352	LOGOL-ASRU	false
31.220.27.134	unknown	Netherlands	39572	ADVANCEDHOSTERS-ASNL	false
188.42.29.81	unknown	Luxembourg	7979	SERVERS-COMUS	false
185.148.37.80	unknown	Russian Federation	48347	MTW-ASRU	false
95.163.114.204	unknown	Russian Federation	12695	DINET-ASRU	false
195.209.108.46	unknown	Russian Federation	52007	ADRIVER-ASRU	false
193.232.148.156	unknown	Russian Federation	48061	UMA-TECH-ASRU	false
94.100.180.197	unknown	Russian Federation	47764	MAILRU-ASMailRuRU	false
93.158.134.90	unknown	Russian Federation	13238	YANDEXRU	false
213.180.204.205	unknown	Russian Federation	13238	YANDEXRU	false
81.19.89.16	unknown	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
216.58.209.34	unknown	United States	15169	GOOGLEUS	false
109.248.237.37	unknown	Russian Federation	201009	SUPPORTIT-ASRU	false
37.9.245.57	unknown	Russian Federation	16345	BEE-ASRussiaRU	false
116.202.236.171	unknown	Germany	24940	HETZNER-ASDE	false
37.18.16.16	unknown	Netherlands	205675	HYBRID-ASRU	false
31.172.81.158	unknown	Germany	44066	DE-FIRSTCOLOwwwfirst-colonetDE	false
77.88.21.119	unknown	Russian Federation	13238	YANDEXRU	false
195.201.152.107	unknown	Germany	24940	HETZNER-ASDE	false
35.190.16.14	unknown	United States	15169	GOOGLEUS	false
104.22.4.87	unknown	United States	13335	CLOUDFLARENETUS	false
217.65.2.150	unknown	Russian Federation	3175	CITYTELECOM-MSKRU	false
195.201.243.72	unknown	Germany	24940	HETZNER-ASDE	false
213.87.44.207	unknown	Russian Federation	13174	MTSNETMoscowRussiaRU	false
81.222.128.216	unknown	Russian Federation	20597	ELTEL-ASRU	false
216.58.206.34	unknown	United States	15169	GOOGLEUS	false
5.9.154.76	unknown	Germany	24940	HETZNER-ASDE	false
136.243.148.229	unknown	Germany	24940	HETZNER-ASDE	false
178.154.131.217	unknown	Russian Federation	13238	YANDEXRU	false
95.211.66.35	unknown	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
176.9.238.190	unknown	Germany	24940	HETZNER-ASDE	false
88.212.252.2	unknown	Russian Federation	7979	SERVERS-COMUS	false
142.250.180.98	unknown	United States	15169	GOOGLEUS	false
89.208.236.251	unknown	Russian Federation	12695	DINET-ASRU	false
91.189.114.9	unknown	Russian Federation	48287	RU-CENTERRU	true
89.108.119.28	unknown	Russian Federation	43146	AGAVA3RU	false
216.58.206.66	unknown	United States	15169	GOOGLEUS	false
87.250.250.36	unknown	Russian Federation	13238	YANDEXRU	false
31.172.81.172	unknown	Germany	44066	DE-FIRSTCOLOwwwfirst-colonetDE	false
95.163.37.253	unknown	Russian Federation	21051	NIVAL-ASRU	false
80.64.106.147	unknown	Russian Federation	20764	RASCOM-ASCJSCRASCOMISPRU	false
208.100.17.188	unknown	United States	32748	STEADFASTUS	false
46.4.114.109	unknown	Germany	24940	HETZNER-ASDE	false
78.24.221.88	unknown	Russian Federation	29182	THEFIRST-ASRU	false
185.15.175.130	unknown	Russian Federation	43226	SAFEDATAUplinksRU	false
159.69.74.8	unknown	Germany	24940	HETZNER-ASDE	false
216.58.198.34	unknown	United States	15169	GOOGLEUS	false

General Information

Joe Sandbox Version:	31.0.0 Red Diamond
Analysis ID:	336876
Start date:	07.01.2021
Start time:	07:31:33
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@3/164@57/51
Cookbook Comments:	Adjust boot time Enable AMSI Browsing link: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Browsing link: http://ovd.ru/banners/click12.html Browsing link: http://ovd.ru/banners/click17.html Browsing link: https://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php Browsing link: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c Browsing link: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Browsing link: http://ovd.ru/forum/register.php?s=8848772e8198313ee133bfa7158b7b6c Browsing link: http://ovd.ru/forum/faq.php?s=8848772e8198313ee133bfa7158b7b6c Browsing link: http://ovd.ru/forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c Browsing link: http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c Browsing link: http://ovd.ru/forum/forumdisplay.php?s=8848772e8198313ee133bfa7158b7b6c&do=markread
Warnings:	Show All Exclude process from analysis (whitelisted): BackgroundTransferHost.exe, ielowutil.exe, backgroundTaskHost.exe, SgrmBroker.exe, svchost.exe Excluded IPs from analysis (whitelisted): 88.221.62.148, 104.16.88.26, 104.16.87.26, 216.58.208.142, 104.42.151.234, 40.88.32.150, 51.104.139.180, 142.250.180.162, 152.199.19.161, 142.250.180.65, 104.83.113.138, 104.43.193.48, 92.122.144.200, 67.27.159.254, 67.26.139.254, 67.27.158.254, 67.26.137.254, 67.27.159.126, 92.122.213.194, 92.122.213.247, 52.255.188.83, 20.54.26.129 Excluded domains from analysis (whitelisted): arc.msn.com.nsatc.net, sc.tynt.com.cdn.cloudflare.net, partner.googleadservices.com, adservice.google.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, a1449.dscg2.akamai.net, arc.msn.com, e11290.dspg.akamaiedge.net, iecvlist.microsoft.com, e11956.x.akamaiedge.net, skypedataprdcoleus15.cloudapp.net, tcr.tynt.com.cdn.cloudflare.net, go.microsoft.com, audownload.windowsupdate.nsatc.net, watson.telemetry.microsoft.com, auto.au.download.windowsupdate.com.c.footprint.net, img-prod-cms-rt-microsoft-com.akamaized.net, prod.fs.microsoft.com.akadns.net, au-bg-shim.trafficmanager.net, www.google-analytics.com, fs.microsoft.com, www-google-analytics.l.google.com, ie9comview.vo.msecnd.net, ris-prod.trafficmanager.net, e1723.g.akamaiedge.net, ctldl.windowsupdate.com, pagead2.googlesyndication.com, skypedataprdcolcus15.cloudapp.net, ris.api.iris.microsoft.com, skypedataprdcoleus17.cloudapp.net, tpc.googlesyndication.com, go.microsoft.com.edgekey.net, blobcollector.events.data.trafficmanager.net, skypedataprdcolwus16.cloudapp.net, eu1111.alicdn.com.edgekey.net, cs9.wpc.v0cdn.net Report size exceeded maximum capacity and may have missing behavior information. Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtDeviceIoControlFile calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\13VOHORW\w.uptolike[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.469670487371862
Encrypted:	false
SSDEEP:	3:D90aKb:JFKb
MD5:	C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1:	35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966
SHA-256:	B71E4D17274636B97179BA2D97C742735B6510EB54F22893D3A2DAFF2CEB28DB
SHA-512:	6BE8CEC7C862AFAE5B37AA32DC5BB45912881A3276606DA41BF808A4EF92C318B355E616BF45A257B995520D72B7C08752C0BE445DCEADE5CF79F73480910FED
Malicious:	false
Reputation:	low
Preview:	<root></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\F11N4XAS\loginza[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	2748
Entropy (8bit):	5.094639451200762
Encrypted:	false
SSDEEP:	48:LXPsXPEusXPEuesXPEueAdQ1dht+/nReeWIOwmNWirevtlPYMhiet5dK5dMLatVc:7P2PEu2PEue2PEueAdQ1dO/RfuNWiroP
MD5:	75AC3FB2AFDDBD0B57F9E5767DD0BC9F
SHA1:	3CB0A830684690BC62A1B4A98BD5E29D276F1073
SHA-256:	DC85593A76D22298839B6450589AB59179AB9C4F899861766E121F621B04A403
SHA-512:	89207077D1B1AE2BAA3D41B2519F9BD8D2461C770E8B8A7DF9B1F243A8BD0F04A57D52F27AAAD06DF5308F846DB2B0C1697B84FE7B403C85FF97361840A652E3
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="_ym10243345_lsid" value="792031449011" ltime="1698508016" htime="30860554" /></root><root><item name="_ym10243345_lsid" value="792031449011" ltime="1698508016" htime="30860554" /><item name="_ym10243345_reqNum" value="1" ltime="1698588016" htime="30860554" /></root><root><item name="_ym10243345_lsid" value="792031449011" ltime="1698508016" htime="30860554" /><item name="_ym10243345_reqNum" value="1" ltime="1698588016" htime="30860554" /><item name="_ym_uid" value=""1610033587112486313"" ltime="1698628016" htime="30860554" /></root><root><item name="_ym10243345_lsid" value="792031449011" ltime="1698508016" htime="30860554" /><item name="_ym10243345_reqNum" value="1" ltime="1698588016" htime="30860554" /><item name="_ym_uid" value=""1610033587112486313"" ltime="1698628016" htime="30860554" /><item name="_ym_retryReqs" value="{"1":{"protocol":"https:","host":"mc.yandex.ru","resource&q

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\F11N4XAS\ovd[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	13591
Entropy (8bit):	5.04068490204222
Encrypted:	false
SSDEEP:	192:DlllarananakananaqaKS5SdFQaKS5SdFQaY:kuaa7aatP5SDnP5SDnY
MD5:	240413CCAECFA8D38D122378DFDD9A5B
SHA1:	1723B76E562F6818F07B556E6C3BE0688DCC9427
SHA-256:	CF29982BCD16DF801F25BDD662CFD26B33C226875068604451823B21CD1B043A
SHA-512:	164DA02BF70AB3210ED21F0E5D1FF8445C4317ADA564182BEB3ED03995771CF59C810F0C3DAB8CBE8A0D888186552B5EA75CEAE9119CB4D61DBB0BAB3F54104E
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="goog_pem_mod" value="68" ltime="1441428016" htime="30860554" /></root><root><item name="goog_pem_mod" value="68" ltime="1441428016" htime="30860554" /><item name="google_experiment_mod47" value="99" ltime="1441428016" htime="30860554" /><item name="google_experiment_mod34" value="901" ltime="1441428016" htime="30860554" /><item name="google_experiment_mod53" value="898" ltime="1441588016" htime="30860554" /><item name="google_experiment_mod36" value="554" ltime="1441588016" htime="30860554" /><item name="google_experiment_mod37" value="655" ltime="1441588016" htime="30860554" /><item name="google_experiment_mod44" value="584" ltime="1441588016" htime="30860554" /></root><root><item name="goog_pem_mod" value="68" ltime="1441428016" htime="30860554" /><item name="google_experiment_mod47" value="99" ltime="1441428016" htime="30860554" /><item name="google_experiment_mod34" value="901" ltime="1441428016" htime="30860554" /><item name="google_experiment_mod53"

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\F6FC0ET8\www.acint[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	120
Entropy (8bit):	5.058874975356859
Encrypted:	false
SSDEEP:	3:D90aK1ryRtFwsiBW1upgVqG9TUR3oKUkNzAqSR6uNaKb:JFK1rUFWBUuyVqG9TAocuHZb
MD5:	35A8A569823C1E4F071716F544FC3F84
SHA1:	4771EE3E68B740E886CD6D8877893554AF8DADE1
SHA-256:	E7A058BE8225704AFE4F4367CEBEFD574E8B7F8656AA55B34C7C0DEA677D4B79
SHA-512:	E9218D141F185C098AD1F3A5DFEE363A89A248866935B71F0674570A4CEB1FE41A57AD020DCC03198055FAB8520A73D7814C7DFB573AD1EAFC1C9DBEF947F027
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="_a_d3t6sf" value="duj5a_4SPyBO2J9AFt6sza2e" ltime="1477918016" htime="30860554" /></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\J2VX51L9\s3.advarkads[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.469670487371862
Encrypted:	false
SSDEEP:	3:D90aKb:JFKb
MD5:	C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1:	35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966
SHA-256:	B71E4D17274636B97179BA2D97C742735B6510EB54F22893D3A2DAFF2CEB28DB
SHA-512:	6BE8CEC7C862AFAE5B37AA32DC5BB45912881A3276606DA41BF808A4EF92C318B355E616BF45A257B995520D72B7C08752C0BE445DCEADE5CF79F73480910FED
Malicious:	false
Reputation:	low
Preview:	<root></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{86660041-50FD-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	30296
Entropy (8bit):	1.8412118804611135
Encrypted:	false
SSDEEP:	96:rYZCZm2x9WJmtJXzfJ64RMJoJbJI4fJIMlcX:rYZCZm2x9Wwt9zfo4RMaJ/fXcX
MD5:	92B890A7C9E93C60C6AA7C35ADCCB7EB
SHA1:	66A783E672325278A6653CA74633735831A79A01
SHA-256:	804886FD559A63EFDC2CEF99AA8150C59E9828254374078154BE724A469CAEF0
SHA-512:	750851B1759A989FFFA0292A619F6A57F1EEE04599BFC33AAE91FD80BE15067C28ABEAB44C0145D34BC4F13101E4B7AC27E70A537277B2319AC8E1FBED108737
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{86660043-50FD-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	222722
Entropy (8bit):	2.824929453307619
Encrypted:	false
SSDEEP:	768:XJ/ssR/ssU/sslwssfwss2wss27vssU7vssf7vssbW1A/n769kdqtyW8A6Plj9e9:XWZA6PljRQkxZrOpniQgXve
MD5:	A0D46545967A205386C0F071407BE2C7
SHA1:	659D673D07664F4FF0F8A30B11221D6DFEDD578E
SHA-256:	635F9CBE3AE2203DFB0EE2D28865382A9E58649F02E9110EEFEEBEDDA955AF0D
SHA-512:	45F06D8A660EF3887962EAFD1A0AC9E755990171385BF5CEFDF14032006292184E19DD4308326696E25F5E8712865DF6FCD7BCDCBB82ED855AD1032550130E78
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{86660044-50FD-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	16984
Entropy (8bit):	1.563535631270424
Encrypted:	false
SSDEEP:	48:IwIGcprRGwpaQG4pQ0GrapbS1rGQpKeG7HpRasTGIpG:r8ZLQQ6CBS1FAZTa4A
MD5:	2D7486952FA5D8EE7B7D002E6E255C76
SHA1:	53E9A165FF9EB7D59881847F0CEA3D5C884A055F
SHA-256:	0F7A9184FB32FFADB2DF3E63D33DECE77CD9A68CC826C985D1FE22E7E7E307AF
SHA-512:	6D703CB5ED535F5FFBA1F46E4E0A964BF4BD3A208A0C0A7A46D98B448A194FEA6AAB5CECFA4A7C7E1D795FEA690E0AD1DF1E82CD89227225F133A0C2F7A97343
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	990
Entropy (8bit):	3.3012414570740676
Encrypted:	false
SSDEEP:	12:pdl97plu4R2oYYY3798lyaVeRYYYuqCcIRMTpznLHeqpFPaZVae4XW:pntuCw798l0qCcIYpneqXPGwnXW
MD5:	A151009E8912694F587506A61904A059
SHA1:	3B2120414F570D8E88F1608C17D58950DDFF123B
SHA-256:	F0BF944C7CAF5A4FB221CA30B2F729AD20899A745FF0647058D112BB7C0BDA2D
SHA-512:	DE32FD9960CEA8838B3FB27F147C5DC9E093519FF2F2CF30B5111EEC0C5BD0F4EE27B6AC035410F9A29DE4F40223F280AE1F5E734F9A6510407DBF1FFD45B205
Malicious:	false
Reputation:	low
Preview:	..h.t.t.p.:././.l.o.g.i.n.z.a...r.u./.f.a.v.i.c.o.n...i.c.o.~.................h.......(....... .......................................................................................................................................................................................................................................z.........................................................................................zzz.....................zzz..................zzzzzz...............zzzzzz..........#..(.............#........#..............#..#..#..#..........'..#........#............#..#.....#....)..#..#..............$....)..(..#.. ........#..#..#..................!..*.....................................................................................................................................................................................................................................................................................)._.....)._....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\CHto-luchshe-metallocherepitsa-ili-ondulin[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x125, frames 3
Category:	downloaded
Size (bytes):	12345
Entropy (8bit):	7.951024580472998
Encrypted:	false
SSDEEP:	384:9jiAXmQYtPp/6sPSAvgbgPJnwecp98HgCH:kLZtPzPSAvgtmz
MD5:	AF599CE647811761CA2CB351860D0846
SHA1:	7CF74B6C72F749916BF1A7BFE69591FCFA23F159
SHA-256:	DDA836F9275E92464AEFBFB0117BAFCB1D6A1C8B9CDBEB2C965A3D0D23F401CC
SHA-512:	2BAA62A7AFC912704D5E5821578578D74AFF2227DAFE449C71C8DDF411B5CB0D74DDF9C3DBABBAF903B40BB26483E485DB6F3D8B2904CD17DC049A5D34F8F1E5
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/dom/CHto-luchshe-metallocherepitsa-ili-ondulin.jpg
Preview:	......JFIF.....`.`.....C.......................................................""""""""""...C................ ! !!! !!!!!!!!"""""""""""""""......}.,...........................................L.........................!1.AQ.."aq.#2..BRb....3r..$C....S....%cs..&4DTt..........................................................!.1.A"Q2..aq.BR#............?........1..[!..v...M..q.7]..w............d.C!U.RE....A...\/D...T3$7l.r8w..Wky...bq$..Bc}.r8.J.......fX....N....u...........#..V.....,=.F..~.Yj...!..o..%C...A..}............t.&.\|..O....FE3.^......G,XRg.l0.`.........p.`............0.`...9`.4..8..,..s..'"q.R+...9...,t?+.\|.)...Q..+v.+....s.~z'..D7...PA......qS..U...2Ng...zKr..-.wzlR..[.....-..j.=.ZMirx_/!h..............."U..2l{..%Q.Xt+...........K.e&1['..YEm.$j...V...(..W.R.y..HW....p...n0lr.f..D.e..jC..'_Z...l....\|%.t........P.3....G.b.Uc..^...}.........<...^.z&G...e.&....Z.{#.)....g.1..p.........I.IV.....SR..O>jc..I..\|.jD..Os1<h.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ErrorPageTemplate[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2168
Entropy (8bit):	5.207912016937144
Encrypted:	false
SSDEEP:	24:5+j5xU5k5N0ndgvoyeP0yyiyQCDr3nowMVworDtX3orKxWxDnCMA0da+hieyuSQK:5Q5K5k5pvFehWrrarrZIrHd3FIQfOS6
MD5:	F4FE1CB77E758E1BA56B8A8EC20417C5
SHA1:	F4EDA06901EDB98633A686B11D02F4925F827BF0
SHA-256:	8D018639281B33DA8EB3CE0B21D11E1D414E59024C3689F92BE8904EB5779B5F
SHA-512:	62514AB345B6648C5442200A8E9530DFB88A0355E262069E0A694289C39A4A1C06C6143E5961074BFAC219949102A416C09733F24E8468984B96843DC222B436
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/ErrorPageTemplate.css
Preview:	.body..{...font-family: "Segoe UI", "verdana", "arial";...background-image: url(background_gradient.jpg);...background-repeat: repeat-x;...background-color: #E8EAEF;...margin-top: 20px;...margin-left: 20px;...color: #575757;..}....body.securityError..{...font-family: "Segoe UI", "verdana" , "Arial";...background-image: url(background_gradient_red.jpg);...background-repeat: repeat-x;...background-color: #E8EAEF;...margin-top: 20px;...margin-left: 20px;..}....body.tabInfo..{...background-image: none;...background-color: #F4F4F4;..}.. ..a..{...color: rgb(19,112,171);.font-size: 1em;...font-weight: normal;...text-decoration: none;...margin-left: 0px;...vertical-align: top;..}....a:link, a:visited..{...color: rgb(19,112,171);...text-decoration: none;...vertical-align: top;..}....a:hover..{...color: rgb(7,74,229);...text-decoration: underline;..}....p..{...font-size: 0.9em;..}.....h1 /* used for Title */..{...color: #4465A2;...font-size: 1.1em;...font-weight: normal;...vertical-align

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\aci[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	21480
Entropy (8bit):	5.373374304750339
Encrypted:	false
SSDEEP:	192:FwKqJ4kRnzHAEgPUkXQEuLBkvaN0AB0Ma1/ESYd/GVPHJ/XJK2Dt3bz8N2YuLb42:FwKqn/kXQNBXNjzS/1oN8LUFEUxWH
MD5:	4A269EB7EA32C04BF7B8EE73BF4669C8
SHA1:	1E23F4C33F19B5AD2AD981E974C6444BA448B0E8
SHA-256:	8EFDA3F0B5D984306920023FE9E82A919BFAC7109DB64ED89F752720408C888B
SHA-512:	B077E6AF94F5A0F344C21409DA719CD01923D767C9D932CDBC5187C0E809CF04CF54408EF5F7D6FA60AD65151A548406F67480C2AC23181540C032ECC379ECC5
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.acint.net/aci.js
Preview:	(function(s){s(window,"undefined"===typeof window._acic?{}:window._acic,"undefined"===typeof window._aci_action?null:window._aci_action,"undefined"===typeof window._aci_debug?!1:window._aci_debug)})(function(s,l,n,w){function u(a){this.debug=!!a;this.available=this.isAvailable()}function m(a){u.call(this,a)}function p(a){u.call(this,a)}function x(a){this.debug=!!a}function y(a,b,c,h){this.debug=!!h;this.consentBaseUrl=a;this.onSuccess=c;this.cookieName=b}function g(){if(!(this instanceof g))return new g;.this.version="0.3.0";this.urlHit="//www.acint.net/hit/";this.urlAct="//www.acint.net/act/";this.urlJump="//www.acint.net/jump/";this.urlPing="//www.acint.net/ping/";this.urlMatchCookie="//www.acint.net/mc/";this.urlRid="//dsp-rtb.sape.ru/getrid/";this.urlConsent="//www.acint.net/trimg/consent";this.cookieName="aid";this.cookieValueOptOut="opt-out";this.cookieFp="fid";this.cookieConsent="aci-consent";this.uidFp=this.uid="";this.presence={timeouts:[3E3,2E4],nofRequests:0};this.dspTrack={

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\advert[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
IE Cache URL:	https://mc.yandex.ru/metrika/advert.gif
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\arrow_sprite[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 8 x 21
Category:	downloaded
Size (bytes):	1139
Entropy (8bit):	6.769004551235237
Encrypted:	false
SSDEEP:	24:oal1hpunQWwjx82lY2T32HEVhVscolYGs+l6yJ3VhVsPZlhGswl/GY8GIKrQW:BitNn2VywQJ3yPHsL8JKH
MD5:	DADEA71A7C0EA87DD88946A83786B60B
SHA1:	F482DE5390741686C59D7AAE5B9F9112585A238C
SHA-256:	984138A298CB293673C6CFC80A715A05A25B55BB7B27F21CB2C5FCA66D6E2FDD
SHA-512:	AF829DC904E53BE039815E39A79AB0211115D1235205020C1317EB2CC23E912AB03FF57CEEC08454A54E8099EBEE42C5F7A89F4E236D7396012BC2D1F68AE321
Malicious:	false
Reputation:	low
IE Cache URL:	http://loginza.ru/img/widget/arrow_sprite.gif
Preview:	GIF89a...................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:F37E5F523E6E11E0A829E98C1863594A" xmpMM:DocumentID="xmp.did:F37E5F533E6E11E0A829E98C1863594A"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F37E5F503E6E11E0A829E98C1863594A" stRef:documentID="xmp.did:F37E5F513E6E11E0A829E98C1863594A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................................................................~}\|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJ

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\bullet[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 15 x 15, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	447
Entropy (8bit):	7.304718288205936
Encrypted:	false
SSDEEP:	12:6v/71Cyt/JNTWxGdr+kZDWO7+4dKIv0b1GKuxu+R:/yBJNTqsSk9BTwE05su+R
MD5:	26F971D87CA00E23BD2D064524AEF838
SHA1:	7440BEFF2F4F8FABC9315608A13BF26CABAD27D9
SHA-256:	1D8E5FD3C1FD384C0A7507E7283C7FE8F65015E521B84569132A7EABEDC9D41D
SHA-512:	C62EB51BE301BB96C80539D66A73CD17CA2021D5D816233853A37DB72E04050271E581CC99652F3D8469B390003CA6C62DAD2A9D57164C620B7777AE99AA1B15
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/bullet.png
Preview:	.PNG........IHDR...............ex....PLTE...(EkFRp&@e&@e)Af)AgANjBNjDNjDNj2Vv-Xz-Y{3XyC\}E_.2j.3l.8p.7q.;j.;l.Zj.\l.5o.7q.<..aw.<..dz.E...........1..@.7..~.....9..:.....A..B..E..9..:..a..c..b..g.#M.%O.#r.#s.%y.2..4..+..-..?..@..;..p..s...G..H..M.........z`....#tRNS................................../,....mIDATx^..C..`.......S....y'...05...\|..k.X......*`.F.K....JQ..u.<.}.. ..[U..m....'r%.......yn.`.7F..).5..b..rX.T.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\count[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 87a, 88 x 31
Category:	downloaded
Size (bytes):	411
Entropy (8bit):	7.29260618740569
Encrypted:	false
SSDEEP:	6:FLlBqLJQnprONb6HSWypB7p9A+iiRZVva0u1NSmiDuVF9NN5EJySW0QdKQje:ByBHb/Z830mhVFP/0Qg+e
MD5:	8084152C85F13BB6D14401EA2E61DFE7
SHA1:	D563A360F706C7F9A313E89BB305221022B0C816
SHA-256:	4A01AB3D7AC358E2F81EFDE5E4202E0E67FE60835D6DDA8363DED8042F2AE581
SHA-512:	7F8C08DE59B47AFECE4C0D8DDFD0B86AC46F8177B1A7C27659D3934456D77BC5B50917A977696EEE65136338777F683658AF1200ACFB6B9EB90EF6768419DCEB
Malicious:	false
Reputation:	low
IE Cache URL:	https://hit5.hotlog.ru/cgi-bin/hotlog/count?s=90390&im=134&hl_hitback=2
Preview:	GIF87aX.............................,....X..........0.Ig.8...`.)b........[......{..L.G..8..WR....q.J..C.-.L5...da...3.~v?.Lu[....`.....p..+U.vs..8..9~n..qg..V.nh.V.\|.......w)Oz........a...{A.t...F....j[..wy......ze-..+k.../....].'.l..\...x..P@6I...#.>e..4.........H......L.p@..l...8..C.I0:\.i..@...R.82.F..MFL...0..,.s.E.$m.....L.8k...&..ARl..(...B=z4%D...Z}..&U.BC..9.'H.[#~].R..p.V.K......;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\cron[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUfExltxlHh/:Wb/
MD5:	9BB191C6827273AA978CAB39A3587950
SHA1:	25D8043336EB799E52B1A0E15FF6B95E09C24E35
SHA-256:	24E480E4659FBAE818853A38F8A3036F529F539024DC3E772C0B594CE02EA9DB
SHA-512:	C3970B9A8DC9B424528274E8D22D21E9990CE956AEDE61CBA13DE8D7832A8C896EAF1032662A78E95980EA013090CD4406F32604DA3C6F557AA136842D04324D
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/cron.php?s=8848772e8198313ee133bfa7158b7b6c&rand=961090
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\exchange[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1736
Entropy (8bit):	7.263150685320448
Encrypted:	false
SSDEEP:	24:z1hpunQWwjx82lY2T32HEVEpaDyJ3VYxfeGekoBB+K+3D1/NRpbqpJkB1AL9KFPh:5itNn2VWJ35ZkUBfU1/NRxIA4JB7Nw/R
MD5:	51C3E805E44AA9A13C222124F8A31E2A
SHA1:	9B9FAB4DF48EE3CF3E0A0A7BEE57A04B352033E2
SHA-256:	6CF4C15BE91FACF4BDA848471972945C532B4615EB9084137E861030434915D0
SHA-512:	99786223950A41A43E3FDC6C02D8EF8FF0575838E0040CCA2ADFDB76B7EF6B964DC481C2A9F3479E619284158A9B364DD681882DB2C224BFB1982E12A752AFD7
Malicious:	false
Reputation:	low
IE Cache URL:	http://loginza.ru/img/exchange.png
Preview:	.PNG........IHDR.............;0......tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:21BB7368D0BD11DF97E3FA3A813481AC" xmpMM:DocumentID="xmp.did:21BB7369D0BD11DF97E3FA3A813481AC"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:21BB7366D0BD11DF97E3FA3A813481AC" stRef:documentID="xmp.did:21BB7367D0BD11DF97E3FA3A813481AC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>w.Z....>IDATx...O.Q..O.)-....P.(%.5.[..p......q............c.&.@.......G.&.1&.CH....E.v.s...e.N).'9.sf.~....{...8...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\f[1].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	135600
Entropy (8bit):	5.527017632498537
Encrypted:	false
SSDEEP:	3072:5SocAkHIGEQ9PfRUoKcXPao1i7lHjeidOR2:upo+KcCMi7lDeBR2
MD5:	F11AB50E1AF420422D0F58FE8927C5BB
SHA1:	51EFBA7203724E10706DB9ABBE231047EA68AD22
SHA-256:	2CAC942D84256A1BC827FA28206B176AC93670C60064984AA933C21208DFF57E
SHA-512:	41E5190EB3FD93ADE0E78ED2651149715FEFD7F11BABCB5CB43D1ABB39C08B177F8F9212613C656DD3E53DADB1C3305FB2A5893C661408833500E712FCB4BB3F
Malicious:	false
Reputation:	low
IE Cache URL:	http://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Preview:	(function(){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this),ea="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),q={},fa={};function t(a,b){var c=fa[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]} .function x(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in q?f=q:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&"es6"===c?f[d]:null;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\f[2].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	10000
Entropy (8bit):	6.016993548583475
Encrypted:	false
SSDEEP:	192:sVctj5oD6YhiZGsCFNJ7vAUVPAF+tl4FJy7qdiaX4P/NB+9wqqAdQxh8F2em1t:79I6YYCFzdVPh4+I4/T+qbVxwe
MD5:	1BE139EEE8B7447565FFDD9C10F1EBBB
SHA1:	4CCD18C160467EAA02414DEC68077FA3BFB66A38
SHA-256:	52977867864A36AE7FDD43ED8A110AB53CE84D64A9564EC2EF968DB67BC9EB6F
SHA-512:	4629C996F716BF545F7F53082077AFD5D2B423DA75F3D6B497BFCAC369BC118E3F7C59A13957DCA152E308F7A89F658267B50468E2266F23899817CA20710CD1
Malicious:	false
Reputation:	low
IE Cache URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20201203&st=env
Preview:	{"sodar_query_id":"E6v2X_eAEr3D7_UPvri1qAg","injector_basename":"sodar2","bg_hash_basename":"YaMN4Oy8AhH-iW3da0J-Nuczn6meMMc-yumwdmwIUIQ","bg_binary":"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

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\faq[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	344
Entropy (8bit):	5.334193910103623
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwol6hEr6VX16hu9nPijtnaozOUKR+kryCqtcXaoD:J0+ox0RJWWPUtnaR0W6ma+
MD5:	DFFCBBB3F65931D4AAC0E075052CD9B2
SHA1:	DD9DFC42ECEBD76C01A4B0CE230ECC7712DCABF3
SHA-256:	98A4B3A165AD3150A0093805884BC178893660DF92248778A8F1E37808582B05
SHA-512:	EA7DB411F1759D2C1AB13232DF080D6BC6793EEF8C92C6A88C9B5F00F2AC93E144D527D964FA1BF66BC16E770169275734E980EAC7FF28A316317E476F76E74A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>301 Moved Permanently</title>.</head><body>.<h1>Moved Permanently</h1>.<p>The document has moved <a href="http://ovd.ru/forum?s=8848772e8198313ee133bfa7158b7b6c">here</a>.</p>.<hr>.<address>Apache/2.4.41 (Ubuntu) PHP/4.4.9 Server at ovd.ru Port 80</address>.</body></html>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\garderobnye_uno[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 502 x 80
Category:	downloaded
Size (bytes):	44956
Entropy (8bit):	7.788655901934398
Encrypted:	false
SSDEEP:	768:LL7LOxVATvSliELMfFyIVuPpOV2FRVgts9qjxmBS//OpGgNW1tQHt7qB:DLJTLFfIIVATFst9De+DQNM
MD5:	404436DD3053985A2E9045D378FB94CF
SHA1:	D66A624D19FF877929765E728BBEE6C23D83BE04
SHA-256:	D639BB3D63FD187E2CB69A585C6FCC520ABD8A970C6709AD1DEC972616A9FCD8
SHA-512:	5F6527B7A8D2CB0F7FDE299324B9BA855FBA385FFEE994E13323C925352660FBF68BA33E78F1B641090780D784F0965C0DDC2DB7E54F6CA692B12DFA3AF918B2
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/images/banners/garderobnye_uno.gif
Preview:	GIF89a..P.................7(!(%&eH74#....vIo..L4H......G2)#..x.....wcTYC7G93........y...zvw.........hViiiVIE......JK.gSG...q.6J....bab...tWC....s.zx...............ujd....j.hZU.J.S;2.....%JIL...cKARQSoj.R7).Px......[Z[B@Dso1...80'.[Q.."98:.tg.{.MLQ...2+/.wuu/k202........Pf.RLRKA9A,.JDK....ye.........`-VyXT.2....?,$..........w{uip...{qk.z............EDH.......bcZPJ.Z.93:....,.7y.........337...gi.....=;?...[TR.t.^]_KCCYA-...kcbS.HUTWYeM;30+-dF[qGH..,b>-.".......D%=eef......jdj...&8.........]ab... ...;A@ZU[.mq.d....@.6wISb.T..........ID'51.'#.LRS<7.YQ4........M...u.eb[...\|]e....ckc:8/...L....kie]YS..............,03mmm...luc...YT!...TZ]KIBEJKJX4......gup.Y.0...f49:'5.......................y.......djm..`.....?2:2P.&.....CR"BIF !NYW..).}bW,@......!..NETSCAPE2.0.....!...,...,......P......,y0.....( h......H,@.b...J.#.b..-^........'%.y.....0..,.....i...&.O.>w..*T.....B.).N.&M....G...N..2.....@l...t...k.;...Q....q.jEZ.+V.F.^.J....}.W%...Q..J..N]W....F..T.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\gradient_tcat[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 100 x 100
Category:	downloaded
Size (bytes):	3728
Entropy (8bit):	7.799045020978431
Encrypted:	false
SSDEEP:	96:quBzEzxkH8CRPWNsLrz7l0/D6fJ2UYUn+:qXkH8aWNsLP7Om2UYR
MD5:	953E268B2370FE9D1E26B5F0150FA9BC
SHA1:	3FA3DF11741F7DAA456819CFC9D54DDEABECD9E4
SHA-256:	1322E161ABAE06807DA173925EDFCDA17F71EF6014B8009779E7EF1F99D7CAF6
SHA-512:	48BDB5A2750C9E8CCC3EFED3F4A6CA624C6F9EAD5918640DCE9D50E706F07CA6BD033045E2B66550A66FCCCA8813EE1F861E8AD8BED84109F3F4641E956C8C37
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/images/gradients/gradient_tcat.gif
Preview:	GIF89ad.d....Kl....`}.z..Rr.x..Yw.Wv.q..Wu.p..Ut.Oo.Lm.\z.......Mn.d..Ts.m..\|..Nn....}........b.....u..f.....a}.Lm.z..Mm.Rq.g..k..j..o..No.v..l..n..c..y..s..^{....Op.}..Ut.s..Ts....Xw.[y....]z.^\|.t..b~.\|........Qp.u..e..o..Yw.Zx.Nn.i..w.._\|._{.Pp.k..[x.Ll.Qq.~..Ss.n..]z....v.....h.....f..{..Oo.r..Pp.t..x..\z....h..i..r..i..[x.Qq....c~....No.Sr.j..d..Vt.~..w..i..Mm.Ss....z..\|..s..d..m..Pq....Zx.Qp....Zy.}..Po.h..g..v..h..Vt.m..l.....{........w..w..Uu.f..Km.Pq.`}.t..{.....~.....g..v..r..Sq._\|.l..[y.z..Mn.Xw.Ll....n..s..Zy.e..e..^{.Km.d..^\|.Vu.q..\|..j..]y.y..Op.j..p..x..p.....Pp.n..b..Po.Ln.Wv.u.._{.Uu.b~.k..~..Wu....a}.r..Sr.`~.e..c~.Tr.c..x..{..t..\y.Yv.Tr.m..f.....~..u..]y.g..q..k..o.....Rr.Vv.\y.Ln.Yv....}..l.....Vu.Kl.o..................................................!.......,....d.d........H......*\.aBJ!.Hl@.J.(.&B1..A..PBJ..R.S!;....J...+f4).UH..Uzl..../}N4....#sFX.aD.`M.:.Q.T......@..G.#..q..T.K.5..k......w..P.:..A..."lM..I....[hc.....wI.....-0H.yqb...?f\|......S....c.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\grey_dot[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUcl9ll7/lHh/:ajllf/
MD5:	EA69F64A6F2927719127229863283D29
SHA1:	FC56A1F69510115A78638148B15706C2C36B8CE0
SHA-256:	F907008C97CF3820A49035664DE1A7030840704AC5296BF52203BE113D317D33
SHA-512:	0D5727BBDC81A21C31E44C749EFC554E9BD728D6299660A88BA946EFA0C46D1BFB2BD30D71C7CB3FC86398F8F894DF879351C36C4AA2B33BB6AC680B51F46A74
Malicious:	false
Reputation:	low
IE Cache URL:	http://loginza.ru/img/widget/grey_dot.gif
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\http_404[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	6495
Entropy (8bit):	3.8998802417135856
Encrypted:	false
SSDEEP:	48:up4d0yV4VkBXvLutC5N9J/1a5TI7kZ3GUXn3GFa7K083GJehBu01kptk7KwyBwpM:uKp6yN9JaKktZX36a7x05hwW7RM
MD5:	F65C729DC2D457B7A1093813F1253192
SHA1:	5006C9B50108CF582BE308411B157574E5A893FC
SHA-256:	B82BFB6FA37FD5D56AC7C00536F150C0F244C81F1FC2D4FEFBBDC5E175C71B4F
SHA-512:	717AFF18F105F342103D36270D642CC17BD9921FF0DBC87E3E3C2D897F490F4ECFAB29CF998D6D99C4951C3EABB356FE759C3483A33704CE9FCC1F546EBCBBC7
Malicious:	false
Reputation:	low
Preview:	.<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">....<html dir="ltr">.... <head>.. <link rel="stylesheet" type="text/css" href="ErrorPageTemplate.css">.... <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.... <title>HTTP 404 Not Found</title>.... <script src="errorPageStrings.js" language="javascript" type="text/javascript">.. </script>.. <script src="httpErrorPagesScripts.js" language="javascript" type="text/javascript">.. </script>.. </head>.... <body onLoad="javascript:initHomepage(); expandCollapse('infoBlockID', true); initGoBack(); initMoreInfo('infoBlockID');">.... <table width="730" cellpadding="0" cellspacing="0" border="0">.... Error title -->.. <tr>.. <td id="infoIconAlign" width="60" align="left" valign="top" rowspan="2">.. <img src="info_48.png" id="infoIcon" alt="Info icon">..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\http_404[2] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	6495
Entropy (8bit):	3.8998802417135856
Encrypted:	false
SSDEEP:	48:up4d0yV4VkBXvLutC5N9J/1a5TI7kZ3GUXn3GFa7K083GJehBu01kptk7KwyBwpM:uKp6yN9JaKktZX36a7x05hwW7RM
MD5:	F65C729DC2D457B7A1093813F1253192
SHA1:	5006C9B50108CF582BE308411B157574E5A893FC
SHA-256:	B82BFB6FA37FD5D56AC7C00536F150C0F244C81F1FC2D4FEFBBDC5E175C71B4F
SHA-512:	717AFF18F105F342103D36270D642CC17BD9921FF0DBC87E3E3C2D897F490F4ECFAB29CF998D6D99C4951C3EABB356FE759C3483A33704CE9FCC1F546EBCBBC7
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/http_404.htm
Preview:	.<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">....<html dir="ltr">.... <head>.. <link rel="stylesheet" type="text/css" href="ErrorPageTemplate.css">.... <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.... <title>HTTP 404 Not Found</title>.... <script src="errorPageStrings.js" language="javascript" type="text/javascript">.. </script>.. <script src="httpErrorPagesScripts.js" language="javascript" type="text/javascript">.. </script>.. </head>.... <body onLoad="javascript:initHomepage(); expandCollapse('infoBlockID', true); initGoBack(); initMoreInfo('infoBlockID');">.... <table width="730" cellpadding="0" cellspacing="0" border="0">.... Error title -->.. <tr>.. <td id="infoIconAlign" width="60" align="left" valign="top" rowspan="2">.. <img src="info_48.png" id="infoIcon" alt="Info icon">..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\impression[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1017
Entropy (8bit):	5.362630744145567
Encrypted:	false
SSDEEP:	24:hYU+OTnPZvuOSlaki5iJBnCyRIW1QdCgsX3sA47cYAOs4T:LnPPSlK5uCzWqdCgy8AwpAO/T
MD5:	0D6D10959CD62A56B689E4E30ED06EFE
SHA1:	B93FB0E234817DC09E190ADF483E91B825844935
SHA-256:	7628F560251A979B9EB4254D904F3380136FAF41354B42DAC977E0053811DE7C
SHA-512:	8A87451F8D222B53F4FBC3C094A89DCFAE68645FA8AC625E964E72AA0CEF438D712A3352D776B0BF7FD1FDF2738CA61D6B293D9042DF435D6871C637D63AB670
Malicious:	false
Reputation:	low
IE Cache URL:	https://w.uptolike.com/widgets/v1/impression.html?110d1c9f2486cfe91a5e43ca6a2a8120
Preview:	<!DOCTYPE html>.<html>.<head lang="en">. <meta charset="UTF-8">. <title></title>.</head>.<body>..<script>(function(){var f=window.location.host,e={sendRequest:function(c,a){a=a\|\|{};var d=a.zeroPixelAddClass,b=document.createElement("img");b.src=c;b.style.display="block";b.style.position="absolute";b.style.top="0";b.style.left="-100px";b.style.width="1px";b.style.height="1px";b.style.border="none";d&&(b.className=d);document.body.appendChild(b)},sendImpression:function(c){var a="//"+f+c.path,d=!0;if(c.params){var a=a+"?",b;for(b in c.params)c.params.hasOwnProperty(b)&&(d\|\|(a+="\x26"),a+=b+"\x3d"+encodeURIComponent(c.params[b]),.d=!1)}e.sendRequest(a,c)}};(function(c,a){window.addEventListener?window.addEventListener(c,a):window.attachEvent("on"+c,a)})("message",function(c){try{var a=JSON.parse(c.data);a&&a.action&&"__utl_send_imp"===a.action&&e.sendImpression(a.settings)}catch(d){}});window.parent.postMessage(JSON.stringify({action:"__utl_imp_utils_initialized"}),"*")})();</script

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\info_48[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 47 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4113
Entropy (8bit):	7.9370830126943375
Encrypted:	false
SSDEEP:	96:WNTJL8szf79M8FUjE39KJoUUuJPnvmKacs6Uq7qDMj1XPL:WNrzFoQSJPnvzs6rL
MD5:	5565250FCC163AA3A79F0B746416CE69
SHA1:	B97CC66471FCDEE07D0EE36C7FB03F342C231F8F
SHA-256:	51129C6C98A82EA491F89857C31146ECEC14C4AF184517450A7A20C699C84859
SHA-512:	E60EA153B0FECE4D311769391D3B763B14B9A140105A36A13DAD23C2906735EAAB9092236DEB8C68EF078E8864D6E288BEF7EF1731C1E9F1AD9B0170B95AC134
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.../...0.......#.....IDATx^...pUU..{....KB........!....F......jp.Q.......Vg.F..m.Q....{...,m.@.56D...&$d!.<..}....s..K9.....{............[./<..T..I.I..JR)).9.k.N.%.E.W^}....Po..............X..;.=.P......./...+...9./..s.....9..\|........7v.`..V.....-^.$S[[[......K..z......3..3....5 ...0.."/n/.c...&.{.ht..?....A..I{.n.....\|....t......N}..%.v...:.E..i....`....a.k.mg.LX..fcFU.fO-..YEfd.}...~."......}l$....^.re..'^X..}.?.^U.G..... .30...X......f[.l0.P`..KC...[..[..6....~..i..Q.\|;x..T ..........s.5...n+.0..;...H#.2..#.M..m[^3x&E.Ya..\K..{[..M..g...yf0..~....M.]7..ZZZ:..a.O.G64]....9..l[..a....N,,.h......5...f.y...}...BX{.G^...?.c.......s^..P.(..G...t.0.:.X.DCs.....]vf...py).........x..>-..Be.a...G...Y!...z...g.{....d.s.o.....%.x......R.W.....Z.b,....!..6Ub....U.qY(/v..m.a...4.`Qr\.E.G..a)..t..e.j.W........C<.1.....c..l1w....]3%....tR;.,..3..-.NW.5...t..H..h..D..b......M....)B..2J...)..o..m..M.t....wn./....+Wv....xkg....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\kotkopi2g[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 468x60, frames 3
Category:	downloaded
Size (bytes):	14537
Entropy (8bit):	7.948988286186571
Encrypted:	false
SSDEEP:	384:v2PtubGIhIR3+oQo1fiohPIAibu1C3HzVNddU0XJO:vcMJoB1fZ0bw+jddU0XE
MD5:	7709B9C1227F1665D770C6D51528BFC5
SHA1:	A20CCBD200B3F12A5073644A896BF7914B1CCB25
SHA-256:	C39474AF888EBC93E9ED6361457EF6854941A206F380E55519C84B967795E835
SHA-512:	0DEF7D2C047D77DD02BE46A686C7F704D3554E3C044E0C65AC9518500ED9C1B56970D7B2EF94F72BA2E204E828FE68168867A9F865BD26449FB568E601076E55
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/images/banners/kotkopi2g.jpg
Preview:	......Exif..II*.................Ducky.......F.....-http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:D9A3B7C4D08F11E483D8F61311FA6BCA" xmpMM:InstanceID="xmp.iid:D9A3B7C3D08F11E483D8F61311FA6BCA" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.did:04801174072068118083F9CE21ACFA2B" stRef:documentID="xmp.did:04801174072068118083F9CE21ACFA2B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\loading[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 66 x 66
Category:	downloaded
Size (bytes):	6820
Entropy (8bit):	7.858566174938992
Encrypted:	false
SSDEEP:	96:BVNQhRh39eJGP4ZnqOydPefnAwNK8YtINkeExEDoqWlhzdYviVfnny5HiQMQXWLw:BVCNeJy4ZeBKwQGGDo5RYv+wHiQ/D3
MD5:	6411C68A83E709BCCCA982BB432A0BBA
SHA1:	71941C968402F7AED09EB4B543AC676C9F4FBE7C
SHA-256:	3A498E39C1AD88F0C38C5FD93F0DB22955A33C10D8DAD856BD6B96733AE49063
SHA-512:	414FF0D30B6DF23B37CD7B67C022739C41AB836DB34AC354DCB44526FA6BE15A4DE757E2E502CFBD03397CBBA4C3492CB65C474D8F7854155A44B009F6FE45E9
Malicious:	false
Reputation:	low
IE Cache URL:	http://loginza.ru/img/widget/loading.gif
Preview:	GIF89aB.B..........L..z......................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,....B.B......I..T....q..U.a.lK.'e....a.r,.+..0.X4.^ep.X..!Gw@...YfT1.xRNJ.........;...g.h%...]~[.5.LI.X.Ls{_}R...r...u...l_.^..Ld!;a\|]_k,qM.....mn8..i..-.....9...~..o..........i..)..^......)M...^..?.......x...m..i...p..-.......p%PX._...+.O].{...X.P......A0.......B9F@!.).N.\..K?.b6...$.89zlr ..8m..J.h..V..Y.cL.-....."M.&m..:U...S...7U.Q8b.~(..`...).+....."U.N'...N].q@R....kjk..go....q......1...>.uGu.\|..f!..x..X.R.I....p......ao...2...x..C._L.Pr.`./8..BfI..e...Y.5E^%....G.}...^8....}..........N.z..c....zi$..0.Y@..M...R.B..T....<...!.......,....B.B......I..T....!..qX.a.lK.fyV&..a.T..d0.....l.V.B.Ap@T..... \|QNJ...TJ..`......Y..%`....s.l.GI[..GpkV~z.e.t."......G./..,c.z5a.w.o8S...).A.!&h.Tdj..7...k.A....g.Bs..j&.a......#...............9..../...........\............u..}K8...x.... `@.....['.......e.q]...>...!].o..\d...C.8s....J..{JB@.. ..Tg.(F.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\loading_small[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	downloaded
Size (bytes):	3208
Entropy (8bit):	7.527439976535199
Encrypted:	false
SSDEEP:	48:3bWwXprWPLjhl4TRpiPvZmjkzpB0IdmXgl7gpx2DgG1LyZtngoA/3zlSMilKNhGa:3B5CPxl9hUQipx2k3ZtgoC3sMnNhOQ
MD5:	BA65498F817BE05BC3329A15D33DAF4D
SHA1:	9BA92A2B7547BB17B3B49EED9615A3BCA5CC0AEB
SHA-256:	1771F41A71FC2B6F3C3D5CAA793A6230CB0EC515C9E07ECF29CC8569BB087E28
SHA-512:	9C867358C680BEB76BB2CD5186476C4FA5EF3A3DB532D5F80EC57E8D63061A05FA9B81C7568FC8FE853697579F2F47CC8638E9F77F1C66E2BEA0C2E94CA0AEE8
Malicious:	false
Reputation:	low
IE Cache URL:	http://loginza.ru/img/widget/loading_small.gif
Preview:	GIF89a . ......................6..V..........................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,.... . ......Iia....bK.$.F...R.A.T.,..2S.05//.m.p!z...0...;$.0C....I!.HC(A@.o...!39T5.\.8)....`..d..wxG=Y..g...wHb..v.A=.0.V\.\.;........;...H.........0..t%.Hs..rY<H..........b..Z.b.OEg:...GY]..=.A.OQ.s....\b.h.9.=sg...c..e....*...f.7D..!.......,.... . ......IiY...YF5..F..R..Tb.G.J....L..d...&.Ymx...... \...@........ ....1..&R....H..4.1Q..\|V..%.z.v...#j0....l.Gg{0~..<.<..[.[.h.x..G...y.........[.0....G.....P.z...h...kz..i....y....h\|z.h.G..V.......\h..[........&.+..W.7.8...!..!.......,.... . ......I)1....1G5d].(..R..T2..jL.{..< .[.5.M....0..)... L...I...m..E..`....p..U....^f.%..^.......u.;..zz.}0.X....S0.ew.y.k<..%..O.......z..{....\|......%......F.i.1.0......Y.....8.x.....z..@....<...............8..Y<......8.\.P.$...!......!.......,.... . ......I.....g.EU... .R.a.TB.....p>'...e..$.."...\.#E1C.n.....~...J.,..,Aa.....Uw^4.I%P....u.Q.33.{0..i1T

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\match[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	86
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9psOjBMllRPQEsJ9pse:Gl3QEsJLsMal3QEsJLse
MD5:	BE36F8869549C7991811C657D7D3775F
SHA1:	8A0CDEAE965A2FA569B2E8677F21D5D71FBAF8BC
SHA-256:	555F405B368AAE998B4C727B5994E0BC9F1D73FCBDBA5DD108DF004A04649A39
SHA-512:	01EE71EE2213737732BF78590F01F56FC19C38D8A48274D11AC4716547A2E13AF32C03C1A37B6FC8961DEB7968814B3C71A926AE91E3688F0E78D59761B24F4D
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;GIF89a.............!.......,...........L..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\mc[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	3015
Entropy (8bit):	5.5517042752778725
Encrypted:	false
SSDEEP:	48:m1FuvNk3lro6hvOC4GQCE09N9/qDBl7qGCUZsauqzobv1tGtdG3vuQFGFIVWx:m1FQN8lro6hv9BQx09N9/qDBl/CUZsaj
MD5:	AFE68D73F6C10A78D0B5E5B506C95AAE
SHA1:	475273EF3E31DAD9E0BEFAA39D0E012774E6A64A
SHA-256:	5A60A189A4A940A4882FD6D4F6BA285DD5CF2F8713471AE8052094FECC349A29
SHA-512:	4DC6C39387864E74B1A40ABC2CF6F6FDD6D9751DD37E74D85B719CA4DABB50172E5FD2D852CFC2C0E7E2E442D1490F65F44CD7F7E19C98DA3EBC453FA24E2EC9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.acint.net/mc/?dp=10&tc=1
Preview:	<!DOCTYPE html>.<html>.<head lang="en">. <meta charset="UTF-8">. <meta name="ROBOTS" content="NOINDEX"/>. <meta name="ROBOTS" content="NOFOLLOW"/>. <meta name="ROBOTS" content="NOARCHIVE"/>. <meta name="ROBOTS" content="NOSNIPPET"/>. <meta name="ROBOTS" content="NOODP "/>.</head>.<body>.<img src="https://ads.betweendigital.com/match?bidder_id=73&external_user_id=0100007F09ABF65FFE0029A40224C90B">..<img src="https://ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D">..<img src="https://px.adhigh.net/p/cm/sape?u=0100007F09ABF65FFE0029A40224C90B">..<img src="https://ad.mail.ru/cm.gif?p=48&id=0100007F09ABF65FFE0029A40224C90B">..<img src="https://ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691">..<img src="https://sync.republer.com/match?dsp=sape">..<img src="https://dm.hybrid.ai/match?id=106&vid=0100007F09ABF65FFE0029A40224C90B">..<script>. var adcm_config = {. id: 1093,. platformId:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\mod_bottom[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 42
Category:	downloaded
Size (bytes):	162
Entropy (8bit):	4.489493848925522
Encrypted:	false
SSDEEP:	3:C/hYdDTWIwxi0R7eU7cfmDdnQGtbzl7/lkgMV4IpgLR16U19tn:OhYNTWIwxi0JHcfmBnQMlQV4CgLL6U1f
MD5:	321971D53740C5E7E12AF069A683B25D
SHA1:	967A0D04EE8CCFB889719F8A2BC545CDA2A66622
SHA-256:	2BAAC9F7673B883878DC36ADE085ED582745392498584B735509BFFFF46B27F1
SHA-512:	BD46B7AB79D7AFE71B938C735608CC1FEEEB1F517A2603676920964C801263CB7F324C3D27E9729A63C2888FDD0FEFDC6A3CFE8E68312E42D558B6E2F68CAF10
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/templates/biz_blue_ii/images/mod_bottom.gif
Preview:	GIF89a......................................................................................................!.......,.......... $N.0...,.2..%S..4..$IdD.GD..C.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\mod_lr[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 29
Category:	downloaded
Size (bytes):	155
Entropy (8bit):	5.850191824573253
Encrypted:	false
SSDEEP:	3:CI7/AcYFBbCWiNHkkM+TO1JE0sLY6nSzl7/lewHAcx54:llcSN0Hq0rKWlcwHAA54
MD5:	0AEF0B3678068C0FCF14ABFEA9FABBFC
SHA1:	B18878CD0DAA70D48320B9B4BF5CC69CE055D2A7
SHA-256:	9DEA9EE40EACF694ECB9F99EA65D78584734704972F2D6781CCAF0AAC2A8C636
SHA-512:	F7B12D0688282D64E0D567EE54B868B17C81B6493D97A0F26DB6A30B89644850673F8479EF5B8EFDCE5952E174D8DDFA58DA7DD4D2E0A077212A963CB9387730
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/templates/biz_blue_ii/images/mod_lr.gif
Preview:	GIF89a.......e..b}.d..g..f..]v.j..i..c..`{._y._x.h..a{.`z.f..k..l..]v.f..\w.l..c..j..a}.l..^w................!.......,...........`AI..(N.`.b..CL.s\.TEY...;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\osd[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	75435
Entropy (8bit):	5.46540319582362
Encrypted:	false
SSDEEP:	1536:KqKf5Kk9M+POJJUU0mgQk6hr+fhOj6+lyRVWAtXLig9s:P4jsiOO+lyR1Vs
MD5:	5AC37794FC439D9965B62B0955FAC384
SHA1:	B81D9BCF15C5CEEA9EF3E50E0B2A2ADB44608625
SHA-256:	7A2C24123BF9E2D278064A1C1596653F626B24DEEDA2C4422DE8882840F82E83
SHA-512:	A88BD264192E183C343DCC4276FE648E478035C70A20421AF2427F54E968FEFB176EB73B3D1E374B7A8BA62D8DD9A4E7B6E0F318FA395734D8F447E6F29C15EE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagservices.com/activeview/js/current/osd.js?cb=%2Fr20100101
Preview:	(function(window,document){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this);function ea(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}function fa(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:aa(a)}}function t(a){if(!(a i

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\p[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
IE Cache URL:	https://ic.tynt.com/b/p?id=bsa6p-zQar4yFiacwqm_6l&lm=0&ts=1610033540715&dn=TI&iso=0&t=%D0%9E%D0%B1%D1%83%D1%81%D1%82%D1%80%D0%BE%D0%B9%D1%81%D1%82%D0%B2%D0%BE%20%D0%92%D0%B0%D1%88%D0%B5%D0%B3%D0%BE%20%D0%94%D0%BE%D0%BC%D0%B0%20-%20%D0%A4%D0%BE%D1%80%D1%83%D0%BC
Preview:	GIF89a.............,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\p[2].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	2.961394241773874
Encrypted:	false
SSDEEP:	3:CUkrllHhqwdrllHh/:qJqyJ/
MD5:	BA2668662017C8A510A575D053DD49BC
SHA1:	EB56DAA3E950C7A185C50ED216A9091F941855C2
SHA-256:	975A0FC74B0A171FEB1765E1FD81CE7C7AD806FD09A9886FA61CF651A4FD1493
SHA-512:	A68FA98B9EA3DEA67F168D3C3A390F6ED55964736B5F4246B29CE5686B53E06CDDD7A4DCFE2189C59EC083E02BB56428FD752FBC9428915EEDA270AF30C71E25
Malicious:	false
Reputation:	low
IE Cache URL:	https://ic.tynt.com/b/p?id=bsa6p-zQar4yFiacwqm_6l&lm=0&ts=1610033602990&dn=TI&iso=0&t=%D0%9E%D0%B1%D1%83%D1%81%D1%82%D1%80%D0%BE%D0%B9%D1%81%D1%82%D0%B2%D0%BE%20%D0%92%D0%B0%D1%88%D0%B5%D0%B3%D0%BE%20%D0%94%D0%BE%D0%BC%D0%B0%20-%20%D0%A4%D0%BE%D1%80%D1%83%D0%BC
Preview:	GIF89a.............,...........D..;GIF89a.............,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\pixel[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHhqwdrllHh/:HJqyJ/
MD5:	A1CA693368CFE6AB208F1F1BB8C2EF58
SHA1:	31A655D748475A8A3E5246F591EA2A81F6BFA938
SHA-256:	89BC4F148F94BA4EDA1E4AAA2FD899D5495C9A297CF848CF7670F78A3251EBA7
SHA-512:	F12907B9BA0AA9B6EF125C6CEDB7E4137B300BA9FA1210F6E94CFFBBFDC7395F300CD36BC171FE8EF0D10AF27A65EF26EA0FE53A74F82D05604FC161F6E66145
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;GIF89a.............,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\register[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ISO-8859 text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	23233
Entropy (8bit):	5.658558320462716
Encrypted:	false
SSDEEP:	384:SfLC9LCjf3aXxuYU5CqDLxravQvwromFnWy/3Yh5JZtevug:SfLCcjf3aXx8MihaIotFj/YHVev/
MD5:	BBC04978757546276E2A036A0B3370AD
SHA1:	C95D59C3E12472E1B897EA65D95C905A7D4BAC52
SHA-256:	6AEE2D9701EF8F81A366FAF99AEBC5E0C31BB3EA2D0101E13EB3CE08166923EA
SHA-512:	D660D9B6DEC45B7B632FA2A5B9D8AD5E1F86817664C459E446E07051A1AF7D02D05B2543F9B3CE7308EFCF0FCBBE8C042C61F80DCFBC0E78962F5AD0583B1936
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="ru">..<head>..<meta name="robots" content="noindex,follow" />..<meta http-equiv="Content-Type" content="text/html; charset=windows-1251" />..<meta name="generator" content="vBulletin 3.7.0 Beta 4" />....<meta name="keywords" content=".............., ...... ......., ...... .........., ......., ........., ......, ..... ...., ....., ...., ......., ....., ....., ............, ......., ....., ...., ......., .........., ....." />..<meta name="description" content=".............. . ...... ......., ...... .......... . ....... .......... ......, ..... ...., ....., ...., ......., ....., ....., ............, ......., ....., ...., ......., ............. ....." />...... CSS Stylesheet -->..<style type="text/css" id="vbulletin_css">.. ../* vBulletin 3 CSS For Style 'Default Style' (styleid: 1) */..body..{...backgr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\register[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ISO-8859 text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	18877
Entropy (8bit):	5.744923757962451
Encrypted:	false
SSDEEP:	384:SNLC9LCjf3aXxuyU5CqDLxra9cCFwe/9nuy/3Yh5JZtevug:SNLCcjf3aXxyMiha5F/YHVev/
MD5:	9321022C0EEFA11972AE431DC3003E16
SHA1:	421F232D2C27CF154B059F22E37E3A4B33045EC4
SHA-256:	D3E8939CD5202DBA16A427CC1909FCFB287F92711E2B03C458E354A567F54C92
SHA-512:	9EA9BD27EE3F8CF4D922CC704649F8ACB39C23C78171864F299BAB629DDB790000E075A50D4ED5985EA15CEA6251981783DC6187251BBC09953E1538A5F8F8B6
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/register.php?s=8848772e8198313ee133bfa7158b7b6c
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="ru">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=windows-1251" />..<meta name="generator" content="vBulletin 3.7.0 Beta 4" />....<meta name="keywords" content=".............., ...... ......., ...... .........., ......., ........., ......, ..... ...., ....., ...., ......., ....., ....., ............, ......., ....., ...., ......., .........., ....." />..<meta name="description" content=".............. . ...... ......., ...... .......... . ....... .......... ......, ..... ...., ....., ...., ......., ....., ....., ............, ......., ....., ...., ......., ............. ....." />...... CSS Stylesheet -->..<style type="text/css" id="vbulletin_css">.. ../* vBulletin 3 CSS For Style 'Default Style' (styleid: 1) */..body..{...background: #E1E1E2;...color: #000000;...font: 10pt ver

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\sape[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	115
Entropy (8bit):	5.0817240723636905
Encrypted:	false
SSDEEP:	3:uNXADycSLUtACHXKAQMBYl7uDBAXKUUbQA+XqyL3:uFA2jLUtTrQ9lS1AaUx6yL
MD5:	4F6F4AF6F9B4A0D686FC3D542F48CE69
SHA1:	C905057F05620452735BA303F41FBD34BC86748E
SHA-256:	1D2C534BE159ED008025B22AA5B277FB653B6AA818D2409A5DD2E945DC54DF42
SHA-512:	B3DA59BAFD227FE33493761C2BFBC2A0715CD606F768C896ABB6EE91B3FFBD9C525AAB96FFACC80AFD1DF95283052DDF786BD5259F3D88892AD1D83955000364
Malicious:	false
Reputation:	low
Preview:	<a href="https://www.acint.net/match?dp=126&euid=49c2caac-6f8f-45ca-5efd-14e1bc299b4c">Moved Permanently</a>...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\search[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	9490
Entropy (8bit):	5.341096959483524
Encrypted:	false
SSDEEP:	192:HeB5sqotsl1fMarRW05DYrcvyaw9oaKsqPwt:vGpMevDvMNoI
MD5:	DFF050BECC542455D411BBF6E2A9DFDC
SHA1:	431AE37A8E59722F53239E7FCBFADE2D06EF379E
SHA-256:	E2F69E02D9E3C57B1C4D9F14535B9722B4557F0BA300296706CC89E8DA64D81A
SHA-512:	7F782144CFC893F4A2852669511123CBCAA54C90FC526C96DD12C55C4F48277FC90F2770594073B6F8E292282943071562ED2A858159975E632B941008FEEC8F
Malicious:	false
Reputation:	low
Preview:	<html>..<head>.. <base href="http://ovd.ru/" />. <meta http-equiv="content-type" content="text/html; charset=utf-8" />. <meta name="robots" content="index, follow" />. <meta name="keywords" content="" />. <meta name="description" content="" />. . <title>.....</title>. <link href="/templates/biz_blue_ii/favicon.ico" rel="shortcut icon" type="image/x-icon" />...<link rel="stylesheet" href="/templates/_system/css/general.css" type="text/css" />..<link rel="stylesheet" href="/templates/biz_blue_ii/css/template.css" type="text/css" />......</head>....<body id="body_bg.. <table width="100%" border="0" align="center" cellpadding="0" cellspacing="0">.. <tr>.. <td width="169" align="left" valign="middle">.......... .. .. ..... ....... .... </td>....<td> </td>.. <td width="100%" align="center" class="topnav" valign="bottom">....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\sozday_shkaf_kupe[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2012:05:22 14:26:22], progressive, precision 8, 502x102, frames 3
Category:	downloaded
Size (bytes):	36279
Entropy (8bit):	7.7176101270780775
Encrypted:	false
SSDEEP:	768:LztPnrBDNWItxpNhpcyja7qxdbBpC8r6q/rv+cS:PtPnqIDbvcyjDdX+
MD5:	56A6DB4F91688E74F4E5BA29CE9EC377
SHA1:	9566529AA0048FE3980A6E3DACF9D7D7C750B073
SHA-256:	E687459A7F3493A9F522BF52DC240149973D4C64E9DA689216CADD56B4F14976
SHA-512:	1CFF70C1143C4CA195CF181BBF672F976775ADCC8C955A6307256FA21C04223BC31FC2ACFBE63107B7B7EB0D4E715048CF1898AF35C9E1407B9814D96FD9DD6B
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/images/banners/sozday_shkaf_kupe.jpg
Preview:	......JFIF.....H.H.....\|Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS3 Windows.2012:05:22 14:26:22........................................f...........................................&.(.................................F.......H.......H..........JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................!...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..T.I%)$.IJI$.R.Y.Yh..J...F.7...YW.kZ..X..:.........E`.u.?W,.lnD..'~C.nU.......-...z..?..).N.....q.9.l.z......R\/T....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\template[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	13981
Entropy (8bit):	4.563476962493259
Encrypted:	false
SSDEEP:	192:596nkjEXB6IpqsM+oKkc+cOC4y2Toh+dhjouz1RgR5s5JbDqYe332pPM32pP5:YdZ2H4o/qE
MD5:	EFE05593C9B19462ECA50DDC03FC29FA
SHA1:	5BBEB4A0E617CCB1A9521B760A0C469D735AF179
SHA-256:	8E91158E76D1E0D5A92F71F7D606BA51887FF0E60582FF0146D5E8402FBDE51E
SHA-512:	57E65AAD2AEF08ECF24586AEEB5C0DE75EC77CA024615C7D0E5610744DD39A866ECDAE7A8C6721B507F45009701B1C81D42724D15210781FAA609A87A3EAFD3E
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/templates/biz_blue_ii/css/template.css
Preview:	/**..author - rgb(raduga) http://mambasana.ru..*/......body,html {.. padding : 0;.. margin : 0;.. margin-bottom : 10px;.. .... }..#body_bg{..background : url(../images/bg_top.gif) #ffffff repeat-x top left;..}.....main { .. text-align : left; .. width : 100%;.. margin : 0; .. padding : 0;..}.......mod {.. background : #FFFFFF;.. ..}....td, tr, p, div {.. font-family : Arial, Verdana, Tahoma, Helvetica, sans-serif;.. font-size : 12px;.. ..}..hr {.. color : #999999;.. height : 1px;.. width : 100%;..}....form {..margin : 0; ..padding : 0;..}.......leftrow {.. width : 169px;.. height : 100%;.. margin-right : 0;.. background : #fff;....}.....rightrow {.. height : 100%;.. width : 169px;.. margin-left : 0;.. background : #fff;.... }.....back_button {.. color :

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\yahoo-dom-event[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	30717
Entropy (8bit):	5.5995863953177585
Encrypted:	false
SSDEEP:	384:e9bsPL9/LK4HVUPztGdi9QHviRmAHVaY1Ge78fW79su/LRF+cyQ6KH4m6EuVXBWp:eqPL9/LTHVK9QHvUHVvGK37P/LRhLcrg
MD5:	12A8C6ADC3442063C03A1A6DC7C07924
SHA1:	5EA7DB8683A5FE5016A855F1666474C875C1311C
SHA-256:	0D6674FDD3F7CAD5EDFA35C5E24BCD8AD80DD2990378034EF327A0359794E9C3
SHA-512:	34B5552031E617965EB488EC072860273D3622F90BC29514C5F65C8DBC58AD090D2D3E2385C6D0954774A829C47E0A7F9ED3AED1530A63B87C470BE1F6B094FE
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/clientscript/yui/yahoo-dom-event/yahoo-dom-event.js?v=370b4
Preview:	/.Copyright (c) 2007, Yahoo! Inc. All rights reserved..Code licensed under the BSD License:.http://developer.yahoo.net/yui/license.txt.version: 2.4.1./.if(typeof YAHOO=="undefined"\|\|!YAHOO){var YAHOO={};}YAHOO.namespace=function(){var A=arguments,E=null,C,B,D;for(C=0;C<A.length;C=C+1){D=A[C].split(".");E=YAHOO;for(B=(D[0]=="YAHOO")?1:0;B<D.length;B=B+1){E[D[B]]=E[D[B]]\|\|{};E=E[D[B]];}}return E;};YAHOO.log=function(D,A,C){var B=YAHOO.widget.Logger;if(B&&B.log){return B.log(D,A,C);}else{return false;}};YAHOO.register=function(A,E,D){var I=YAHOO.env.modules;if(!I[A]){I[A]={versions:[],builds:[]};}var B=I[A],H=D.version,G=D.build,F=YAHOO.env.listeners;B.name=A;B.version=H;B.build=G;B.versions.push(H);B.builds.push(G);B.mainClass=E;for(var C=0;C<F.length;C=C+1){F[C](B);}if(E){E.VERSION=H;E.BUILD=G;}else{YAHOO.log("mainClass is undefined for module "+A,"warn");}};YAHOO.env=YAHOO.env\|\|{modules:[],listeners:[]};YAHOO.env.getVersion=function(A){return YAHOO.env.modules[A]\|\|null;};YAHOO.env.ua

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\1x1[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	807
Entropy (8bit):	0.2929836665455332
Encrypted:	false
SSDEEP:	3:CUI/lylAxBFzen:0he
MD5:	18B3E43ABAD26BDAC6F4CEA944777B62
SHA1:	5848CD0ACA8D9FC92D8449B13F829CC1F6CD310A
SHA-256:	3CA19E57C9A2465AE4DF271316BA4D29E7FF7F113A2A2C5297780C0B7A0AC09D
SHA-512:	1615D2831EE2B7A6FDA558521CC36AA0974262869F162635B6321644E23B278808B1760979CE30EC4B2BBC41AF487E1E434370B5905D7846E0904C4550D7B4BA
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/1x1.gif
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,................;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\_ASg0I7[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	357
Entropy (8bit):	5.201326341823939
Encrypted:	false
SSDEEP:	6:pn0+tW3tRk6QcjWR0NNEXW0YBwsl6kXiWHiHuzUWU6nzR/GeDbL4xynGu:J0+tgXk6QclfhVdHiH+fzRueDbL4xgGu
MD5:	C6EEE52EB2F0B8D48F818D75278C08E8
SHA1:	327594C571D185CF02284EA0B42046749BAE025A
SHA-256:	BD9D89044D0F5318F062174082B7265F685AD2EF4B0952A05B125CAF44D7696E
SHA-512:	E085018FCD7BAD778D0DEDF2022CE90F2065F643F93AF9A0599F1C600C201471398907176B5992A7D5841C747A1DBA67965F8086A6ED5816D7E16868CEBD7C70
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">..<html>..<head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" />..<title>301 Moved Permanently</title></head>..<body bgcolor="white">..<h1>301 Moved Permanently</h1>..<p>The requested resource has been assigned a new permanent URI.</p>..<hr/>Powered by Tengine/Aserver</body>..</html>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\advert[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\background_gradient[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x800, frames 3
Category:	dropped
Size (bytes):	453
Entropy (8bit):	5.019973044227213
Encrypted:	false
SSDEEP:	6:3llVuiPjlXJYhg5suRd8PImMo23C/kHrJ8yA/NIeYoWg78C/vTFvbKLAh3:V/XPYhiPRd8j7+9LoIrobtHTdbKi
MD5:	20F0110ED5E4E0D5384A496E4880139B
SHA1:	51F5FC61D8BF19100DF0F8AADAA57FCD9C086255
SHA-256:	1471693BE91E53C2640FE7BAEECBC624530B088444222D93F2815DFCE1865D5B
SHA-512:	5F52C117E346111D99D3B642926139178A80B9EC03147C00E27F07AAB47FE38E9319FE983444F3E0E36DEF1E86DD7C56C25E44B14EFDC3F13B45EDEDA064DB5A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......P......Adobe.d................................................................................................................................................. ...............W..............................................................Qa.................................?......%.....x......s...Z.......j.T.wz.6...X.@... V.3tM...P@.u.%...m..D.25...T...F.........p......A..........BP..qD.(.........ntH.@......h?..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\banner-88x31-rambler-gray2[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 88 x 31
Category:	downloaded
Size (bytes):	939
Entropy (8bit):	7.500467879461434
Encrypted:	false
SSDEEP:	24:ShXiG0BHxoRagozdLr3+c7k2joFBbWApv7UcbVI:SSpHxoRavrY2MnbWApv7FxI
MD5:	D6FA18366030D4590F797DBD3AC11F98
SHA1:	2337AF1FD3588B4D47FFDB1E43BF37CA97F20FAE
SHA-256:	34EB037ACA76EB2515A191C6A6543C65A9A37E30253D35D7122C8E48E9BEF880
SHA-512:	1FDE2487FC2FC0EF2A9CCA1E81FAC932A4DD393D48534E976D3209EF6532ABFDCAFF0DE9838B0D05535D87B9C9DE5F7128A610D2D100D9E7CF73030323AA62F7
Malicious:	false
Reputation:	low
IE Cache URL:	http://top100-images.rambler.ru/top100/banner-88x31-rambler-gray2.gif
Preview:	GIF89aX......................................................!.......,....X........I..8....`(.di.hZJ..p,.tm..!.S ...u(...r.l...........v..z......\+V.n.....U'..D".........{{Q.g...{}.........{qrs.j............\|........QF..................j...........d.....x....Y....>.....e."..... .......q.....Z.m.6u..-.7.......X..:<.~$x@............gj...V@.A...H..@&..s.R.'.Jo\|..` ...<8U..NB.+.H.."!..5..\[..k.._....3........TB....6.. +..O.b........6.s.k.y..j.@........X..`.2...#S+z.>.Z!$...S.^....Q#.,.#..$-\|d...o.eh;.'....,.)_N..s.j.K...A...L...H....$P..y..vk.p`.(...IH6....7MR......S1._........p...0t.q.......0.4...{.l.....C.7.L..9. .?...`..d.c..I....5p.\|...O.#&....``7...@3 T..9..C.!.3..gX....Y..l8...............WX..@..q.d,.t.A....dg<.......@....h..$i..\....5hi.X\...W.....0se...S.U...My....[.\E$..`....`.@..80.G.....UV....x.r....X.YD.j...Gu..xm.%Y1....g.r.I..kA..t...w...z'..@..\|..;/.W...<.b.[....o.5....+.....;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\cm[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
IE Cache URL:	https://ad.mail.ru/cm.gif?p=48&id=0100007F09ABF65FFE0029A40224C90B
Preview:	GIF89a.............!.......,...........L..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\coner_sprite[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 11 x 88, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1482
Entropy (8bit):	7.027387814796479
Encrypted:	false
SSDEEP:	24:Rk1hpunQWwjx82lY2T32HEV915VyJ3VM2QXhYGyznj1pjYb5581gapNT534vTK:YitNn2VLbkJ3R06/n/0bT0NFIvW
MD5:	A8B83B34ECCC4941CEC8DA7D5E6C9F1A
SHA1:	25EB85F99E8347B70691C5D693564FFAD7D4990B
SHA-256:	82105972F692C61D0369BC3B268CD5B246308B45EBC8EBC4DBD64CCD66CB6498
SHA-512:	04686A656FD5F0B0653CB7228CB979C90CA680490BD309B35E6FD01A3C362558D2099F5BD90303A3439A5CA6F5DEE798E653E2526B1FBBC79BF8F6ED3181124A
Malicious:	false
Reputation:	low
IE Cache URL:	http://loginza.ru/img/widget/coner_sprite.png
Preview:	.PNG........IHDR.......X.....#.......tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:55759FBE3E6911E09679FFDBC5EFD030" xmpMM:DocumentID="xmp.did:55759FBF3E6911E09679FFDBC5EFD030"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:55759FBC3E6911E09679FFDBC5EFD030" stRef:documentID="xmp.did:55759FBD3E6911E09679FFDBC5EFD030"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..8m...@IDATx..V;k.A..=.t.#Dra.UT.p.. P.2U..H.pePJ...@.cW"..i..T.A.A.@ .H..Ja... Hg=v...l..{........v.{3+.R.%.Z.'0.[..3

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\connection-min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	11826
Entropy (8bit):	5.384476978643696
Encrypted:	false
SSDEEP:	192:epIaoHX4bmPXYleylk258FwIGeTlsjZD5ABC9emXi/6VEyCU1:epIaoHX4bCylk258FwITlsjZu0emXs6l
MD5:	93740CE727236A3CDB713B1F984E8F75
SHA1:	51D14BA3366047A07BCE5E31DAC756EE6DC31B58
SHA-256:	9AF19F3983FD1C43D76F350F6072805C79023863977B9F1F752405BDA6872B83
SHA-512:	D9AC44CA265093F75C583FD0470335E407695198F8B42A76702D2EC682A2AE495DEC3A9758394BA95D80CBF6E5E938ECE9FD747E35A16DECA37A7D5F1EAB99E4
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/clientscript/yui/connection/connection-min.js?v=370b4
Preview:	/.Copyright (c) 2007, Yahoo! Inc. All rights reserved..Code licensed under the BSD License:.http://developer.yahoo.net/yui/license.txt.version: 2.4.1./.YAHOO.util.Connect={_msxml_progid:["Microsoft.XMLHTTP","MSXML2.XMLHTTP.3.0","MSXML2.XMLHTTP"],_http_headers:{},_has_http_headers:false,_use_default_post_header:true,_default_post_header:"application/x-www-form-urlencoded; charset=UTF-8",_default_form_header:"application/x-www-form-urlencoded",_use_default_xhr_header:true,_default_xhr_header:"XMLHttpRequest",_has_default_headers:true,_default_headers:{},_isFormSubmit:false,_isFileUpload:false,_formNode:null,_sFormData:null,_poll:{},_timeOut:{},_polling_interval:50,_transaction_id:0,_submitElementValue:null,_hasSubmitListener:(function(){if(YAHOO.util.Event){YAHOO.util.Event.addListener(document,"click",function(B){var A=YAHOO.util.Event.getTarget(B);if(A.type&&A.type.toLowerCase()=="submit"){YAHOO.util.Connect._submitElementValue=encodeURIComponent(A.name)+"="+encodeURIComponent(A.valu

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\footer_bg[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 55
Category:	downloaded
Size (bytes):	163
Entropy (8bit):	5.433898092562838
Encrypted:	false
SSDEEP:	3:CiIzFXwhSA8FCLEBBrpKMNfwzl7/lGjdQCR/MPQn:kzgCxN8lIjdXR/MI
MD5:	946A78252DB4FC673A9F110D323B752E
SHA1:	265F1C604E48B19AE016C9BA08491685DF067FFF
SHA-256:	198FBB961B5260A6D4AC46F6F57A8D72D24BF5E1D88828A9721BE2B3B7BC46FA
SHA-512:	785F47C19AE38F95FFDBB0D31B2F1C392182EA1F13CA5E15B71EF7EF329F526E9C784729C23A6F610D17DCE0A420322587FF1360BC508204968ECF3D2B6717B8
Malicious:	false
Reputation:	low
IE Cache URL:	http://loginza.ru/img/widget/footer_bg.gif
Preview:	GIF89a..7....................................................................................................!.......,......7... .=Uu Q....XV...p].#@..L..pH,..!.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\forum[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ISO-8859 text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	54335
Entropy (8bit):	5.696878880393277
Encrypted:	false
SSDEEP:	384:SRLC9LCjf3aXxu3U5CqDLxra49rwrU8zWVNT7mNxS+jMNNR3Nf9eNmUZpNuPcwKD:SRLCcjf3aXx3MihabS0oZqat/YHVeva
MD5:	D621E2B8CADDB67D88DC3C379C9DCAE6
SHA1:	93CBCE2A6C1E2368B1E8B88FC46A2E5A91CE361C
SHA-256:	AE3B87E2D6E1EE2F9298B36DBDA869C8AB039DE2BB3ACB464D089E8D7984ADB2
SHA-512:	6C87C42856F5F740DE18ED012DE436BF787B54973AA3447EEAC46BD6516B71743E5D2C7DC3DC6213365A6812558C312737857AA4570F91364139EB9902A2211E
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6c
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="ru">..<head>... no cache headers -->...<meta http-equiv="Pragma" content="no-cache" />...<meta http-equiv="Expires" content="-1" />...<meta http-equiv="Cache-Control" content="no-cache" />... end no cache headers -->...<meta http-equiv="Content-Type" content="text/html; charset=windows-1251" />..<meta name="generator" content="vBulletin 3.7.0 Beta 4" />....<meta name="keywords" content=".............., ...... ......., ...... .........., ......., ........., ......, ..... ...., ....., ...., ......., ....., ....., ............, ......., ....., ...., ......., .........., ....." />..<meta name="description" content=".............. . ...... ......., ...... .......... . ....... .......... ......, ..... ...., ....., ...., ......., ....., ....., ............, ......., ....., ...., ......., ............. ....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\frame[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	C source, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	20309
Entropy (8bit):	5.161757771022372
Encrypted:	false
SSDEEP:	384:VUCT1pEXh3s+1xXJmZgRjNALTFFLtmjL4NIuQnOevx+2nijakyOz7GcinU:eApahxrZhNCCuV2nijRqnU
MD5:	71F49D4F174F9FB95FC2E5E9B98187C0
SHA1:	BF99FA207DA290C90CBF2E0E23DAE12A14D7B583
SHA-256:	7DA79DDC34DB982DC6C731DB35A9093FBC8E9BCD5A4739A8E98C6E2959FF54E5
SHA-512:	47B702D03C91D4BF87B86747C845640E6EEA9B422DD0419619849CBC5BD8F27AEC815C454B0AA27785A38C09060A8CCD98A6A43BD4101B6884B84F5CC7CED218
Malicious:	false
Reputation:	low
IE Cache URL:	https://s3.advarkads.com/modules/match/frame.js
Preview:	var advark;!function(e){e.setImmediate\|\|(e.setImmediate=function(r){for(var n=[],e=1;e<arguments.length;e++)n[e-1]=arguments[e];0;function t(e,t){o\|\|i\|\|(o=!0,window.removeEventListener("message",u),window.clearTimeout(a),r.apply(void 0,n))}var o=!1,i=!0,a=window.setTimeout(function(){return t()},0),u=function(e){return t()};window.addEventListener("message",u),window.postMessage("setImmediate","*"),i=!1})}(advark=advark\|\|{}),function(){var e;Date.prototype.toISOString\|\|(e=function(e){e=String(e);return 1===e.length&&(e="0"+e),e},Date.prototype.toISOString=function(){return this.getUTCFullYear()+"-"+e(this.getUTCMonth()+1)+"-"+e(this.getUTCDate())+"T"+e(this.getUTCHours())+":"+e(this.getUTCMinutes())+":"+e(this.getUTCSeconds())+"."+String((this.getUTCMilliseconds()/1e3).toFixed(3)).slice(2,5)+"Z"})}(advark=advark\|\|{}),function(e){var t;e.devicePixelRatio=window.devicePixelRatio,void 0===e.devicePixelRatio&&(t=null===window\|\|void 0===window?void 0:window.screen,e.devicePixelRatio=(null==

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\general[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2777
Entropy (8bit):	5.0278378904131875
Encrypted:	false
SSDEEP:	48:5dhqVHp1KYS/AQa9dh25kGGrn/7qqJMQfCyJX:5d8EWRuIqyJX
MD5:	BB84A67DCE384C79AA7D2A12A596CC52
SHA1:	8B92F35C9ED358B2C7AD523CED987FF5C9D7BB69
SHA-256:	DDF43CA5F1DDD28645A5D21DCB48DA29AB5BEEF16B7BA84F882AA43BDF273F8D
SHA-512:	B02090753BB4B355909969C9CEBA0C47724FB5D528DBF64C81AF5F22850C13BBB40E927FB597FB1857447526CB2C9AA0D17A447E9DDC555E112FDFDDB412D76A
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/templates/_system/css/general.css
Preview:	/* Form validation /..invalid { border-color: #ff0000; }.label.invalid { color: #ff0000; }../ Buttons */.#editor-xtd-buttons {..padding: 5px;.}...button2-left,..button2-right,..button2-left div,..button2-right div {..float: left;.}...button2-left a,..button2-right a,..button2-left span,..button2-right span {..display: block;..height: 22px;..float: left;..line-height: 22px;..font-size: 11px;..color: #666;..cursor: pointer;.}...button2-left span,..button2-right span {..cursor: default;..color: #999;.}...button2-left .page a,..button2-right .page a,..button2-left .page span,..button2-right .page span {..padding: 0 6px;.}...page span {..color: #000;..font-weight: bold;.}...button2-left a:hover,..button2-right a:hover {..text-decoration: none;..color: #0B55C4;.}...button2-left a,..button2-left span {..padding: 0 24px 0 6px;.}...button2-right a,..button2-right span {..padding: 0 6px 0 24px;.}...button2-left {..background: url(../images/j_button2_left.png) no-repeat;..float: left;..margin-l

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\httpErrorPagesScripts[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	12105
Entropy (8bit):	5.451485481468043
Encrypted:	false
SSDEEP:	192:x20iniOciwd1BtvjrG8tAGGGVWnvyJVUrUiki3ayimi5ezLCvJG1gwm3z:xPini/i+1Btvjy815ZVUwiki3ayimi5f
MD5:	9234071287E637F85D721463C488704C
SHA1:	CCA09B1E0FBA38BA29D3972ED8DCECEFDEF8C152
SHA-256:	65CC039890C7CEB927CE40F6F199D74E49B8058C3F8A6E22E8F916AD90EA8649
SHA-512:	87D691987E7A2F69AD8605F35F94241AB7E68AD4F55AD384F1F0D40DC59FFD1432C758123661EE39443D624C881B01DCD228A67AFB8700FE5E66FC794A6C0384
Malicious:	false
Reputation:	low
Preview:	...function isExternalUrlSafeForNavigation(urlStr)..{..var regEx = new RegExp("^(http(s?)\|ftp\|file)://", "i");..return regEx.exec(urlStr);..}..function clickRefresh()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..window.location.replace(location.substring(poundIndex+1));..}..}..function navCancelInit()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..var bElement = document.createElement("A");..bElement.innerText = L_REFRESH_TEXT;..bElement.href = 'javascript:clickRefresh()';..navCancelContainer.appendChild(bElement);..}..else..{..var textNode = document.createTextNode(L_RELOAD_TEXT);..navCancelContainer.appendChild(textNode);..}..}..function getDisplayValue(elem

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\i[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.0021975300504877
Encrypted:	false
SSDEEP:	3:CUO/RD/wlHrfx/n:oD2/n
MD5:	ED280A0EA3CC38F3CBBC747ACFBEF47D
SHA1:	6BDCB32EE75E957A5085C010F4DFD0C716BFDADC
SHA-256:	8F69E10876805B747A3AD08A818D46AC7E731B1AF417EA6E259D9B6B7DEB65C5
SHA-512:	4248E293BB759C3AC0EA71F545E10E85D0C3C7F1237CE8B18C6A3FD00499A11BDC0252C938BE87359FA673C8E7A83C7CC6FC5D12718A68844C2615E5DCA3527B
Malicious:	false
Reputation:	low
IE Cache URL:	https://dmg.digitaltarget.ru/1/1093/i/i?i=415775590532713.671966832319291&a=77&e=0100007F09ABF65FFE0029A40224C90B&pref=http%3A%2F%2Fovd.ru%2Findex.php%3Fs%3D8848772e8198313ee133bfa7158b7b6c&c=ss:77.up:0100007F09ABF65FFE0029A40224C90B.sync:up.xdua:duj5a_4SPyBO2J9AFt6sza2e.xps:xpsSnhUZQBDGxGnXpNL5Tlu5C.dn:acint__net.adcm:hit.tg:adcmjs_noorient
Preview:	GIF89a...................!.......,...........T..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\index[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	29976
Entropy (8bit):	5.482990144270182
Encrypted:	false
SSDEEP:	384:E1eInb+YAKanigBXrQzD39rhKsKsohZGdavMNo0:knb+pKavBbMxrgsKsKUS0
MD5:	D7418579F062C94227539DCAF546B0B4
SHA1:	51808C476A6EA88D4B916270D81109E57B6A56A9
SHA-256:	8E4DF821AB3D483D6BB1F0BF273E45736AC847E1FB359076FF82E654330BF709
SHA-512:	841D6BBB0EC7BB33A6EA157EBDD24FD7E3964BD12BEDC797714379BAFCA8807EDB8723EB25C46E2E50F9AC391DE169C5A282AEFE1D2B8A1ED1D7DE8E13C4A103
Malicious:	false
Reputation:	low
Preview:	<html>..<head>.. <base href="http://ovd.ru/" />. <meta http-equiv="content-type" content="text/html; charset=utf-8" />. <meta name="robots" content="index, follow" />. <meta name="keywords" content="" />. <meta name="description" content="" />. . <title>.. .......</title>. <link href="/feed/rss.html" rel="alternate" type="application/rss+xml" title="RSS 2.0" />. <link href="/feed/atom.html" rel="alternate" type="application/atom+xml" title="Atom 1.0" />. <link href="/templates/biz_blue_ii/favicon.ico" rel="shortcut icon" type="image/x-icon" />. . ...<link rel="stylesheet" href="/templates/_system/css/general.css" type="text/css" />..<link rel="stylesheet" href="/templates/biz_blue_ii/css/template.css" type="text/css" />......<meta http-equiv="Content-Language" content="en" /></head>....<body id="body_bg.. <table width="100%" border="0" align="center" cellpadding="0" cellspacing="0">.. <tr>.. <td width="169" align="left" valign="middle

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\info_48[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 47 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4113
Entropy (8bit):	7.9370830126943375
Encrypted:	false
SSDEEP:	96:WNTJL8szf79M8FUjE39KJoUUuJPnvmKacs6Uq7qDMj1XPL:WNrzFoQSJPnvzs6rL
MD5:	5565250FCC163AA3A79F0B746416CE69
SHA1:	B97CC66471FCDEE07D0EE36C7FB03F342C231F8F
SHA-256:	51129C6C98A82EA491F89857C31146ECEC14C4AF184517450A7A20C699C84859
SHA-512:	E60EA153B0FECE4D311769391D3B763B14B9A140105A36A13DAD23C2906735EAAB9092236DEB8C68EF078E8864D6E288BEF7EF1731C1E9F1AD9B0170B95AC134
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/info_48.png
Preview:	.PNG........IHDR.../...0.......#.....IDATx^...pUU..{....KB........!....F......jp.Q.......Vg.F..m.Q....{...,m.@.56D...&$d!.<..}....s..K9.....{............[./<..T..I.I..JR)).9.k.N.%.E.W^}....Po..............X..;.=.P......./...+...9./..s.....9..\|........7v.`..V.....-^.$S[[[......K..z......3..3....5 ...0.."/n/.c...&.{.ht..?....A..I{.n.....\|....t......N}..%.v...:.E..i....`....a.k.mg.LX..fcFU.fO-..YEfd.}...~."......}l$....^.re..'^X..}.?.^U.G..... .30...X......f[.l0.P`..KC...[..[..6....~..i..Q.\|;x..T ..........s.5...n+.0..;...H#.2..#.M..m[^3x&E.Ya..\K..{[..M..g...yf0..~....M.]7..ZZZ:..a.O.G64]....9..l[..a....N,,.h......5...f.y...}...BX{.G^...?.c.......s^..P.(..G...t.0.:.X.DCs.....]vf...py).........x..>-..Be.a...G...Y!...z...g.{....d.s.o.....%.x......R.W.....Z.b,....!..6Ub....U.qY(/v..m.a...4.`Qr\.E.G..a)..t..e.j.W........C<.1.....c..l1w....]3%....tR;.,..3..-.NW.5...t..H..h..D..b......M....)B..2J...)..o..m..M.t....wn./....+Wv....xkg....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\match[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\memberlist[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ISO-8859 text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	25370
Entropy (8bit):	5.679650631227719
Encrypted:	false
SSDEEP:	384:SfLC9LCjf3aXxuYU5CqDLxravQkwrcl1QRNmFnWy/3Yh5JZtevug:SfLCcjf3aXx8MihaI5iJFj/YHVev/
MD5:	0C162DDF6575A45085FEED1C8C119A06
SHA1:	69CD8F8E8334DCC480D9312D85ED987F00A41002
SHA-256:	C2A1232C24EC8329CFBBAFB73AB340AF1F994914C797C13EF6CF63397ED6354F
SHA-512:	D5C669965E92EE82B97DDA75D98A95FEF925E7CC1C59568ECB83FFD5025D1833BD9E2FF713F84D8C00EB3023C6913C52CCD6EFFDFAF4F4CB57B5310D155F5878
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="ru">..<head>..<meta name="robots" content="noindex,follow" />..<meta http-equiv="Content-Type" content="text/html; charset=windows-1251" />..<meta name="generator" content="vBulletin 3.7.0 Beta 4" />....<meta name="keywords" content=".............., ...... ......., ...... .........., ......., ........., ......, ..... ...., ....., ...., ......., ....., ....., ............, ......., ....., ...., ......., .........., ....." />..<meta name="description" content=".............. . ...... ......., ...... .......... . ....... .......... ......, ..... ...., ....., ...., ......., ....., ....., ............, ......., ....., ...., ......., ............. ....." />...... CSS Stylesheet -->..<style type="text/css" id="vbulletin_css">.. ../* vBulletin 3 CSS For Style 'Default Style' (styleid: 1) */..body..{...backgr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\merge_gpsid[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
IE Cache URL:	https://adlmerge.com/merge_gpsid/?sid=50&id=0100007F09ABF65FFE0029A40224C90B
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\navbits_finallink_ltr[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 30 x 15
Category:	downloaded
Size (bytes):	1035
Entropy (8bit):	5.981578867205581
Encrypted:	false
SSDEEP:	12:TjrHYM66h3nz71OQh1CdXwz0MM5iJB8wHTHVgEA1kFwd+kdKFQzgy8I+8f:Tj8/edudXG0N28wzHaEfwvKFQky/tf
MD5:	279A7CCAE1D652E0EB03D9FB5B067B16
SHA1:	240112DEA747BAACF2C6A2BCF4CA3319CF8742EA
SHA-256:	05EC79F3C56BA03B593212E9A6A33BE314E2A1E563A3B227FDBFE6788B491FB7
SHA-512:	B90457F2E3A599C93F49BB77A1C1CD084DFD11E6B0AADADB3DD4B8EFA4E5FC645C0FA877A33A2D24A8258600E3778566EDAED4FFE49DAD1D21EC69C7CF60A15A
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/images/misc/navbits_finallink_ltr.gif
Preview:	GIF89a...................................................._e....[f..........x........KX....j}...............\|.......................{.....w..............###.............{..{..........pu.FS.......GT....................................T_.vl..................~..j{....r.......................7M....t..d\|.......gd..............................{..............p}.li......................................................................................................................................................................................................................................................................................................................................................................!.......,........@...1...`......,..S....Ty.b..>@"..q.......,.%..F..9....H...`I....(. ...0.KL{8.pd"..2V`.T(.E.'.PD... :.......,...`....~p]..'.Js.`..m....... ..4H......q&......&j.......-!....D..2...U........I...*+

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\navbits_start[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 15 x 15
Category:	downloaded
Size (bytes):	1004
Entropy (8bit):	5.847297210887941
Encrypted:	false
SSDEEP:	12:P0B3YOhOX9V4RY6UI1qvS+IwK4mO8FMRw5fSKl5H71SHDKEHPaBpe:ip43BO1qq+9n8FM+7AHDKeaBw
MD5:	2C4A0B946F87064D0BBE99153FFF6E81
SHA1:	A8E09AAD221E2357723C93A0A2D2B630FD7A4634
SHA-256:	64499991F6E26A62299F042EE56D3F783DE717F59CCC630319438C0F844C0BA1
SHA-512:	A3E6075694793A96DB9335278DA609CB79BF31542A665134081FE88F5B7695E128F05C482DE5C14969660E2DD039E62FB97D02DBB08F613091677D36409982A8
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/images/misc/navbits_start.gif
Preview:	GIF89a...............~.....}.........................k....k..bx................u...Xi.w..y......z..............r...........by...o...........x.......l....fx.`q.................z..v....~.......................{...........v..v.....l..............y.........v..........m.....}..q..t.....}.....g}.....~......Wh....@M.`q.............l.......fw...z..............t.....o..x........^s.....................bx..........Vc..................................................................................................................................................................................................................................................................................................................................!.......,........@...-..H... u....`...x8... .E...(....%<..9$...$j.,.....9R..)..Q..D.h..&..?.,....G #....... ....%...W].).....'..1....2.LB....Di*1..B..Z2..c.....^.....I..Ph....Y.lhScF..4..p......M.D...+7.Hp.H...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\openidlogin[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 644 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	29137
Entropy (8bit):	7.982093273132157
Encrypted:	false
SSDEEP:	768:Y3511xL93k1KuqHayd8HCFCKhxI8ge2i9gnmxZrfN3F2H6:i12qHayOHCz/gEgmxZrfN3T
MD5:	095590525FFA601224F26261196B629A
SHA1:	E6F38EDD653E67DD2E3153F62AEC1A8C0CCCBB55
SHA-256:	C33D27FE64446EBD15BC0EE80D368006EFD5DDB01EEF772B05DEF2B9F277DD01
SHA-512:	9625BD1D326802275F5E623292C951C26E5C50AB5985438B7449604BAF5A5C02D0A761B04B0A70C5C6C99000F51B95C58E07F82A859A81F6D76FBBA4E34C0B5E
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/openidlogin.png
Preview:	.PNG........IHDR.......@......Qf.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\p[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
IE Cache URL:	https://ic.tynt.com/b/p?id=bsa6p-zQar4yFiacwqm_6l&lm=0&ts=1610033593177&dn=TI&iso=0&t=%D0%9E%D0%B1%D1%83%D1%81%D1%82%D1%80%D0%BE%D0%B9%D1%81%D1%82%D0%B2%D0%BE%20%D0%92%D0%B0%D1%88%D0%B5%D0%B3%D0%BE%20%D0%94%D0%BE%D0%BC%D0%B0%20-%20%D0%A4%D0%BE%D1%80%D1%83%D0%BC
Preview:	GIF89a.............,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\p[2].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
IE Cache URL:	https://ic.tynt.com/b/p?id=bsa6p-zQar4yFiacwqm_6l&lm=0&ts=1610033594582&dn=TI&iso=0&t=%D0%9E%D0%B1%D1%83%D1%81%D1%82%D1%80%D0%BE%D0%B9%D1%81%D1%82%D0%B2%D0%BE%20%D0%92%D0%B0%D1%88%D0%B5%D0%B3%D0%BE%20%D0%94%D0%BE%D0%BC%D0%B0%20-%20%D0%A4%D0%BE%D1%80%D1%83%D0%BC
Preview:	GIF89a.............,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\p[3].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
IE Cache URL:	https://ic.tynt.com/b/p?id=bsa6p-zQar4yFiacwqm_6l&lm=0&ts=1610033598072&dn=TI&iso=0&t=%D0%9E%D0%B1%D1%83%D1%81%D1%82%D1%80%D0%BE%D0%B9%D1%81%D1%82%D0%B2%D0%BE%20%D0%92%D0%B0%D1%88%D0%B5%D0%B3%D0%BE%20%D0%94%D0%BE%D0%BC%D0%B0%20-%20%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20-%20%D0%9F%D1%80%D0%B0%D0%B2%D0%B8%D0%BB%D0%B0%20%D1%84%D0%BE%D1%80%D1%83%D0%BC%D0%B0
Preview:	GIF89a.............,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\p[4].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
IE Cache URL:	https://ic.tynt.com/b/p?id=bsa6p-zQar4yFiacwqm_6l&lm=0&ts=1610033604869&dn=TI&iso=0&t=%D0%9E%D0%B1%D1%83%D1%81%D1%82%D1%80%D0%BE%D0%B9%D1%81%D1%82%D0%B2%D0%BE%20%D0%92%D0%B0%D1%88%D0%B5%D0%B3%D0%BE%20%D0%94%D0%BE%D0%BC%D0%B0%20-%20%D0%A4%D0%BE%D1%80%D1%83%D0%BC
Preview:	GIF89a.............,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\provider_bg[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 102 x 37, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1340
Entropy (8bit):	6.85829118991746
Encrypted:	false
SSDEEP:	24:21hpunQWwjx82lY2T32HEVDhkmyJ3VD2kMaGjGn9ENet4AOOZ57d:8itNn2Vpu9J3prNT9yet4Arn
MD5:	BB8BED11D5A13DC92ACB55433AD0BF4E
SHA1:	2CDBC4B5551422392367A5D15FCC5BF212280B26
SHA-256:	C9AA1DCE0AE4B45AB43973BF9DAFA7A54C196458832B0F436F04F5F7B75D4207
SHA-512:	8D7B553319A6255315647F35CF4456D68C5825656F1881CB311BC8A8585F07421D1101E2DEC26511C63744E496341F1421AA49D6D61C8918BFDEB3C87E94DCC8
Malicious:	false
Reputation:	low
IE Cache URL:	http://loginza.ru/img/widget/provider_bg.png
Preview:	.PNG........IHDR...f...%.............tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:87ED25DCD0BA11DFA6F0ED497192AA06" xmpMM:DocumentID="xmp.did:87ED25DDD0BA11DFA6F0ED497192AA06"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:87ED25DAD0BA11DFA6F0ED497192AA06" stRef:documentID="xmp.did:87ED25DBD0BA11DFA6F0ED497192AA06"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>ZZ......IDATx..AK.A...u'Y.Et.B..E...%..&.....? .KPP.....#:v..$.mE\..Z.w.Sw.....=~.....#\|..,i`..!...x..d...f..\|..u..]

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\providers_ico_sprite[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 16 x 304, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9992
Entropy (8bit):	7.957906190780565
Encrypted:	false
SSDEEP:	192:8p7Lw0LS+XDp4ubU6ipRB/HmXs9q/qCtkSWiWeADIyY3wBx:w7rS1uYVHmCs3WFejFGx
MD5:	203C5C59B520B2DB25E4A1E417964A10
SHA1:	450D1D3AC3A4FD58939D6A3CEB0CEB10B4CBB542
SHA-256:	1EB4048B853921491DD12130845057845132AFA9BF625BD7528823689DD782ED
SHA-512:	18F853CC2457ACFEDE4263A47EBBDAE078F7A3724D38D904ABFD79F41F86C9CC714B725AF2613D4206A6B427B2ABBA2932414C720455136C101AD7E789D0226D
Malicious:	false
Reputation:	low
IE Cache URL:	http://loginza.ru/img/widget/providers_ico_sprite.png?linkedin
Preview:	.PNG........IHDR.......0......(......tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:9C6BD4DABF5211E0B913EE868FA1AC15" xmpMM:DocumentID="xmp.did:9C6BD4DBBF5211E0B913EE868FA1AC15"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9C6BD4D8BF5211E0B913EE868FA1AC15" stRef:documentID="xmp.did:9C6BD4D9BF5211E0B913EE868FA1AC15"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>;.d...#~IDATx..\|w\|UE....[....N....!t.....HW.l......\|.....}......Ai."5.....B.HH...2.3...4.......dr...3.<3O...P0..;......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\providers_sprite[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 90 x 500, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	52116
Entropy (8bit):	7.993732503148473
Encrypted:	true
SSDEEP:	1536:larwcbauUaJUivuYj/j2U+jcF8wMbvGIWMcaL:Erzu6yiG8fzFx8vGI7cq
MD5:	F3DD1AB7B69678BFD1708A5CECFFCE69
SHA1:	C54CBA5F143D4E41F886AAC480E2ADF02FD0400C
SHA-256:	2F1AE8CE3DF42BE1B8D22501DA5E0A49D794AC036A0C537B923B6919EF22F4CF
SHA-512:	5B4EC9D8E4485D1153C6004A33558740BD900AE7F10AC22F7E5DE3329A8E510ABA819513D1D3F289B1B4A87B1F5952452F0DB31DE458BF0EADA60B3212D22FF4
Malicious:	false
Reputation:	low
IE Cache URL:	http://loginza.ru/img/widget/providers_sprite.png?linkedin
Preview:	.PNG........IHDR...Z...........:(....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:A46D343BBF5211E08E8A88F0A7E338AC" xmpMM:DocumentID="xmp.did:A46D343CBF5211E08E8A88F0A7E338AC"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A46D3439BF5211E08E8A88F0A7E338AC" stRef:documentID="xmp.did:A46D343ABF5211E08E8A88F0A7E338AC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>YT.I....IDATx..]...U..N.:.;aY.Z..P,...:l=........T...A...Z.%.._.....y.;...!..OF.;..7/>.....N.e8R.-.............ys.dW.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\s[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 7 x 1
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	3.5276897253286004
Encrypted:	false
SSDEEP:	3:CCED/llvn:wLvn
MD5:	34CAD936FFDF23693865916EF77E449C
SHA1:	4524791DF383B3BBECF90ACE6C523290D567EC5F
SHA-256:	6AFE83AB399C195C209CB6339818936C078269BD4361ABE53B9AC1DDD4040F8C
SHA-512:	579605E6E7B58B1257D720957DA6E09078612C5544E68EE14DBC262EA8E8560E57941F876CF79A06B66578B651884C562266B3CFDFC5EF1031B4ACAAE9222299
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/templates/biz_blue_ii/images/s.gif
Preview:	GIF89a.............!.......,............aQ.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\search[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	9490
Entropy (8bit):	5.341096959483524
Encrypted:	false
SSDEEP:	192:HeB5sqotsl1fMarRW05DYrcvyaw9oaKsqPwt:vGpMevDvMNoI
MD5:	DFF050BECC542455D411BBF6E2A9DFDC
SHA1:	431AE37A8E59722F53239E7FCBFADE2D06EF379E
SHA-256:	E2F69E02D9E3C57B1C4D9F14535B9722B4557F0BA300296706CC89E8DA64D81A
SHA-512:	7F782144CFC893F4A2852669511123CBCAA54C90FC526C96DD12C55C4F48277FC90F2770594073B6F8E292282943071562ED2A858159975E632B941008FEEC8F
Malicious:	false
Reputation:	low
Preview:	<html>..<head>.. <base href="http://ovd.ru/" />. <meta http-equiv="content-type" content="text/html; charset=utf-8" />. <meta name="robots" content="index, follow" />. <meta name="keywords" content="" />. <meta name="description" content="" />. . <title>.....</title>. <link href="/templates/biz_blue_ii/favicon.ico" rel="shortcut icon" type="image/x-icon" />...<link rel="stylesheet" href="/templates/_system/css/general.css" type="text/css" />..<link rel="stylesheet" href="/templates/biz_blue_ii/css/template.css" type="text/css" />......</head>....<body id="body_bg.. <table width="100%" border="0" align="center" cellpadding="0" cellspacing="0">.. <tr>.. <td width="169" align="left" valign="middle">.......... .. .. ..... ....... .... </td>....<td> </td>.. <td width="100%" align="center" class="topnav" valign="bottom">....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\sodar2[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	16489
Entropy (8bit):	5.3278781656847745
Encrypted:	false
SSDEEP:	384:9b6PXmzlcwwR9JWy3dVy5SeTMEjijNazLciIEHSzv:CqlLG9JR3G5SV5ziIRv
MD5:	940F0371D0B05D33EECED0E78EC8A66B
SHA1:	41B2BD4450BE194C1C51AC0E78E73F9C308A935A
SHA-256:	BAF04FF369A96D4BB7228E99A65163DE20845BF23826295DD3471AFD3CEE9EE5
SHA-512:	668251F7E9B87152EC7C4D810AC94540306CDB413D1CC06CFD9C28BACE221D11ED66B48753A2A7ED7384ACF455FBA8164542AC7D0338A96777DFB6089F871845
Malicious:	false
Reputation:	low
IE Cache URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function ba(a){var b="undefined"!=typeof n.Symbol&&p(n.Symbol,"iterator")&&a[p(n.Symbol,"iterator")];return b?b.call(a):{next:aa(a)}}var ca="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},q="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var r=da(this),t="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),n={},v={};function p(a,b){var d=v[b];if(null==d)return a[b];d

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\ti[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	45693
Entropy (8bit):	5.502626604836076
Encrypted:	false
SSDEEP:	768:ZbAWSzqVblISLJEQej1Ywm9ovYHUqK3krfxyJK8Xi2c+Ycna30QK4dmAu:l1S+VbaSL8j1tm9ow0fkDxyM8KN3pK4y
MD5:	125B8348F4B222386FA86BF6100B63F3
SHA1:	B35BA6C5F431201F058E8472B8D96A8E4F97A82C
SHA-256:	97C9E4BB119BE4E6842E63D01AC05E1EE6564D3861C1567E10A986403CD682C0
SHA-512:	8FBE422C97BBD039B7BEF9AB8E7AA23EBEAF85F8355907708DAF8B26CCD9080250450496592CD3AC8EEEF6EE21A3A6ACAFAA0AD054AEBCCD34CA2DE4B7D3EC2D
Malicious:	false
Reputation:	low
IE Cache URL:	http://tcr.tynt.com/ti.js
Preview:	//v172 Copyright (c) 2008-2020 33Across Inc. All Rights Reserved..Tynt=window.Tynt\|\|[];."undefined"==typeof Tynt.TIL&&"undefined"==typeof Tynt.TCL&&"undefined"==typeof Tynt.TICFL&&function(){var g=window,f=document,n={distro:"TI",id:"TI-"+(new Date).getTime()};Tynt.TIL=function(){function G(a,b,c){e.on(a,b,c)}function C(){}function Wa(a,b,c,d){var k=function(a,b,c,d,k){a.size=b\|\|"";a.size?(b=b.split("x"),a.width=b[0],a.height=b[1]):(a.width="0",a.height="0");a.targetId=c\|\|"";a.product=d\|\|"inpage";k?a.distro=k:"inview"==a.product&&(a.distro="RCIV");a.iframeId=null;a.sicWindow=null};22==.a.length?(this.publisherId=a,this.options=c\|\|{},k(this,this.options.size\|\|"1x1",this.options.targetId\|\|"",b)):k(this,a,b,c,d)}function ua(a,b,c){this.type=a;this.fn=b;this.once=!!c}function S(a){var b=S.options;a=b.parser[b.strictMode?"strict":"loose"].exec(a);for(var c={},d=14;d--;)c[b.key[d]]=a[d]\|\|"";c[b.q.name]={};c[b.key[12]].replace(b.q.parser,function(a,d,g){d&&(c[b.q.name][d]=g)});return c}if(doc

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\widget[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	10838
Entropy (8bit):	5.474601538269939
Encrypted:	false
SSDEEP:	192:+CPAJ6zyECrEq130sDsEfKMw1nf/sEfSpsusEfKMw1nf/0fyQclQrrzsEfKMw1nK:u/Es4yKMi/mgyKMi/qr0yKMi/RZp3kz9
MD5:	8840FD00B02EF27F1CB7D81B7BBA1682
SHA1:	1B6BC616E2B720F0F78F8295A3D75319ACE26A16
SHA-256:	FB8CD8836E367DCA385230122CC5013E833E643991AAF53041CBEC1ACEE21DCF
SHA-512:	F7951B500B019A1973F9848CF7451540CA4A3469B017CB5174EF260C388880410C9F14AAD8E4C9EBC1B7EE7409CE00215F30B8C21384D35D1201189DC5A05731
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC '-//W3C//DTD XHTML 1.0 Transitional//EN' 'http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd'>..<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="ru" lang="ru">..<head>...<title>Login to ovd.ru / Loginza</title>...<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />........<link rel="stylesheet" type="text/css" href="//loginza.ru/css/widget_style.css?v1.0.9" />............ [if lt IE 8]>...<link rel="stylesheet" type="text/css" href="//loginza.ru/css/widget_style_ie6.css?v1.0.35" />...<script src="//loginza.ru/js/IE8.js" type="text/javascript"></script>...<![endif]-->..</head>..<body class="overlay">....<center style="padding:125px 0px;"> ........ .... -->..<table width="359" height="230">..<tr class="roundBlock headBlock">...<td class="coner_sprite lt_coner"> </td>...<td class="hborder" align="right"><a href="http://ovd.ru/forum/vb_loginza.php" class="out"><span class="arrow_sprite close"></span></a></td>...<td clas

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\widget_api.pack[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	8663
Entropy (8bit):	5.8558140733202
Encrypted:	false
SSDEEP:	192:IlxAz/Cr4xpbyDd4vSp3OJyrzaIPEQ2B99PxwnJpbLcEZll/HK:Oyqr4Dk5p3O0rzWQJ1gslq
MD5:	3ED527843E8FAC8CB32766CE794BD7D4
SHA1:	7DF8D69B0626CD993AAD5049F43B080BC70EC945
SHA-256:	1D8E9AD1DF567346CFE27FA355A74A5ACDF03D077E06CADA45033F228996AF84
SHA-512:	BD13D699F070D01909559F410AA8757BF583D42C9FCFD1F95DD71AA7F7D2DF0B378BE72BCC4E63EF8D7B73053B1D0C5C29CCBBFE345737AE42CEF21BF2170E2B
Malicious:	false
Reputation:	low
IE Cache URL:	http://loginza.ru/js/widget_api.pack.js?rev=20110902vk
Preview:	eval(function(p,a,c,k,e,d){e=function(c){return(c<a?"":e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)d[e(c)]=k[c]\|\|e(c);k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1;};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p;}('k 3={w:{2U:{7:d,f:z,g:\'3d\',5:\'m://2U.K\'},2F:{7:d,f:d,g:\'3f\',5:\'m://2F.G\'},3h:{7:d,J:\'2a\',g:\'1I.G\',5:\'m://3l.1I.G\'},2A:{7:d,J:\'1C\',g:\'3e\',5:\'m://2A.G\'},2O:{7:d,J:\'2k\',g:\'3j\',5:\'m://1q.2O.G\'},2N:{7:d,J:\'2t\',g:\'3n\',5:\'m://1q.2N.K\'},1T:{7:d,f:d,g:\'3F\',5:\'m://1T.G\'},2P:{7:d,J:\'1C\',g:\'3H\',5:\'m://2P.K\'},2z:{7:d,J:\'1C\',g:\'3D\',5:\'m://1q.2z.K\'},39:{7:z,f:d,g:\'3L 3p\',5:\'m://39.G\'},2Z:{7:d,f:d,g:\'3q\',5:\'m://2Z.K\'},2V:{7:z,f:d,g:\'3u\',5:\'m://2V.G\'},34:{7:z,f:d,g:\'3A\',5:\'m://34.G\'},32:{7:d,f:z,g:\'3x\',5:\'m://32.K\'},2e:{7:d,f:d,g:\'2c.2d\',5:\'m://1q.2c.2d\'},2q:{7:z,f:d,g:\'3w\',5:q},3v:{7:z,f:d,g:\'3z.3y\',5:\'m

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\zp[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	45008
Entropy (8bit):	4.632643196806563
Encrypted:	false
SSDEEP:	768:zjd2UOIC4PGwHMZG4dVF5GHgSP9OyKGOYbmW2Leh0db:/d1dPsXVF5Gn9Oy5OYf2Li0db
MD5:	9F99BB45FD131E48DD07E11C0A03B698
SHA1:	5B4FBB62E3C988DD7FC28E5A1453F2FB93F3D849
SHA-256:	F5B7BA30645D45981D8B8E3A1BFD41AAAF0D8DDE5B013EEC239FD2265E42062B
SHA-512:	D79DF311654996465F00B09AE83332F072114CDEEAE3F24234820377A0BA2B7CB65A1616B212D7E8FDFE3016AC9453104BC4B166066F2109FDB9D5ACABBD72EC
Malicious:	false
Reputation:	low
IE Cache URL:	https://w.uptolike.com/widgets/v1/zp.js?pid=lf1db54ae24b663ed8c33e3838260a7ac9ea99656b
Preview:	(function(win, options) {.. var utlViewIDKey = "__utl_vp_id";.(function(p) {. function uuid() {. return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, function(c) {. var r = Math.random()16\|0, v = c == 'x' ? r : (r&0x3\|0x8);. return v.toString(16);. });. }. if (!window[p]) {. window[p] = uuid();. }.})(utlViewIDKey);.var utils = {.. proxy : function (context, args, functionName) {. if (typeof args === 'function') {. return function() {. args.apply(context, arguments);. }. }. else {. return function() {. var mergedArgs=args.concat(arguments);. functionName.apply(context, mergedArgs);. }. }.. },.. /. utils.wrap(window, 'onfocus', function() { ... } ). */. wrap : function(context, previous, wrapper) {. var old = context[previous];. if (old) {. context[previous

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\zp[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	44973
Entropy (8bit):	4.629522302544248
Encrypted:	false
SSDEEP:	768:zjd2UOIC4PGwHMZG4dVF5GHgSP9OyKGOYbmW2Leh0df:/d1dPsXVF5Gn9Oy5OYf2Li0df
MD5:	C387F8439CD30A49FC870F6329EE2B21
SHA1:	9917900D0104D4015DDDCEC4B98E87B56DCCC4A2
SHA-256:	98C9A77FEC5430A4F3DEFCDBB4023B1CF35C6ED7F5670699C2AC7C9B3F79E07C
SHA-512:	92CB32C69D083177D6F8B118166394397087F8CBA0CD9E66B2A8C27F08ADF6222190648723073245E563FD50F86CD0325AF71384F87915478B94E942B9EEBF40
Malicious:	false
Reputation:	low
IE Cache URL:	https://w.uptolike.com/widgets/v1/zp.js?pid=1274718
Preview:	(function(win, options) {.. var utlViewIDKey = "__utl_vp_id";.(function(p) {. function uuid() {. return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, function(c) {. var r = Math.random()16\|0, v = c == 'x' ? r : (r&0x3\|0x8);. return v.toString(16);. });. }. if (!window[p]) {. window[p] = uuid();. }.})(utlViewIDKey);.var utils = {.. proxy : function (context, args, functionName) {. if (typeof args === 'function') {. return function() {. args.apply(context, arguments);. }. }. else {. return function() {. var mergedArgs=args.concat(arguments);. functionName.apply(context, mergedArgs);. }. }.. },.. /. utils.wrap(window, 'onfocus', function() { ... } ). */. wrap : function(context, previous, wrapper) {. var old = context[previous];. if (old) {. context[previous

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\ErrorPageTemplate[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	2168
Entropy (8bit):	5.207912016937144
Encrypted:	false
SSDEEP:	24:5+j5xU5k5N0ndgvoyeP0yyiyQCDr3nowMVworDtX3orKxWxDnCMA0da+hieyuSQK:5Q5K5k5pvFehWrrarrZIrHd3FIQfOS6
MD5:	F4FE1CB77E758E1BA56B8A8EC20417C5
SHA1:	F4EDA06901EDB98633A686B11D02F4925F827BF0
SHA-256:	8D018639281B33DA8EB3CE0B21D11E1D414E59024C3689F92BE8904EB5779B5F
SHA-512:	62514AB345B6648C5442200A8E9530DFB88A0355E262069E0A694289C39A4A1C06C6143E5961074BFAC219949102A416C09733F24E8468984B96843DC222B436
Malicious:	false
Reputation:	low
Preview:	.body..{...font-family: "Segoe UI", "verdana", "arial";...background-image: url(background_gradient.jpg);...background-repeat: repeat-x;...background-color: #E8EAEF;...margin-top: 20px;...margin-left: 20px;...color: #575757;..}....body.securityError..{...font-family: "Segoe UI", "verdana" , "Arial";...background-image: url(background_gradient_red.jpg);...background-repeat: repeat-x;...background-color: #E8EAEF;...margin-top: 20px;...margin-left: 20px;..}....body.tabInfo..{...background-image: none;...background-color: #F4F4F4;..}.. ..a..{...color: rgb(19,112,171);.font-size: 1em;...font-weight: normal;...text-decoration: none;...margin-left: 0px;...vertical-align: top;..}....a:link, a:visited..{...color: rgb(19,112,171);...text-decoration: none;...vertical-align: top;..}....a:hover..{...color: rgb(7,74,229);...text-decoration: underline;..}....p..{...font-size: 0.9em;..}.....h1 /* used for Title */..{...color: #4465A2;...font-size: 1.1em;...font-weight: normal;...vertical-align

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\adcm[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3089
Entropy (8bit):	5.172475972560694
Encrypted:	false
SSDEEP:	96:yzanXZHmS0lPppQd2MFmK3aqmq4eNvqcTAFUK6Hq:JhatLeNvT/K6K
MD5:	B8EF0B7C59273121DA0CDDA7EBB7070A
SHA1:	8E9972ECA4949CC1C489E304CDD7633F19E974FA
SHA-256:	7C078E5032BA5DA0FDF4E333AC30AD283AAA9DE5D935E716C6FD7E1B5D4E9D2E
SHA-512:	13D87C1D1F03F70B1C45773EA5563632A8D666AE76E9BF590EF618003F4F09C2464876729ACB868C4C78328C2DD23BE1E107B14DAFB517524F6696AF1887C66F
Malicious:	false
Reputation:	low
IE Cache URL:	https://tag.digitaltarget.ru/adcm.js
Preview:	try{window.adcm={session:Math.round(1e15Math.random()),config:{script:"https://tag.digitaltarget.ru/processor.js?i="+Math.round(1e15Math.random()),profileData:"",id:null,tags:[],extdataid:!1,idSessionDomain:!1,idSessionPage:!1,ids:{ga:"",gid:""},tagsRaw:[],triggers:{noBounce:{enable:!1,timeout:15,param_call:{},callback:function(){}},catchRef:{enable:!1,referrer:""},trackMouse:{enable:!1,param_call:{},interval:3e3,stopRetryCount:100},init_call:{enable:!0,param_call:{},callback:function(){}},elapsed_seconds:{enable:!1,timeouts:[5,10,30,60,120,300],param_call:{},callback:function(){}},page_down_scroll:{enable:!1,margin_bottom:100,param_call:{},callback:function(){}},scroll_to:{enable:!1,param_call:{},markers:[],window_checkpoint_percent:50,callback:function(){}},scroll_percents:{enable:!1,percents:[25,50,60,70,90],param_call:{},callback:function(a){}},config:{enable:!1,el_id:"",el_class_name:"",callback:function(){}},gaid:{enable:!0,loaded:!1,callback:function(){}},push_to_server:{succe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\bsa6p-zQar4yFiacwqm_6l[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with no line terminators
Category:	downloaded
Size (bytes):	113
Entropy (8bit):	5.0068173215250615
Encrypted:	false
SSDEEP:	3:UNLMWrVrZu0Q0LHJdJemkHACPKEb/U7jShn:UFVrZ7Q4zemzCy0/UvShn
MD5:	DCBF358DC2C0EB23727479310DC5F2CA
SHA1:	04F56685D324DECBEE1D29FE177CDC162B2131E3
SHA-256:	6243A9340D40DDE91ABBB7F0803D69FF9C751A2E0267A99E2D86AEE08A2CAC9E
SHA-512:	B552314335D9154E3CEA33BECFB429C419F44BD5BC527CC26956A90C3855D58515F2C1CC09E449E430072383AE791414B6A010843171905026ECA3DB98DB9035
Malicious:	false
Reputation:	low
IE Cache URL:	https://sc.tynt.com/script/sc/bsa6p-zQar4yFiacwqm_6l.js
Preview:	/**/Tynt.sc({"ap":"...... .........:","d":true,"b":true,"ba":["/#"],"domain":"_deleted_0_ovd.ru"})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\bullet[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 15 x 15, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	447
Entropy (8bit):	7.304718288205936
Encrypted:	false
SSDEEP:	12:6v/71Cyt/JNTWxGdr+kZDWO7+4dKIv0b1GKuxu+R:/yBJNTqsSk9BTwE05su+R
MD5:	26F971D87CA00E23BD2D064524AEF838
SHA1:	7440BEFF2F4F8FABC9315608A13BF26CABAD27D9
SHA-256:	1D8E5FD3C1FD384C0A7507E7283C7FE8F65015E521B84569132A7EABEDC9D41D
SHA-512:	C62EB51BE301BB96C80539D66A73CD17CA2021D5D816233853A37DB72E04050271E581CC99652F3D8469B390003CA6C62DAD2A9D57164C620B7777AE99AA1B15
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............ex....PLTE...(EkFRp&@e&@e)Af)AgANjBNjDNjDNj2Vv-Xz-Y{3XyC\}E_.2j.3l.8p.7q.;j.;l.Zj.\l.5o.7q.<..aw.<..dz.E...........1..@.7..~.....9..:.....A..B..E..9..:..a..c..b..g.#M.%O.#r.#s.%y.2..4..+..-..?..@..;..p..s...G..H..M.........z`....#tRNS................................../,....mIDATx^..C..`.......S....y'...05...\|..k.X......*`.F.K....JQ..u.<.}.. ..[U..m....'r%.......yn.`.7F..).5..b..rX.T.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\button_bg[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 55
Category:	downloaded
Size (bytes):	160
Entropy (8bit):	4.406406321284624
Encrypted:	false
SSDEEP:	3:CigqkxneT+Tq3yNZl/ljzl7/l/FGTiZl6Kle:Ge/SltnlSo6f
MD5:	83B5F575E3A6DE006AC568A84EF24F08
SHA1:	F93CF52E24929B1D7DEC8C5F8AA4AC4523D8172A
SHA-256:	72984D9C2BB73FA38468409247D214951969579A34BB2EE6696A0644D240E0E6
SHA-512:	0970DD6FCAB2C2B2BAE8379C2CEEC3BECC070233590FCB994913888EB9849BAF4DEA35995E2650F27AC80BD14EF9D34590B8070F002005922E81A3B59BEF85D2
Malicious:	false
Reputation:	low
IE Cache URL:	http://loginza.ru/img/widget/button_bg.gif
Preview:	GIF89a..7....................................................................................................!.......,......7.....#.M.(DQ..b.@..."...;<....P...;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\collapse_thead[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 13 x 13
Category:	downloaded
Size (bytes):	580
Entropy (8bit):	6.737865177956309
Encrypted:	false
SSDEEP:	12:0yjkO+Ep4y/wK/2PypmPP/ryN03r3ZmgIR3RycO:PjEEpq59/cSrJYPycO
MD5:	8FE7488841756EF76A37E0C1F584996C
SHA1:	684BACFAD35187F98775F708F0DB186AC35818CE
SHA-256:	B73225E8C73C949E1EBC99577B46FD572F0816E5DB7541F5FD3131C01841E3DD
SHA-512:	EB49EC1AC2BF191BB5A91B7F83A2429FAD4C9E0ACF69C98F4EBFE1DC9991A44DFABEB0C0EF721C554579878FD18A8BD7656B76E60588C433315847DC879945CB
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/images/buttons/collapse_thead.gif
Preview:	GIF89a.......J`....\p.Fe.7P.;T.?[.Ii.Qf.9R.9R.Yn....Zo.[o.Vk.m..6NwXm..........7P.8Q\|...Zx.H_.Ym......._{....hz.............:R.Ti....u..Sh.B^.Rh.Xl.]q....e\|.............bu.Ka.~..G].>V.[o.......C[.H`.f.....^r.Sh.Ti....m...........Db.>V.J`.CZ....8Q.7Q.I`.z..Jh....dw.s..G^.Pe......I`.Oe.Th....3JrJa.Md.Kl..............................................................................................!.......,...............8Z...VI.NM..91?.".-O..._F..(.TX;E_%K...``a..6#4<.L..a...'......a].......`...].Q....`..a.*..&.G..a.:R[^S.P....,3D^7A0\$/H>.C2B.....+a....B..%^.\|y.@@.._.x....;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\down[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 15 x 15, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	748
Entropy (8bit):	7.249606135668305
Encrypted:	false
SSDEEP:	12:6v/7/2QeZ7HVJ6o6yiq1p4tSQfAVFcm6R2HkZuU4fB4CsY4NJlrvMezoW2uONroc:GeZ6oLiqkbDuU4fqzTrvMeBBlE
MD5:	C4F558C4C8B56858F15C09037CD6625A
SHA1:	EE497CC061D6A7A59BB66DEFEA65F9A8145BA240
SHA-256:	39E7DE847C9F731EAA72338AD9053217B957859DE27B50B6474EC42971530781
SHA-512:	D60353D3FBEA2992D96795BA30B20727B022B9164B2094B922921D33CA7CE1634713693AC191F8F5708954544F7648F4840BCD5B62CB6A032EF292A8B0E52A44
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/down.png
Preview:	.PNG........IHDR...............ex....PLTE....W..W..W..W..W..W..W..W..W..W..W..W..W.U..............W..W.!Y.#Z.$\.'].<r.=s.P..Q..Q..U..o..p..r..x..z..~.............................................b.............................................................................................................................................................................................................$..s...7tRNS.a.o(,.s....e......q*...................................F.Z....IDATx^%.S..@.C..jm.mTk...m.?\|;.y..S....F.t...,.......D.>..LpX=f.M...H4........=...=..xy.[h..7....7.....<.q.kH....#+....I..z.....'.ksC...X<.+..J>....%3BmqaV...h..Z._.:<.Y_jG...vN^.<>.Nu.u@.....M....?...1D.m~)s8..&....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\errorPageStrings[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4720
Entropy (8bit):	5.164796203267696
Encrypted:	false
SSDEEP:	96:z9UUiqRxqH211CUIRgRLnRynjZbRXkRPRk6C87Apsat/5/+mhPcF+5g+mOQb7A9o:JsUOG1yNlX6ZzWpHOWLia16Cb7bk
MD5:	D65EC06F21C379C87040B83CC1ABAC6B
SHA1:	208D0A0BB775661758394BE7E4AFB18357E46C8B
SHA-256:	A1270E90CEA31B46432EC44731BF4400D22B38EB2855326BF934FE8F1B169A4F
SHA-512:	8A166D26B49A5D95AEA49BC649E5EA58786A2191F4D2ADAC6F5FBB7523940CE4482D6A2502AA870A931224F215CB2010A8C9B99A2C1820150E4D365CAB28299E
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/errorPageStrings.js
Preview:	.//Split out for localization...var L_GOBACK_TEXT = "Go back to the previous page.";..var L_REFRESH_TEXT = "Refresh the page.";..var L_MOREINFO_TEXT = "More information";..var L_OFFLINE_USERS_TEXT = "For offline users";..var L_RELOAD_TEXT = "Retype the address.";..var L_HIDE_HOTKEYS_TEXT = "Hide tab shortcuts";..var L_SHOW_HOTKEYS_TEXT = "Show more tab shortcuts";..var L_CONNECTION_OFF_TEXT = "You are not connected to the Internet. Check your Internet connection.";..var L_CONNECTION_ON_TEXT = "It appears you are connected to the Internet, but you might want to try to reconnect to the Internet.";....//used by invalidcert.js and hstscerterror.js..var L_CertUnknownCA_TEXT = "Your PC doesn\u2019t trust this website\u2019s security certificate.";..var L_CertExpired_TEXT = "The website\u2019s security certificate is not yet valid or has expired.";..var L_CertCNMismatch_TEXT = "The hostname in the website\u2019s security certificate differs from the website you are trying to visit.";..var L

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\f[1].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	264759
Entropy (8bit):	5.510025846690705
Encrypted:	false
SSDEEP:	6144:eVBPIYlHjj7AqqIoY/a9HAMW9lCjd5NVdhwJaD:wjHjj7jqIoY/a3MlOd5NVvwJ2
MD5:	C0E5468CC4FA9759A9A598B46332A373
SHA1:	9EE21C4F50688881C561DD76C0A720D59F8500E2
SHA-256:	6FD9072EE947E4D641435B2E0EA0ACA3E5619275936FB6FFF0FDCE4284C169AB
SHA-512:	5021CC885133ADAF2A81E7E49B0FEB13F60EBC2959421EA8112654A8889BB3B60DABC0F4B3FA514A051247B41EA744801EB5A44AF8183F92DF3E4EB0E31223D8
Malicious:	false
Reputation:	low
IE Cache URL:	https://pagead2.googlesyndication.com/pagead/js/r20201203/r20190131/show_ads_impl.js
Preview:	(function(window,document,location){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var p;function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ha=ea(this),ia="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},ka={};function t(a,b){var c=ka[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]} .function w(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in r?f=r:f=ha;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\field_bg[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 55
Category:	downloaded
Size (bytes):	108
Entropy (8bit):	5.258914647201697
Encrypted:	false
SSDEEP:	3:Ci+jFkxneT+Tq3yNZ+hD/lsrcsp0fsen:Ooe/S+h6rcjX
MD5:	31E4366875B35A4746E63DE08E6E9706
SHA1:	836ADD25BC507B3EB4A077F9104A36E7E31F1E69
SHA-256:	BBE72E39A69AF29C94DE391BABBA045559B2BDC388B5A4C76D711DAA8C43AA9D
SHA-512:	7EC384930BB6B1513ACC0532DD71D9598CB10DF8B453587F8E18865F798B9FAF93C8F43A6B5B888B97A6F5C455183AA49BA9F2E0F021EEF8A29F173577218651
Malicious:	false
Reputation:	low
IE Cache URL:	http://loginza.ru/img/widget/field_bg.gif
Preview:	GIF89a..7....................................................!.......,......7.....I..9b...0...EA(J.>l....;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\forum_old[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 29 x 30
Category:	downloaded
Size (bytes):	1628
Entropy (8bit):	7.73104402508837
Encrypted:	false
SSDEEP:	24:/p0SN4Oxsv4BVvYpwBkv7SNK8sF+Y48ENCO+6ycm6jBXON7aOzuxwFKq6xMN3FP:/p0ElswvYHv7+xb3CrcXIzuxSG23t
MD5:	FA0152E017E69A26B05550AE0DAA6F06
SHA1:	C86663CAF74E7F42A17DE589FC9D325169A5F3DD
SHA-256:	EF5B0B2F1AC5F58516A1BEBAA9832F1BA57B4E8B8DCF23E79D3C92AFAECD8885
SHA-512:	308B438E57E9C66CBD976D51EC553238DC4A0E83E02FFBED4ED77C39E17F8BB6CEFB0B3CD6D9BAA2CA4B1FEEBD6760FB2BE9CB3D3F0F8A7C2A703B14FD11486D
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/images/statusicon/forum_old.gif
Preview:	GIF89a.............=Y...........b.......sv...................._p.......................o.......bt...............Rr...Mk.v........................hjn..._.....ct....j.......Z\|.......p~..../03.....................}.....v................................ly.Vl.g..i{.Yv.m..r..}...........dz.......Ng....Db.A\.......Jj..................Md.........................Gd.Tt.........a}.............VZ]......DEJ..........Xz..._n.hw.............................^e....x.....k.........................................m.........................[z.Ee.Jd.~......._~.AQ................................................W{.y.......Zm...................w..t..\|...................^`f.....e.....j..n..Vh....................!.......,.............5h.`.53f.)\..CX.ll....h..`(./.C..jMR....-g..I..M..]t..5...%.<Z8......8.$...b..d.....5.......N&%89.*GN."b.9.".U.E....5..t.\|...I.V...../.q.(..C..)\|X....^.........;..i...=..l8.`.8e..]...';v

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\frame[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	187
Entropy (8bit):	4.832393909439508
Encrypted:	false
SSDEEP:	3:rdxkouVKQMB3tGFivYkRaFUvzUbZWiRAdu6/GYlWX/LEIA09NGXIMBWhtoAcMBck:rzQ4QW3tSKYkROUbUlWiJmW/LhhNVMcR
MD5:	682BB4FA061BC9AD1A4507591B9C872C
SHA1:	4643F3E73298A5796121990F1380737C51B4FF1D
SHA-256:	C8F100960B151EC5DF1F1FAC9B3EAF7D2FA091ED5BB2726A167B9D04ED6E18DC
SHA-512:	A8E7326C50BED4E75C17795ED7EF9326D84B567E2902ED0F5CD189D31C1A4B2D8BB358CA5B0623109235AF4C9FEB53FBA838FC9A25347A28C928E2AD8D3D7B4A
Malicious:	false
Reputation:	low
IE Cache URL:	https://s3.advarkads.com/modules/match/frame.html?id=8113-1-1&uid=0100007F09ABF65FFE0029A40224C90B
Preview:	.<!DOCTYPE html>..<html>..<head>.. <meta charset="utf-8" />.. <title></title>.. <script async type="text/javascript" src="frame.js"></script>..</head>..<body>..</body>..</html>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\gradient_panel[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 10 x 450
Category:	downloaded
Size (bytes):	3314
Entropy (8bit):	7.762701166225518
Encrypted:	false
SSDEEP:	48:oDbO1fFmSQjsJ5XxNzHNv7pRwG9IzQnN4XljVwMNC8SwAFmCQXVhtj3iLzUaRulS:oDeNtQk5h1Nv7hmjjVtw/QliBKHI7bZX
MD5:	9F0D6A317B48BBBA4DC663F8EF19AA73
SHA1:	A3142F1A1E4B727DE843C06765892030B409ED48
SHA-256:	D57D331B58BA51C9B04B7BE3CEED937B9A5CA12B555BAA25C584394223C7882C
SHA-512:	AEAB11C60AE25636E108C3213288BF7D34F755D4E689413B00E801AEE8C16C50D85D2559FBD0641475289A131E2CED74E18A10CDFEF88764373C001D0EA9599C
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/images/gradients/gradient_panel.gif
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................!.......,............w..................w-w......w...........w....................w...............v..v.....vv....-.v..--v..v.....v....-..-.....h..p..=..J.3y.05;..<..8..F..G-.ix...5\|..1@./S...9.8h.#L..R.....Ey. ......#...y.'O.@..@...T.?.@.....=..3u,8..x..Z.P......u.T.s...R..Z....s...,v\.....9[.@....dpj....8....=.}....;...V.e.]..ly2..k=sf."............gd.!.xk...G..!:...YW.~<:..r.?..y.r.....s~.r..3...>.x...SA..zu..q.....'....g.........!.J.........A. .O.(.x.v..Jd._..Z....."x..D./.. .:......z..h.......q.!c.P..#.P....P..%.;J.$.<"...Zb.f.5.Y..i.e.Yf...O..F.q.f.xB...\|..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\header[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2007:10:31 16:11:24], baseline, precision 8, 750x64, frames 3
Category:	downloaded
Size (bytes):	48923
Entropy (8bit):	7.6348803336702735
Encrypted:	false
SSDEEP:	768:kvjX7ICqFNiHMzGY+pAOiqnPwKQZQKfewBfuJe0ZF9Vzz8g6mQPtTEIg:4q+H0YuOzPwgKm22Q0ZvVzwgctDg
MD5:	E4605CBD068236D6FA546227ACD1389D
SHA1:	8B01BD14A6CE62F9F6B6BD3AEC69BA951FA62660
SHA-256:	9E1F8C57F579E5A668E9F3CB9115E53FC0B04820035449F62B157415FF8C7F04
SHA-512:	A04C4C20B9063075BEAA8910AE9352B5A9C486FAB2D8C9088A133D7BA09BD9DF1A62D448BCF3DF4CB1C0334C90017DF7EA5E8441C1448AAB2DC6256DAED2BB18
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/templates/biz_blue_ii/images/header.jpg
Preview:	......JFIF.....H.H.....pExif..MM.*.............................b...........j.(...........1.........r.2...........i.................H.......H....Adobe Photoshop CS Windows.2007:10:31 16:11:24........................................@...........................................&.(.................................:.......H.......H..........JFIF.....H.H......Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.......V...M.&..........?J..aYk.+............=...M...<.v.t....I.9..V......'.".4........u..........c..l.`.9..........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\icon1[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	1032
Entropy (8bit):	5.80761423575835
Encrypted:	false
SSDEEP:	24:JiGoJJk5Fo++rtoedu8oaSY3FvVjDnqUnjGM:QRtoedloa97qgjGM
MD5:	AE06A3A4F592A914EA64A6DA70F68433
SHA1:	C04D5146D0302AB0861B20629830752E3DE1A6EB
SHA-256:	EA379A859C86E9A54C2F3E2C4872626CDAC664F34CB3CF536D0B03986CBA3CEA
SHA-512:	7B0B1268877BFE7489D03A51058C12C48DAD5DCB0DDD3C0CCC1D87761646716B04B000033CD953F360D9B7B25F6F11FA996DE94AF464499649A4A0929A58EBD4
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/images/icons/icon1.gif
Preview:	GIF89a...............................\|....................kop}.................................255...VX]........................'))..."%%.................HLM.....................efm......8:<.............uyz............??D..................+,/......ABG............oqx.........Z__.....................................BCG..............?AB..................................489............................... "...............*+.............................................................................................................................................................................................................................................................................................................................................................!.......,............+.:d.J.!.FH...L..o.....L...1bxX....i.8i.'....8.H....k 1j.q.G;....C"..@,..0...".@>..0.@.1..p....AE.h`...... ..B...G.2N...@..V............0E..'e.P................%.....4.t. ...F..y4. ...-/$d....(.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\index[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ISO-8859 text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	54335
Entropy (8bit):	5.696878880393277
Encrypted:	false
SSDEEP:	384:SRLC9LCjf3aXxu3U5CqDLxra49rwrU8zWVNT7mNxS+jMNNR3Nf9eNmUZpNuPcwKD:SRLCcjf3aXx3MihabS0oZqat/YHVeva
MD5:	D621E2B8CADDB67D88DC3C379C9DCAE6
SHA1:	93CBCE2A6C1E2368B1E8B88FC46A2E5A91CE361C
SHA-256:	AE3B87E2D6E1EE2F9298B36DBDA869C8AB039DE2BB3ACB464D089E8D7984ADB2
SHA-512:	6C87C42856F5F740DE18ED012DE436BF787B54973AA3447EEAC46BD6516B71743E5D2C7DC3DC6213365A6812558C312737857AA4570F91364139EB9902A2211E
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="ru">..<head>... no cache headers -->...<meta http-equiv="Pragma" content="no-cache" />...<meta http-equiv="Expires" content="-1" />...<meta http-equiv="Cache-Control" content="no-cache" />... end no cache headers -->...<meta http-equiv="Content-Type" content="text/html; charset=windows-1251" />..<meta name="generator" content="vBulletin 3.7.0 Beta 4" />....<meta name="keywords" content=".............., ...... ......., ...... .........., ......., ........., ......, ..... ...., ....., ...., ......., ....., ....., ............, ......., ....., ...., ......., .........., ....." />..<meta name="description" content=".............. . ...... ......., ...... .......... . ....... .......... ......, ..... ...., ....., ...., ......., ....., ....., ............, ......., ....., ...., ......., ............. ....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\index[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ISO-8859 text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	54335
Entropy (8bit):	5.696878880393277
Encrypted:	false
SSDEEP:	384:SRLC9LCjf3aXxu3U5CqDLxra49rwrU8zWVNT7mNxS+jMNNR3Nf9eNmUZpNuPcwKD:SRLCcjf3aXx3MihabS0oZqat/YHVeva
MD5:	D621E2B8CADDB67D88DC3C379C9DCAE6
SHA1:	93CBCE2A6C1E2368B1E8B88FC46A2E5A91CE361C
SHA-256:	AE3B87E2D6E1EE2F9298B36DBDA869C8AB039DE2BB3ACB464D089E8D7984ADB2
SHA-512:	6C87C42856F5F740DE18ED012DE436BF787B54973AA3447EEAC46BD6516B71743E5D2C7DC3DC6213365A6812558C312737857AA4570F91364139EB9902A2211E
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/index.php
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="ru">..<head>... no cache headers -->...<meta http-equiv="Pragma" content="no-cache" />...<meta http-equiv="Expires" content="-1" />...<meta http-equiv="Cache-Control" content="no-cache" />... end no cache headers -->...<meta http-equiv="Content-Type" content="text/html; charset=windows-1251" />..<meta name="generator" content="vBulletin 3.7.0 Beta 4" />....<meta name="keywords" content=".............., ...... ......., ...... .........., ......., ........., ......, ..... ...., ....., ...., ......., ....., ....., ............, ......., ....., ...., ......., .........., ....." />..<meta name="description" content=".............. . ...... ......., ...... .......... . ....... .......... ......, ..... ...., ....., ...., ......., ....., ....., ............, ......., ....., ...., ......., ............. ....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\jquery.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	72174
Entropy (8bit):	5.35776756007414
Encrypted:	false
SSDEEP:	1536:Du98G2ltZMNWnDr7doqPp07HVDTLGbY9TGA7zEcbnkb17jQq3nPRefqvpsz:DuJItn6qepq15nUfqvpsz
MD5:	10092EEE563DEC2DCA82B77D2CF5A1AE
SHA1:	65CBFF4E9D95D47A6F31D96AB4EA361C1F538A7B
SHA-256:	E23A2A4E2D7C2B41EBCDD8FFC0679DF7140EB7F52E1EEBABF827A88182643C59
SHA-512:	CC92CF5A9B3A62A18AF432FDFFB81B76DA84E2F43CE3C7800A919C10809118D0611E29A47F103FF3DF18A54D5331BC5F06EF4771DC406CC763B30FF2A66A3E81
Malicious:	false
Reputation:	low
IE Cache URL:	https://yandex.st/jquery/1.4.2/jquery.min.js
Preview:	/!. jQuery JavaScript Library v1.4.2. * http://jquery.com/. . Copyright 2010, John Resig. * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. . Includes Sizzle.js. * http://sizzlejs.com/. * Copyright 2010, The Dojo Foundation. * Released under the MIT, BSD, and GPL Licenses.. . Date: Sat Feb 13 22:33:48 2010 -0500. */.(function(A,w){function ma(){if(!c.isReady){try{s.documentElement.doScroll("left")}catch(a){setTimeout(ma,1);return}c.ready()}}function Qa(a,b){b.src?c.ajax({url:b.src,async:false,dataType:"script"}):c.globalEval(b.text\|\|b.textContent\|\|b.innerHTML\|\|"");b.parentNode&&b.parentNode.removeChild(b)}function X(a,b,d,f,e,j){var i=a.length;if(typeof b==="object"){for(var o in b)X(a,o,b[o],f,e,d);return a}if(d!==w){f=!j&&f&&c.isFunction(d);for(o=0;o<i;o++)e(a[o],b,f?d.call(a[o],o,e(a[o],b)):d,j);return a}return i?.e(a[0],b):w}function J(){return(new Date).getTime()}function Y(){return false}function Z(){return true}function na(a,b,d){

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\lastpost[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 12 x 12
Category:	downloaded
Size (bytes):	964
Entropy (8bit):	5.358946687918886
Encrypted:	false
SSDEEP:	12:HVY18H2gxpNywTEe1ZTmaQmuNTcvzMtnhoE65LseVRnjkH/AWN:HdHtNkePTmnmuNSzMthiRsAjo/ZN
MD5:	2B68B60F00426E1FD146CCD5507A5F52
SHA1:	92D8CE68C280439D9BB85171B66549000B09BC9F
SHA-256:	D754C443E3FB82AAD481A30927CB00085FDC982CA74A3EAF6B00146918D8A1AD
SHA-512:	CDDA6EB2C3591D42E6DF6C08759D1BF8D45C88EE26D7F509B4E8EDC7746D228C150C6F2379074DD8827484772FB54A7AA7EA8AEA4817B3A96E9F4509C85F082B
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/images/buttons/lastpost.gif
Preview:	GIF89a..........PY.MY....PX....JP{...............QY..........Va.fj....~....}.......{..Xb.......z.....ny.is............~..\|.....x..x.......IQxY[u...`q......................\|...................FNv.......NV....{....:Bq......}..dh.............>F..........N[}.........w.............................PY.Xd.........z.....i\|._h.....................\|..w..kr.r..................................................................................................................................................................................................................................................................................................................................................................................................!.......,........@...Q.y.E.@<.8`...-.^t.P.....(1......Bl8`...1@j.C'.....\.sD..A....C.....P@"...8n...g...N L.....7.@......,OF.abe...cn.se.3dt..#"N..)4P.i....;@.I.".."...` .M@.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\match[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	129
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9psOjBMllRPQEsJ9psOjBMllRPQEsJ9pse:Gl3QEsJLsMal3QEsJLsMal3QEsJLse
MD5:	D2566C366F730CCD475BD1BF9C09CB6C
SHA1:	EA3CBBAD88A086493CD4FD035513BEC67B27BF52
SHA-256:	A7C2383A000E585F7FFF39FD181F1F236DDAD954BC1722753BB1ACFAA0AC8B51
SHA-512:	1A436C0F5D7A23051DD74B887BCA53E87C08A69E371B4530D184E8CD5BCB6FB0070DF988380B9826A32A17DEFCAF81CA80CBE2CAA841FB5382EB1DD4AE35129D
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;GIF89a.............!.......,...........L..;GIF89a.............!.......,...........L..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\match[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\match[2].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\minimalizm[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x92, frames 3
Category:	downloaded
Size (bytes):	8687
Entropy (8bit):	7.945410291138168
Encrypted:	false
SSDEEP:	192:M3N3d8J56u/eyAx9yQJhOqNLMjCuqF0Fz9uqLs7xAUQ0WtLAxRW:M3NSHtmT9yQJhO+ojCuqmjuqWSLLAzW
MD5:	45B4F326E32AEEC1493494DBADE0EC29
SHA1:	DE82D1D77C96FC36920BB55803649659CD287905
SHA-256:	96C760550E4384E3E72FAC9628F4F69C9CF58AE156D75B3B46DB13B8B0839FA2
SHA-512:	72FECB1B9F054D2A2EDBC76530FDF0980E96BB8C9C65758F539FDD82BA1B33C97E8350F6D84E0934416365BBDBF761592FE855511D422B667615D45D9B59D3CA
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/pictures/minimalizm.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................\.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....Sak...Z.^[.:..Qd@.0.....#....X...?X%..../..?..io...}>....>b3.....v+..n...W...F...m...s......sN....Hw....4Ekt.J..x..........;.....).GA....}'..G...-..B.e.%K..He..C.@`0r8....EKs.I._QF7ZT....HYa.V..#..K31a.....S%.y29%..G1eu.xy...6....ut1....B3..^..t.....:.>..T.}....xa..)......P.By..,cLU%..kACL}.^..&....,g.}....@s.*[.W%KBG .NF. .,G.57c.!m<..t.p.+M.1.).pq3o

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\p[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
IE Cache URL:	https://ic.tynt.com/b/p?id=bsa6p-zQar4yFiacwqm_6l&lm=0&ts=1610033601830&dn=TI&iso=0&t=%D0%9E%D0%B1%D1%83%D1%81%D1%82%D1%80%D0%BE%D0%B9%D1%81%D1%82%D0%B2%D0%BE%20%D0%92%D0%B0%D1%88%D0%B5%D0%B3%D0%BE%20%D0%94%D0%BE%D0%BC%D0%B0%20-%20%D0%A4%D0%BE%D1%80%D1%83%D0%BC
Preview:	GIF89a.............,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\readon[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 13 x 14
Category:	downloaded
Size (bytes):	138
Entropy (8bit):	5.68641914743776
Encrypted:	false
SSDEEP:	3:CnM7uvOQxAmiLPPnMlDFyl2JAhfrgpCZ4nhAZpHF1DYGrgxmfe:GzvOQ6zYN3JEf34hAVxJ0g2
MD5:	1B3A8AD625DE01CAAF77A2F231CB21EE
SHA1:	55E9C317DA4A88BD1134CD2BF12BE38442D70F1D
SHA-256:	A050F9F384C537B9BD3F5313398C5222E22A45EB1266A135C788A30A1BB4ED25
SHA-512:	218C7707623EEC25245AF3F40F43E5C33A70ABD90529290890A4BB0C82861214553EE4C862CBBC34D73B94D127A6D442435FF1EBE887A77385DB8887B60AD438
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/templates/biz_blue_ii/images/readon.gif
Preview:	GIF89a.......................CCC......***...33f............!.......,..........7..Ig....:...y..RcG..y.....3.]....>^L..".4[. p.1..TC.Z#.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\rek1[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ISO-8859 text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	364
Entropy (8bit):	5.44797612689724
Encrypted:	false
SSDEEP:	6:yL/pZ3AbvCSZMXnsJmdKO925PCnDKpBJrMEDYmoCjF3hEKS+MNQqlZe:iHAb0sJmIO922epBJjDRtJhEKSz9lc
MD5:	A4D7A5757C7AAD8C8834FB1388DCDB86
SHA1:	9B02B8434959BECC43B2AFCA22CB89FC451649B3
SHA-256:	23DEAA34CCC8996A82D70B619830B0C51FCF3FE21EA111C70383939948A56B23
SHA-512:	BD6B3F087F6DCBE7DCE23C142741B8F111642FC1B95D8B2D5B714ADE6D59376B84C1D1DC069C854DE9B9E9F64A769A49FA274CFCE83026DA3AC88F3CF5D054EA
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/rek1.js
Preview:	document.write('<noindex><script src="http://loginza.ru/js/widget.js" type="text/javascript"></script><a href="https://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php" class="loginza"><img align="center" src="http://ovd.ru/forum/openidlogin.png" alt="..... .. ..... ... ...........! ......... .... ....... ......!" border="0"></a></noindex>');..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\runner[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	12318
Entropy (8bit):	5.314497117961088
Encrypted:	false
SSDEEP:	192:I7UTGaZMNZU5mFCD+hgnFGzb90VzsiKvWJ9jkyN88:y4AFcZn8F0VzseJQ8
MD5:	892009D341852C0AE2F39AAADC568D6C
SHA1:	B645A3A8CD30464433BAA0ABEE04396D5BDE0525
SHA-256:	E46E226858CB1C57593472A14B545F60F1A7CD2BE103EB0F711917A4F2A01308
SHA-512:	4B7ACD8B3C7E89CFFA18C6BBDF31EF317EAB82CCE271D93133E6DD71EE0B5DEA5E8A4FA51DBCB0D10F00B46E501750AEFA263A66FB2F18F562D8666C3892CE5A
Malicious:	false
Reputation:	low
IE Cache URL:	https://tpc.googlesyndication.com/sodar/sodar2/220/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function p(a){var b="undefined"!=typeof t.Symbol&&u(t.Symbol,"iterator")&&a[u(t.Symbol,"iterator")];return b?b.call(a):{next:m(a)}}var aa="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},v="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var w=ba(this),x="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},y={};function

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\shadow[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 10x28, frames 3
Category:	downloaded
Size (bytes):	344
Entropy (8bit):	3.6975378587764736
Encrypted:	false
SSDEEP:	3:nSullBbs1lQQp/yEDpeknmRmCKn0kmMpaSllXldXliumscwccPekelHO:3ll7QzDkmC80kmMwaltgumsUu
MD5:	156F2A3F19BF0D14513FF5BE0653E345
SHA1:	31974A3EC1A3ED9B294AF13FB01C2BB29A765234
SHA-256:	C7EB9E29D769AD85D4C3746BB379F7AB45AE608CF2D8EABD9CD75E81F85B51CF
SHA-512:	98043EF848ED5A30F1F30A4D505F3EE2AD8E6A318A6BA92821412F56EB69EAF1178B82CFD925545A4E07C7EFB146DD53349F3F08CF00C95051E875B85FED9218
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/templates/biz_blue_ii/images/shadow.jpg
Preview:	......JFIF.....d.d......Ducky.......d......Adobe.d.................................................................................................................................................................V............................................................U..'g...............................?...:[..;*....C..........kT..:....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\social[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 16 x 208, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8406
Entropy (8bit):	7.967681091843903
Encrypted:	false
SSDEEP:	192:NS0tKg9E05TbqTB8gpTD2RYqlK3O8xAm7FDrCV1Hk:LXE05/qFlD2qmKe8xlVrCVVk
MD5:	C8B3F3BDFF0A512385FE98E20D845C00
SHA1:	8C107C4546BC4D8BD8258DBA44B3623D29BA8116
SHA-256:	92BBBAC38A9B490DEFCF6EB67F5932CFDA86BECCD49CE38AFD3322A474844155
SHA-512:	4F4F6F3970B0EDCC8C184470A35328EC25314A4B75BB0151525CF7796CFCEBD99DD26EBE436C553A744C834414A682BE47930A577C68511E5C03359851C87DE1
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/social.png
Preview:	.PNG........IHDR.....................pHYs..........o.d...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\space[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.2001615812851174
Encrypted:	false
SSDEEP:	3:CUO/RD/0xlpfx/n:oDAn/n
MD5:	41C9BC7F3F78ED71115CC062C1C67B09
SHA1:	FF200D7EA28780D12BD6D9334178B930DBD5884B
SHA-256:	1CD58A827318C4A29B32A0DB15C8C39D5651B42D8CAD227519AD81BCE4ADB944
SHA-512:	280EA4383EE6B37051D91C5AF30A5CE72AA4439340FC6D31A4FBE7BA8A8156EB7893891D5B2371B9FC4934A78F08DE3D57E5B63FA9D279A317DCBEFB8A07A6B0
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/templates/biz_blue_ii/images/space.gif
Preview:	GIF89a...................!.......,...........T..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\sprcs[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\support[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	14822
Entropy (8bit):	4.418549764234353
Encrypted:	false
SSDEEP:	384:5jt0KtYmNfI6dCeaXCQVF0wLgGk7KQ1Nl:J4dVF+zl
MD5:	09A4CABFA8A6673684C113A1EDE79AFA
SHA1:	725985A6687A2720B3CADFB6C9912EE8B66AABA2
SHA-256:	CB30D183750397B919DB8B25F9ECBB9D85534739E0751EF25C48EDFEB92AD269
SHA-512:	988E4BBF192C16543420B9693CA5505353C418E730820A59F343B406CC9F7C711057C2B1F91E64DA118A8B71E4D5200587E0DCB98C594E468FE2AF280380EC30
Malicious:	false
Reputation:	low
IE Cache URL:	https://w.uptolike.com/widgets/v1/zp/support.html
Preview:	<html>.<head>. <script type="text/javascript">... var scope = "frame";.function isArray(b) {. return "[object Array]" == Object.prototype.toString.call(b).}...function appendRight(array, addedArray) {. for (var i = 1; i < arguments.length; i++) {. array.push(arguments[i]);. }. return array.length;.}..function trim(text, length) {. text = String(text).replace(/^\s+\|\s+$/g, "");. length && text.length > length && (text = text.substr(0, length));. return text;.}...function isEmptyObject(obj) {. for(var prop in obj) {. if (obj.hasOwnProperty(prop)) {. return false;. }. }. return true;.}..function param(parameters) {. var tokens = [],. param;. for (param in parameters) {. if (parameters.hasOwnProperty(param)) {. (tokens[tokens.length] = param + "=" + encodeURIComponent(parameters[param]).replace(/\+/g, "%2B"));. }. }. return tokens.join("&");.}..function forEachKey(object, cal

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\sync[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
IE Cache URL:	https://ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=0100007F09ABF65FFE0029A40224C90B
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\sync[2].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
IE Cache URL:	https://ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=153&external_id=0100007F09ABF65FFE0029A40224C90B
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\vbulletin3_logo_white[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 247 x 64
Category:	downloaded
Size (bytes):	3472
Entropy (8bit):	7.791251592163151
Encrypted:	false
SSDEEP:	96:f6juNzPBIic0qt7XjbSBVIgaqpx2Oe5We:f6CRUL7zbSBVNauXQl
MD5:	CC111452F09074426B7A07A63E733B01
SHA1:	783FA75A6B90DE9673CF932AEA4DE440C4493099
SHA-256:	3B22D1ADEACBD841FAD74C05EF3ED2F52B1D608B5D13EAFADE76E006E68395EC
SHA-512:	13F0D85F526739B26BE80BABED4A21EDD8B5EE129DCE0CD58AFF6610E2DF584446E302A1BF150CA815760BA8DFE1C1B5BE36DBC2CD3123A26B1A7E39AABAA930
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/images/misc/vbulletin3_logo_white.gif
Preview:	GIF89a..@..................................Zn..........BZrOe{[p.h{.n..t........................................................................dx..........................................................!.....2.,......@....@.`H,...r.l:..tJ.Z..v..z..xL....z.n....8....E....!-.....(${....]!../..........J+..E0........C/..+....u...F....ut..D....&..%D..u%..F.........F.........H........1D$....C.#M...q....KC..2D......(r.dA..JHD.5DE...H...B..s....@....x..s.....0..."..$7..s@...\|...1........d....!0.P.T..L...x..E&.... .E....L}...."<.E.#.K.?..89l...Q..lz$.....Q.....C<D..aB4.F.F..D.f...a.0...$..9!..B<..l.....K.C.3...:.d..5u.:..6.......Cb(.0!p.:...Xp...".y..b.y.....dE..j.-...L..y..D..ND.'./....z....j18pGqE........{.i..K(.A..f..]@+<0...lh..........H.$hQ..J.............l..U........ID.'.p.........#?k.2..%.8f.....pppP#NZ...j..0"..........D<..$..S&..^......+@..9f.@&<...-.5.K.$.S..6.....L\..R!p...p.1..a.C..D.C..p...e.....a.....u.D.C.H..:T.Q....fF1 "..<)[3..I..o.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\vbulletin_global[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ISO-8859 text
Category:	downloaded
Size (bytes):	46903
Entropy (8bit):	5.322981779921498
Encrypted:	false
SSDEEP:	768:BD82hUNwX51mn4/LBA5yXwUu0Z7sW+xstHmL/fzEAZ995dnml7WnjiAQ1sMCbo9D:zhUuqw7sWWstGL/fzEAZ995dnmlSn+AW
MD5:	62720EA71DBFD16F5979390314503600
SHA1:	C9F1DF4D66A23DF98BCE3D160C9ADA9666595C79
SHA-256:	CA11B44B348189B7DF4C8830FA7DDE41CB2ACBCB8FA9F1FC2DCF47753B6537D9
SHA-512:	B20698B97A7434B9E4D71BA355D01DA6A3D0EBC192053F5EA1FB4DC313F4D30376A0E0518F1FDFF3D7B0C23896EE461A1CF294262F8F46795942C4E086344E96
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/clientscript/vbulletin_global.js?v=370b4
Preview:	/======================================================================\.\|\| #################################################################### \|\|.\|\| # vBulletin 3.7.0 Beta 4.\|\| # ---------------------------------------------------------------- # \|\|.\|\| # Copyright .2000-2008 Jelsoft Enterprises Ltd. All Rights Reserved. \|\|.\|\| # This file may not be redistributed in whole or significant part. # \|\|.\|\| # ---------------- VBULLETIN IS NOT FREE SOFTWARE ---------------- # \|\|.\|\| # http://www.vbulletin.com \| http://www.vbulletin.com/license.html # \|\|.\|\| #################################################################### \|\|.\======================================================================/../*. Handle Firebug calls when Firebug is not available (getfirebug.com).*/.if (!window.console \|\| !console.firebug).{..window.console = {};..var names = ["log", "debug", "info", "warn", "error", "assert", "dir", "dirxml", "group", "groupEnd", "time", "timeEnd", "count", "trace", "profile", "pr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\vbulletin_read_marker[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ISO-8859 text
Category:	downloaded
Size (bytes):	6653
Entropy (8bit):	5.3105113513365145
Encrypted:	false
SSDEEP:	96:B4TA3QTg3rN9MHi62vCoZkghGMUYixYze+QcuJUD74TiluEw:BvMC9lVgMji+eOD+ilS
MD5:	EDA287C30E26611F8E3E84608E93C86E
SHA1:	0A78F2A1163A2312F15E4FC82059B7CB52790260
SHA-256:	7D2AEE7DA639A29544B333FA99791D11E35EA990DE4802FB61781567CC1F1C40
SHA-512:	A01E52BA5C85E50036E901C5D782228AC3B07E5D4315A2596D8BCE892A9D2DD55B359611533D57AE76092A0C08F5C899C25DD96EBE704A705C2837B222CEE851
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/clientscript/vbulletin_read_marker.js?v=370b4
Preview:	/======================================================================\.\|\| #################################################################### \|\|.\|\| # vBulletin 3.7.0 Beta 4.\|\| # ---------------------------------------------------------------- # \|\|.\|\| # Copyright .2000-2008 Jelsoft Enterprises Ltd. All Rights Reserved. \|\|.\|\| # This file may not be redistributed in whole or significant part. # \|\|.\|\| # ---------------- VBULLETIN IS NOT FREE SOFTWARE ---------------- # \|\|.\|\| # http://www.vbulletin.com \| http://www.vbulletin.com/license.html # \|\|.\|\| #################################################################### \|\|.\======================================================================/../*. Array to store initialized vB_AJAX_ReadMarker objects.. @var.array.*/.var vB_ReadMarker = {..'forum_statusicon_prefix' : 'forum_statusicon_',..'thread_statusicon_prefix' : 'thread_statusicon_',..'thread_gotonew_prefix' : 'thread_gotonew_',..'thread_title_prefix' : 'thread_title_

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\whos_online[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 30 x 30
Category:	downloaded
Size (bytes):	1440
Entropy (8bit):	7.735245192315379
Encrypted:	false
SSDEEP:	24:3+3cp0X9TVac+29+jbmbNxaOcMuEkN5FvqlNGq5/pA+qpG+ATTHqO1A/:o59JrMmpd3n0meHpG+GHqO1S
MD5:	71B6F888920B147DF71B877A7D44DF70
SHA1:	653DD1693B2E830643B520123AD08005226DF95A
SHA-256:	5BBC9522C47FC111A6FBC9FF9CE5AA995CDF341E3A8B57A641CF0C08F1DFD277
SHA-512:	942A4B8F81A0093E088AB912837A114F14F83B24CC99F636D5A3E626558DF78D00456F328F48FA23AEACAF9F3BEC8A591E66D156263B80EAAB72719C9B2FF242
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/images/misc/whos_online.gif
Preview:	GIF89a........7...Nm.V..p.8.=)`......h(....ps{...^.P7L......{....v2......O(.-..............k..7U.......hJ.5Q..R.........!...Lt.]...:..u....GUh...Ll.$.....h.......h......@.....n....M..........'.f.....;..........{9..{......'Q+..&.+Bi.....Lp....XG\Rt.c.`..Y}..4....uZvl....S..Pr.&)>...e..jXi.....+E.Z\|.....:..........e=k.............\|..9..%.s...w.....}.~I..,..1.....2.P......^@J......%"&64..u.._.W.........q.....\|..A]..@..Y.z.ao.o{.........R.kG..>...N.........m.~....(..#...X....ds.'.@.....h.28=...CxIM.K....bgng...............................X..Y.............C.pTt.aUWQy.\..^>_......@..A......F..7....t...ZLQY...}..=KWY}..........).'..&...3.4.~...7S.........9$#...8/B\|X`C.QW\R>^.oA=.m..Q..M..R....aL...tW^..I.L......k.......!.......,........@......Hp.-...*\(....$..y@B.?....P...4...NQ.n........D. ... .c..;....p....X...!......2lr..>~.<h0PW8B&.......m..a.a.X..D!...seh.....@%..y..H..0. ..cC.>.V......#J#Kf.c.....4......(P.i5F.$[o.....A.a

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\widget[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with CRLF line terminators
Category:	downloaded
Size (bytes):	8653
Entropy (8bit):	5.737337802766277
Encrypted:	false
SSDEEP:	192:UmyXsxjmn6Vza53surPZhKNM4BR2EFLi2bp3tCVvcH1/:UmyXsxqn68hZeR2s
MD5:	CCB693DFBA2AE39153037B300448A531
SHA1:	D798D14C916D71D0F255BAE71BE24E4E7FFD4A2A
SHA-256:	1B78E6EE6CE0AA90F2A2AFCED4E168C2FF1E5BB70C3F8E576FB25D96A8F0DE15
SHA-512:	CA60FBD7E00FFD4D52732F1D86B4C23F8CA36C4E1F18AF4EAD04700A7E3FE38EF8067BB02B19F3BD1C0FB9B9C7DDC60F5AC57801E7AA4EB3FC9098BE6781111B
Malicious:	false
Reputation:	low
IE Cache URL:	http://loginza.ru/js/widget.js
Preview:	/*.. Loginza widget.. * @version 1.2.0.. * @updated 03.08.2011.. */..if ((typeof LOGINZA == "undefined") \|\| !LOGINZA) {...// ............. ....... LOGINZA.. var LOGINZA = {.. .'loaded': false,.. 'token_url': null,.. 'selected_provider': null,.. 'providers_set': null,.. 'service_host': '//loginza.ru',.. 'lang': null,.. 'ajax': false,.. 'mobile': false,.. 'callback': null,.. 'hash': ''.. };..}..// ........ .......LOGINZA.show = function () {...// .... ..... .............LOGINZA.selected_provider = LOGINZA.getQueryStringValue(this, 'provider');...// ..... ........... . ..........LOGINZA.providers_set = LOGINZA.getQueryStringValue(this, 'providers_set');...// ......... token...LOGINZA.token_url = LOGINZA.getQueryStringValue(this, 'token_url');...// ......... ..... .............LOGINZA.lang = LOGINZA.getQueryS

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\widget_style[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	downloaded
Size (bytes):	7059
Entropy (8bit):	5.486386059992516
Encrypted:	false
SSDEEP:	192:H4bVKeK11cXrnWWA3CPNimxDZwB3GunAvb7yxs:HNl11cbnWbzAjSs
MD5:	2D1F0BDB27215EA694D67F661D72A237
SHA1:	68E464DFC76EF3286A6ECCE1EE4683C6999D8A13
SHA-256:	4878945CBAA7690333C11834CFEC09F421A9E6A06537EA27ACE1A2CF2206C869
SHA-512:	3221E9129BA98BB7185CFA0DC08354C500F4218B7634C457F3DE8913D0AD94DDA31498A3925300FFAFE77F88D5FF4B7A2FA55162D133EA67CBE11B35081C40EB
Malicious:	false
Reputation:	low
IE Cache URL:	http://loginza.ru/css/widget_style.css?v1.0.9
Preview:	@CHARSET "UTF-8";..body {color:#999999;font-size:12px;font-family:"Arial","Tahoma";padding:0px;margin:0px;}../* .............. ......... /...overlay {background:inherit;background-color:transparent;background-image:url(/img/widget/overlay.png);}../ ...... /..a {color:#0099ff;text-decoration:none;border-bottom:1px dashed #0099ff;}..a:hover {color:#71c824;text-decoration:none;border-bottom:1px dashed #71c824;}..a.out {border:0px;}../ cellspacing=0 /..table {border-collapse: collapse;margin:0px;text-align:left;}../ cellpadding=0 /..table td {padding: 0px;}../ ........ .... */..tr.roundBlock td {font-size:11px;line-height:11px;}..tr.headBlock {height:11px;}..tr.footBlock {height:33px;}..td.hborder {background-color:#fff;}..td.vborderLeft, td.vborderRight {background-image:url(/img/widget/grey_dot.gif);background-repeat:repeat-y;background-color:#fff;width:11px;}..td.vborderLeft {background-position:top left;}..td.vborderRight {background-pos

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\zrt_lookup[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	10950
Entropy (8bit):	5.478288987193067
Encrypted:	false
SSDEEP:	192:0jocGIxlVnhqg/+++phjs0aF95zLUEDhx2YUmUy3vBfq:j5IzSpZsBr/l2YUmUy3o
MD5:	97DD2A1116B2A9C8B383BD9E1F31227D
SHA1:	18031BE599E2A4F3C3C741028DB2039136083B02
SHA-256:	8699293BBBFCA9E80536AAB0965E4ED3F1FE916CD0B43ADD6097BBF280AD2262
SHA-512:	D8D176BB729434E2D4EDC3FB30A844BD941403C3D6E6395D511112F06708A0143ABC6F83B0B08507162F5E6E0B0DB3F64C726C698B1D84FCF790F21605F3CB7C
Malicious:	false
Reputation:	low
IE Cache URL:	https://googleads.g.doubleclick.net/pagead/html/r20201203/r20190131/zrt_lookup.html
Preview:	<!DOCTYPE html><html><head></head><body><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function ba(a){if(!(a instanceof Array)){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];a=b?b.call(a):{next:aa(a)};for(var c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}var ca="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},m;.if("function"==typeof Object.setPrototypeOf)m=Object.setPrototypeOf;else{var p;a:{var da={i:!0},ia={};try{ia.__proto__=da;p=ia.i;break a}catch(a){}p=!1}m=p?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var ja=m;.function r(a,b){a.prototype=ca(b.prototype);a.prototype.constructor=a;if(ja)ja(a,b);else for(var c in b)if("prototype"!=c)if(Object.defineProperties){var d=Object.getOwnPropertyDe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\07b4b16172[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	75378
Entropy (8bit):	5.118669242201188
Encrypted:	false
SSDEEP:	1536:BTjs3o/8jwH9BOskC2mayCqqKSi1tKgVQY1Jhx9o4D4IBlXB1ixrN/U3gucyd0+s:8wH9Tbv3MpT
MD5:	8B2D3244442F4D6B3853213BC5455512
SHA1:	A45BDB447F1B57B5ADC3B7A99F6791023F7368D8
SHA-256:	C6B461163C272A235E7DEE6020FFB578403B02463E0532082A8DEA10049073E0
SHA-512:	EA6A26EB0B9CEA3951F043E44F752B795FFFFA752048CD31B165096D55020C17BD59FFCDA20F0059D4594F9DC9D77E8882A940AE30FAAB64E7A55D658834CFA8
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/cache/wo/07b4b16172.js
Preview:	.var MooTools={version:'1.12'};function $defined(obj){return(obj!=undefined);};function $type(obj){if(!$defined(obj))return false;if(obj.htmlElement)return'element';var type=typeof obj;if(type=='object'&&obj.nodeName){switch(obj.nodeType){case 1:return'element';case 3:return(/\S/).test(obj.nodeValue)?'textnode':'whitespace';}}.if(type=='object'\|\|type=='function'){switch(obj.constructor){case Array:return'array';case RegExp:return'regexp';case Class:return'class';}.if(typeof obj.length=='number'){if(obj.item)return'collection';if(obj.callee)return'arguments';}}.return type;};function $merge(){var mix={};for(var i=0;i<arguments.length;i++){for(var property in arguments[i]){var ap=arguments[i][property];var mp=mix[property];if(mp&&$type(ap)=='object'&&$type(mp)=='object')mix[property]=$merge(mp,ap);else mix[property]=ap;}}.return mix;};var $extend=function(){var args=arguments;if(!args[1])args=[this,args[0]];for(var property in args[1])args[0][property]=args[1][property];return args[0];};

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\141[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=5, orientation=upper-left, software=ACD Systems Digital Imaging, datetime=2006:04:15 16:15:21], baseline, precision 8, 535x401, frames 3
Category:	downloaded
Size (bytes):	92415
Entropy (8bit):	7.970093160310934
Encrypted:	false
SSDEEP:	1536:QSTSkmOGevvHhEtG7rz4It5+CGI1rUbEKw98MglDBNcBW6/pogNSCeh2ec5P31w3:Q8S7wutG3zZDFnTi7qMC1ect6zS/Js99
MD5:	7E4AE93310E54B2B0B3D05DC139F353B
SHA1:	D3C651E5DED1B85155E68220D1259C68BB7942EE
SHA-256:	729B8C00318177ADBE539E4D113F08340576E293F59B38253D7AABFA7145D538
SHA-512:	E8EC4048C653D45A3AF86734FDF1C8F031F766F60C24795F2580B106275316DB37E601D3DF75103B54EDE8ADAB0BDAFFD463DB3D37CD6DADFF4736EE38939F5E
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/pictures/141.jpg
Preview:	......Exif..II...................1.......J...2.......f...............i.......z.......ACD Systems Digital Imaging.2006:04:15 16:15:21...........0220........375...................................................R98.........0100.....M.............!.......................................................................................................................................................................................................!..1A."Q.2aq..#...BR....3br..$45Ss.....%67Ct....TU....&Dcu....EFVWev......................................................!1.AQ."aq..2....#....3Br..$4RbC%..............?..v.)X..pp.zA.pGO.=..x`RO<.6Q.....RN...4R....iN....:...7.e....e....o..{..].JN.?v.Po{\.J.....o.Q.h....9u....)....Jm..........`z...9E..S{~X...?,r+@...........Ak...=....]hH...0=@;ln;.f(.).~...n..!M..6..<{Juo..\...L.qc4V......cI.G'7..] .U.y_\|.MD;n..*_].Sc.+.&...Z.6...a..o.aP....8o..t.....;..,hcCG%....JQ.h...\6.u..;c..t@S.....:o}..ShR..~...x....]..-y-......Q'.&.u.J.F

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\RXUF2V0T.gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
IE Cache URL:	https://sync.bumlam.com/?src=rp1&s_data=CAIQARiL1tr_BWIkMmFmODY3YTYtNzBmMS00YmY0LWI3Y2EtZmFhNmYwNTNhNmNmogEQJu6rGFCyEeuKUwzEem0v7w**
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\YaMN4Oy8AhH-iW3da0J-Nuczn6meMMc-yumwdmwIUIQ[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	21984
Entropy (8bit):	5.5594185274243
Encrypted:	false
SSDEEP:	384:T7PhU5RRSU8QcV74RNeiDhSnK2XYylSohrNsHKTqM0s+LbYHiw52hK0Ud:HkRTcV0ZQNUqShK4QTd
MD5:	C3B7FD6FD68E34D3619107F3C29921D8
SHA1:	91E1FB9AF705728CF2B995E7058B5B8D362F27E2
SHA-256:	61A30DE0ECBC0211FE896DDD6B427E36E7339FA99E30C73ECAE9B0766C085084
SHA-512:	1821103406952E044454C250419656318B5BEB89D70522A154E8016BBD7596763373777AA2EA0A043E47449EBB204CC13D81E59EC24196F8A82F7C3525BC77D1
Malicious:	false
Reputation:	low
IE Cache URL:	https://pagead2.googlesyndication.com/bg/YaMN4Oy8AhH-iW3da0J-Nuczn6meMMc-yumwdmwIUIQ.js
Preview:	(function(){var J=function(Q,l){if(!(l=(Q=null,v).trustedTypes,l)\|\|!l.createPolicy)return Q;try{Q=l.createPolicy("bg",{createHTML:r,createScript:r,createScriptURL:r})}catch(h){v.console&&v.console.error(h.message)}return Q},r=function(Q){return Q},v=this\|\|self;(0,eval)(function(Q){return(Q=J())&&1===eval(Q.createScript("1"))?function(l){return Q.createScript(l)}:function(l){return""+l}}()(Array(7824*Math.random()\|0).join("\n")+'(function(){var QX,m=function(Q,l){return(l=typeof Q,"object")==l&&null!=Q\|\|"function"==l},R=this\|\|self,lo=function(Q,l){return l<Q?-1:l>Q?1:0},vB=function(Q,l){function v(){}((Q.prototype=(Q.U5=(v.prototype=l.prototype,l).prototype,new v),Q).prototype.constructor=Q,Q).D$=function(h,H,r){for(var J=Array(arguments.length-2),U=2;U<arguments.length;U++)J[U-2]=arguments[U];return l.prototype[H].apply(h,J)}},rg=function(Q){for(Q=0;64>Q;++Q)Z[Q]="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_".charAt(Q),B["ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\akrilovaya_vanna[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x128, frames 3
Category:	downloaded
Size (bytes):	11927
Entropy (8bit):	7.952845537500647
Encrypted:	false
SSDEEP:	192:4L/cA7K++Q7TG3159auEKYI5+81mNaqu0TMq34uFzr6wYD:4LkuKHQ7a3M3PvV4Cr6lD
MD5:	C9BB38ADCD0B616C36748974958FE8DD
SHA1:	0A3C66A849A1BCC9A714CEEB1902B166F75E51EC
SHA-256:	133941FF02F80F0D7BC6522D6D6AF760F25D69C55EE95557850C9F09288C836F
SHA-512:	8B66D64B11EE64F73FFB691B112D8214D3674051F2A3FA6751EF10F35F1E98DB6660BA5F033EE5904BD85650165EF6D124EFECB4451A30FF9F9CE642E81B88E3
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/pictures/akrilovaya_vanna.jpg
Preview:	......JFIF.............C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....~...k.".3\g...}O..Z...&...Z..>..#k....7..).O_b..L.)6j.C..d.;u...M#.......0...==..a.g%.M.J..D.6...s..).e}.........2?...P..'}....;Q.....P..T..#.y....P......J.s.1....M[[h..V.w7c..<g..\|..UQ.7o....3......:=WRD.w..g.K.?......r../..M.%...I.)cl...A.#...Jo0kjm....$.U_...$M\|2n:m....s...x....\|..1}W.}......=2..+...2..$....n_w...Nok}...I..4.]......s.H...*}%....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\ame[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	502
Entropy (8bit):	4.943579764562912
Encrypted:	false
SSDEEP:	12:AzyxdZmOMiYD25iE/BjJCpnJCW7ZAL5FVVs5qpnJCWwL5FLy:VdQ7125HBI9g3TG5Ug9w
MD5:	9622D91FDCC2F64EF2BF69BD011DEDB6
SHA1:	70B6268D19A482097608A25105F76434828FD19A
SHA-256:	60922046C0B9BC9AD89EB14E6D697B5F626C53E13D348471D909ECE7FA3F8037
SHA-512:	D005FB42A496969FE4F3CF0ECEF1EBCB41FE1E93BA3B8388EC86C1CA8849CDFD072F356E9C2D5CA3DE8BEF2D849B09153BFBD0A6637C713784163D2FBB0BAFA5
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/clientscript/ame.js
Preview:	function ame_toggle_view(obj)..{...e = fetch_tags(document, 'div');......for (i = 0; i < e.length; i++)...{....if (e[i].id.substr(0,4) == "ame_")....{.....parts = e[i].id.split("_");.....zone = parts[2];..........if (parts[1] == 'noshow').....{......display = (obj[zone] == 'true' ? 'none' : 'inline');......e[i].style.display = display;.....}.....else if (parts[1] == 'doshow').....{......display = (obj[zone] == 'true' ? 'inline' : 'none');......e[i].style.display = display;.........}.......}...}..}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\armstrong_laminate[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x123, frames 3
Category:	downloaded
Size (bytes):	12905
Entropy (8bit):	7.955926796265628
Encrypted:	false
SSDEEP:	192:rbj/xLC6DtAhCh4sRPj9ZmfURsnWJIP6G+w+McT2zLpV3MINh/gG:rPVCqtAIhFRPjCUNIP6GHh3l34G
MD5:	82F9C3A05A19CE0749154AEE4F9E1D91
SHA1:	2333BEB045B63EA0C8BC9D4295A4BEFDDACB8551
SHA-256:	6EAFFAD65AE6538F1EEAA946CD5C63CF02ED84B63F0A1FC04C84C2CCC43259E5
SHA-512:	BF26F02D6E78DAF23C41F9C3666542B97934F01C2048B2BD0BFEF008C721F374FBC081331477148D28070E92FB91FE732D3482E18120275E5CDAE589C76EDDCE
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/pictures/armstrong_laminate.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................{.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....r.k\...\|...<...r......?.4..9X..7..B9!......c...K.I....(RW.\.zZK..G...h...=......fm.u...@...........}..=...b}F.....(...p...1..w.3..c..k>-....#.!v.#.~.....WW<..........o./.$..%......c...rO..=.}$........?.-.9.uK.+.+.>8,z.zp.~...\..K......z........w..:..pf..v.y.....G^....}F.-d.Uc..K..D........X.h.Q.S..,z....n...$.b....h..-..............U.R.0?..{..J4$..rT

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\background_gradient[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x800, frames 3
Category:	downloaded
Size (bytes):	453
Entropy (8bit):	5.019973044227213
Encrypted:	false
SSDEEP:	6:3llVuiPjlXJYhg5suRd8PImMo23C/kHrJ8yA/NIeYoWg78C/vTFvbKLAh3:V/XPYhiPRd8j7+9LoIrobtHTdbKi
MD5:	20F0110ED5E4E0D5384A496E4880139B
SHA1:	51F5FC61D8BF19100DF0F8AADAA57FCD9C086255
SHA-256:	1471693BE91E53C2640FE7BAEECBC624530B088444222D93F2815DFCE1865D5B
SHA-512:	5F52C117E346111D99D3B642926139178A80B9EC03147C00E27F07AAB47FE38E9319FE983444F3E0E36DEF1E86DD7C56C25E44B14EFDC3F13B45EDEDA064DB5A
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/background_gradient.jpg
Preview:	......JFIF.....d.d......Ducky.......P......Adobe.d................................................................................................................................................. ...............W..............................................................Qa.................................?......%.....x......s...Z.......j.T.wz.6...X.@... V.3tM...P@.u.%...m..D.25...T...F.........p......A..........BP..qD.(.........ntH.@......h?..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\calendar[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ISO-8859 text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	25366
Entropy (8bit):	5.679517291760683
Encrypted:	false
SSDEEP:	384:SfLC9LCjf3aXxuYU5CqDLxravQAwr4l1QRNmFnWy/3Yh5JZtevug:SfLCcjf3aXx8MihaIFOJFj/YHVev/
MD5:	29F70E7B96B943E197EF9BDEED02868F
SHA1:	B7B84801FA1E5E1C3CBF87A6C95ABD70BEFB0DDE
SHA-256:	8DB2F479E7AE5A1B5FDCD380E4F8FBC80029A6F5010773278612DCF719B71385
SHA-512:	B10F3BC70E9359E8C98B0D0025B49065D00E88B5A535FDA65E3A4589836A37D607689E50AD97B49D04E4379F7B0D59E59AD8A5ADCBCFA251ECCC2ED938A5360A
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="ru">..<head>..<meta name="robots" content="noindex,follow" />..<meta http-equiv="Content-Type" content="text/html; charset=windows-1251" />..<meta name="generator" content="vBulletin 3.7.0 Beta 4" />....<meta name="keywords" content=".............., ...... ......., ...... .........., ......., ........., ......, ..... ...., ....., ...., ......., ....., ....., ............, ......., ....., ...., ......., .........., ....." />..<meta name="description" content=".............. . ...... ......., ...... .......... . ....... .......... ......, ..... ...., ....., ...., ......., ....., ....., ............, ......., ....., ...., ......., ............. ....." />...... CSS Stylesheet -->..<style type="text/css" id="vbulletin_css">.. ../* vBulletin 3 CSS For Style 'Default Style' (styleid: 1) */..body..{...backgr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\checking[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	21298
Entropy (8bit):	5.404664327502462
Encrypted:	false
SSDEEP:	384:NAv3d2zTgHfIoWvZZ5bVKyHlmcvcZUX0uLLmXXM+IjciLxcHS5oM1LYxI6LNMron:NAFY0/Z45bVDFmck2X0uQM+IjcaxcHSa
MD5:	36105BC856519AD14E99DCBAC4F0F622
SHA1:	D93DE2582B07015448DB1227F23F047CA011A760
SHA-256:	1A8F940EB4DAAD51ED3D1D9A1BA98B6FF0376E3027B8B0AFEBFBC1B83DA604EB
SHA-512:	4082B24A5A340D6E744E9F5D9EA490ECE84BCD5736A6F5E2A7AABF2EEBD20062530BD2A374AC92BE2929EB30BAF5683285884D6AACBD08CFFF9542000D11A797
Malicious:	false
Reputation:	low
IE Cache URL:	https://sonar.semantiqo.com/c82up/checking.js
Preview:	const a0_0x5497=['bm8tcmVmZXJyZXI=','c3R5bGU=','Y29va2ll','Z2V0RWxlbWVudHNCeVRhZ05hbWU=','ZXhwb3J0cw==','bWl4','YFlZX1hkXltmbytwdA==','SU5QVVQ=','bmFtZQ==','YWRkbW0=','dXNlckFnZW50','XlVvX2Vn','cGhvbmU=','YXBwbGU=','VlVoaWBmaA==','cmVxdWVzdF9pZA==','WGBZVw==','ZXhwaXJlcw==','Y11ja2c=','Y2FjaGU=','ZmlyZWZveA==','ZGVmYXVsdA==','Y3JlYXRlRWxlbWVudA==','ZGlzcGF0Y2hFdmVudA==','ZGVjcnlwdA==','aW5uZXJUZXh0','c2V0VGltZQ==','b25tZXNzYWdl','cGFzc3dvcmQ=','Y2hyb21l','XlVoX2Vn','aW1n','Y2hhckNvZGVBdA==','ZnJvbUNoYXJDb2Rl','YmxhY2tiZXJyeTEw','WGBZZQ==','dGV4dENvbnRlbnQ=','cGFnZV9rZXl3b3Jkcw==','a2V5d29yZHM=','c2lk','Z2V0UmFuZG9tVmFsdWVz','ZW51bWVyYWJsZQ==','YWRkRXZlbnRMaXN0ZW5lcg==','dmFsdWU=','VG5WaGs=','dG9VVENTdHJpbmc=','dG9TdHJpbmc=','dXNlcl9hZ2VudA==','Y11jI2xo','ZGJs','YFVtZlhqZChea2o=','eWF0YWdz','aW5jbHVkZXM=','Z2V0VGltZQ==','b3RoZXI=','XGJbZWllW29taytpeQ==','Ly9zb25hci5zZW1hbnRpcW8uY29tL2M4MnVwL2FuYWxpemUuanM=','d2luZG93cw==','aHR0cHM6Ly9zb25hci5zZW1hbnRpcW8uY29t','cmVtb3ZlRXZlbnRMaXN0ZW5lc

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\collapse_tcat[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 15 x 15
Category:	downloaded
Size (bytes):	642
Entropy (8bit):	7.592598992442024
Encrypted:	false
SSDEEP:	12:P37NiHBkIze++ZWmwz3dI2JkDKSlZzwmQU3Ynh8+cJ770rTl:AlCZWmotJkjZzJr0G7Mp
MD5:	4D71F24A586BB2F607BC7127531E1868
SHA1:	F60C054360E2FC5FD74C8403E46549C7608AE148
SHA-256:	C84F5DC9EA1089D67C40C4E16D07E6C68358F845B152A4DA58E2585A94786379
SHA-512:	95599659C1153FF68AD2E0600308E840ACB147F425F5279BAD90AFFD5D8D02A2553B79446B99E093087898C5467FF4DA90748F463A42C6AEA18E2566ABAB475C
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/images/buttons/collapse_tcat.gif
Preview:	GIF89a.......{..b..u..Nn.s..Ig.f..?[.c..Po....6Nwd.._}.Ut.Sq.3Iq......3Jr....Op.f..f..\|..............h..i..}....Ij.x............=X.i..}..i..Qp..........o..Qq.=U.(>hQq....~..Us.8Q\|Wv.2M....4MyZz.Yx.1J.t....9P.n..Ha.Sq....h..Sr............Oo....!3].........Ii.p..1Iw......#<wx..r........B^.!7j'<m\|..Qr./Iz+F..........^~..........5O....h.._\|.Fb.Cb.j..`..;T.r..4Hz...)?n/I.8S.h..i..n..:S....!.......,...........N....1...1...N5-....&.&....-2.?(.jkO!wJ\.(:.8.'Sm!U.os.K'.I."]BA...p.Fg".$.Xuh....q6.$..a...9.zE..0%.>.t..^).V@%...HbTq..).;3......m..274..S.L.a. ....I."..D.....1y.@......\|:D`..N.!Zx.).... 2l....L..\..B..7.Vx..a..= >....;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\down[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 15 x 15, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	748
Entropy (8bit):	7.249606135668305
Encrypted:	false
SSDEEP:	12:6v/7/2QeZ7HVJ6o6yiq1p4tSQfAVFcm6R2HkZuU4fB4CsY4NJlrvMezoW2uONroc:GeZ6oLiqkbDuU4fqzTrvMeBBlE
MD5:	C4F558C4C8B56858F15C09037CD6625A
SHA1:	EE497CC061D6A7A59BB66DEFEA65F9A8145BA240
SHA-256:	39E7DE847C9F731EAA72338AD9053217B957859DE27B50B6474EC42971530781
SHA-512:	D60353D3FBEA2992D96795BA30B20727B022B9164B2094B922921D33CA7CE1634713693AC191F8F5708954544F7648F4840BCD5B62CB6A032EF292A8B0E52A44
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............ex....PLTE....W..W..W..W..W..W..W..W..W..W..W..W..W.U..............W..W.!Y.#Z.$\.'].<r.=s.P..Q..Q..U..o..p..r..x..z..~.............................................b.............................................................................................................................................................................................................$..s...7tRNS.a.o(,.s....e......q*...................................F.Z....IDATx^%.S..@.C..jm.mTk...m.?\|;.y..S....F.t...,.......D.>..LpX=f.M...H4........=...=..xy.[h..7....7.....<.q.kH....#+....I..z.....'.ksC...X<.+..J>....%3BmqaV...h..Z._.:<.Y_jG...vN^.<>.Nu.u@.....M....?...1D.m~)s8..&....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\errorPageStrings[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	4720
Entropy (8bit):	5.164796203267696
Encrypted:	false
SSDEEP:	96:z9UUiqRxqH211CUIRgRLnRynjZbRXkRPRk6C87Apsat/5/+mhPcF+5g+mOQb7A9o:JsUOG1yNlX6ZzWpHOWLia16Cb7bk
MD5:	D65EC06F21C379C87040B83CC1ABAC6B
SHA1:	208D0A0BB775661758394BE7E4AFB18357E46C8B
SHA-256:	A1270E90CEA31B46432EC44731BF4400D22B38EB2855326BF934FE8F1B169A4F
SHA-512:	8A166D26B49A5D95AEA49BC649E5EA58786A2191F4D2ADAC6F5FBB7523940CE4482D6A2502AA870A931224F215CB2010A8C9B99A2C1820150E4D365CAB28299E
Malicious:	false
Reputation:	low
Preview:	.//Split out for localization...var L_GOBACK_TEXT = "Go back to the previous page.";..var L_REFRESH_TEXT = "Refresh the page.";..var L_MOREINFO_TEXT = "More information";..var L_OFFLINE_USERS_TEXT = "For offline users";..var L_RELOAD_TEXT = "Retype the address.";..var L_HIDE_HOTKEYS_TEXT = "Hide tab shortcuts";..var L_SHOW_HOTKEYS_TEXT = "Show more tab shortcuts";..var L_CONNECTION_OFF_TEXT = "You are not connected to the Internet. Check your Internet connection.";..var L_CONNECTION_ON_TEXT = "It appears you are connected to the Internet, but you might want to try to reconnect to the Internet.";....//used by invalidcert.js and hstscerterror.js..var L_CertUnknownCA_TEXT = "Your PC doesn\u2019t trust this website\u2019s security certificate.";..var L_CertExpired_TEXT = "The website\u2019s security certificate is not yet valid or has expired.";..var L_CertCNMismatch_TEXT = "The hostname in the website\u2019s security certificate differs from the website you are trying to visit.";..var L

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\f[1].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	196
Entropy (8bit):	5.352233396428427
Encrypted:	false
SSDEEP:	6:tDpuPSD1/5qTXZN+TXObT++lVJ72B7uP+2:9pftUbGbObT1jC7N2
MD5:	CB1C933D6B0008A7D4285AF076470E0C
SHA1:	2DD60E234AA7893E0837D3E7F658849FC977A5F8
SHA-256:	EFC785A53865D92E80D4E6BE4B27BC4CC2C36E4597AC7439E272240DD93D4372
SHA-512:	D3931C596B6D2C1FD61E9C2D4A1B6F3C2ACB9E920CC7FC806FCD940FF4534714880FA8A647C0E1B97FC798DFE1A18F4EE099DAB00015A391C4AFE9DA4BC43A5A
Malicious:	false
Reputation:	low
IE Cache URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=ovd.ru&callback=_gfp_s_&client=ca-pub-2867059600462301
Preview:	_gfp_s_({"_cookies_":[{"_value_":"ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA","_expires_":1643697162,"_path_":"/","_domain_":"ovd.ru"}]});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\favicon[1].ico Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel
Category:	downloaded
Size (bytes):	894
Entropy (8bit):	3.0360776617764853
Encrypted:	false
SSDEEP:	12:t4R2oYYY3798lyaVeRYYYuqCcIRMTpznLHeqpFPaZVae49:tCw798l0qCcIYpneqXPGwn9
MD5:	339B61E2CDD6DFF8AC2C2929BCF9D0D9
SHA1:	9DD5366AA5A61AADCA01DC2F98EA05DE6ED4DA27
SHA-256:	734E8105C4667907E2F0580E102FD63D5B3615E92D24E22FBA17E3435FF5382C
SHA-512:	6E7B8FB20762BA7F752BB44DFC6D3296CB3450F053525A1E6791F8CDE69EE131A3FD7625DA5112D0ECCE134D683CD8911919CE943CC81ED64737A39E9AA88916
Malicious:	false
Reputation:	low
IE Cache URL:	http://loginza.ru/favicon.ico
Preview:	..............h.......(....... .......................................................................................................................................................................................................................................z.........................................................................................zzz.....................zzz..................zzzzzz...............zzzzzz..........#..(.............#........#..............#..#..#..#..........'..#........#............#..#.....#....)..#..#..............$....)..(..#.. ........#..#..#..................!..*....................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\forum[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	345
Entropy (8bit):	5.330741509102649
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwol6hEr6VX16hu9nPijTcnaozOUKR+kryCqtcXaoD:J0+ox0RJWWPUTcnaR0W6ma+
MD5:	2AF4F2DD3371213A7F681BA7BF3CE021
SHA1:	4401D58414E76FBBF6B323588FD1FA7BF70F675D
SHA-256:	0D4DC2F1FC7A7907A5A2F9721FBF36401E86E11B2BE8EC129D151931865B0D45
SHA-512:	0967C9002E6FF96711094923A9EE533B3CCE822249A0F9D1FF13CDEAE7F5F278D176502E81A381327B73152C52FA60BB61BBB97E40FB0CCF8CB96A575DB56F52
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>301 Moved Permanently</title>.</head><body>.<h1>Moved Permanently</h1>.<p>The document has moved <a href="http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6c">here</a>.</p>.<hr>.<address>Apache/2.4.41 (Ubuntu) PHP/4.4.9 Server at ovd.ru Port 80</address>.</body></html>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\forum_new[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 29 x 30
Category:	downloaded
Size (bytes):	1623
Entropy (8bit):	7.8045210987190865
Encrypted:	false
SSDEEP:	24:nvkMP7+4slmyMEU1WbDobzTJKe9EI4mlXKUti34fuAUcHF0F19NanZqT5jUQ:nvJslq3Vzwe6cuA9F0jG8JUQ
MD5:	FA1C1A7D21A7693942D8BED675BD4287
SHA1:	1D4BA888442F1CC7C14E22A6E5E5DF301182B9ED
SHA-256:	28D1BB4911CDD8D93D1DD23EC59A9B92F53A19885F7CCEAA3AF5EA6F8F2AA127
SHA-512:	382A71B949BB7A16BF84ED767317D1A390FD156DFBCFE9590AF25CB0D85C8135BC4EEDF3574B66889138D797D8C8890D2AA731DA734EF4321721EBF48CA9EB2B
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/images/statusicon/forum_new.gif
Preview:	GIF89a..........sR...Uz...R!...{........y........9........N....\.....rW:......v...,n...l{.x.....\....;f........'Dj....u....[...i{...................&'.....{....3...ghh...c...............=Z.........^z.KW....e........F...zz{...Rv.......Id.m.............2..9...d{.....\|.@....}........q..........@Qn............\s.............8...X[\.w6...Lq.Go....._>....................<R.\|...6............................A]..............HIN...............................`r.........c..lp.........7V....<>@.........^`f.......e.........q..}.......X+.....m....u..lnpp}.gXF...\|.......6.?.....................^e.Vl.......~mNNStj[.e.k;.m).q,..............l..^..w.......N.W)A.......................u..................n................!.......,.............!@ ...7..)4....#..r.......e..)+.$.(....D.Au`.(#+..i....]k.D#hpd.$.8..zkM-./8..w.C.jR A..DJ..Y>4Y....""....L......!LL.c.r...Dk.2sz..0..G.8I8.B.(..g.z.-.s.l.C..@.C.... T.aM.....L..B...5t(;Dl

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\ga[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	46274
Entropy (8bit):	5.48786904450865
Encrypted:	false
SSDEEP:	768:aqNVrKn0VGhn+K7U1r2p/Y60fyy3/g3OMZht1z1prkfw1+9NZ5VA:RHrLVGhnpIwp/Y7cnz1RkLL5m
MD5:	E9372F0EBBCF71F851E3D321EF2A8E5A
SHA1:	2C7D19D1AF7D97085C977D1B69DCB8B84483D87C
SHA-256:	1259EA99BD76596239BFD3102C679EB0A5052578DC526B0452F4D42F8BCDD45F
SHA-512:	C3A1C74AC968FC2FA366D9C25442162773DB9AF1289ADFB165FC71E7750A7E62BD22F424F241730F3C2427AFFF8A540C214B3B97219A360A231D4875E6DDEE6F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google-analytics.com/ga.js
Preview:	(function(){var E;var g=window,n=document,p=function(a){var b=g._gaUserPrefs;if(b&&b.ioo&&b.ioo()\|\|a&&!0===g["ga-disable-"+a])return!0;try{var c=g.external;if(c&&c._gaUserPrefs&&"oo"==c._gaUserPrefs)return!0}catch(f){}a=[];b=n.cookie.split(";");c=/^\sAMP_TOKEN=\s(.?)\s$/;for(var d=0;d<b.length;d++){var e=b[d].match(c);e&&a.push(e[1])}for(b=0;b<a.length;b++)if("$OPT_OUT"==decodeURIComponent(a[b]))return!0;return!1};var q=function(a){return encodeURIComponent?encodeURIComponent(a).replace(/$/g,"%28").replace(/$/g,"%29"):a},r=/^(www\.)?google(\.com?)?(\.[a-z]{2})?$/,u=/(^\|\.)doubleclick\.net$/i;function Aa(a,b){switch(b){case 0:return""+a;case 1:return 1a;case 2:return!!a;case 3:return 1E3a}return a}function Ba(a){return"function"==typeof a}function Ca(a){return void 0!=a&&-1<(a.constructor+"").indexOf("String")}function F(a,b){return void 0==a\|\|"-"==a&&!b\|\|""==a}function Da(a){if(!a\|\|""==a)return"";for(;a&&-1<" \n\r\t".indexOf(a.charAt(0));)a=a.substring(1);for(;a&&-1<" \n\r\t".i

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\gradient_panelsurround[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 10 x 450
Category:	downloaded
Size (bytes):	3395
Entropy (8bit):	7.792102201569792
Encrypted:	false
SSDEEP:	96:ZQomHFKaWUsxXGrF9fzR/3KHtb7INCpBXoDOC0gXO:eoeKaGG5fSHd7MC7YF0f
MD5:	F7664719A1698C0EB659B284EE33B666
SHA1:	645DB90F3BE319F6E9A0959EF0B3557085202413
SHA-256:	C2F201D4C4DA428FA908E41016F8D08FFB16A4591B7666010762B434648F0737
SHA-512:	011411E2987432F1501FD4166D962AF6F095CF4C3F05829FA50DC909541EE84338701E11E43613D3876DA4C6689F1CEB98D4B0123FDB7B6ED7483831F29A3B3B
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/images/gradients/gradient_panelsurround.gif
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................!.......,............{.......{ ...{.......{....{............ ..........4.. ......4~.44...... ...........~... . .~.. 4.~........~...~...... ........m....a...qAX1_.:.+..".o.\U"v..<..}...o.0?....W.N.+..y....Pv...^Gz...h.Di....f.K..$b...7...t..R........Y`..Z.J..X..+...rl%.6...\|g...g...v..%Lwf..R.*.U......!L..`.}>..3./..~.%B......&\..a..d.....h.I...{x..^E. m..g....~N:8_.u...{yp...s....t.w..~.....G.~w............<.].W.q.hO@.`.\@.......vO<...qa....x.....A.....z...."....#... .`c./....)......$....<.i...=....M...FV...!.X..P..#._..S.ye.O^...Z..f.+..e.d..#.s.9...9f.\.i..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\gradient_thead[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 100 x 100
Category:	downloaded
Size (bytes):	3004
Entropy (8bit):	7.585131358298658
Encrypted:	false
SSDEEP:	48:tRukMGAhUszRxvTbgqxG0/t0ZVq1DkGyObtIps+FgjOUooDBWTdRJb31d6cT:t4khAhr7TbfRmXCU9UogWTdP6cT
MD5:	D4FC28A59A778BD0C69234A3279633EC
SHA1:	C5362D4C766EC31A150E1DB3B7F1F79DC69B5CB9
SHA-256:	25BD3D67B8D17BD539A64720CAC3C9127F8DCABE4262F83517C2EB3B6CD4E8DA
SHA-512:	1BFE2DD13ABAC6B8335716522EF308C092EFB8579FB04A78ECA5E4702B36EBD764A12EB91E655854E0CF7E84EA1C086C07D8784C8AED046FF6E75E89AB7B6B26
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/images/gradients/gradient_thead.gif
Preview:	GIF89ad.d....3M.Ti.;T.Ja.E\.Lb.C[.8Q.H_.[o.Xm.G^.5O.<U.Oe.Zn.Zo.Sh.4N.Wl.9S.Qg.=U.5N.6O.AY.>W.Uj.[o.>V.7P.Qf.@X.Yn.4N.Nd.Md.Wk.Rh.8R.Ym.F^.Vj.:R.I_.Lc.Uk.BY.:S.?X.7P.Pe.6P.Oe.7Q.>V.CZ.BZ.@X.H`.;S.J`.Yn.Mc.6O.4M.Vk.E].Vl.[p.Xl.G].Xm.AZ.Tj.;T.C[.5O.[p.Rh.Qg.9R.>W.Xl.I`.Zn.@W.F].4O.4M.Sh.Ka.<U.9R.Qf.Lb.7Q.[n.3N.6P.Nc.?X.Zm.Of.D\.E\.3M.CZ.6P.8Q.Ym.Nd.Wl.Md.\o.5P.Ti.=U.D[.=V.Kb.9Q.Wk.Pf.K`.?W.Sg.D].Zm.Pg.@W.AZ.Ym.Pf.AY.Rg.6Q.H_.DZ.Ja.J`.Nc.Vl.G^.Vk.BY.3N.Tj.Of.D[.\p.Pe.Yl.Mc.F^.Kc.5P.Ui.?W.Rg.K`.E].;S.Uk.Zo.:T.<V.\o.6Q.:S.Vj.9Q.G].Ka.D].Yl.D\.Kc.Sg.8R.Kb.\p...............................................................................................................................................................................................................................!.......,....d.d........H......\.aB......Q.D5.DH.$.c..Y4..@q.H..)JP..e..#%...2.../E...2.. Y...............X.0`pA.U,..^.....U.b.:5.R.Z.. .a.F....._...:.....`......404..d.` ....<...1...V.!.d.4..&...d.M.......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\httpErrorPagesScripts[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	12105
Entropy (8bit):	5.451485481468043
Encrypted:	false
SSDEEP:	192:x20iniOciwd1BtvjrG8tAGGGVWnvyJVUrUiki3ayimi5ezLCvJG1gwm3z:xPini/i+1Btvjy815ZVUwiki3ayimi5f
MD5:	9234071287E637F85D721463C488704C
SHA1:	CCA09B1E0FBA38BA29D3972ED8DCECEFDEF8C152
SHA-256:	65CC039890C7CEB927CE40F6F199D74E49B8058C3F8A6E22E8F916AD90EA8649
SHA-512:	87D691987E7A2F69AD8605F35F94241AB7E68AD4F55AD384F1F0D40DC59FFD1432C758123661EE39443D624C881B01DCD228A67AFB8700FE5E66FC794A6C0384
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/httpErrorPagesScripts.js
Preview:	...function isExternalUrlSafeForNavigation(urlStr)..{..var regEx = new RegExp("^(http(s?)\|ftp\|file)://", "i");..return regEx.exec(urlStr);..}..function clickRefresh()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..window.location.replace(location.substring(poundIndex+1));..}..}..function navCancelInit()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..var bElement = document.createElement("A");..bElement.innerText = L_REFRESH_TEXT;..bElement.href = 'javascript:clickRefresh()';..navCancelContainer.appendChild(bElement);..}..else..{..var textNode = document.createTextNode(L_RELOAD_TEXT);..navCancelContainer.appendChild(textNode);..}..}..function getDisplayValue(elem

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\i[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.0021975300504877
Encrypted:	false
SSDEEP:	3:CUO/RD/wlHrfx/n:oD2/n
MD5:	ED280A0EA3CC38F3CBBC747ACFBEF47D
SHA1:	6BDCB32EE75E957A5085C010F4DFD0C716BFDADC
SHA-256:	8F69E10876805B747A3AD08A818D46AC7E731B1AF417EA6E259D9B6B7DEB65C5
SHA-512:	4248E293BB759C3AC0EA71F545E10E85D0C3C7F1237CE8B18C6A3FD00499A11BDC0252C938BE87359FA673C8E7A83C7CC6FC5D12718A68844C2615E5DCA3527B
Malicious:	false
Reputation:	low
IE Cache URL:	https://dmg.digitaltarget.ru/1/1093/i/i?i=415775590532713.27982561741169&a=77&e=0100007F09ABF65FFE0029A40224C90B&pref=http%3A%2F%2Fovd.ru%2Findex.php%3Fs%3D8848772e8198313ee133bfa7158b7b6c&c=ss:77.up:0100007F09ABF65FFE0029A40224C90B.sync:up.xdua:duj5a_4SPyBO2J9AFt6sza2e.xps:xpsSnhUZQBDGxGnXpNL5Tlu5C.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
Preview:	GIF89a...................!.......,...........T..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\match[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\otdelka_komnaty[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x112, frames 3
Category:	downloaded
Size (bytes):	10308
Entropy (8bit):	7.95216417537893
Encrypted:	false
SSDEEP:	192:o/cftWLR0Wv+jaOtfNhbuOwKDldK9eFMGU1HK4sOHUll:oE8X2aOtfWO3Rd3MG6Sv
MD5:	47CB42A78B08976E1D2768153B64C3FD
SHA1:	93E395866CF68408CF28B0F6BF0B73B851D230E9
SHA-256:	57EA79017E8F5AF9AD470F46AD76D98643006C7B9E94A8C6748751788377EBDE
SHA-512:	AF32D175BFCB4590CE8AF75FC9DE0BE465D75E3CBAB577774C6C2CCE7E4C416E9EEFFDEF6962D8A82B95C1B4BE432B98C7894B6B36052A2AF84A1C282DE0A042
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/pictures/otdelka_komnaty.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................p.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..$.4..U<.U&.....N.8.2t....(.d...R2N....1...t..?B.P..}..r8x.@..[d...._..<g.@.oo....o...1..].R../..w..H.....{.bQ'_SK.,8K.-R....}sS.U..L...CcJ.i.\|....:B.W.q.,,?....E....C,......##....t...1.})..1.}).b8I.(be.a8.jn$ZH..........[g.!.....".V...4]........0[.qI.....a#9.Qq.h.<T9..&.8.s-!\|...R.$1.b8.C..B.>zsP.".n$v...)..)..i..#.F5.E..i.......!@.....z.....Y..a.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\ovd[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	450
Entropy (8bit):	7.352595509877019
Encrypted:	false
SSDEEP:	12:6v/7jZ5nQtVL6DKJ8hGwtsWoOdm54GzBzmsG/10CLo9:saVL6u8AOdm5FzBzPero9
MD5:	FA187CF462FCED0BEAD478D62B7333D9
SHA1:	B1732A2450C6C57FA60559A971046835607D298E
SHA-256:	73B249D1EEA2FD38C2F9349EFE0A6166F0A54BAC75D655986F20B7125E941A16
SHA-512:	4B573419631968D75ECB1E43582E6685CEC6460BB9BE145412FF194D77A3A42277DDA4D2423CEC4B4EC79692D489BD82CAA497E89F5311546C0A59B3DD6BDA55
Malicious:	false
Reputation:	low
IE Cache URL:	https://favicon.yandex.net/favicon/ovd.ru
Preview:	.PNG........IHDR................a....IDATx....\Q.Ew.m.n.",..A.8.k.6.".m..~.x.....3...J..:.haW..<B...w.&H..../....r.]0..ur..T..2...F......,.P@.X....f..fP.]p....V..:..}...........6.m?l.N>.....:....,......B(\......@..!....@I%#.a.'@.....o......R.+..3..b.nT.p.<..\..Jt..GG.r...s_...e....._Y..O..6.V]#..MZ.F.....9.fL..B..qvUG.VF..V.I.W..........c{.ab[.BTE..e.t.q,.i....X.qA@.L1..3"..$.....3M...\.E.,....b..........p.7......IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\overlay[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 102 x 101, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	264
Entropy (8bit):	5.560747423096658
Encrypted:	false
SSDEEP:	6:6v/lhPWuRgjnDspPioiSwC2UbsIak3g2sIak3g2sOVsk3g67gSYp:6v/7lg8hiovmUwIvyIvyOVFn8Sy
MD5:	1091FE72A248AFB3951E1498C9FE9E34
SHA1:	45A56092AB2C410C8203F13BA63DA7841CBA6AD3
SHA-256:	9C449CE6243AF5E8555BD82F0CB8819B6DE05A3729C69848EC19FC52D4021001
SHA-512:	DA54E58FCEE0B3EEC382ADE9AAE585C6132DF0DBDF9E7E86938A9C8E0F90E5E7A873135D287FBD3ABDF1CBA81A5917E5B13A9599F8543839576F9F9C52CD064F
Malicious:	false
Reputation:	low
IE Cache URL:	http://loginza.ru/img/widget/overlay.png
Preview:	.PNG........IHDR...f...e......K......tEXtSoftware.Adobe ImageReadyq.e<....IDATx...A.....@.RIH...E.e.l.]e....#0`.F`.......0..F`.......0.#0`.........#0`.F`......#0..F`.......0.#0`.........#0`.F`......#0..F`.......0..F`.........#0`.F`.......'........YfX.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\p[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
IE Cache URL:	https://ic.tynt.com/b/p?id=bsa6p-zQar4yFiacwqm_6l&lm=0&ts=1610033600353&dn=TI&iso=0&t=%D0%9E%D0%B1%D1%83%D1%81%D1%82%D1%80%D0%BE%D0%B9%D1%81%D1%82%D0%B2%D0%BE%20%D0%92%D0%B0%D1%88%D0%B5%D0%B3%D0%BE%20%D0%94%D0%BE%D0%BC%D0%B0%20-%20%D0%A4%D0%BE%D1%80%D1%83%D0%BC
Preview:	GIF89a.............,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\planirovka_kuhni[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x133, frames 3
Category:	downloaded
Size (bytes):	14112
Entropy (8bit):	7.964869201064041
Encrypted:	false
SSDEEP:	192:Jma/JrmIV/mJv0SUg4EXcjbOtIHokzItZN6uFGjL/F7IeqyyDtqp4Y:JdrIv0SfXc2tII8CZEuFGN7IvY9
MD5:	7908D2A12634E7CB26F9CEA5EE3470EC
SHA1:	DC3A0ADAD0C32715C7BB3CC9AA9874A4B07C009D
SHA-256:	AD8BAED01CA4D5BF8EE50A01C9428C2556BBA02B970425992959C66EC7237BF9
SHA-512:	54AB6FF1DB4FFBDC156798C09BEB216505698D7D510FF4EEA9D2A3A5101599EE908E4B2C642C33B518B12597874C4AAC81884025099960BB5D724D7B456327A5
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/pictures/planirovka_kuhni.jpg
Preview:	......JFIF.............C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....@...2w..k...a....qCzlH.~.Aq....J.G4.X..'...L.9&.I.=......6.$.E...H.cC#.......I]...<7QMO........36F....#.:....xu.......S......g..z....A.XC.A............h.F:$xUJ...e...)......r..<....dVF@.x ........\|....c..n.@.nvm...>\..\Ur.5].g.....e.....u...r..../........R....22........2=[./.........J......./l5;-.}....s..['..nx......]V.......u..w....M..B...\|}:z.....<.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\podelis[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	2822
Entropy (8bit):	5.444146666140641
Encrypted:	false
SSDEEP:	48:LyRciFu3diy6I1HvEgTazpY9OIttzwX9sUBY6XPdjhoyW:kFu3ZxvEmOQ2XZBlPjW
MD5:	5630C57C2E03E30ED1E040C5DEB6BCD6
SHA1:	C1877CA8DB9365E92ABA8D26F2D23072AC232C7C
SHA-256:	F162B3226D8432A3E3F3D3DB4EF66AB19B8D94E7EE7FA95428551DAA0ED2FB6C
SHA-512:	14A56F86ECB44EF074F10C8BA3902D44B268E00DE228A297A135550FCB7107A2B1496B6ED8112DBB0BF766A14D7EF1DDF140F9C6A9FD9FFF04C35059E0709E44
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/podelis.js
Preview:	function NewOdnaknopka3() {..this.domain=location.href+'/';..this.domain=this.domain.substr(this.domain.indexOf('://')+3);..this.domain=this.domain.substr(0,this.domain.indexOf('/'));..this.location=false;..this.selection=function() {..var sel;..if (window.getSelection) sel=window.getSelection();..else if (document.selection) sel=document.selection.createRange();..else sel='';..if (sel.text) sel=sel.text;..return encodeURIComponent(sel);..}..this.url=function(system) {..var title=encodeURIComponent(document.title);..var url=encodeURIComponent(location.href);..switch (system) {..case 1: return 'http://vkontakte.ru/share.php?url='+url;..case 2: return 'http://www.facebook.com/sharer.php?u='+url;..case 3: return 'http://twitter.com/home?status='+title+' '+url;..case 4: return 'http://friendfeed.com/?title='+title+'&url='+url;..case 5: return 'http://connect.mail.ru/share?share_url='+url;..case 6: return 'http://www.livejournal.com/update.bml?event='+url+'&subject='+title;..case 7: return

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\processor[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	15771
Entropy (8bit):	5.402366487286079
Encrypted:	false
SSDEEP:	192:QsPWrOBHLaY1Rz7C8zGrPTZy/1NjUaUmG1xXFggjQ4Y9e28auDUzBTxYMcViCurg:PhBH5yrPINHUmQxqzc/m9YMNBrg
MD5:	C4AE3F8C8523339DF841704B8C0CBCDA
SHA1:	F36948ADAF986D22DDE5A1CDE3490FE28842B143
SHA-256:	A566F562925C19B32CF8B642CB770A3D30E6451A1D5C9B8B081F192B5281ACC2
SHA-512:	63B96411E6BC535383671419E9D4B4864CEEA2EFFC5A66BAD8342106DE330F34025111447C43036D9F678DFC1DD6951E021F46C9641F9CF332FE5D9DA9E6FEF6
Malicious:	false
Reputation:	low
IE Cache URL:	https://tag.digitaltarget.ru/processor.js?i=529233562417770
Preview:	try{window.adcm.ext({knownIds:[127,143,1034,1041,1064,1065,1066,1067,1072,1073,1075,1078,1079,1082,1083,1086,1103,1131,2210,2025,2039,4009,6015,6016,6284,6321,6331,6343,6361,6363,6364,6368,6371,6370,6383,4021,6328,6432,6336,6524,6505,6026,6242,6414,6380,6226,6358,6504,6412,6463,6624,6679,6637,6229,7237],encode:function(a){return encodeURIComponent(a)},encodeFull:function(a){return encodeURIComponent(a).replace(/\./g,"%2E")},equal:function(a,b){if(!a\|\|!b)return!1;if(a.length!=b.length)return!1;for(var c=0,d=a.length;d>c;c++)if(a[c]instanceof Array&&b[c]instanceof Array){if(!this.equal(a[c],b[c]))return!1}else if(a[c]!=b[c])return!1;return!0},blank:function(a){return a\|\|""},aggregate:function(a){var b=document.referrer,c=window.location.hash,d=[],e="i="+this.session+".";if(e+=a.extdataid?this.encode(a.extdataid):Math.round(1e15*Math.random()),a.profileId&&a.platformId){var f=this.encode(a.platformId),g=this.encodeFull(a.profileId);e+="&a="+f+"&e="+g,d.push("ss:"+f),d.push("up:"+g),d.push

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\register[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ISO-8859 text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	24196
Entropy (8bit):	5.712127186935887
Encrypted:	false
SSDEEP:	384:SfLC9LCjf3aMxuOU5CqDLxravQnwOVXhmGnWyQBYh5Hevug:SfLCcjf3aMxcMihaIwI0Gj0YHHev/
MD5:	F91B7AB76B9AFEFDCFFBF27F205F74A9
SHA1:	CB0ECA1AA1108E7C5C039AC016EFBBBC6A5EDE23
SHA-256:	2C31A954887C80B45F0D0DC9ED90B0B20B9745D78B76AB09F797C0B91E06C345
SHA-512:	C24B4BA66F5E160C188E17B1B3292D9B8A13074F9BC477C98F02FC40489C327ACAF61A16E036E2D430DFC3B6B7C587894348D4C27FAAD90ED76C3595D093FCEE
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="ru">..<head>..<meta name="robots" content="noindex,follow" />..<meta http-equiv="Content-Type" content="text/html; charset=windows-1251" />..<meta name="generator" content="vBulletin 3.7.0 Beta 4" />....<meta name="keywords" content=".............., ...... ......., ...... .........., ......., ........., ......, ..... ...., ....., ...., ......., ....., ....., ............, ......., ....., ...., ......., .........., ....." />..<meta name="description" content=".............. . ...... ......., ...... .......... . ....... .......... ......, ..... ...., ....., ...., ......., ....., ....., ............, ......., ....., ...., ......., ............. ....." />...... CSS Stylesheet -->..<style type="text/css" id="vbulletin_css">.. ../* vBulletin 3 CSS For Style 'Default Style' (styleid: 1) */..body..{...backgr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\stats[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 30 x 30
Category:	downloaded
Size (bytes):	1461
Entropy (8bit):	7.735255231628324
Encrypted:	false
SSDEEP:	24:3uD+1KTHc6VdgPiCcMX8DuICwPDgrf8EqNhU/wv6iMQOU+KmZy2x0VJnsg:c+1pImzsDuHw7gjPwv6iJOiz7sg
MD5:	4F8CB28F9E9E66EBBDEE9E43C06BB25D
SHA1:	1A5AED636C8EB5522147DECD5F5EDAA6278FFE68
SHA-256:	BFBAB0A2802EA73CF61E34464B5AA8275E8721FB1D31347813FD7660F32E6942
SHA-512:	3EE625E68F74D2E1E7CA02CF7B8994D9E260DA963AEEF8AAF163F8A3A7C1D6FF7A883FB0DBF47B2927D088C398F3DC636B5D67B8BF0E4831378282DDC5DD496C
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/images/misc/stats.gif
Preview:	GIF89a........i..........[..5/....21=JV....}.....u...Ytt............a....d......,2...Sc.......Yfy.>Dx...pUk...]u.\|.(5J.....Rf....j..........i..f..]...f.X..a.....h..CQ...{.......x...Zo..b..........x..^.}rw.....Oi...o..v2$...H7P......WU[y..q.zk.....t.............f"$....29....f.......h...........y..&)......O.........b..........o........+.............ju....0 /.....}........g......Tj.......YX........x...k...........v.....u{.....Mt.:S..... ........n...!j..t........%#~..e..._.g.[...Z`.If\g.;CO....\....JZ..................................a..]...........{...........T..[&)...~.!.........o..o..B\|s.x.^ppUyq........b.................[..[..^........APn..........BI.]P....g.....j.>..]...;-.`\|.4:........p..dUNq..~._..bx.g.....!.......,........@......H.`. ?.1.d.aA!..<Y...+s.9A`k.=D..yp.hM.[...X.....I.........X.. ..?....&B0..... ..C...d0.._..U@...)........U#.(..(E.x~...(fD.)nx.X.....%.(.).9]. .:.....+F\|...IO3k6....z..m.(A. 6l.e....1..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\vbulletin_md5[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Pascal source, ASCII text
Category:	downloaded
Size (bytes):	9661
Entropy (8bit):	5.18571154565802
Encrypted:	false
SSDEEP:	192:ixUPr8N99Hv2I9OZIMDmZ7jHfz9zKIqWt9dmd00sBjaeWrGMwWDgtJHuPmnDj1xQ:ixUIN99Hv2Ig6MeHfxplbdm+5BjaeFVu
MD5:	F757DD60DC58AC8F11E9D23561664862
SHA1:	1EE8D026F89237BCF18D06595FC9CA0D801E1270
SHA-256:	E6FF24563C3FE90F6596D3DC1B17D5414D7DBEA7BA5E7E14F0B50B850438B9A1
SHA-512:	DB99017F53AF43232400C2D1DC0A354745ED83BC8099FA57D2ACF8393C458A6932BFAD1D3E6ED57B97A65C4358BCA856BD7AAEE7176C831A1B8F6DC2F1726A9E
Malicious:	false
Reputation:	low
IE Cache URL:	http://ovd.ru/forum/clientscript/vbulletin_md5.js?v=370b4
Preview:	/. A JavaScript implementation of the RSA Data Security, Inc. MD5 Message. * Digest Algorithm, as defined in RFC 1321.. * Version 2.1 Copyright (C) Paul Johnston 1999 - 2002.. * Other contributors: Greg Holt, Andrew Kepert, Ydnar, Lostinet. * Distributed under the BSD License. * See http://pajhome.org.uk/crypt/md5 for more info... * vBulletin Usage: md5hash(input,output). * Recommend: input = password input field; output = hidden field.. /../. * Configurable variables. You may need to tweak these to be compatible with. * the server-side, but the defaults work in most cases.. /.var hexcase = 0; / hex output format. 0 - lowercase; 1 - uppercase /.var b64pad = ""; / base-64 pad character. "=" for strict RFC compliance /.var chrsz = 8; / bits per input character. 8 - ASCII; 16 - Unicode /../. * These are the functions you'll usually want to call. * They take string arguments and return either hex or base-64 encoded strings. */.function hex_md5(s){ return bin

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\watch[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	C source, UTF-8 Unicode (with BOM) text, with very long lines
Category:	dropped
Size (bytes):	119315
Entropy (8bit):	5.584030640651237
Encrypted:	false
SSDEEP:	1536:SnOpM8BGl7BqOLEN2B6sF5SE6D25rJ65ZQsPL11CXFUozl37oB7bwJm9nBfMntja:SnOXG5BdEPsTCx1CfspZpatj3m5kY
MD5:	1E1EAAC3ED4F483C76CD0DFD40ACB5D0
SHA1:	5AB1A9454F8BF1ACC1CA552838A4523E2B7727B4
SHA-256:	45C58FE4387FC3895B6DF008A1C52235C508EE801F96B45991CF99C50281EB34
SHA-512:	1795191DD468FAF4D7D38ED43F5A366F751CBAF0AE1C8AF57CF71F60B9F55C39B99FF4229559742946CC988D5EFA72B8B55FBA507497C03480450AF8A3EE165C
Malicious:	false
Reputation:	low
Preview:	.(function(){function Ib(K){var ua=0;return function(){return ua<K.length?{done:!1,value:K[ua++]}:{done:!0}}}var xc="function"==typeof Object.defineProperties?Object.defineProperty:function(K,ua,Ua){K!=Array.prototype&&K!=Object.prototype&&(K[ua]=Ua.value)};.function hd(K){K=["object"==typeof globalThis&&globalThis,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global,K];for(var ua=0;ua<K.length;++ua){var Ua=K[ua];if(Ua&&Ua.Math==Math)return Ua}throw Error("Cannot find global object");}var xe=hd(this);function ye(){ye=function(){};xe.Symbol\|\|(xe.Symbol=lh)}function mh(K,ua){this.Gb=K;xc(this,"description",{configurable:!0,writable:!0,value:ua})}mh.prototype.toString=function(){return this.Gb};.var lh=function(){function K(Ua){if(this instanceof K)throw new TypeError("Symbol is not a constructor");return new mh("jscomp_symbol_"+(Ua\|\|"")+"_"+ua++,Ua)}var ua=0;return K}();function nh(){ye();var K=xe.Symbol.iterator;K\|\|(K=xe.Symbol.iterator=xe.Symbol

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\watch[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	C source, UTF-8 Unicode (with BOM) text, with very long lines
Category:	downloaded
Size (bytes):	119315
Entropy (8bit):	5.584030640651237
Encrypted:	false
SSDEEP:	1536:SnOpM8BGl7BqOLEN2B6sF5SE6D25rJ65ZQsPL11CXFUozl37oB7bwJm9nBfMntja:SnOXG5BdEPsTCx1CfspZpatj3m5kY
MD5:	1E1EAAC3ED4F483C76CD0DFD40ACB5D0
SHA1:	5AB1A9454F8BF1ACC1CA552838A4523E2B7727B4
SHA-256:	45C58FE4387FC3895B6DF008A1C52235C508EE801F96B45991CF99C50281EB34
SHA-512:	1795191DD468FAF4D7D38ED43F5A366F751CBAF0AE1C8AF57CF71F60B9F55C39B99FF4229559742946CC988D5EFA72B8B55FBA507497C03480450AF8A3EE165C
Malicious:	false
Reputation:	low
IE Cache URL:	https://mc.yandex.ru/metrika/watch.js
Preview:	.(function(){function Ib(K){var ua=0;return function(){return ua<K.length?{done:!1,value:K[ua++]}:{done:!0}}}var xc="function"==typeof Object.defineProperties?Object.defineProperty:function(K,ua,Ua){K!=Array.prototype&&K!=Object.prototype&&(K[ua]=Ua.value)};.function hd(K){K=["object"==typeof globalThis&&globalThis,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global,K];for(var ua=0;ua<K.length;++ua){var Ua=K[ua];if(Ua&&Ua.Math==Math)return Ua}throw Error("Cannot find global object");}var xe=hd(this);function ye(){ye=function(){};xe.Symbol\|\|(xe.Symbol=lh)}function mh(K,ua){this.Gb=K;xc(this,"description",{configurable:!0,writable:!0,value:ua})}mh.prototype.toString=function(){return this.Gb};.var lh=function(){function K(Ua){if(this instanceof K)throw new TypeError("Symbol is not a constructor");return new mh("jscomp_symbol_"+(Ua\|\|"")+"_"+ua++,Ua)}var ua=0;return K}();function nh(){ye();var K=xe.Symbol.iterator;K\|\|(K=xe.Symbol.iterator=xe.Symbol

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\widget_plugins[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	8906
Entropy (8bit):	5.392639559288667
Encrypted:	false
SSDEEP:	192:nvv6O/+SHSCLN8F21ozb+g0tay/fhwzKi+Z19:nvv6O/+STL+F214178hmM9
MD5:	F9074ED07E38E7C82DD2B9EBB89654F6
SHA1:	FE796C1A67FDC3E1F5178448CD4DF8727FC0DD52
SHA-256:	40AFCB972B88AFE7AA9BB2F550E02FC91ED8C5594C5602A615A6CD012DABB630
SHA-512:	023FB740EA3C5C93DEF5C04393D75BFD4173BE1F6181BD7BB7508F11EF44871C20274E52687093395DD80DE8BB3BFA83635DD35E1B50E9599037887BC99A4BCB
Malicious:	false
Reputation:	low
IE Cache URL:	http://loginza.ru/js/widget_plugins.js
Preview:	/*.. Cookie plugin.. .. Copyright (c) 2006 Klaus Hartl (stilbuero.de).. * Dual licensed under the MIT and GPL licenses:.. * http://www.opensource.org/licenses/mit-license.php.. * http://www.gnu.org/licenses/gpl.html.. .. /..../*.. Create a cookie with the given name and value and other optional parameters... .. @example $.cookie('the_cookie', 'the_value');.. * @desc Set the value of a cookie... * @example $.cookie('the_cookie', 'the_value', { expires: 7, path: '/', domain: 'jquery.com', secure: true });.. * @desc Create a cookie with all available options... * @example $.cookie('the_cookie', 'the_value');.. * @desc Create a session cookie... * @example $.cookie('the_cookie', null);.. * @desc Delete a cookie by passing null as value. Keep in mind that you have to use the same path and domain.. * used when the cookie was set... .. @param String name The name of the cookie... * @param String value The value of the cookie... * @param Object options An object literal

C:\Users\user\AppData\Local\Temp\~DF4141CBD9521846FE.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	13029
Entropy (8bit):	0.46595849821074664
Encrypted:	false
SSDEEP:	24:c9lLh9lLh9lIn9lIn9lo0dF9lo039lW0epAYSAY/SMF:kBqoI/JppAYSAYKMF
MD5:	D60524FCB789A6F5B5A6C87E143688E2
SHA1:	137AD54CCED555BD1A70F9BF40B186CAE92F04DC
SHA-256:	04C44D2C53E5FAC6B3C05793CAC36D4077B491903BFFC9F6CC0CA600DF906971
SHA-512:	BC4799000A671DA2D224978C2C1D16EE2B5FB8B08D63084912988B97B7C9A5E522E187B951E7A11EDBC982709E96379BA0F4F1BCA330C1C1D5E203D248CE33DE
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFA955F1A15AAE162D.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	25441
Entropy (8bit):	0.2881637714280414
Encrypted:	false
SSDEEP:	24:c9lLh9lLh9lIn9lIn9lRx/9lRJ9lTb9lTb9lSSU9lSSU9laAa/9laAjT:kBqoxxJhHWSVSEab
MD5:	BCEAE13F1A189B8A649E635B3F541C8E
SHA1:	0D53D84CD5245A9628222C8B91CA3EF75EC7F13A
SHA-256:	BA9283561FD4C60605A62CDA762032D87ADDC9BD22624960EC455F3329E86A68
SHA-512:	5A90E351123BBC1020C6CC222118C0BD64CF4D59474DE5DDFCDD421073AF4EEF84861FAFE6DB86CA38E7FB1AFB192AED7F64A476FF74C7C028DB5E8D09B326F6
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFFCDA20ED063141AF.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	178418
Entropy (8bit):	2.177034257820735
Encrypted:	false
SSDEEP:	768:t/ssR/ssU/sslwssfwss2wss27vssU7vssf7vssbW1A/nFUBpy8NowssF7vssz7J:CK/7k1IkjOpniQH
MD5:	AB78FD1BF9265157DAD2F8C1CA3A75C0
SHA1:	EEF156088885A323AEA2D570BF3400BCF52E653A
SHA-256:	451F1B25142E4E5D5B0DD8F26E9E4E5198AABC2C27810668AF20A3BAC94616EC
SHA-512:	9986A5F9586F247BD144C857D0653F2A2BAA65177E644DD95C0F993EBF9B422EAFA02BEC50C333AFB49F15C01CD9C99CFB34D0AB313B454F9878CA854740943F
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\BOBB94Z4WS7VG0T2DWQ5.temp Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	3440
Entropy (8bit):	3.1923062901134562
Encrypted:	false
SSDEEP:	48:ldioPMI2C9GrIo6AsASF9dioPMI2h683GrIo6AczH:TPMY9SaAJoPMh3SaAG
MD5:	12E5C86559FC3CFA054D9A3BB1C00540
SHA1:	BC9FF9E8F3BE65D8D41C8B7CA76D4871C8138C30
SHA-256:	35EF35B7CBD4D2C39D3F2AA1014341DF41443A70A5EBAF3F973D464331FB5EF4
SHA-512:	76B862C9A72374EF97E13285D2D00E68F206C9C25C7E6D87CA6652A3D7EB65B709AD860436F2455F40FD48E87E5021CDEE76025CA78536ABBBEE5369C0CDD752
Malicious:	false
Reputation:	low
Preview:	...................................FL..................F.@.. .....@.>...V&.H......?.c................................P.O. .:i.....+00.../C:\.....................1.....>Q=w..PROGRA~1..t......L.>Qox....E...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....l.1......L.J..INTERN~1..T......L.'R.\|..............................i.n.t.e.r.n.e.t. .e.x.p.l.o.r.e.r.....f.2......L.9 .iexplore.exe..J......L.J'R.\|.....R..........x.............i.e.x.p.l.o.r.e...e.x.e.......^...............-.......]....................C:\Program Files\internet explorer\iexplore.exe....-.p.r.i.v.a.t.e...C.:.\.W.i.n.d.o.w.s.\.S.Y.S.T.E.M.3.2.\.I.E.F.R.A.M.E...d.l.l.........%SystemRoot%\SYSTEM32\IEFRAME.dll...................................................................................................................................................................................................................................%.S.y.s.t.e.m.R.o.o.t.%.\.S.Y.S.T.E.M.3.2.\.I

Static File Info

No static file info

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
01/07/21-07:32:21.362327	TCP	2925	INFO web bug 0x0 gif attempt	80	49713	91.189.114.9	192.168.2.3
01/07/21-07:32:21.602231	TCP	2925	INFO web bug 0x0 gif attempt	80	49710	91.189.114.9	192.168.2.3
01/07/21-07:32:41.203636	TCP	2925	INFO web bug 0x0 gif attempt	80	49713	91.189.114.9	192.168.2.3
01/07/21-07:32:47.648335	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.3	8.8.8.8
01/07/21-07:33:06.946487	TCP	2925	INFO web bug 0x0 gif attempt	80	49857	213.180.204.205	192.168.2.3
01/07/21-07:33:23.365972	TCP	1998	WEB-PHP calendar.php access	49862	80	192.168.2.3	91.189.114.9
01/07/21-07:33:23.365972	TCP	882	WEB-CGI calendar access	49862	80	192.168.2.3	91.189.114.9

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2021 07:32:20.687278986 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:20.688081026 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:20.762125969 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:20.762242079 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:20.762417078 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:20.762500048 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:20.763649940 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:20.838850021 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:20.896619081 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:20.896673918 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:20.896713972 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:20.896738052 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:20.896753073 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:20.896790028 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:20.896790981 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:20.896840096 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:20.896878958 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:20.896931887 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:20.897291899 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:20.897382021 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:20.971972942 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:20.972795963 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:20.974092007 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:20.974881887 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:20.975564003 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:20.976581097 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.046802998 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.047935009 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.049593925 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.049709082 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.050570011 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.050662994 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.050950050 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.051024914 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.051059961 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.051114082 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.051577091 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.051664114 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.051945925 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.051989079 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.052015066 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.052025080 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.052052021 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.052072048 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.052088022 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.052115917 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.052124023 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.052151918 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.052170038 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.052190065 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.052213907 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.052227974 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.052244902 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.052253962 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.052284956 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.052299976 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.052959919 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.052995920 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.053020000 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.053016901 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.053049088 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.053071022 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.053457975 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.053536892 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.070734978 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.070944071 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.071135044 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.071326017 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.071573019 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.072288036 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.146864891 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.147449970 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.147608042 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.148878098 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.148920059 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.148953915 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.149009943 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.149058104 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.149092913 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.149132967 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.149168968 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.149204969 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.149291992 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.149308920 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.149653912 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.150151014 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.150187969 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.150233984 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.150240898 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.150275946 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.150312901 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.150315046 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.150350094 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.150396109 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.150459051 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.150526047 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.150571108 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.150595903 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.150641918 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.150682926 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.150695086 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.150707006 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.150717974 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.150789976 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.150861025 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.150907040 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.150949001 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.150994062 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.151066065 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.151460886 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.151560068 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.152179003 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.152272940 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.160192013 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.160500050 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.166173935 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.223901033 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.223973036 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.224047899 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.224102974 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.240662098 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.240720034 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.240796089 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.240860939 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.255145073 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.256268978 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.257204056 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.285056114 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.335896015 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.335978985 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336008072 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336047888 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336085081 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336086988 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336111069 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336122990 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336136103 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336162090 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336177111 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336198092 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336210966 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336237907 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336249113 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336276054 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336311102 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336323977 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336343050 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336364985 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336378098 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336401939 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336416006 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336438894 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336461067 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336477995 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336493015 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336514950 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336532116 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336553097 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336569071 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336590052 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336637020 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336642027 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336661100 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336677074 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336695910 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336714983 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336740017 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336751938 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336787939 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336790085 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336801052 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336826086 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.336848974 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.336883068 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.337243080 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.337270021 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.337308884 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.337323904 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.337346077 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.337357044 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.337392092 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.337421894 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.337429047 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.337476969 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.337485075 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.337517977 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.337551117 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.337554932 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.337598085 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.337615013 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.338275909 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.338315964 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.338354111 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.338357925 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.338402987 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.338408947 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.338512897 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.338603973 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.339246035 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.339287043 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.339314938 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.339323997 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.339340925 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.339363098 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.339380980 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.339437008 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.356004000 CET	49718	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:32:21.356208086 CET	49719	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:32:21.362327099 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.362503052 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.412245989 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.412319899 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.412373066 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.412377119 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.412420988 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.412493944 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.412594080 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.413095951 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.413134098 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.413172007 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.413203955 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.413208961 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.413244963 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.413281918 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.413285971 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.413319111 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.413362980 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.413366079 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.413403034 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.413436890 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.413475037 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.413477898 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.413523912 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.413578987 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.414138079 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.414177895 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.414215088 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.414230108 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.414261103 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.414302111 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.414311886 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.414338112 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.414376020 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.414395094 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.414412975 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.414412022 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.414463043 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.414513111 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.415178061 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.415218115 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.415252924 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.415297985 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.415313959 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.415338993 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.415374994 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.415390015 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.415411949 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.415416002 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.415446997 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.415497065 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.415546894 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.415705919 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.416203022 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.416243076 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.416279078 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.416287899 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.416309118 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.416348934 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.416393042 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.431535959 CET	80	49718	213.180.204.205	192.168.2.3
Jan 7, 2021 07:32:21.431582928 CET	80	49719	213.180.204.205	192.168.2.3
Jan 7, 2021 07:32:21.431648016 CET	49718	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:32:21.431679964 CET	49719	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:32:21.434237957 CET	49718	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:32:21.505836964 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:21.506330967 CET	49721	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:21.509465933 CET	80	49718	213.180.204.205	192.168.2.3
Jan 7, 2021 07:32:21.509743929 CET	80	49718	213.180.204.205	192.168.2.3
Jan 7, 2021 07:32:21.509793043 CET	80	49718	213.180.204.205	192.168.2.3
Jan 7, 2021 07:32:21.509829998 CET	49718	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:32:21.509834051 CET	80	49718	213.180.204.205	192.168.2.3
Jan 7, 2021 07:32:21.509859085 CET	49718	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:32:21.509871960 CET	80	49718	213.180.204.205	192.168.2.3
Jan 7, 2021 07:32:21.509886980 CET	49718	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:32:21.509910107 CET	80	49718	213.180.204.205	192.168.2.3
Jan 7, 2021 07:32:21.509938955 CET	49718	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:32:21.509948015 CET	80	49718	213.180.204.205	192.168.2.3
Jan 7, 2021 07:32:21.509963989 CET	49718	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:32:21.509982109 CET	80	49718	213.180.204.205	192.168.2.3
Jan 7, 2021 07:32:21.510016918 CET	49718	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:32:21.510031939 CET	49718	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:32:21.519290924 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.524153948 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.599503994 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.599545956 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.599587917 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.599592924 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.599607944 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.599634886 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.599654913 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.599673033 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.599694014 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.599710941 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.599726915 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.599766970 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.600045919 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.600084066 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.600117922 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.600131989 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.600135088 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.600173950 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.600188971 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.600235939 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.601073027 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.601114988 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.601151943 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.601154089 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.601171017 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.601187944 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.601208925 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.601244926 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.602077961 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.602118015 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.602154970 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.602157116 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.602175951 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.602193117 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.602219105 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.602231026 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.602253914 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.602323055 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.603177071 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.603219986 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.603239059 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.603255987 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.603279114 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.603302956 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.603310108 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.603358984 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.628462076 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.630904913 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.633537054 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.642595053 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.653969049 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:21.654114008 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:21.657448053 CET	443	49721	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:21.657548904 CET	49721	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:21.692996025 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:21.695024967 CET	49721	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:21.706146955 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.706202030 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.706238985 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.706257105 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.706285954 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.706288099 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.706293106 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.706329107 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.706343889 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.706367016 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.706379890 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.706419945 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.706935883 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.707003117 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.708024979 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.708065987 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.708103895 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.708116055 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.708151102 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.708158970 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.712162018 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.716291904 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.716356039 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.716393948 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.716461897 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.716511011 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.716517925 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.720314026 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.720361948 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.720396042 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:21.720415115 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.720443010 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.720448017 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:21.844125032 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:21.844163895 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:21.844199896 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:21.844208956 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:21.844233990 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:21.844234943 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:21.844252110 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:21.844295025 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:21.847528934 CET	443	49721	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:21.847570896 CET	443	49721	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:21.847606897 CET	443	49721	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:21.847625017 CET	49721	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:21.847641945 CET	443	49721	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:21.847645044 CET	49721	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:21.847652912 CET	49721	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:21.847707033 CET	49721	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:21.875334978 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:21.876056910 CET	49727	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.023998976 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.024175882 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.024843931 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.026381016 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.026763916 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.026959896 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.027350903 CET	443	49727	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.027451038 CET	49727	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.028543949 CET	49727	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.029022932 CET	49721	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.029407024 CET	49721	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.175812960 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.175858021 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.175885916 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.175932884 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.175987005 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.176103115 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.176163912 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.176557064 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.176971912 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.177015066 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.177052975 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.177067041 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.177087069 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.177102089 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.177108049 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.177135944 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.180535078 CET	443	49721	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.180638075 CET	49721	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.180901051 CET	443	49721	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.180965900 CET	49721	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.183273077 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.183599949 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.183764935 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.184504986 CET	443	49727	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.184544086 CET	443	49727	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.184557915 CET	49721	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.184581041 CET	443	49727	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.184585094 CET	49727	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.184612989 CET	49727	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.184616089 CET	443	49727	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.184629917 CET	49727	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.184670925 CET	49727	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.187632084 CET	49727	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.187956095 CET	49727	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.333137989 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.333185911 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.333337069 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.337841988 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.338001966 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.339370966 CET	443	49727	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.339401007 CET	443	49727	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.339457989 CET	49727	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.339498043 CET	49727	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.365278006 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.375161886 CET	443	49721	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.689995050 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.690707922 CET	49727	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:22.878078938 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:22.881428957 CET	443	49727	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:23.055710077 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:23.133831978 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:23.133939981 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:23.137027979 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:23.251966953 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:23.285480022 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:23.285552979 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:23.288362026 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:23.363325119 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:23.478132010 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:23.478189945 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:23.478218079 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:23.478302956 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:23.478352070 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:23.478773117 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:23.478844881 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:36.447392941 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:36.510368109 CET	80	49718	213.180.204.205	192.168.2.3
Jan 7, 2021 07:32:36.510454893 CET	49718	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:32:36.596399069 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:36.597784996 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:32:36.598014116 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:32:37.669327974 CET	49731	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:37.744015932 CET	80	49731	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:37.744198084 CET	49731	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:37.756839037 CET	49731	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:37.832144022 CET	80	49731	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:37.835692883 CET	80	49731	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:37.835746050 CET	80	49731	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:37.835783005 CET	80	49731	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:37.835823059 CET	80	49731	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:37.835833073 CET	49731	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:37.835860014 CET	80	49731	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:37.835863113 CET	49731	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:37.835869074 CET	49731	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:37.835885048 CET	49731	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:37.835910082 CET	80	49731	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:37.835937023 CET	49731	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:37.835979939 CET	49731	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:37.836575985 CET	80	49731	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:37.836616039 CET	80	49731	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:37.836656094 CET	49731	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:37.836682081 CET	49731	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:40.086679935 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:40.164262056 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.110435963 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.110502005 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.110548019 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.110567093 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.110579967 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.110621929 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.110625029 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.110677004 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.110677004 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.110732079 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.110733032 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.110785961 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.111175060 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.111241102 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.118223906 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.121568918 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.121783972 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.123631001 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.124939919 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.126620054 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.193131924 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.196193933 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.196280956 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.199291945 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.199805021 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.199856997 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.199892044 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.199928999 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.200774908 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.200833082 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.202039003 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.202091932 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.202119112 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.202148914 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.202148914 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.202200890 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.202203035 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.202253103 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.202261925 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.202300072 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.202315092 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.202317953 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.202370882 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.202924967 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.202975988 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.202994108 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.203030109 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.203032017 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.203067064 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.203083038 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.203123093 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.203635931 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.203767061 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.204521894 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.204572916 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.204624891 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.204639912 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.204672098 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.204679966 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.204685926 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.204751968 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.204796076 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.204844952 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.204862118 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.204902887 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.205360889 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.205425978 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.205956936 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.207750082 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.207803011 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.207827091 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.207851887 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.207856894 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.207904100 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.207907915 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.207956076 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.207957983 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.208008051 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.208009005 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.208060980 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.208281994 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.208333969 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.208353996 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.208384991 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.208389044 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.208441019 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.208445072 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.208492994 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.211042881 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.211127043 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.239092112 CET	49737	80	192.168.2.3	81.19.89.16
Jan 7, 2021 07:32:41.239219904 CET	49738	80	192.168.2.3	81.19.89.16
Jan 7, 2021 07:32:41.244462013 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.244678974 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.279110909 CET	49741	80	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.279200077 CET	49742	80	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.279203892 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.279239893 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.279278994 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.279292107 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.279946089 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.280016899 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.280031919 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.280080080 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.280097008 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.280138969 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.280139923 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.280194044 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.280196905 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.280251980 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.280252934 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.280308008 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.280968904 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.281028032 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.281044960 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.281080961 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.281089067 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.281127930 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.281152964 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.281183958 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.281187057 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.281240940 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.281243086 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.281294107 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.281297922 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.281343937 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.281344891 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.281394958 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.281440020 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.281491995 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.281493902 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.281543970 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.281552076 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.281605005 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.281605959 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.281703949 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.281742096 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.281791925 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.281800985 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.281847954 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.282289028 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.282341957 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.282352924 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.282391071 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.282949924 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.283004045 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.283045053 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.283071041 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.283709049 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.283756018 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.283788919 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.283814907 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.283828020 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.283880949 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.283886909 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.283934116 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.283934116 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.283984900 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.283989906 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.284037113 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.284058094 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.284085989 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.284090042 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.284135103 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.284152985 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.284183979 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.284183979 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.284238100 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.284245968 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.284298897 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.284301043 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.284347057 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.284349918 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.284396887 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.284399033 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.284451008 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.284604073 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.284687996 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.284687996 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.284733057 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.284746885 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.284780979 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.284796000 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.284841061 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.285028934 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.285084009 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.285089970 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.285131931 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.285150051 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.285181999 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.285192013 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.285238981 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.285665989 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.285737038 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.286035061 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.286086082 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.286092043 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.286135912 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.286144018 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.286185026 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.286196947 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.286246061 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.287096977 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.287147999 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.287158012 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.287200928 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.288845062 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.288882971 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.288922071 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.288928986 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.288949966 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.288958073 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.288969994 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.289011002 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.289026022 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.289045095 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.289071083 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.289134979 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.289621115 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.289657116 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.289705992 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.289731979 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.293195009 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.293227911 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.293270111 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.293306112 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.293330908 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.293343067 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.293360949 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.293365955 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.293370008 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.293400049 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.293416023 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.293472052 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.294059992 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.294097900 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.294120073 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.294137001 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.294150114 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.294174910 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.294188023 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.294228077 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.297830105 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.300182104 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.300355911 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.300529003 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.303507090 CET	49743	80	192.168.2.3	81.19.89.1
Jan 7, 2021 07:32:41.317853928 CET	49744	80	192.168.2.3	81.19.89.1
Jan 7, 2021 07:32:41.322839975 CET	80	49737	81.19.89.16	192.168.2.3
Jan 7, 2021 07:32:41.322953939 CET	49737	80	192.168.2.3	81.19.89.16
Jan 7, 2021 07:32:41.322977066 CET	80	49738	81.19.89.16	192.168.2.3
Jan 7, 2021 07:32:41.323087931 CET	49738	80	192.168.2.3	81.19.89.16
Jan 7, 2021 07:32:41.325890064 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.325972080 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.326288939 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.326370955 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.327651978 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.327941895 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.328211069 CET	49737	80	192.168.2.3	81.19.89.16
Jan 7, 2021 07:32:41.349078894 CET	80	49741	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.349185944 CET	49741	80	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.349690914 CET	80	49742	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.349785089 CET	49742	80	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.351403952 CET	49741	80	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.354454041 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.354504108 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.354530096 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.354548931 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.354559898 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.354604959 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.357778072 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.358587027 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.358633041 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.358673096 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.358686924 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.358691931 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.358740091 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.358748913 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.358792067 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.359591007 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.359642029 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.359663963 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.359709024 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.360642910 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.360697031 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.360752106 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.360801935 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.360863924 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.360918999 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.360950947 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.360995054 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.361634016 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.361681938 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.361706972 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.361730099 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.361745119 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.361778021 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.361785889 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.361836910 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.362646103 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.362699032 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.362709045 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.362751007 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.362752914 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.362807035 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.362817049 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.362859964 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.363679886 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.363727093 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.363749981 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.363770962 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.363799095 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.363823891 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.363830090 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.363884926 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.364749908 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.364801884 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.364833117 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.364856005 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.364865065 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.364907980 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.364909887 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.364962101 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.365730047 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.365773916 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.365807056 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.365825891 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.365829945 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.365880013 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.365890980 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.365942001 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.365942001 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.365992069 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.366014957 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.366053104 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.366733074 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.366781950 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.366806984 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.366827011 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.366863966 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.366879940 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.366883039 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.366938114 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.367830038 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.367861032 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.367932081 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.367953062 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.369637966 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.375641108 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.375741959 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.377052069 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.377141953 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.382627010 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.382702112 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.382745028 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.382766008 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.382782936 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.382795095 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.382803917 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.382821083 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.382846117 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.382858992 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.382874012 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.382891893 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.382924080 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.383311033 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.383353949 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.383375883 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.383388042 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.383389950 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.383414030 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.383436918 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.383452892 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.383528948 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.384305954 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.384344101 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.384375095 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.384391069 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.384401083 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.384432077 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.384447098 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.384543896 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.385365963 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.385432959 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.385435104 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.385514021 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.387105942 CET	80	49743	81.19.89.1	192.168.2.3
Jan 7, 2021 07:32:41.387212038 CET	49743	80	192.168.2.3	81.19.89.1
Jan 7, 2021 07:32:41.389323950 CET	49743	80	192.168.2.3	81.19.89.1
Jan 7, 2021 07:32:41.401490927 CET	80	49744	81.19.89.1	192.168.2.3
Jan 7, 2021 07:32:41.401575089 CET	49744	80	192.168.2.3	81.19.89.1
Jan 7, 2021 07:32:41.404285908 CET	49745	80	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:41.404305935 CET	49746	80	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:41.409300089 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.409647942 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.410756111 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.410801888 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.410830975 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.410836935 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.410888910 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.410895109 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.411312103 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.411391973 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.411505938 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.411586046 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.411825895 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.411859035 CET	80	49737	81.19.89.16	192.168.2.3
Jan 7, 2021 07:32:41.411887884 CET	80	49737	81.19.89.16	192.168.2.3
Jan 7, 2021 07:32:41.411891937 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.411953926 CET	49737	80	192.168.2.3	81.19.89.16
Jan 7, 2021 07:32:41.419903040 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.420141935 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.421252966 CET	80	49741	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.421284914 CET	80	49741	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.421358109 CET	49741	80	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.426342964 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.426605940 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.434375048 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.436326981 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.437382936 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.439623117 CET	49748	443	192.168.2.3	81.19.89.16
Jan 7, 2021 07:32:41.449074030 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.449141979 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.457849026 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.457895994 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.457932949 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.457968950 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.458056927 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.458096027 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.458755016 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.458794117 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.458830118 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.458841085 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.458857059 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.458867073 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.458884001 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.458945990 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.459798098 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.459846973 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.459878922 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.459882021 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.459901094 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.459919930 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.459942102 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.459994078 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.460859060 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.460896015 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.460932970 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.460937023 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.460953951 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.460969925 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.460999966 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.461052895 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.461838007 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.461879969 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.461915970 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.461952925 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.462353945 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.462892056 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:41.462958097 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:41.472949982 CET	80	49743	81.19.89.1	192.168.2.3
Jan 7, 2021 07:32:41.480182886 CET	80	49745	89.208.236.251	192.168.2.3
Jan 7, 2021 07:32:41.480226994 CET	80	49746	89.208.236.251	192.168.2.3
Jan 7, 2021 07:32:41.480392933 CET	49745	80	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:41.480601072 CET	49746	80	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:41.480791092 CET	49746	80	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:41.483625889 CET	80	49743	81.19.89.1	192.168.2.3
Jan 7, 2021 07:32:41.483675003 CET	80	49743	81.19.89.1	192.168.2.3
Jan 7, 2021 07:32:41.483725071 CET	49743	80	192.168.2.3	81.19.89.1
Jan 7, 2021 07:32:41.483752966 CET	49743	80	192.168.2.3	81.19.89.1
Jan 7, 2021 07:32:41.501846075 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.501951933 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.503149033 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.503298044 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.503966093 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.508644104 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.508723021 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.514393091 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.514497995 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.514663935 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.514705896 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.514719963 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.514765024 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.514787912 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.514847040 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.514976978 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.515036106 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.515178919 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.515243053 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.515321970 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.515363932 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.515382051 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.515399933 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.515424013 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.515438080 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.515455008 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.515474081 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.515492916 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.515522957 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.515527010 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.515563011 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.515575886 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.515599966 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.515614986 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.515650988 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.515666008 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.515691996 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.515722036 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.515728951 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.515753984 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.515784025 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.515794992 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.515852928 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.523299932 CET	443	49748	81.19.89.16	192.168.2.3
Jan 7, 2021 07:32:41.523448944 CET	49748	443	192.168.2.3	81.19.89.16
Jan 7, 2021 07:32:41.529104948 CET	49748	443	192.168.2.3	81.19.89.16
Jan 7, 2021 07:32:41.556682110 CET	80	49746	89.208.236.251	192.168.2.3
Jan 7, 2021 07:32:41.558896065 CET	80	49746	89.208.236.251	192.168.2.3
Jan 7, 2021 07:32:41.558986902 CET	49746	80	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:41.566801071 CET	49746	80	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:41.572712898 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.573283911 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.573323011 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.573350906 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.573412895 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.573460102 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.573467970 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.582813978 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.583359003 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.583553076 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.590755939 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.612848997 CET	443	49748	81.19.89.16	192.168.2.3
Jan 7, 2021 07:32:41.616537094 CET	443	49748	81.19.89.16	192.168.2.3
Jan 7, 2021 07:32:41.616604090 CET	443	49748	81.19.89.16	192.168.2.3
Jan 7, 2021 07:32:41.616647005 CET	443	49748	81.19.89.16	192.168.2.3
Jan 7, 2021 07:32:41.616703033 CET	49748	443	192.168.2.3	81.19.89.16
Jan 7, 2021 07:32:41.616750002 CET	49748	443	192.168.2.3	81.19.89.16
Jan 7, 2021 07:32:41.616756916 CET	49748	443	192.168.2.3	81.19.89.16
Jan 7, 2021 07:32:41.624519110 CET	49748	443	192.168.2.3	81.19.89.16
Jan 7, 2021 07:32:41.624877930 CET	49748	443	192.168.2.3	81.19.89.16
Jan 7, 2021 07:32:41.633835077 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.634558916 CET	49751	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.643574953 CET	80	49746	89.208.236.251	192.168.2.3
Jan 7, 2021 07:32:41.643660069 CET	49746	80	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:41.645762920 CET	49752	80	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:41.645881891 CET	49753	80	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:41.651734114 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.651766062 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.651818037 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.651846886 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.652028084 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.652087927 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.652304888 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.652354956 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.652371883 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.652396917 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.652415037 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.652422905 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.652432919 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.652440071 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.652461052 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.652477980 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.652498007 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.652514935 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.652528048 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.652553082 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.652571917 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.667362928 CET	49741	80	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.669635057 CET	49742	80	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.674398899 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:41.674495935 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:41.681751013 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.681899071 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.682497025 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.682742119 CET	443	49751	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.682811022 CET	49751	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.683552980 CET	49751	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.704456091 CET	49754	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:41.704521894 CET	49755	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:41.708503008 CET	443	49748	81.19.89.16	192.168.2.3
Jan 7, 2021 07:32:41.708745956 CET	443	49748	81.19.89.16	192.168.2.3
Jan 7, 2021 07:32:41.708878994 CET	49748	443	192.168.2.3	81.19.89.16
Jan 7, 2021 07:32:41.710733891 CET	443	49748	81.19.89.16	192.168.2.3
Jan 7, 2021 07:32:41.710902929 CET	49748	443	192.168.2.3	81.19.89.16
Jan 7, 2021 07:32:41.720866919 CET	80	49752	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:41.720951080 CET	49752	80	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:41.721030951 CET	80	49753	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:41.721163988 CET	49753	80	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:41.722322941 CET	49752	80	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:41.730278015 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.731806040 CET	443	49751	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.737426996 CET	80	49741	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.737536907 CET	49741	80	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.739156961 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.740175009 CET	80	49742	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.740441084 CET	80	49742	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.740514040 CET	49742	80	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.741731882 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.746170998 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.746212959 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.746238947 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.746315956 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.746364117 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.746377945 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.747598886 CET	443	49751	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.747639894 CET	443	49751	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.747669935 CET	49751	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.747673035 CET	443	49751	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.747694016 CET	49751	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.747733116 CET	49751	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.754039049 CET	49751	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.754116058 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.754498959 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.754607916 CET	49751	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.754673958 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.766002893 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.790103912 CET	443	49755	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:41.790208101 CET	49755	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:41.790766954 CET	443	49754	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:41.790849924 CET	49754	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:41.791095018 CET	49755	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:41.791623116 CET	49754	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:41.797461987 CET	80	49752	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:41.797707081 CET	80	49752	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:41.797756910 CET	49752	80	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:41.802098036 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.802126884 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.802150011 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.802234888 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.802280903 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.802288055 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.802407026 CET	443	49751	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.802470922 CET	49751	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.802485943 CET	443	49751	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.802546024 CET	49751	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.802759886 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.802771091 CET	443	49751	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.802834034 CET	49751	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.803247929 CET	49751	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.803872108 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.803911924 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.803949118 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.803985119 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.803994894 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.804040909 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.804048061 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.804054022 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.806293964 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.806381941 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.807190895 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.807267904 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.807848930 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.807877064 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.807993889 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.808408022 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:41.808572054 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:41.810692072 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.810847998 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.817799091 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.855344057 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.856709957 CET	443	49751	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.862555027 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:41.876640081 CET	443	49755	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:41.877753973 CET	443	49754	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:41.880347013 CET	443	49755	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:41.880388975 CET	443	49755	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:41.880417109 CET	443	49755	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:41.880444050 CET	49755	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:41.880470037 CET	49755	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:41.880476952 CET	49755	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:41.881232023 CET	443	49754	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:41.881273031 CET	443	49754	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:41.881299019 CET	443	49754	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:41.881300926 CET	49754	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:41.881329060 CET	49754	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:41.881361961 CET	49754	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:41.883737087 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:41.883848906 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:41.887351036 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.887388945 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.887422085 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:41.887579918 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.887629032 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:41.937031984 CET	49754	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:41.937597990 CET	49754	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:41.937990904 CET	49755	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:41.940937042 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.016554117 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.016609907 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.016640902 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.016669035 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.016700983 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.016782999 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.019763947 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.023889065 CET	443	49754	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:42.024229050 CET	443	49754	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:42.024363995 CET	443	49755	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:42.024393082 CET	49754	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:42.024452925 CET	49755	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:42.025959015 CET	443	49754	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:42.026036978 CET	49754	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:42.101907015 CET	49754	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:42.170305967 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.171165943 CET	49758	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.201595068 CET	443	49754	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:42.201683044 CET	49754	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:42.204087973 CET	49759	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:32:42.204936981 CET	49760	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:32:42.210455894 CET	49761	443	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:42.211966991 CET	49762	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:42.212690115 CET	49763	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:42.220431089 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.221123934 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.222243071 CET	49764	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.223186016 CET	49765	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.226264954 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.240765095 CET	49766	443	192.168.2.3	94.100.180.197
Jan 7, 2021 07:32:42.241529942 CET	49767	443	192.168.2.3	94.100.180.197
Jan 7, 2021 07:32:42.246979952 CET	49768	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.247715950 CET	49769	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.255332947 CET	443	49757	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:42.255492926 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.256011009 CET	443	49758	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:42.256088018 CET	49758	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.260832071 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.260981083 CET	49758	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.270539999 CET	443	49764	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:42.270679951 CET	49764	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.271380901 CET	443	49765	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:42.271451950 CET	49765	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.271473885 CET	443	49760	159.69.74.8	192.168.2.3
Jan 7, 2021 07:32:42.271598101 CET	49760	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:32:42.273567915 CET	443	49759	159.69.74.8	192.168.2.3
Jan 7, 2021 07:32:42.273706913 CET	49759	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:32:42.274676085 CET	49764	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.274827003 CET	49765	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.275114059 CET	49760	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:32:42.279373884 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:42.283853054 CET	49759	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:32:42.284069061 CET	443	49762	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:42.284156084 CET	49762	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:42.284600973 CET	49762	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:42.284985065 CET	443	49763	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:42.285100937 CET	49763	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:42.286075115 CET	443	49761	89.208.236.251	192.168.2.3
Jan 7, 2021 07:32:42.286154032 CET	49761	443	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:42.295317888 CET	443	49768	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:42.295459986 CET	49768	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.295612097 CET	443	49769	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:42.295696974 CET	49769	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.296015024 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.296086073 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.296134949 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.296191931 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.296451092 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.296513081 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.302350998 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.302395105 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.302433014 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.302438021 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.302455902 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.302469015 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.302486897 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.302506924 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.302526951 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.302532911 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.302557945 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.302580118 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.302587986 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.302648067 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.316680908 CET	49763	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:42.319627047 CET	443	49766	94.100.180.197	192.168.2.3
Jan 7, 2021 07:32:42.319725990 CET	49761	443	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:42.319791079 CET	49766	443	192.168.2.3	94.100.180.197
Jan 7, 2021 07:32:42.319888115 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.320086002 CET	443	49767	94.100.180.197	192.168.2.3
Jan 7, 2021 07:32:42.320238113 CET	49767	443	192.168.2.3	94.100.180.197
Jan 7, 2021 07:32:42.321866035 CET	49768	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.321907043 CET	49769	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.322830915 CET	443	49764	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:42.322977066 CET	443	49765	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:42.325926065 CET	49767	443	192.168.2.3	94.100.180.197
Jan 7, 2021 07:32:42.326190948 CET	49766	443	192.168.2.3	94.100.180.197
Jan 7, 2021 07:32:42.326531887 CET	49770	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:42.326625109 CET	49771	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:42.326793909 CET	49772	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:42.326807976 CET	49773	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:42.328337908 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:42.332838058 CET	49774	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:42.333661079 CET	49775	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:42.334713936 CET	49776	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:42.338690996 CET	443	49764	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:42.338732958 CET	443	49764	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:42.338849068 CET	49764	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.338851929 CET	443	49765	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:42.338877916 CET	49764	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.338895082 CET	443	49765	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:42.338922024 CET	49765	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.338957071 CET	49765	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.341639042 CET	443	49760	159.69.74.8	192.168.2.3
Jan 7, 2021 07:32:42.342652082 CET	443	49760	159.69.74.8	192.168.2.3
Jan 7, 2021 07:32:42.342690945 CET	443	49760	159.69.74.8	192.168.2.3
Jan 7, 2021 07:32:42.342719078 CET	443	49760	159.69.74.8	192.168.2.3
Jan 7, 2021 07:32:42.342788935 CET	49760	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:32:42.342837095 CET	49760	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:32:42.342844009 CET	49760	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:32:42.345832109 CET	443	49757	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:42.345874071 CET	443	49757	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:42.345911026 CET	443	49757	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:42.345937014 CET	443	49757	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:42.345968962 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.346019030 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.346025944 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.346030951 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.346781969 CET	443	49757	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:42.346852064 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.347764015 CET	443	49758	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:42.347803116 CET	443	49758	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:42.347841024 CET	443	49758	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:42.347846985 CET	49758	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.347866058 CET	443	49758	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:42.347876072 CET	49758	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.347892046 CET	49758	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.347923040 CET	49758	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.348740101 CET	443	49758	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:42.348807096 CET	49758	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.353168011 CET	443	49759	159.69.74.8	192.168.2.3
Jan 7, 2021 07:32:42.354027033 CET	443	49759	159.69.74.8	192.168.2.3
Jan 7, 2021 07:32:42.354067087 CET	443	49759	159.69.74.8	192.168.2.3
Jan 7, 2021 07:32:42.354093075 CET	443	49759	159.69.74.8	192.168.2.3
Jan 7, 2021 07:32:42.354115009 CET	49759	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:32:42.354137897 CET	49759	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:32:42.354150057 CET	49759	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:32:42.356592894 CET	443	49762	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:42.357439995 CET	443	49762	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:42.357481003 CET	443	49762	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:42.357516050 CET	443	49762	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:42.357516050 CET	49762	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:42.357532978 CET	49762	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:42.357549906 CET	443	49762	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:42.357573986 CET	49762	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:42.357608080 CET	49762	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:42.364973068 CET	80	49738	81.19.89.16	192.168.2.3
Jan 7, 2021 07:32:42.365051031 CET	49738	80	192.168.2.3	81.19.89.16
Jan 7, 2021 07:32:42.366811991 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:42.366861105 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:42.366944075 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:42.366991043 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:42.367063046 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:42.367120981 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:42.367208004 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:42.367265940 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:42.369761944 CET	443	49769	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:42.369985104 CET	443	49768	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:42.371412039 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.371460915 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.371498108 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.371500969 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.371524096 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.371537924 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.371556044 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.371598005 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.371799946 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.371840000 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.371879101 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.371902943 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.374783039 CET	443	49771	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:42.374878883 CET	49771	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:42.375283957 CET	443	49773	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:42.375359058 CET	49773	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:42.377846003 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.377885103 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.377922058 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.377926111 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.377940893 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.377964020 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.377984047 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.378000975 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.378029108 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.378038883 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.378052950 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.378076077 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.378108978 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.378122091 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.378127098 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.378163099 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.378187895 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.378199100 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.378222942 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.378236055 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.378251076 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.378273010 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.378289938 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.378308058 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.378334999 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.378345966 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.378364086 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.378401041 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.385843039 CET	443	49769	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:42.385895967 CET	443	49769	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:42.385934114 CET	443	49768	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:42.385936022 CET	49769	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.385956049 CET	49769	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.385971069 CET	443	49768	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:42.386007071 CET	49768	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.386039019 CET	49768	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.388762951 CET	443	49763	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:42.389591932 CET	443	49763	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:42.389636993 CET	443	49763	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:42.389667988 CET	49763	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:42.389676094 CET	443	49763	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:42.389709949 CET	443	49763	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:42.389724970 CET	49763	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:42.389740944 CET	49763	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:42.389758110 CET	49763	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:42.395342112 CET	443	49761	89.208.236.251	192.168.2.3
Jan 7, 2021 07:32:42.398570061 CET	443	49761	89.208.236.251	192.168.2.3
Jan 7, 2021 07:32:42.398622036 CET	443	49761	89.208.236.251	192.168.2.3
Jan 7, 2021 07:32:42.398659945 CET	443	49761	89.208.236.251	192.168.2.3
Jan 7, 2021 07:32:42.398668051 CET	49761	443	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:42.398686886 CET	443	49761	89.208.236.251	192.168.2.3
Jan 7, 2021 07:32:42.398703098 CET	49761	443	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:42.398719072 CET	49761	443	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:42.398756981 CET	49761	443	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:42.404603958 CET	443	49766	94.100.180.197	192.168.2.3
Jan 7, 2021 07:32:42.404633999 CET	443	49767	94.100.180.197	192.168.2.3
Jan 7, 2021 07:32:42.405034065 CET	443	49767	94.100.180.197	192.168.2.3
Jan 7, 2021 07:32:42.405072927 CET	443	49767	94.100.180.197	192.168.2.3
Jan 7, 2021 07:32:42.405164957 CET	49767	443	192.168.2.3	94.100.180.197
Jan 7, 2021 07:32:42.405210972 CET	49767	443	192.168.2.3	94.100.180.197
Jan 7, 2021 07:32:42.405535936 CET	443	49774	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:42.405622005 CET	49774	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:42.406276941 CET	443	49776	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:42.406338930 CET	443	49775	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:42.406404972 CET	49776	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:42.406457901 CET	49775	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:42.406809092 CET	443	49766	94.100.180.197	192.168.2.3
Jan 7, 2021 07:32:42.406887054 CET	49766	443	192.168.2.3	94.100.180.197
Jan 7, 2021 07:32:42.406907082 CET	443	49766	94.100.180.197	192.168.2.3
Jan 7, 2021 07:32:42.406968117 CET	49766	443	192.168.2.3	94.100.180.197
Jan 7, 2021 07:32:42.407661915 CET	443	49770	195.209.108.46	192.168.2.3
Jan 7, 2021 07:32:42.407732964 CET	49770	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:42.410429955 CET	49764	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.410470009 CET	49760	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:32:42.410490990 CET	49765	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.417299032 CET	443	49772	195.209.108.46	192.168.2.3
Jan 7, 2021 07:32:42.417428970 CET	49772	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:42.417675018 CET	49759	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:32:42.426484108 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:42.442668915 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.443984032 CET	49777	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:42.446721077 CET	49770	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:42.446860075 CET	49772	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:42.446929932 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.446971893 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.447006941 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.447019100 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.447026968 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.447055101 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.447082043 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.447092056 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.447119951 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.447129011 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.447148085 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.447166920 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.447194099 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.447201967 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.447232962 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.447237968 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:42.447263002 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.447288036 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:42.456583977 CET	49773	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:42.458405018 CET	49760	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:32:42.458833933 CET	443	49764	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:42.458868027 CET	443	49765	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:42.458894014 CET	443	49764	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:42.458919048 CET	443	49765	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:42.458925009 CET	49765	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.458966017 CET	49765	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.458965063 CET	49764	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.458995104 CET	49764	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.472677946 CET	49771	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:42.477307081 CET	443	49760	159.69.74.8	192.168.2.3
Jan 7, 2021 07:32:42.477427006 CET	49760	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:32:42.477914095 CET	443	49776	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:42.480571032 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:42.487256050 CET	443	49759	159.69.74.8	192.168.2.3
Jan 7, 2021 07:32:42.487392902 CET	49759	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:32:42.505063057 CET	443	49773	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:42.515765905 CET	443	49777	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:42.515944958 CET	49777	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:42.520965099 CET	443	49771	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:42.521008015 CET	443	49773	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:42.521047115 CET	443	49773	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:42.521080971 CET	443	49773	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:42.521081924 CET	49773	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:42.521122932 CET	49773	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:42.521130085 CET	49773	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:42.526319027 CET	443	49760	159.69.74.8	192.168.2.3
Jan 7, 2021 07:32:42.526530027 CET	49760	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:32:42.527467012 CET	443	49770	195.209.108.46	192.168.2.3
Jan 7, 2021 07:32:42.530059099 CET	443	49770	195.209.108.46	192.168.2.3
Jan 7, 2021 07:32:42.530097961 CET	443	49770	195.209.108.46	192.168.2.3
Jan 7, 2021 07:32:42.530137062 CET	49770	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:42.530178070 CET	49770	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:42.530275106 CET	443	49770	195.209.108.46	192.168.2.3
Jan 7, 2021 07:32:42.530340910 CET	49770	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:42.536854982 CET	443	49771	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:42.536911964 CET	443	49771	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:42.536938906 CET	443	49771	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:42.537064075 CET	49771	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:42.537580013 CET	443	49772	195.209.108.46	192.168.2.3
Jan 7, 2021 07:32:42.539500952 CET	443	49772	195.209.108.46	192.168.2.3
Jan 7, 2021 07:32:42.539591074 CET	443	49772	195.209.108.46	192.168.2.3
Jan 7, 2021 07:32:42.539647102 CET	49772	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:42.539693117 CET	49772	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:42.539966106 CET	443	49772	195.209.108.46	192.168.2.3
Jan 7, 2021 07:32:42.540034056 CET	49772	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:42.587774038 CET	443	49777	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:42.864444971 CET	49775	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:42.864902020 CET	49776	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:42.870515108 CET	49764	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.874619961 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.875121117 CET	49765	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.876013041 CET	49758	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.882421970 CET	49774	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:42.909801006 CET	49780	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:42.911370039 CET	49781	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:42.913604975 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:42.913759947 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.913934946 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.913999081 CET	49765	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.914069891 CET	49758	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.915097952 CET	49777	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:42.918576002 CET	49764	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.918615103 CET	49764	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.918859005 CET	443	49764	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:42.918948889 CET	49764	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.923455954 CET	443	49765	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:42.923535109 CET	49765	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.925761938 CET	49769	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.926084042 CET	49769	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.926273108 CET	49769	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.928082943 CET	49782	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:42.928901911 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:42.935642958 CET	49766	443	192.168.2.3	94.100.180.197
Jan 7, 2021 07:32:42.935990095 CET	49766	443	192.168.2.3	94.100.180.197
Jan 7, 2021 07:32:42.936290979 CET	49767	443	192.168.2.3	94.100.180.197
Jan 7, 2021 07:32:42.936713934 CET	49763	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:42.937100887 CET	49763	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:42.937131882 CET	443	49775	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:42.937264919 CET	443	49776	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:42.937314987 CET	443	49776	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:42.937346935 CET	443	49776	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:42.937421083 CET	49763	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:42.937424898 CET	49776	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:42.937458038 CET	49776	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:42.938385010 CET	49776	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:42.938724995 CET	443	49775	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:42.938766003 CET	443	49775	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:42.938793898 CET	49775	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:42.938807011 CET	443	49775	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:42.938824892 CET	49775	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:42.938834906 CET	443	49775	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:42.938879013 CET	49775	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:42.938895941 CET	49775	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:42.941761017 CET	443	49775	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:42.941795111 CET	443	49775	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:42.941838980 CET	49775	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:42.941864014 CET	49775	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:42.955209017 CET	443	49774	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:42.959170103 CET	49762	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:42.959631920 CET	49762	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:42.959830999 CET	443	49757	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:42.959912062 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.961056948 CET	443	49758	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:42.961146116 CET	49758	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.962259054 CET	49772	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:42.963066101 CET	443	49774	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:42.963108063 CET	443	49774	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:42.963144064 CET	443	49774	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:42.963167906 CET	49774	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:42.963171005 CET	443	49774	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:42.963202000 CET	49774	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:42.963207006 CET	49774	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:42.963223934 CET	49774	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:42.963330984 CET	49772	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:42.964920998 CET	443	49774	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:42.964956999 CET	443	49774	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:42.964998960 CET	49774	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:42.965023994 CET	49774	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:42.967453957 CET	443	49765	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:42.967732906 CET	443	49764	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:42.973901033 CET	443	49769	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:42.973928928 CET	443	49769	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:42.974004030 CET	49769	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.974023104 CET	49769	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.974039078 CET	443	49769	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:42.974098921 CET	49769	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.976185083 CET	49769	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.977792025 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:42.979645967 CET	443	49781	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:42.979760885 CET	49781	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:42.980113029 CET	443	49769	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:42.981178999 CET	443	49780	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:42.981286049 CET	49780	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:42.983473063 CET	49781	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:42.983618021 CET	49780	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:42.984633923 CET	443	49764	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:42.984663010 CET	443	49764	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:42.984736919 CET	49764	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.984754086 CET	443	49764	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:42.984767914 CET	49764	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.984785080 CET	443	49764	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:42.984817982 CET	49764	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.984837055 CET	49764	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.986377001 CET	49764	443	192.168.2.3	216.58.206.66
Jan 7, 2021 07:32:42.987466097 CET	443	49777	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:42.987505913 CET	443	49777	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:42.987531900 CET	443	49777	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:42.987555981 CET	49777	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:42.987585068 CET	49777	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:42.987596989 CET	49777	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:42.987848043 CET	49784	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:42.988874912 CET	49785	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:42.994061947 CET	443	49769	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:42.994091988 CET	443	49769	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:42.994127035 CET	443	49769	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:42.994134903 CET	49769	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.994148970 CET	49769	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.994183064 CET	49769	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.994206905 CET	443	49769	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:42.994265079 CET	49769	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:42.996735096 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:42.996829987 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:42.998584986 CET	443	49757	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:42.998753071 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.999239922 CET	443	49758	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:42.999314070 CET	49758	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:42.999703884 CET	443	49757	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:42.999779940 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:43.003227949 CET	49758	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:43.003319025 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:43.008987904 CET	443	49763	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:43.009017944 CET	443	49763	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:43.009042978 CET	443	49763	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:43.009098053 CET	49763	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:43.009144068 CET	49763	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:43.009150028 CET	49763	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:43.009665012 CET	443	49763	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:43.009738922 CET	49763	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:43.011121035 CET	49769	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:43.011193991 CET	49763	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:43.011847019 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.013473034 CET	443	49782	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.013643980 CET	49782	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.014337063 CET	443	49766	94.100.180.197	192.168.2.3
Jan 7, 2021 07:32:43.014420986 CET	49766	443	192.168.2.3	94.100.180.197
Jan 7, 2021 07:32:43.014935017 CET	443	49767	94.100.180.197	192.168.2.3
Jan 7, 2021 07:32:43.015006065 CET	49767	443	192.168.2.3	94.100.180.197
Jan 7, 2021 07:32:43.016268969 CET	49782	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.016907930 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:43.016979933 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:43.017035961 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:43.017100096 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:43.017378092 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:43.017433882 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:43.017448902 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:43.017492056 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:43.018214941 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:43.019593954 CET	443	49766	94.100.180.197	192.168.2.3
Jan 7, 2021 07:32:43.019669056 CET	49766	443	192.168.2.3	94.100.180.197
Jan 7, 2021 07:32:43.030160904 CET	443	49769	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:43.031388044 CET	443	49762	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:43.031425953 CET	443	49762	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:43.031572104 CET	49762	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:43.031608105 CET	443	49762	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:43.031666040 CET	49762	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:43.031689882 CET	49762	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:43.036092043 CET	49762	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:43.037184000 CET	49773	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:43.037580013 CET	49773	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:43.037846088 CET	49773	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:43.038002968 CET	49770	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:43.038827896 CET	49774	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:43.039248943 CET	49774	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:43.039433956 CET	49774	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:43.039618015 CET	443	49764	216.58.206.66	192.168.2.3
Jan 7, 2021 07:32:43.039645910 CET	49771	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:43.040004015 CET	49771	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:43.040426016 CET	49777	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:43.040798903 CET	49777	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:43.041801929 CET	49777	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:43.044152975 CET	443	49785	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.044262886 CET	49785	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.045407057 CET	49763	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:43.045902014 CET	49785	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.046399117 CET	443	49784	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.046519041 CET	49784	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.047399998 CET	49784	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.049144983 CET	49776	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:43.049463034 CET	49776	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:43.049808025 CET	49775	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:43.050492048 CET	49775	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:43.051748037 CET	443	49781	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.052524090 CET	443	49781	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.052572012 CET	443	49781	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.052613974 CET	443	49781	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.052615881 CET	49781	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.052642107 CET	443	49781	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.052686930 CET	49781	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.052692890 CET	49781	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.052710056 CET	49781	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.053159952 CET	443	49772	195.209.108.46	192.168.2.3
Jan 7, 2021 07:32:43.053244114 CET	49772	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:43.053451061 CET	443	49781	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.053483963 CET	443	49781	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.053529024 CET	49781	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.053554058 CET	49781	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.054579973 CET	443	49780	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.054745913 CET	443	49780	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.054785013 CET	443	49780	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.054821968 CET	49780	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.054822922 CET	443	49780	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.054837942 CET	49780	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.054848909 CET	443	49780	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.054883003 CET	49780	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.054932117 CET	49780	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.055560112 CET	443	49780	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.055593014 CET	443	49780	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.055624008 CET	443	49772	195.209.108.46	192.168.2.3
Jan 7, 2021 07:32:43.055625916 CET	49780	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.055649042 CET	49780	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.055687904 CET	49772	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:43.055712938 CET	443	49772	195.209.108.46	192.168.2.3
Jan 7, 2021 07:32:43.058154106 CET	49772	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:43.060132027 CET	443	49769	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:43.072607040 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:43.084136009 CET	49772	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:43.084410906 CET	49780	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.085103989 CET	49780	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.085288048 CET	49780	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.086014032 CET	443	49773	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:43.086045027 CET	443	49773	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:43.086067915 CET	443	49773	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:43.086134911 CET	49773	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:43.086160898 CET	49773	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:43.087416887 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:43.087934971 CET	49773	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:43.088026047 CET	443	49771	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:43.088104963 CET	49771	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:43.088109016 CET	443	49771	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:43.088166952 CET	443	49771	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:43.088172913 CET	49771	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:43.088226080 CET	49771	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:43.088669062 CET	49771	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:43.091646910 CET	443	49773	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:43.095027924 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.098659039 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.098702908 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.098722935 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.098731041 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.098772049 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.098804951 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.101269007 CET	443	49785	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.101605892 CET	443	49782	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.104881048 CET	443	49773	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:43.104912996 CET	443	49773	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:43.104958057 CET	49773	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:43.104989052 CET	49773	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:43.105055094 CET	443	49773	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:43.105119944 CET	49773	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:43.105150938 CET	443	49773	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:43.105211020 CET	49773	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:43.105884075 CET	443	49784	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.106525898 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:43.107445002 CET	49781	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.107577085 CET	443	49782	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.107618093 CET	443	49782	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.107646942 CET	443	49782	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.107671022 CET	49782	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.107695103 CET	49782	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.107700109 CET	49782	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.107986927 CET	49773	443	192.168.2.3	216.58.206.34
Jan 7, 2021 07:32:43.108530998 CET	49781	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.112205982 CET	443	49777	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:43.112600088 CET	443	49777	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:43.112627983 CET	443	49777	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:43.112766027 CET	49777	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:43.112816095 CET	49777	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:43.113535881 CET	443	49777	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:43.113550901 CET	49786	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.113607883 CET	49777	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:43.114367008 CET	49787	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.114892960 CET	49777	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:43.116995096 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.117094040 CET	443	49785	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.117136002 CET	443	49785	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.117161036 CET	443	49785	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.117193937 CET	49785	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.117223024 CET	49785	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.117232084 CET	49785	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.117683887 CET	443	49774	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:43.117872953 CET	443	49763	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:43.117873907 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.118324041 CET	443	49763	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:43.118397951 CET	49763	443	192.168.2.3	193.232.148.156
Jan 7, 2021 07:32:43.118794918 CET	443	49774	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:43.118863106 CET	49774	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:43.119115114 CET	443	49774	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:43.119179010 CET	49774	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:43.119452953 CET	443	49770	195.209.108.46	192.168.2.3
Jan 7, 2021 07:32:43.119524002 CET	49770	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:43.120796919 CET	443	49776	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:43.120867014 CET	443	49776	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:43.120874882 CET	49776	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:43.120934963 CET	49776	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:43.120954037 CET	443	49776	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:43.121095896 CET	49776	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:43.121572018 CET	443	49774	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:43.121743917 CET	49774	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:43.121870995 CET	443	49784	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.121918917 CET	443	49784	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.121949911 CET	443	49784	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.121958017 CET	49784	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.121988058 CET	49784	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.122014999 CET	49784	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.122767925 CET	443	49775	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:43.122800112 CET	443	49775	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:43.122864962 CET	49775	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:43.122888088 CET	49775	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:43.123111010 CET	443	49775	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:43.123183966 CET	49775	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:43.136336088 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:43.136666059 CET	443	49757	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:43.142249107 CET	443	49773	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:43.142404079 CET	443	49771	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:43.144872904 CET	443	49762	193.232.148.156	192.168.2.3
Jan 7, 2021 07:32:43.145816088 CET	443	49758	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:43.146606922 CET	49782	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.146652937 CET	49768	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:43.146681070 CET	49777	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:43.148571014 CET	49774	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:43.148720026 CET	49775	443	192.168.2.3	37.18.16.16
Jan 7, 2021 07:32:43.155487061 CET	443	49780	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.155513048 CET	443	49780	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.155558109 CET	49780	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.155580997 CET	49780	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.155950069 CET	443	49780	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.156018972 CET	49780	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.156261921 CET	443	49780	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.156333923 CET	49780	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.157038927 CET	443	49773	216.58.206.34	192.168.2.3
Jan 7, 2021 07:32:43.167459965 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:43.167598963 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:43.167627096 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:43.167658091 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:43.167697906 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:43.167711973 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:43.169939041 CET	49761	443	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:43.170027971 CET	49785	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.173130035 CET	49768	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:43.173305035 CET	49776	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:43.173312902 CET	49780	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.173604012 CET	49750	443	192.168.2.3	216.58.209.34
Jan 7, 2021 07:32:43.175688028 CET	443	49781	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.175719023 CET	443	49781	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.175856113 CET	49781	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.175901890 CET	49781	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.176352024 CET	443	49772	195.209.108.46	192.168.2.3
Jan 7, 2021 07:32:43.176470041 CET	49772	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:43.176606894 CET	443	49772	195.209.108.46	192.168.2.3
Jan 7, 2021 07:32:43.176632881 CET	443	49781	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.176672935 CET	49772	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:32:43.176695108 CET	49781	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.178721905 CET	49784	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.180538893 CET	49781	443	192.168.2.3	195.201.152.107
Jan 7, 2021 07:32:43.180618048 CET	49761	443	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:43.181153059 CET	49785	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.182404041 CET	49761	443	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:43.182605982 CET	49785	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.184304953 CET	49784	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.189946890 CET	443	49787	109.248.237.37	192.168.2.3
Jan 7, 2021 07:32:43.190048933 CET	49787	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.190336943 CET	443	49786	109.248.237.37	192.168.2.3
Jan 7, 2021 07:32:43.190422058 CET	49786	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.191314936 CET	443	49757	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:43.192981005 CET	443	49757	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:43.193087101 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:43.195096016 CET	443	49768	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:43.195125103 CET	443	49768	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:43.195230961 CET	49768	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:43.195269108 CET	49768	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:43.198220015 CET	49768	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:43.201196909 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.201282978 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.201421976 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.201464891 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.201487064 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.201515913 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.201531887 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.201587915 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.202810049 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:43.206456900 CET	49787	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.206639051 CET	49786	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.218206882 CET	443	49777	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:43.218863964 CET	443	49777	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:43.218966007 CET	49777	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:43.221414089 CET	443	49768	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:43.221553087 CET	49768	443	192.168.2.3	216.58.198.34
Jan 7, 2021 07:32:43.225533962 CET	443	49785	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.225564003 CET	443	49785	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.225624084 CET	49785	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.225663900 CET	49785	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.226553917 CET	443	49750	216.58.209.34	192.168.2.3
Jan 7, 2021 07:32:43.231637955 CET	49785	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.234144926 CET	443	49782	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.234265089 CET	49782	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.236500025 CET	443	49785	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.236568928 CET	49785	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.237536907 CET	443	49784	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.237577915 CET	443	49784	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.237628937 CET	49784	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.237657070 CET	49784	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.242825985 CET	443	49784	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.242903948 CET	49784	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.243877888 CET	443	49785	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.245778084 CET	443	49761	89.208.236.251	192.168.2.3
Jan 7, 2021 07:32:43.245820045 CET	443	49761	89.208.236.251	192.168.2.3
Jan 7, 2021 07:32:43.245928049 CET	49761	443	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:43.245973110 CET	49761	443	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:43.251399040 CET	49784	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.252012014 CET	49761	443	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:43.252294064 CET	443	49768	216.58.198.34	192.168.2.3
Jan 7, 2021 07:32:43.256275892 CET	443	49761	89.208.236.251	192.168.2.3
Jan 7, 2021 07:32:43.256304026 CET	443	49761	89.208.236.251	192.168.2.3
Jan 7, 2021 07:32:43.256398916 CET	49761	443	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:43.256418943 CET	49761	443	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:43.257667065 CET	443	49785	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.257699966 CET	443	49785	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.257731915 CET	443	49785	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.257738113 CET	49785	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.257766008 CET	49785	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.257792950 CET	49785	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.259099960 CET	443	49761	89.208.236.251	192.168.2.3
Jan 7, 2021 07:32:43.259166002 CET	49761	443	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:43.259531975 CET	49785	443	192.168.2.3	142.250.180.98
Jan 7, 2021 07:32:43.260288000 CET	443	49774	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:43.260855913 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:43.261235952 CET	443	49775	37.18.16.16	192.168.2.3
Jan 7, 2021 07:32:43.271686077 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:43.271828890 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:43.281929016 CET	443	49787	109.248.237.37	192.168.2.3
Jan 7, 2021 07:32:43.283369064 CET	443	49786	109.248.237.37	192.168.2.3
Jan 7, 2021 07:32:43.284333944 CET	443	49787	109.248.237.37	192.168.2.3
Jan 7, 2021 07:32:43.284383059 CET	443	49787	109.248.237.37	192.168.2.3
Jan 7, 2021 07:32:43.284404039 CET	49787	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.284432888 CET	49787	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.284460068 CET	443	49787	109.248.237.37	192.168.2.3
Jan 7, 2021 07:32:43.284513950 CET	49787	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.285399914 CET	443	49780	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.287683964 CET	443	49786	109.248.237.37	192.168.2.3
Jan 7, 2021 07:32:43.287723064 CET	443	49786	109.248.237.37	192.168.2.3
Jan 7, 2021 07:32:43.287755013 CET	443	49786	109.248.237.37	192.168.2.3
Jan 7, 2021 07:32:43.287822962 CET	49786	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.287869930 CET	49786	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.287875891 CET	49786	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.290532112 CET	443	49781	195.201.152.107	192.168.2.3
Jan 7, 2021 07:32:43.291574955 CET	49787	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.292048931 CET	49787	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.292901039 CET	443	49785	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.295396090 CET	49786	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.295715094 CET	49787	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.295897007 CET	49786	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.314662933 CET	443	49784	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.316144943 CET	443	49785	142.250.180.98	192.168.2.3
Jan 7, 2021 07:32:43.325464964 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.329714060 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:43.329814911 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:43.344563007 CET	443	49776	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:43.366741896 CET	443	49761	89.208.236.251	192.168.2.3
Jan 7, 2021 07:32:43.367845058 CET	443	49787	109.248.237.37	192.168.2.3
Jan 7, 2021 07:32:43.367887974 CET	443	49787	109.248.237.37	192.168.2.3
Jan 7, 2021 07:32:43.367995024 CET	49787	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.368014097 CET	49787	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.374454975 CET	443	49786	109.248.237.37	192.168.2.3
Jan 7, 2021 07:32:43.374865055 CET	443	49787	109.248.237.37	192.168.2.3
Jan 7, 2021 07:32:43.374913931 CET	443	49786	109.248.237.37	192.168.2.3
Jan 7, 2021 07:32:43.374948978 CET	443	49786	109.248.237.37	192.168.2.3
Jan 7, 2021 07:32:43.375004053 CET	49787	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.375055075 CET	49786	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.375895977 CET	49786	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.395117044 CET	443	49788	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:43.395241022 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.562146902 CET	49787	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.562499046 CET	49786	443	192.168.2.3	109.248.237.37
Jan 7, 2021 07:32:43.566293955 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.566767931 CET	49789	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.568128109 CET	49790	443	192.168.2.3	31.172.81.158
Jan 7, 2021 07:32:43.568185091 CET	49791	443	192.168.2.3	31.172.81.158
Jan 7, 2021 07:32:43.568243980 CET	49792	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:43.568336964 CET	49793	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:32:43.568393946 CET	49794	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:43.568460941 CET	49795	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:32:43.611248970 CET	443	49790	31.172.81.158	192.168.2.3
Jan 7, 2021 07:32:43.611279964 CET	443	49791	31.172.81.158	192.168.2.3
Jan 7, 2021 07:32:43.611356974 CET	49790	443	192.168.2.3	31.172.81.158
Jan 7, 2021 07:32:43.611394882 CET	49791	443	192.168.2.3	31.172.81.158
Jan 7, 2021 07:32:43.618833065 CET	49790	443	192.168.2.3	31.172.81.158
Jan 7, 2021 07:32:43.619038105 CET	49791	443	192.168.2.3	31.172.81.158
Jan 7, 2021 07:32:43.635785103 CET	443	49788	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:43.636230946 CET	443	49789	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:43.636373043 CET	49789	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.636642933 CET	443	49788	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:43.636687040 CET	443	49788	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:43.636714935 CET	443	49788	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:43.636718988 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.636773109 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.636779070 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.639178038 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:43.647010088 CET	443	49792	95.163.37.253	192.168.2.3
Jan 7, 2021 07:32:43.647109985 CET	49792	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:43.653091908 CET	443	49794	95.163.37.253	192.168.2.3
Jan 7, 2021 07:32:43.653270960 CET	49794	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:43.654695034 CET	49789	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.657568932 CET	49792	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:43.657663107 CET	443	49795	81.222.128.216	192.168.2.3
Jan 7, 2021 07:32:43.657753944 CET	49795	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:32:43.657979012 CET	443	49793	81.222.128.216	192.168.2.3
Jan 7, 2021 07:32:43.658114910 CET	49793	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:32:43.658617973 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:43.659569025 CET	49794	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:43.659744024 CET	49793	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:32:43.659934998 CET	49795	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:32:43.661784887 CET	443	49790	31.172.81.158	192.168.2.3
Jan 7, 2021 07:32:43.661932945 CET	443	49790	31.172.81.158	192.168.2.3
Jan 7, 2021 07:32:43.661993027 CET	443	49790	31.172.81.158	192.168.2.3
Jan 7, 2021 07:32:43.662015915 CET	49790	443	192.168.2.3	31.172.81.158
Jan 7, 2021 07:32:43.662064075 CET	49790	443	192.168.2.3	31.172.81.158
Jan 7, 2021 07:32:43.662075996 CET	443	49791	31.172.81.158	192.168.2.3
Jan 7, 2021 07:32:43.662128925 CET	443	49791	31.172.81.158	192.168.2.3
Jan 7, 2021 07:32:43.662169933 CET	443	49791	31.172.81.158	192.168.2.3
Jan 7, 2021 07:32:43.662197113 CET	49791	443	192.168.2.3	31.172.81.158
Jan 7, 2021 07:32:43.662220955 CET	49791	443	192.168.2.3	31.172.81.158
Jan 7, 2021 07:32:43.671528101 CET	49790	443	192.168.2.3	31.172.81.158
Jan 7, 2021 07:32:43.675534964 CET	49790	443	192.168.2.3	31.172.81.158
Jan 7, 2021 07:32:43.675882101 CET	49791	443	192.168.2.3	31.172.81.158
Jan 7, 2021 07:32:43.676826000 CET	443	49787	109.248.237.37	192.168.2.3
Jan 7, 2021 07:32:43.677988052 CET	443	49786	109.248.237.37	192.168.2.3
Jan 7, 2021 07:32:43.679819107 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.680224895 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.680407047 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.680640936 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.691677094 CET	49796	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.692471981 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.695023060 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:43.714592934 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:43.715363026 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:43.715429068 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:43.716306925 CET	443	49790	31.172.81.158	192.168.2.3
Jan 7, 2021 07:32:43.716384888 CET	49790	443	192.168.2.3	31.172.81.158
Jan 7, 2021 07:32:43.718806028 CET	443	49790	31.172.81.158	192.168.2.3
Jan 7, 2021 07:32:43.718877077 CET	49790	443	192.168.2.3	31.172.81.158
Jan 7, 2021 07:32:43.721110106 CET	443	49791	31.172.81.158	192.168.2.3
Jan 7, 2021 07:32:43.721189976 CET	49791	443	192.168.2.3	31.172.81.158
Jan 7, 2021 07:32:43.724198103 CET	443	49789	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:43.725049973 CET	443	49789	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:43.725090027 CET	443	49789	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:43.725120068 CET	443	49789	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:43.725138903 CET	49789	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.725171089 CET	49789	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.725173950 CET	49789	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.734911919 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:43.734980106 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:43.736180067 CET	443	49792	95.163.37.253	192.168.2.3
Jan 7, 2021 07:32:43.738110065 CET	443	49792	95.163.37.253	192.168.2.3
Jan 7, 2021 07:32:43.738164902 CET	443	49792	95.163.37.253	192.168.2.3
Jan 7, 2021 07:32:43.738202095 CET	443	49792	95.163.37.253	192.168.2.3
Jan 7, 2021 07:32:43.738212109 CET	49792	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:43.738234997 CET	49792	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:43.738256931 CET	49792	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:43.744087934 CET	443	49794	95.163.37.253	192.168.2.3
Jan 7, 2021 07:32:43.746093035 CET	443	49794	95.163.37.253	192.168.2.3
Jan 7, 2021 07:32:43.746134996 CET	443	49794	95.163.37.253	192.168.2.3
Jan 7, 2021 07:32:43.746165037 CET	443	49794	95.163.37.253	192.168.2.3
Jan 7, 2021 07:32:43.746175051 CET	49794	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:43.746215105 CET	49794	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:43.746222019 CET	49794	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:43.749244928 CET	443	49793	81.222.128.216	192.168.2.3
Jan 7, 2021 07:32:43.749351978 CET	443	49795	81.222.128.216	192.168.2.3
Jan 7, 2021 07:32:43.749502897 CET	443	49788	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:43.749540091 CET	443	49788	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:43.749581099 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.749608040 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.749656916 CET	443	49788	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:43.749748945 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.749970913 CET	443	49788	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:43.750035048 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.750179052 CET	443	49788	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:43.750241041 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.751905918 CET	443	49793	81.222.128.216	192.168.2.3
Jan 7, 2021 07:32:43.751988888 CET	49793	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:32:43.752147913 CET	443	49793	81.222.128.216	192.168.2.3
Jan 7, 2021 07:32:43.752204895 CET	49793	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:32:43.752290010 CET	443	49793	81.222.128.216	192.168.2.3
Jan 7, 2021 07:32:43.752342939 CET	49793	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:32:43.752998114 CET	443	49795	81.222.128.216	192.168.2.3
Jan 7, 2021 07:32:43.753077030 CET	49795	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:32:43.753635883 CET	443	49795	81.222.128.216	192.168.2.3
Jan 7, 2021 07:32:43.753668070 CET	443	49795	81.222.128.216	192.168.2.3
Jan 7, 2021 07:32:43.753699064 CET	49795	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:32:43.753729105 CET	49795	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:32:43.761673927 CET	443	49796	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:43.761775970 CET	49796	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.762583017 CET	443	49797	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:43.762660980 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.782241106 CET	443	49757	88.212.252.2	192.168.2.3
Jan 7, 2021 07:32:43.782321930 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:32:43.789685011 CET	49792	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:43.797446966 CET	49789	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.809061050 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.813725948 CET	49796	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.819283009 CET	49795	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:32:43.823143005 CET	49793	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:32:43.827686071 CET	49798	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:32:43.828316927 CET	49799	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:32:43.830410004 CET	49794	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:43.830926895 CET	49789	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.831310987 CET	49792	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:43.834758043 CET	49795	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:32:43.835259914 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.835848093 CET	49793	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:32:43.836065054 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.839270115 CET	49800	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:43.843380928 CET	49801	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:43.845485926 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:43.867177963 CET	443	49789	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:43.867206097 CET	443	49789	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:43.867269993 CET	49789	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.867302895 CET	49789	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.869575977 CET	443	49792	95.163.37.253	192.168.2.3
Jan 7, 2021 07:32:43.869657993 CET	49792	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:43.875607014 CET	49802	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:43.876602888 CET	49803	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:43.878812075 CET	49804	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:43.879075050 CET	49805	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:43.879076958 CET	443	49797	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:43.880300045 CET	443	49797	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:43.880341053 CET	443	49797	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:43.880374908 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.880392075 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.880424023 CET	443	49797	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:43.880481005 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.883791924 CET	443	49796	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:43.885684967 CET	443	49796	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:43.885727882 CET	443	49796	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:43.885759115 CET	443	49796	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:43.885828018 CET	49796	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.885876894 CET	49796	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.885891914 CET	49796	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.899379015 CET	49789	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.900552988 CET	443	49789	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:43.900635004 CET	49789	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.903028965 CET	443	49799	80.64.106.147	192.168.2.3
Jan 7, 2021 07:32:43.903120041 CET	443	49798	80.64.106.147	192.168.2.3
Jan 7, 2021 07:32:43.903126955 CET	49799	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:32:43.903194904 CET	49798	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:32:43.905466080 CET	443	49788	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:43.905591965 CET	443	49788	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:43.905648947 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:32:43.906430006 CET	443	49800	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:43.906594992 CET	49800	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:43.907989979 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.909269094 CET	443	49795	81.222.128.216	192.168.2.3
Jan 7, 2021 07:32:43.909353018 CET	49795	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:32:43.910969973 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.912882090 CET	443	49793	81.222.128.216	192.168.2.3
Jan 7, 2021 07:32:43.913033009 CET	49793	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:32:43.913424015 CET	443	49801	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:43.913522005 CET	49801	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:43.914644957 CET	443	49792	95.163.37.253	192.168.2.3
Jan 7, 2021 07:32:43.914671898 CET	443	49792	95.163.37.253	192.168.2.3
Jan 7, 2021 07:32:43.914715052 CET	49792	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:43.914741993 CET	49792	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:43.916057110 CET	443	49794	95.163.37.253	192.168.2.3
Jan 7, 2021 07:32:43.916197062 CET	49794	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:43.921586037 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:32:43.921663046 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:32:43.921691895 CET	49796	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.921891928 CET	49798	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:32:43.922497034 CET	49806	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:43.922605038 CET	49807	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:43.923146963 CET	49800	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:43.924410105 CET	443	49795	81.222.128.216	192.168.2.3
Jan 7, 2021 07:32:43.924474955 CET	49795	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:32:43.925956964 CET	443	49793	81.222.128.216	192.168.2.3
Jan 7, 2021 07:32:43.926088095 CET	49793	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:32:43.926561117 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.927231073 CET	49809	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:32:43.927316904 CET	49810	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:43.927376986 CET	49811	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:43.927417994 CET	49812	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:32:43.927478075 CET	49813	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:43.929466963 CET	49801	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:43.929588079 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.930284023 CET	49796	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.930871010 CET	443	49804	95.211.66.35	192.168.2.3
Jan 7, 2021 07:32:43.930969954 CET	49804	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:43.931103945 CET	443	49805	95.211.66.35	192.168.2.3
Jan 7, 2021 07:32:43.931181908 CET	49805	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:43.931217909 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.940275908 CET	49799	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:32:43.944896936 CET	49804	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:43.945039034 CET	49805	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:43.958853006 CET	443	49803	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:43.959012032 CET	49803	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:43.962703943 CET	443	49802	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:43.962816954 CET	49802	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:43.964776039 CET	49814	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:43.965285063 CET	49815	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:43.968038082 CET	49803	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:43.968257904 CET	49802	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:43.970170975 CET	49808	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:43.971813917 CET	443	49806	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:43.971844912 CET	443	49807	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:43.971895933 CET	49806	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:43.971982002 CET	49807	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:43.972594976 CET	49806	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:43.973133087 CET	49807	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:43.978279114 CET	443	49797	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:43.978318930 CET	443	49797	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:43.978352070 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.978367090 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.979243040 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.990309954 CET	443	49800	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:43.991915941 CET	443	49796	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:43.991955996 CET	443	49796	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:43.992005110 CET	49796	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.992050886 CET	49796	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.992585897 CET	49796	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.992822886 CET	443	49800	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:43.992878914 CET	443	49800	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:43.992918015 CET	443	49800	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:43.992954016 CET	443	49800	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:43.992954969 CET	49800	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:43.992984056 CET	49800	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:43.992985964 CET	443	49800	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:43.992990017 CET	49800	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:43.993005037 CET	49800	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:43.993041039 CET	49800	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:43.993966103 CET	443	49813	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:43.994061947 CET	49813	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:43.996639013 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.996707916 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.996737003 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.996761084 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.996793985 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.996831894 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.996850967 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.996880054 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.996905088 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.996958017 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.996977091 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.997026920 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.997052908 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.997091055 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.997107983 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.997142076 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.997173071 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.997226954 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.997253895 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:43.997287989 CET	443	49811	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:43.997306108 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:43.997334957 CET	443	49797	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:43.997366905 CET	443	49804	95.211.66.35	192.168.2.3
Jan 7, 2021 07:32:43.997370958 CET	49811	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:43.997416973 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:43.997451067 CET	443	49805	95.211.66.35	192.168.2.3
Jan 7, 2021 07:32:43.997488022 CET	443	49798	80.64.106.147	192.168.2.3
Jan 7, 2021 07:32:43.998609066 CET	443	49798	80.64.106.147	192.168.2.3
Jan 7, 2021 07:32:43.998668909 CET	443	49798	80.64.106.147	192.168.2.3
Jan 7, 2021 07:32:43.998702049 CET	443	49798	80.64.106.147	192.168.2.3
Jan 7, 2021 07:32:43.998707056 CET	49798	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:32:43.998739958 CET	49798	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:32:43.998750925 CET	49798	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:32:43.998933077 CET	443	49804	95.211.66.35	192.168.2.3
Jan 7, 2021 07:32:43.998979092 CET	443	49804	95.211.66.35	192.168.2.3
Jan 7, 2021 07:32:43.999012947 CET	443	49804	95.211.66.35	192.168.2.3
Jan 7, 2021 07:32:43.999034882 CET	49804	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:43.999053955 CET	49804	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:43.999069929 CET	49804	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:43.999380112 CET	443	49801	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:43.999432087 CET	443	49805	95.211.66.35	192.168.2.3
Jan 7, 2021 07:32:43.999478102 CET	443	49805	95.211.66.35	192.168.2.3
Jan 7, 2021 07:32:43.999512911 CET	443	49805	95.211.66.35	192.168.2.3
Jan 7, 2021 07:32:43.999530077 CET	49805	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:43.999564886 CET	49805	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:43.999572992 CET	49805	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:43.999737978 CET	443	49797	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:43.999806881 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:44.000660896 CET	443	49801	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:44.000720978 CET	443	49801	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:44.000758886 CET	443	49801	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:44.000772953 CET	49801	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:44.000794888 CET	443	49801	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:44.000802994 CET	49801	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:44.000808001 CET	49801	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:44.000828028 CET	443	49801	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:44.000850916 CET	49801	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:44.000946045 CET	49801	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:44.001247883 CET	443	49796	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:44.001327038 CET	49796	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:44.003619909 CET	443	49797	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:44.003696918 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:44.006392002 CET	443	49810	217.65.2.150	192.168.2.3
Jan 7, 2021 07:32:44.006508112 CET	49810	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:44.012166977 CET	443	49812	176.99.5.102	192.168.2.3
Jan 7, 2021 07:32:44.012273073 CET	49812	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:32:44.012918949 CET	443	49809	176.99.5.102	192.168.2.3
Jan 7, 2021 07:32:44.013034105 CET	49809	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:32:44.014990091 CET	443	49799	80.64.106.147	192.168.2.3
Jan 7, 2021 07:32:44.016390085 CET	443	49799	80.64.106.147	192.168.2.3
Jan 7, 2021 07:32:44.016431093 CET	443	49799	80.64.106.147	192.168.2.3
Jan 7, 2021 07:32:44.016463041 CET	443	49799	80.64.106.147	192.168.2.3
Jan 7, 2021 07:32:44.016473055 CET	49799	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:32:44.016510010 CET	49799	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:32:44.016516924 CET	49799	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:32:44.017096043 CET	443	49789	195.201.243.72	192.168.2.3
Jan 7, 2021 07:32:44.021780014 CET	443	49806	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:44.022321939 CET	443	49807	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:44.022803068 CET	443	49806	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:44.022851944 CET	443	49806	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:44.022886992 CET	443	49806	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:44.022926092 CET	49806	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:44.022938013 CET	49806	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:44.022947073 CET	49806	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:44.023443937 CET	443	49807	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:44.023483992 CET	443	49807	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:44.023511887 CET	443	49807	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:44.023567915 CET	49807	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:44.023612976 CET	49807	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:44.023619890 CET	49807	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:44.035240889 CET	443	49814	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:44.035406113 CET	49814	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:44.035727024 CET	443	49815	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:44.035871029 CET	49815	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:44.049617052 CET	443	49803	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:44.051044941 CET	443	49803	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:44.051096916 CET	443	49803	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:44.051147938 CET	443	49803	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:44.051187992 CET	443	49803	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:44.051218987 CET	443	49808	217.65.2.150	192.168.2.3
Jan 7, 2021 07:32:44.051259041 CET	49803	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:44.051278114 CET	49803	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:44.051282883 CET	49803	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:44.051323891 CET	49808	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:44.054249048 CET	443	49802	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:44.056643963 CET	443	49802	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:44.056899071 CET	49802	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:44.056978941 CET	443	49802	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:44.057039022 CET	443	49802	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:44.057044029 CET	49802	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:44.057094097 CET	49802	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:44.057241917 CET	443	49802	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:44.057301044 CET	49802	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:44.080719948 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:44.080776930 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:44.080800056 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:44.080846071 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:44.088392973 CET	49816	443	192.168.2.3	31.172.81.172
Jan 7, 2021 07:32:44.089560032 CET	49817	443	192.168.2.3	31.172.81.172
Jan 7, 2021 07:32:44.089983940 CET	49814	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:44.090667963 CET	49811	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:44.090950966 CET	49815	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:44.093293905 CET	443	49797	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:44.098247051 CET	49800	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:44.102183104 CET	49806	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:44.102694988 CET	49809	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:32:44.103858948 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:44.105334044 CET	443	49796	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:44.111358881 CET	49819	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:44.111582041 CET	49812	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:32:44.112210989 CET	49810	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:44.113245010 CET	49806	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:44.116517067 CET	49806	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:44.117755890 CET	49800	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:44.118983984 CET	49807	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:44.127516985 CET	49807	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:44.131397009 CET	443	49816	31.172.81.172	192.168.2.3
Jan 7, 2021 07:32:44.131511927 CET	49816	443	192.168.2.3	31.172.81.172
Jan 7, 2021 07:32:44.132574081 CET	443	49817	31.172.81.172	192.168.2.3
Jan 7, 2021 07:32:44.132695913 CET	49817	443	192.168.2.3	31.172.81.172
Jan 7, 2021 07:32:44.143913031 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:44.144148111 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:44.151314974 CET	443	49819	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:44.151443958 CET	49819	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:44.152733088 CET	443	49806	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:44.152761936 CET	443	49806	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:44.152822018 CET	49806	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:44.152841091 CET	49806	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:44.160249949 CET	443	49811	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:44.160325050 CET	443	49811	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:44.160356998 CET	443	49811	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:44.160388947 CET	443	49811	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:44.160423040 CET	443	49814	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:44.160429001 CET	49811	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:44.160454988 CET	49811	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:44.160461903 CET	49811	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:44.161251068 CET	443	49815	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:44.162539005 CET	443	49806	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:44.162616014 CET	49806	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:44.162724018 CET	443	49814	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:44.162772894 CET	443	49814	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:44.162791967 CET	49814	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:44.162838936 CET	443	49814	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:44.162852049 CET	49814	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:44.162880898 CET	443	49814	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:44.162898064 CET	49814	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:44.162929058 CET	49814	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:44.163563013 CET	443	49811	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:44.163603067 CET	443	49811	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:44.163638115 CET	49811	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:44.163666964 CET	49811	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:44.164534092 CET	443	49815	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:44.164576054 CET	443	49815	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:44.164612055 CET	443	49815	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:44.164639950 CET	443	49815	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:44.164671898 CET	49815	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:44.164717913 CET	49815	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:44.164725065 CET	49815	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:44.164730072 CET	49815	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:44.165535927 CET	443	49800	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:44.165720940 CET	49800	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:44.166510105 CET	443	49806	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:44.166588068 CET	49806	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:44.168508053 CET	443	49807	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:44.168555975 CET	443	49807	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:44.168638945 CET	49807	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:44.168689013 CET	49807	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:44.177023888 CET	443	49807	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:44.177244902 CET	49807	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:44.185489893 CET	443	49800	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:44.185659885 CET	49800	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:44.188399076 CET	443	49809	176.99.5.102	192.168.2.3
Jan 7, 2021 07:32:44.192122936 CET	443	49810	217.65.2.150	192.168.2.3
Jan 7, 2021 07:32:44.193437099 CET	443	49809	176.99.5.102	192.168.2.3
Jan 7, 2021 07:32:44.193480968 CET	443	49809	176.99.5.102	192.168.2.3
Jan 7, 2021 07:32:44.193517923 CET	443	49809	176.99.5.102	192.168.2.3
Jan 7, 2021 07:32:44.193556070 CET	49809	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:32:44.193603992 CET	49809	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:32:44.193612099 CET	49809	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:32:44.194652081 CET	443	49810	217.65.2.150	192.168.2.3
Jan 7, 2021 07:32:44.194693089 CET	443	49810	217.65.2.150	192.168.2.3
Jan 7, 2021 07:32:44.194729090 CET	443	49810	217.65.2.150	192.168.2.3
Jan 7, 2021 07:32:44.194751024 CET	49810	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:44.194780111 CET	49810	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:44.194787979 CET	49810	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:44.196161032 CET	443	49812	176.99.5.102	192.168.2.3
Jan 7, 2021 07:32:44.199554920 CET	443	49812	176.99.5.102	192.168.2.3
Jan 7, 2021 07:32:44.199594975 CET	443	49812	176.99.5.102	192.168.2.3
Jan 7, 2021 07:32:44.199621916 CET	443	49812	176.99.5.102	192.168.2.3
Jan 7, 2021 07:32:44.199647903 CET	49812	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:32:44.199656963 CET	49812	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:32:44.199670076 CET	49812	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:32:45.046935081 CET	49801	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:45.048435926 CET	49799	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:32:45.063643932 CET	49805	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:45.063875914 CET	49813	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:45.075894117 CET	49808	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:45.082395077 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:45.095367908 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:45.096128941 CET	49798	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:32:45.098625898 CET	49804	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:45.101893902 CET	49807	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:45.102163076 CET	49820	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.102305889 CET	49821	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.102340937 CET	49802	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:45.102411032 CET	49803	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:45.103688002 CET	49805	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:45.104221106 CET	49799	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:32:45.106091976 CET	49805	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:45.106709003 CET	49812	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:32:45.108916044 CET	49804	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:45.109472036 CET	49802	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:45.109590054 CET	49803	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:45.109674931 CET	49812	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:32:45.109713078 CET	49802	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:45.110312939 CET	49800	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:45.116530895 CET	443	49805	95.211.66.35	192.168.2.3
Jan 7, 2021 07:32:45.116571903 CET	443	49805	95.211.66.35	192.168.2.3
Jan 7, 2021 07:32:45.116621017 CET	49805	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:45.116650105 CET	49805	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:45.117331028 CET	443	49801	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:45.117470026 CET	49801	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:45.119873047 CET	49742	80	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:45.123517036 CET	443	49799	80.64.106.147	192.168.2.3
Jan 7, 2021 07:32:45.123590946 CET	49799	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:32:45.127510071 CET	49806	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:45.127924919 CET	49817	443	192.168.2.3	31.172.81.172
Jan 7, 2021 07:32:45.128098965 CET	49819	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.128302097 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.128798008 CET	49805	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:45.130558014 CET	443	49813	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:45.130599022 CET	443	49813	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:45.130645990 CET	49813	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:45.130676031 CET	443	49813	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:45.130688906 CET	49813	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:45.130732059 CET	443	49813	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:45.130743980 CET	49813	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:45.130780935 CET	49813	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:45.133990049 CET	443	49813	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:45.134037971 CET	443	49813	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:45.134063959 CET	49813	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:45.134092093 CET	49813	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:45.146055937 CET	49816	443	192.168.2.3	31.172.81.172
Jan 7, 2021 07:32:45.150507927 CET	49809	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:32:45.151073933 CET	49814	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:45.151112080 CET	443	49804	95.211.66.35	192.168.2.3
Jan 7, 2021 07:32:45.151144028 CET	443	49804	95.211.66.35	192.168.2.3
Jan 7, 2021 07:32:45.151201963 CET	49804	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:45.151238918 CET	49804	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:45.151573896 CET	49814	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:45.151781082 CET	49814	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:45.152264118 CET	49804	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:45.152420044 CET	443	49797	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:45.152576923 CET	443	49797	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:45.152647972 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:45.153340101 CET	49810	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:45.153614044 CET	49810	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:45.155560970 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:45.155778885 CET	443	49805	95.211.66.35	192.168.2.3
Jan 7, 2021 07:32:45.155874968 CET	49805	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:45.156095028 CET	443	49808	217.65.2.150	192.168.2.3
Jan 7, 2021 07:32:45.158935070 CET	49815	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:45.159073114 CET	443	49808	217.65.2.150	192.168.2.3
Jan 7, 2021 07:32:45.159116030 CET	443	49808	217.65.2.150	192.168.2.3
Jan 7, 2021 07:32:45.159147978 CET	443	49808	217.65.2.150	192.168.2.3
Jan 7, 2021 07:32:45.159236908 CET	49808	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:45.159291983 CET	49808	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:45.159307003 CET	49808	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:45.159379005 CET	49815	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:45.159627914 CET	443	49805	95.211.66.35	192.168.2.3
Jan 7, 2021 07:32:45.159712076 CET	49805	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:45.160339117 CET	49811	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:45.160877943 CET	49811	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:45.161386967 CET	49811	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:45.162513018 CET	443	49804	95.211.66.35	192.168.2.3
Jan 7, 2021 07:32:45.162605047 CET	49804	443	192.168.2.3	95.211.66.35
Jan 7, 2021 07:32:45.167012930 CET	443	49797	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:45.167081118 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:45.167907953 CET	443	49819	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.168214083 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.169076920 CET	443	49819	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.169116020 CET	443	49819	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.169153929 CET	49819	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.169186115 CET	49819	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.170531034 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.170567989 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.170614004 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.170640945 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.170907974 CET	443	49817	31.172.81.172	192.168.2.3
Jan 7, 2021 07:32:45.170975924 CET	443	49817	31.172.81.172	192.168.2.3
Jan 7, 2021 07:32:45.171015978 CET	443	49817	31.172.81.172	192.168.2.3
Jan 7, 2021 07:32:45.171103954 CET	49817	443	192.168.2.3	31.172.81.172
Jan 7, 2021 07:32:45.171154976 CET	49817	443	192.168.2.3	31.172.81.172
Jan 7, 2021 07:32:45.171627045 CET	443	49798	80.64.106.147	192.168.2.3
Jan 7, 2021 07:32:45.171711922 CET	49798	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:32:45.172939062 CET	49754	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:45.173826933 CET	49808	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:45.178186893 CET	443	49800	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:45.178268909 CET	49800	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:45.181788921 CET	49755	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:45.184206963 CET	443	49803	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:45.184235096 CET	443	49803	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:45.184281111 CET	49803	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:45.184297085 CET	49803	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:45.188498020 CET	443	49802	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:45.188654900 CET	49802	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:45.188906908 CET	443	49802	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:45.188987970 CET	49802	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:45.189064026 CET	443	49816	31.172.81.172	192.168.2.3
Jan 7, 2021 07:32:45.189186096 CET	443	49816	31.172.81.172	192.168.2.3
Jan 7, 2021 07:32:45.189228058 CET	443	49816	31.172.81.172	192.168.2.3
Jan 7, 2021 07:32:45.189275980 CET	49816	443	192.168.2.3	31.172.81.172
Jan 7, 2021 07:32:45.189302921 CET	49816	443	192.168.2.3	31.172.81.172
Jan 7, 2021 07:32:45.190409899 CET	80	49742	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:45.190505028 CET	49742	80	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:45.190953970 CET	443	49803	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:45.191032887 CET	49803	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:45.191643000 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:45.191688061 CET	443	49812	176.99.5.102	192.168.2.3
Jan 7, 2021 07:32:45.191762924 CET	49812	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:32:45.193403959 CET	49803	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:45.193778992 CET	49802	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:45.193917036 CET	443	49807	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:45.194551945 CET	443	49812	176.99.5.102	192.168.2.3
Jan 7, 2021 07:32:45.194633961 CET	49812	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:32:45.195389986 CET	443	49802	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:45.195468903 CET	49802	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:45.196456909 CET	49813	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:45.196840048 CET	49813	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:45.197243929 CET	443	49802	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:45.197329998 CET	49802	443	192.168.2.3	37.9.245.57
Jan 7, 2021 07:32:45.198148012 CET	49761	443	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:45.203022957 CET	443	49821	185.148.37.80	192.168.2.3
Jan 7, 2021 07:32:45.203125954 CET	49821	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.203830957 CET	443	49820	185.148.37.80	192.168.2.3
Jan 7, 2021 07:32:45.203921080 CET	49820	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.207233906 CET	49821	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.207462072 CET	49820	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.210325956 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.210709095 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.210923910 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.211393118 CET	49817	443	192.168.2.3	31.172.81.172
Jan 7, 2021 07:32:45.211647987 CET	49817	443	192.168.2.3	31.172.81.172
Jan 7, 2021 07:32:45.212018967 CET	49816	443	192.168.2.3	31.172.81.172
Jan 7, 2021 07:32:45.212734938 CET	49819	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.213073015 CET	49819	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.216144085 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:45.217909098 CET	443	49806	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:45.218195915 CET	443	49799	80.64.106.147	192.168.2.3
Jan 7, 2021 07:32:45.221848965 CET	443	49814	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:45.221884966 CET	443	49814	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:45.221950054 CET	49814	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:45.221972942 CET	49814	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:45.222040892 CET	443	49814	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:45.222105980 CET	49814	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:45.222563982 CET	49814	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:45.222631931 CET	443	49814	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:45.222712994 CET	49814	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:45.223920107 CET	49814	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:45.224338055 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:45.224407911 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:45.226627111 CET	443	49805	95.211.66.35	192.168.2.3
Jan 7, 2021 07:32:45.229815960 CET	443	49815	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:45.229865074 CET	443	49811	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:45.229912043 CET	49815	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:45.229942083 CET	49811	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:45.229976892 CET	443	49815	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:45.230036020 CET	49815	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:45.230242968 CET	443	49811	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:45.230319977 CET	49811	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:45.230602980 CET	49815	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:45.231053114 CET	49811	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:45.231312990 CET	443	49811	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:45.231393099 CET	49811	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:45.232566118 CET	443	49810	217.65.2.150	192.168.2.3
Jan 7, 2021 07:32:45.232840061 CET	443	49810	217.65.2.150	192.168.2.3
Jan 7, 2021 07:32:45.232916117 CET	49810	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:45.233428001 CET	443	49810	217.65.2.150	192.168.2.3
Jan 7, 2021 07:32:45.233505011 CET	49810	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:45.235380888 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:45.237905979 CET	443	49809	176.99.5.102	192.168.2.3
Jan 7, 2021 07:32:45.238049984 CET	49809	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:32:45.242660046 CET	443	49804	95.211.66.35	192.168.2.3
Jan 7, 2021 07:32:45.250307083 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.250453949 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.250484943 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.250545979 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.250576973 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.250643015 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.250746012 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.250811100 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.250833035 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.251199007 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.252582073 CET	443	49819	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.252846956 CET	443	49819	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.254612923 CET	443	49817	31.172.81.172	192.168.2.3
Jan 7, 2021 07:32:45.255381107 CET	443	49817	31.172.81.172	192.168.2.3
Jan 7, 2021 07:32:45.255532026 CET	49817	443	192.168.2.3	31.172.81.172
Jan 7, 2021 07:32:45.255655050 CET	443	49817	31.172.81.172	192.168.2.3
Jan 7, 2021 07:32:45.255738020 CET	49817	443	192.168.2.3	31.172.81.172
Jan 7, 2021 07:32:45.255932093 CET	443	49816	31.172.81.172	192.168.2.3
Jan 7, 2021 07:32:45.256016970 CET	49816	443	192.168.2.3	31.172.81.172
Jan 7, 2021 07:32:45.256453991 CET	443	49808	217.65.2.150	192.168.2.3
Jan 7, 2021 07:32:45.256531000 CET	49808	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:45.258449078 CET	49817	443	192.168.2.3	31.172.81.172
Jan 7, 2021 07:32:45.260838032 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:45.260884047 CET	443	49819	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.260910988 CET	443	49819	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.260948896 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:45.260987043 CET	49819	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.261584997 CET	49819	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.263171911 CET	443	49813	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:45.263258934 CET	49813	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:45.263421059 CET	443	49813	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:45.263494968 CET	49813	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:45.263767004 CET	49813	443	192.168.2.3	116.202.236.171
Jan 7, 2021 07:32:45.266182899 CET	443	49754	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:45.266311884 CET	49754	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:45.273098946 CET	443	49755	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:45.273197889 CET	49755	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:45.273672104 CET	443	49761	89.208.236.251	192.168.2.3
Jan 7, 2021 07:32:45.276170969 CET	443	49761	89.208.236.251	192.168.2.3
Jan 7, 2021 07:32:45.276216030 CET	443	49761	89.208.236.251	192.168.2.3
Jan 7, 2021 07:32:45.276282072 CET	49761	443	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:45.276309967 CET	49761	443	192.168.2.3	89.208.236.251
Jan 7, 2021 07:32:45.284029007 CET	443	49799	80.64.106.147	192.168.2.3
Jan 7, 2021 07:32:45.284137964 CET	49799	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:32:45.286622047 CET	443	49797	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:45.286708117 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:45.289041996 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:45.291194916 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.294352055 CET	443	49814	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:45.294625998 CET	443	49814	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:45.294708014 CET	49814	443	192.168.2.3	217.66.147.170
Jan 7, 2021 07:32:45.301465988 CET	443	49819	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.302661896 CET	443	49817	31.172.81.172	192.168.2.3
Jan 7, 2021 07:32:45.302834988 CET	49817	443	192.168.2.3	31.172.81.172
Jan 7, 2021 07:32:45.304188967 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:45.304271936 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:45.306615114 CET	49790	443	192.168.2.3	31.172.81.158
Jan 7, 2021 07:32:45.307987928 CET	443	49821	185.148.37.80	192.168.2.3
Jan 7, 2021 07:32:45.309290886 CET	443	49820	185.148.37.80	192.168.2.3
Jan 7, 2021 07:32:45.310892105 CET	443	49821	185.148.37.80	192.168.2.3
Jan 7, 2021 07:32:45.310935020 CET	443	49821	185.148.37.80	192.168.2.3
Jan 7, 2021 07:32:45.310962915 CET	443	49821	185.148.37.80	192.168.2.3
Jan 7, 2021 07:32:45.310976982 CET	49821	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.311007977 CET	49821	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.311024904 CET	49821	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.312108040 CET	443	49820	185.148.37.80	192.168.2.3
Jan 7, 2021 07:32:45.312151909 CET	443	49820	185.148.37.80	192.168.2.3
Jan 7, 2021 07:32:45.312180996 CET	443	49820	185.148.37.80	192.168.2.3
Jan 7, 2021 07:32:45.312201977 CET	49820	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.312242985 CET	49820	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.312263966 CET	49820	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.313788891 CET	443	49803	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:45.319149971 CET	443	49802	37.9.245.57	192.168.2.3
Jan 7, 2021 07:32:45.319344044 CET	49820	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.319672108 CET	49820	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.319861889 CET	49820	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.322966099 CET	49821	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.323297024 CET	49821	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.332634926 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.332670927 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.332737923 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.332775116 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.340193987 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.341739893 CET	443	49815	217.66.147.170	192.168.2.3
Jan 7, 2021 07:32:45.345894098 CET	443	49811	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:45.348238945 CET	49822	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.349031925 CET	49823	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.349878073 CET	443	49790	31.172.81.158	192.168.2.3
Jan 7, 2021 07:32:45.349971056 CET	49790	443	192.168.2.3	31.172.81.158
Jan 7, 2021 07:32:45.351835966 CET	49790	443	192.168.2.3	31.172.81.158
Jan 7, 2021 07:32:45.354000092 CET	49824	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:32:45.354808092 CET	49825	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:32:45.357896090 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:45.357978106 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:45.375107050 CET	443	49813	116.202.236.171	192.168.2.3
Jan 7, 2021 07:32:45.380239964 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.388392925 CET	443	49822	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.388544083 CET	49822	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.389091015 CET	443	49823	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.389178038 CET	49823	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.389398098 CET	49822	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.390176058 CET	49823	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.395118952 CET	443	49790	31.172.81.158	192.168.2.3
Jan 7, 2021 07:32:45.395214081 CET	49790	443	192.168.2.3	31.172.81.158
Jan 7, 2021 07:32:45.400995016 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.401029110 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.401078939 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.401083946 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.401106119 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.401107073 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.401134014 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.401154041 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.401160955 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.401196003 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.401210070 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.401221991 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.401248932 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.401259899 CET	443	49818	104.22.4.87	192.168.2.3
Jan 7, 2021 07:32:45.401266098 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.401310921 CET	49818	443	192.168.2.3	104.22.4.87
Jan 7, 2021 07:32:45.421644926 CET	443	49820	185.148.37.80	192.168.2.3
Jan 7, 2021 07:32:45.421688080 CET	443	49820	185.148.37.80	192.168.2.3
Jan 7, 2021 07:32:45.421761036 CET	49820	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.421789885 CET	49820	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.422250986 CET	443	49820	185.148.37.80	192.168.2.3
Jan 7, 2021 07:32:45.422338009 CET	49820	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.422418118 CET	49820	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.424329042 CET	443	49821	185.148.37.80	192.168.2.3
Jan 7, 2021 07:32:45.424371004 CET	443	49821	185.148.37.80	192.168.2.3
Jan 7, 2021 07:32:45.424424887 CET	49821	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.424454927 CET	49821	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.425070047 CET	49821	443	192.168.2.3	185.148.37.80
Jan 7, 2021 07:32:45.428729057 CET	443	49824	213.87.44.207	192.168.2.3
Jan 7, 2021 07:32:45.428839922 CET	49824	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:32:45.429343939 CET	443	49822	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.429419041 CET	49824	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:32:45.430094957 CET	443	49825	213.87.44.207	192.168.2.3
Jan 7, 2021 07:32:45.430196047 CET	49825	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:32:45.430228949 CET	443	49823	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.430295944 CET	443	49822	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.430326939 CET	443	49822	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.430351973 CET	443	49822	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.430372953 CET	49822	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.430411100 CET	49822	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.430417061 CET	49822	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.430731058 CET	49825	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:32:45.431647062 CET	443	49823	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.431680918 CET	443	49823	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.431705952 CET	443	49823	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.431746960 CET	49823	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.431775093 CET	49823	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.504270077 CET	443	49824	213.87.44.207	192.168.2.3
Jan 7, 2021 07:32:45.506006956 CET	443	49825	213.87.44.207	192.168.2.3
Jan 7, 2021 07:32:45.506573915 CET	443	49824	213.87.44.207	192.168.2.3
Jan 7, 2021 07:32:45.506613970 CET	443	49824	213.87.44.207	192.168.2.3
Jan 7, 2021 07:32:45.506649971 CET	443	49824	213.87.44.207	192.168.2.3
Jan 7, 2021 07:32:45.506680012 CET	49824	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:32:45.506685019 CET	443	49824	213.87.44.207	192.168.2.3
Jan 7, 2021 07:32:45.506716013 CET	49824	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:32:45.506721973 CET	49824	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:32:45.506736994 CET	49824	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:32:45.507761002 CET	443	49825	213.87.44.207	192.168.2.3
Jan 7, 2021 07:32:45.507802010 CET	443	49825	213.87.44.207	192.168.2.3
Jan 7, 2021 07:32:45.507838011 CET	443	49825	213.87.44.207	192.168.2.3
Jan 7, 2021 07:32:45.507863998 CET	49825	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:32:45.507874012 CET	443	49825	213.87.44.207	192.168.2.3
Jan 7, 2021 07:32:45.507886887 CET	49825	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:32:45.507922888 CET	49825	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:32:45.507934093 CET	49825	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:32:45.513724089 CET	49826	443	192.168.2.3	188.42.29.81
Jan 7, 2021 07:32:45.563088894 CET	443	49821	185.148.37.80	192.168.2.3
Jan 7, 2021 07:32:45.564054012 CET	443	49820	185.148.37.80	192.168.2.3
Jan 7, 2021 07:32:45.604760885 CET	443	49826	188.42.29.81	192.168.2.3
Jan 7, 2021 07:32:45.604969978 CET	49826	443	192.168.2.3	188.42.29.81
Jan 7, 2021 07:32:45.877320051 CET	49827	443	192.168.2.3	188.42.29.81
Jan 7, 2021 07:32:45.890194893 CET	49826	443	192.168.2.3	188.42.29.81
Jan 7, 2021 07:32:45.895488977 CET	49824	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:32:45.896085978 CET	49824	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:32:45.900501013 CET	49823	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.900820971 CET	49823	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.901009083 CET	49823	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.903740883 CET	49822	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.904277086 CET	49822	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.908359051 CET	49825	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:32:45.940979958 CET	443	49823	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.941030025 CET	443	49823	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.941056013 CET	443	49823	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.941083908 CET	49823	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.941131115 CET	49823	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.941730022 CET	49823	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.944113970 CET	443	49822	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.944154024 CET	443	49822	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.944180965 CET	443	49822	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.944227934 CET	49822	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.944273949 CET	49822	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.944731951 CET	49822	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.945699930 CET	443	49823	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.949304104 CET	443	49823	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.949373960 CET	49823	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.949968100 CET	49823	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.950922966 CET	49823	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:45.964418888 CET	443	49827	188.42.29.81	192.168.2.3
Jan 7, 2021 07:32:45.964526892 CET	49827	443	192.168.2.3	188.42.29.81
Jan 7, 2021 07:32:45.965102911 CET	49827	443	192.168.2.3	188.42.29.81
Jan 7, 2021 07:32:45.970691919 CET	443	49824	213.87.44.207	192.168.2.3
Jan 7, 2021 07:32:45.971103907 CET	443	49824	213.87.44.207	192.168.2.3
Jan 7, 2021 07:32:45.971183062 CET	49824	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:32:45.972326994 CET	443	49824	213.87.44.207	192.168.2.3
Jan 7, 2021 07:32:45.972402096 CET	49824	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:32:45.981228113 CET	443	49826	188.42.29.81	192.168.2.3
Jan 7, 2021 07:32:45.982817888 CET	443	49826	188.42.29.81	192.168.2.3
Jan 7, 2021 07:32:45.982860088 CET	443	49826	188.42.29.81	192.168.2.3
Jan 7, 2021 07:32:45.982896090 CET	443	49826	188.42.29.81	192.168.2.3
Jan 7, 2021 07:32:45.982920885 CET	443	49826	188.42.29.81	192.168.2.3
Jan 7, 2021 07:32:45.982969046 CET	49826	443	192.168.2.3	188.42.29.81
Jan 7, 2021 07:32:45.983021975 CET	49826	443	192.168.2.3	188.42.29.81
Jan 7, 2021 07:32:45.983028889 CET	49826	443	192.168.2.3	188.42.29.81
Jan 7, 2021 07:32:45.983033895 CET	49826	443	192.168.2.3	188.42.29.81
Jan 7, 2021 07:32:45.984062910 CET	443	49825	213.87.44.207	192.168.2.3
Jan 7, 2021 07:32:45.984152079 CET	49825	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:32:45.986709118 CET	443	49823	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.989350080 CET	443	49822	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.989959955 CET	443	49823	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.990942955 CET	443	49823	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.992891073 CET	49826	443	192.168.2.3	188.42.29.81
Jan 7, 2021 07:32:45.993437052 CET	49826	443	192.168.2.3	188.42.29.81
Jan 7, 2021 07:32:45.999433994 CET	443	49823	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:45.999521017 CET	49823	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:46.000161886 CET	49823	443	192.168.2.3	35.190.16.14
Jan 7, 2021 07:32:46.001672029 CET	49800	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:46.044862986 CET	443	49823	35.190.16.14	192.168.2.3
Jan 7, 2021 07:32:46.052165031 CET	443	49827	188.42.29.81	192.168.2.3
Jan 7, 2021 07:32:46.053513050 CET	443	49827	188.42.29.81	192.168.2.3
Jan 7, 2021 07:32:46.053553104 CET	443	49827	188.42.29.81	192.168.2.3
Jan 7, 2021 07:32:46.053581953 CET	443	49827	188.42.29.81	192.168.2.3
Jan 7, 2021 07:32:46.053600073 CET	443	49827	188.42.29.81	192.168.2.3
Jan 7, 2021 07:32:46.053684950 CET	49827	443	192.168.2.3	188.42.29.81
Jan 7, 2021 07:32:46.053735018 CET	49827	443	192.168.2.3	188.42.29.81
Jan 7, 2021 07:32:46.069171906 CET	443	49800	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:46.069276094 CET	49800	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:46.084043980 CET	443	49826	188.42.29.81	192.168.2.3
Jan 7, 2021 07:32:46.084197998 CET	49826	443	192.168.2.3	188.42.29.81
Jan 7, 2021 07:32:46.098987103 CET	443	49826	188.42.29.81	192.168.2.3
Jan 7, 2021 07:32:46.099174976 CET	49826	443	192.168.2.3	188.42.29.81
Jan 7, 2021 07:32:46.233078957 CET	443	49810	217.65.2.150	192.168.2.3
Jan 7, 2021 07:32:46.233124971 CET	443	49810	217.65.2.150	192.168.2.3
Jan 7, 2021 07:32:46.233196020 CET	49810	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:46.233242989 CET	49810	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:46.260324001 CET	443	49777	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:46.260364056 CET	443	49777	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:46.260382891 CET	443	49777	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:46.260551929 CET	49777	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:46.718394041 CET	443	49776	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:46.718450069 CET	443	49776	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:46.718472004 CET	443	49776	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:46.718592882 CET	49776	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:46.718638897 CET	49776	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:47.589373112 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:47.593759060 CET	49828	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.593858004 CET	49777	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:47.594767094 CET	49829	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.595343113 CET	49776	443	192.168.2.3	194.190.117.93
Jan 7, 2021 07:32:47.610105991 CET	49827	443	192.168.2.3	188.42.29.81
Jan 7, 2021 07:32:47.660303116 CET	443	49797	136.243.148.229	192.168.2.3
Jan 7, 2021 07:32:47.660473108 CET	49797	443	192.168.2.3	136.243.148.229
Jan 7, 2021 07:32:47.665471077 CET	443	49777	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:47.666985989 CET	443	49776	194.190.117.93	192.168.2.3
Jan 7, 2021 07:32:47.669090986 CET	443	49828	93.158.134.90	192.168.2.3
Jan 7, 2021 07:32:47.669230938 CET	49828	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.670106888 CET	443	49829	93.158.134.90	192.168.2.3
Jan 7, 2021 07:32:47.670274973 CET	49829	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.670398951 CET	49828	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.671837091 CET	49829	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.687489986 CET	49830	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.689001083 CET	49831	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.697326899 CET	443	49827	188.42.29.81	192.168.2.3
Jan 7, 2021 07:32:47.697424889 CET	49827	443	192.168.2.3	188.42.29.81
Jan 7, 2021 07:32:47.745888948 CET	443	49828	93.158.134.90	192.168.2.3
Jan 7, 2021 07:32:47.746082067 CET	443	49828	93.158.134.90	192.168.2.3
Jan 7, 2021 07:32:47.746125937 CET	443	49828	93.158.134.90	192.168.2.3
Jan 7, 2021 07:32:47.746161938 CET	443	49828	93.158.134.90	192.168.2.3
Jan 7, 2021 07:32:47.746165037 CET	49828	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.746196032 CET	443	49828	93.158.134.90	192.168.2.3
Jan 7, 2021 07:32:47.746196985 CET	49828	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.746229887 CET	49828	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.746248960 CET	49828	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.747134924 CET	443	49829	93.158.134.90	192.168.2.3
Jan 7, 2021 07:32:47.747571945 CET	443	49829	93.158.134.90	192.168.2.3
Jan 7, 2021 07:32:47.747608900 CET	443	49829	93.158.134.90	192.168.2.3
Jan 7, 2021 07:32:47.747648954 CET	443	49829	93.158.134.90	192.168.2.3
Jan 7, 2021 07:32:47.747675896 CET	49829	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.747679949 CET	443	49829	93.158.134.90	192.168.2.3
Jan 7, 2021 07:32:47.747720003 CET	49829	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.747771025 CET	49829	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.759869099 CET	49828	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.760235071 CET	49828	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.760467052 CET	49828	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.762526035 CET	49829	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.762810946 CET	49829	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.773780107 CET	443	49831	89.108.119.28	192.168.2.3
Jan 7, 2021 07:32:47.773890018 CET	49831	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.774494886 CET	49831	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.778486013 CET	443	49830	89.108.119.28	192.168.2.3
Jan 7, 2021 07:32:47.778577089 CET	49830	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.779148102 CET	49830	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.835503101 CET	443	49828	93.158.134.90	192.168.2.3
Jan 7, 2021 07:32:47.835546017 CET	443	49828	93.158.134.90	192.168.2.3
Jan 7, 2021 07:32:47.835602999 CET	49828	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.835653067 CET	49828	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.836349964 CET	49828	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.838378906 CET	443	49829	93.158.134.90	192.168.2.3
Jan 7, 2021 07:32:47.838411093 CET	443	49829	93.158.134.90	192.168.2.3
Jan 7, 2021 07:32:47.838483095 CET	49829	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.838526011 CET	49829	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.839169979 CET	49829	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.845514059 CET	443	49828	93.158.134.90	192.168.2.3
Jan 7, 2021 07:32:47.845599890 CET	49828	443	192.168.2.3	93.158.134.90
Jan 7, 2021 07:32:47.847358942 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:47.859215975 CET	443	49831	89.108.119.28	192.168.2.3
Jan 7, 2021 07:32:47.859263897 CET	443	49831	89.108.119.28	192.168.2.3
Jan 7, 2021 07:32:47.859293938 CET	443	49831	89.108.119.28	192.168.2.3
Jan 7, 2021 07:32:47.859373093 CET	443	49831	89.108.119.28	192.168.2.3
Jan 7, 2021 07:32:47.859401941 CET	443	49831	89.108.119.28	192.168.2.3
Jan 7, 2021 07:32:47.859436035 CET	49831	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.859487057 CET	49831	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.859493971 CET	49831	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.859498024 CET	49831	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.859756947 CET	443	49831	89.108.119.28	192.168.2.3
Jan 7, 2021 07:32:47.859819889 CET	49831	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.870050907 CET	443	49830	89.108.119.28	192.168.2.3
Jan 7, 2021 07:32:47.870095968 CET	443	49830	89.108.119.28	192.168.2.3
Jan 7, 2021 07:32:47.870131016 CET	443	49830	89.108.119.28	192.168.2.3
Jan 7, 2021 07:32:47.870177984 CET	443	49830	89.108.119.28	192.168.2.3
Jan 7, 2021 07:32:47.870187044 CET	49830	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.870207071 CET	49830	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.870212078 CET	443	49830	89.108.119.28	192.168.2.3
Jan 7, 2021 07:32:47.870224953 CET	49830	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.870275021 CET	49830	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.870537043 CET	443	49830	89.108.119.28	192.168.2.3
Jan 7, 2021 07:32:47.870606899 CET	49830	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.882035971 CET	49831	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.882364035 CET	49831	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.883061886 CET	49830	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.916270018 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:32:47.916397095 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:32:47.957911015 CET	443	49829	93.158.134.90	192.168.2.3
Jan 7, 2021 07:32:47.960541010 CET	443	49828	93.158.134.90	192.168.2.3
Jan 7, 2021 07:32:47.967061043 CET	443	49831	89.108.119.28	192.168.2.3
Jan 7, 2021 07:32:47.967118979 CET	443	49831	89.108.119.28	192.168.2.3
Jan 7, 2021 07:32:47.967164993 CET	49831	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.967211962 CET	49831	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.969901085 CET	49831	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:47.974330902 CET	443	49830	89.108.119.28	192.168.2.3
Jan 7, 2021 07:32:47.974421024 CET	49830	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:48.019824982 CET	443	49766	94.100.180.197	192.168.2.3
Jan 7, 2021 07:32:48.019875050 CET	443	49766	94.100.180.197	192.168.2.3
Jan 7, 2021 07:32:48.019927025 CET	49766	443	192.168.2.3	94.100.180.197
Jan 7, 2021 07:32:48.019964933 CET	49766	443	192.168.2.3	94.100.180.197
Jan 7, 2021 07:32:48.055003881 CET	443	49831	89.108.119.28	192.168.2.3
Jan 7, 2021 07:32:48.055185080 CET	49831	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:50.151065111 CET	443	49807	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:50.151107073 CET	443	49807	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:50.151308060 CET	49807	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:50.159946918 CET	443	49812	176.99.5.102	192.168.2.3
Jan 7, 2021 07:32:50.159986019 CET	443	49812	176.99.5.102	192.168.2.3
Jan 7, 2021 07:32:50.160036087 CET	49812	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:32:50.160073996 CET	49812	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:32:50.174335003 CET	443	49806	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:50.174386024 CET	443	49806	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:50.174501896 CET	49806	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:51.028938055 CET	49807	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:51.029145002 CET	49806	443	192.168.2.3	31.220.27.134
Jan 7, 2021 07:32:51.078332901 CET	443	49807	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:51.078366995 CET	443	49806	31.220.27.134	192.168.2.3
Jan 7, 2021 07:32:51.214061022 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:51.214759111 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:51.295797110 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:51.295892000 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:51.301214933 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:51.301296949 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:51.301593065 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:51.301657915 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:51.301659107 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:51.301719904 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:51.412054062 CET	80	49737	81.19.89.16	192.168.2.3
Jan 7, 2021 07:32:51.412324905 CET	49737	80	192.168.2.3	81.19.89.16
Jan 7, 2021 07:32:51.714778900 CET	443	49748	81.19.89.16	192.168.2.3
Jan 7, 2021 07:32:51.714823008 CET	443	49748	81.19.89.16	192.168.2.3
Jan 7, 2021 07:32:51.715074062 CET	49748	443	192.168.2.3	81.19.89.16
Jan 7, 2021 07:32:53.984358072 CET	443	49801	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:53.984421015 CET	443	49801	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:53.984636068 CET	49801	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:55.340342045 CET	443	49808	217.65.2.150	192.168.2.3
Jan 7, 2021 07:32:55.340595961 CET	49808	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:32:56.052071095 CET	443	49827	188.42.29.81	192.168.2.3
Jan 7, 2021 07:32:56.052119017 CET	443	49827	188.42.29.81	192.168.2.3
Jan 7, 2021 07:32:56.052304983 CET	49827	443	192.168.2.3	188.42.29.81
Jan 7, 2021 07:32:56.069547892 CET	443	49800	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:56.069576025 CET	443	49800	176.9.238.190	192.168.2.3
Jan 7, 2021 07:32:56.069740057 CET	49800	443	192.168.2.3	176.9.238.190
Jan 7, 2021 07:32:56.962234020 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:56.964242935 CET	49833	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:56.968939066 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:57.027672052 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:57.029340982 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.029468060 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.034235001 CET	443	49833	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.034324884 CET	49833	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.038037062 CET	49833	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.039141893 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.052002907 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:57.052045107 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:57.052067995 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:57.052084923 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:57.052092075 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:57.052128077 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:57.052134037 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:57.052151918 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:57.058763027 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:57.059930086 CET	49834	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:57.068778992 CET	49835	80	192.168.2.3	78.24.221.88
Jan 7, 2021 07:32:57.069565058 CET	49836	80	192.168.2.3	78.24.221.88
Jan 7, 2021 07:32:57.106408119 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.107944965 CET	443	49833	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.108339071 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.108365059 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.108386040 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.108438015 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.108486891 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.108906031 CET	443	49833	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.108932018 CET	443	49833	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.108953953 CET	443	49833	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.108973026 CET	49833	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.108999968 CET	49833	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.115925074 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:57.116029024 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:57.116333008 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.116863012 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.121814013 CET	49833	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.137696028 CET	443	49834	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:57.137881041 CET	49834	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:57.141298056 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:57.141484976 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:57.146567106 CET	80	49835	78.24.221.88	192.168.2.3
Jan 7, 2021 07:32:57.146663904 CET	49835	80	192.168.2.3	78.24.221.88
Jan 7, 2021 07:32:57.147133112 CET	80	49836	78.24.221.88	192.168.2.3
Jan 7, 2021 07:32:57.147213936 CET	49836	80	192.168.2.3	78.24.221.88
Jan 7, 2021 07:32:57.183985949 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.184132099 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.184243917 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.184870958 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.184904099 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.184930086 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.184950113 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.184957981 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.184992075 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.185008049 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.185025930 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.185031891 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.185059071 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.185081959 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.185106039 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.185132980 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.185142040 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.185147047 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.185151100 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.185162067 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.191909075 CET	443	49833	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.192051888 CET	49833	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.211743116 CET	49835	80	192.168.2.3	78.24.221.88
Jan 7, 2021 07:32:57.212987900 CET	49834	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:57.251477003 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.251516104 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.251712084 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.252155066 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.252180099 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.252203941 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.252226114 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.252249002 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.252254963 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.252269983 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:32:57.252298117 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.252329111 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:32:57.289410114 CET	80	49835	78.24.221.88	192.168.2.3
Jan 7, 2021 07:32:57.290690899 CET	443	49834	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:57.291721106 CET	443	49834	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:57.291865110 CET	49834	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:57.328542948 CET	80	49835	78.24.221.88	192.168.2.3
Jan 7, 2021 07:32:57.328572989 CET	80	49835	78.24.221.88	192.168.2.3
Jan 7, 2021 07:32:57.328589916 CET	80	49835	78.24.221.88	192.168.2.3
Jan 7, 2021 07:32:57.328608990 CET	80	49835	78.24.221.88	192.168.2.3
Jan 7, 2021 07:32:57.328625917 CET	80	49835	78.24.221.88	192.168.2.3
Jan 7, 2021 07:32:57.328641891 CET	80	49835	78.24.221.88	192.168.2.3
Jan 7, 2021 07:32:57.328656912 CET	80	49835	78.24.221.88	192.168.2.3
Jan 7, 2021 07:32:57.328677893 CET	80	49835	78.24.221.88	192.168.2.3
Jan 7, 2021 07:32:57.328706980 CET	49835	80	192.168.2.3	78.24.221.88
Jan 7, 2021 07:32:57.328742027 CET	49835	80	192.168.2.3	78.24.221.88
Jan 7, 2021 07:32:57.328747988 CET	49835	80	192.168.2.3	78.24.221.88
Jan 7, 2021 07:32:57.328752995 CET	49835	80	192.168.2.3	78.24.221.88
Jan 7, 2021 07:32:57.352304935 CET	49834	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:32:57.469429016 CET	443	49834	95.163.114.204	192.168.2.3
Jan 7, 2021 07:32:57.803250074 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:57.918549061 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:57.973603964 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:57.973738909 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:58.052290916 CET	443	49831	89.108.119.28	192.168.2.3
Jan 7, 2021 07:32:58.052321911 CET	443	49831	89.108.119.28	192.168.2.3
Jan 7, 2021 07:32:58.052443027 CET	49831	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:32:58.100502014 CET	443	49782	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:58.100558043 CET	443	49782	185.15.175.130	192.168.2.3
Jan 7, 2021 07:32:58.100656033 CET	49782	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:58.100709915 CET	49782	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:32:58.154337883 CET	49843	80	192.168.2.3	90.156.201.82
Jan 7, 2021 07:32:58.154983044 CET	49844	80	192.168.2.3	90.156.201.82
Jan 7, 2021 07:32:58.227335930 CET	80	49843	90.156.201.82	192.168.2.3
Jan 7, 2021 07:32:58.227438927 CET	49843	80	192.168.2.3	90.156.201.82
Jan 7, 2021 07:32:58.227936029 CET	80	49844	90.156.201.82	192.168.2.3
Jan 7, 2021 07:32:58.228024006 CET	49844	80	192.168.2.3	90.156.201.82
Jan 7, 2021 07:32:58.228722095 CET	49843	80	192.168.2.3	90.156.201.82
Jan 7, 2021 07:32:58.301723003 CET	80	49843	90.156.201.82	192.168.2.3
Jan 7, 2021 07:32:58.309055090 CET	80	49843	90.156.201.82	192.168.2.3
Jan 7, 2021 07:32:58.309103966 CET	80	49843	90.156.201.82	192.168.2.3
Jan 7, 2021 07:32:58.309159994 CET	49843	80	192.168.2.3	90.156.201.82
Jan 7, 2021 07:32:58.309196949 CET	49843	80	192.168.2.3	90.156.201.82
Jan 7, 2021 07:32:58.915184021 CET	443	49792	95.163.37.253	192.168.2.3
Jan 7, 2021 07:32:58.915227890 CET	443	49792	95.163.37.253	192.168.2.3
Jan 7, 2021 07:32:58.915282965 CET	49792	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:58.915326118 CET	49792	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:32:59.348146915 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:59.423639059 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:59.498155117 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:32:59.498287916 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:32:59.611685991 CET	80	49844	90.156.201.82	192.168.2.3
Jan 7, 2021 07:32:59.611959934 CET	49844	80	192.168.2.3	90.156.201.82
Jan 7, 2021 07:33:00.226941109 CET	49843	80	192.168.2.3	90.156.201.82
Jan 7, 2021 07:33:00.305562019 CET	80	49843	90.156.201.82	192.168.2.3
Jan 7, 2021 07:33:00.305609941 CET	80	49843	90.156.201.82	192.168.2.3
Jan 7, 2021 07:33:00.305675983 CET	49843	80	192.168.2.3	90.156.201.82
Jan 7, 2021 07:33:00.305711985 CET	49843	80	192.168.2.3	90.156.201.82
Jan 7, 2021 07:33:00.963675022 CET	443	49824	213.87.44.207	192.168.2.3
Jan 7, 2021 07:33:00.963848114 CET	49824	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:33:00.975217104 CET	443	49825	213.87.44.207	192.168.2.3
Jan 7, 2021 07:33:00.975369930 CET	49825	443	192.168.2.3	213.87.44.207
Jan 7, 2021 07:33:02.046286106 CET	80	49741	46.4.114.109	192.168.2.3
Jan 7, 2021 07:33:02.046494007 CET	49741	80	192.168.2.3	46.4.114.109
Jan 7, 2021 07:33:03.026719093 CET	49718	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.026951075 CET	49719	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.027900934 CET	49847	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.028791904 CET	49848	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.102022886 CET	80	49718	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:03.102359056 CET	80	49719	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:03.102433920 CET	49719	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.103015900 CET	443	49847	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:03.103092909 CET	49847	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.103830099 CET	49847	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.104356050 CET	443	49848	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:03.104501009 CET	49848	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.104995966 CET	49848	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.179007053 CET	443	49847	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:03.180408001 CET	443	49848	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:03.180532932 CET	443	49847	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:03.180572987 CET	443	49847	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:03.180605888 CET	49847	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.180609941 CET	443	49847	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:03.180633068 CET	49847	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.180639982 CET	443	49847	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:03.180666924 CET	49847	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.180689096 CET	49847	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.182903051 CET	443	49848	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:03.182941914 CET	443	49848	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:03.182977915 CET	443	49848	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:03.183008909 CET	443	49848	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:03.183031082 CET	49848	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.183079958 CET	49848	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.183088064 CET	49848	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.183092117 CET	49848	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.191706896 CET	49847	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.192266941 CET	49847	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.194411993 CET	49848	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.267370939 CET	443	49847	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:03.267417908 CET	443	49847	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:03.267450094 CET	49847	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.267481089 CET	49847	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.270178080 CET	443	49848	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:03.270311117 CET	49848	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.270427942 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.345731974 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:03.345875978 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.346309900 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:03.421571970 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:03.740641117 CET	443	49794	95.163.37.253	192.168.2.3
Jan 7, 2021 07:33:03.740690947 CET	443	49794	95.163.37.253	192.168.2.3
Jan 7, 2021 07:33:03.740907907 CET	49794	443	192.168.2.3	95.163.37.253
Jan 7, 2021 07:33:04.429546118 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:04.429608107 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:04.429632902 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:04.429651976 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:04.429877996 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:04.433742046 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:05.283688068 CET	443	49799	80.64.106.147	192.168.2.3
Jan 7, 2021 07:33:05.283747911 CET	443	49799	80.64.106.147	192.168.2.3
Jan 7, 2021 07:33:05.283862114 CET	49799	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:33:05.283907890 CET	49799	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:33:05.436414003 CET	443	49808	217.65.2.150	192.168.2.3
Jan 7, 2021 07:33:05.436675072 CET	49808	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:33:05.496061087 CET	80	49742	46.4.114.109	192.168.2.3
Jan 7, 2021 07:33:05.496320009 CET	49742	80	192.168.2.3	46.4.114.109
Jan 7, 2021 07:33:06.656469107 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.724637985 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.726128101 CET	49753	80	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.726309061 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.728049994 CET	49852	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.731705904 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.732043982 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.732084990 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.732156038 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.732192993 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.735996962 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.752638102 CET	49854	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:06.762645006 CET	49853	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:06.782354116 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:06.783801079 CET	49856	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:06.793143988 CET	49857	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.795568943 CET	49848	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.795624018 CET	49848	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.797641993 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.798101902 CET	49847	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.798958063 CET	49859	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.800304890 CET	80	49851	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.800419092 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.801182985 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.801599026 CET	80	49753	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.801690102 CET	49753	80	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.802726984 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.802768946 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.802808046 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.802808046 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.802848101 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.802848101 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.802879095 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.802886963 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.802915096 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.802915096 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.802944899 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.802952051 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.802972078 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.802999973 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.803003073 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.803041935 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.803056002 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.803080082 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.803092957 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.803134918 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.803637028 CET	80	49852	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.803739071 CET	49852	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.806461096 CET	49852	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.812849045 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.812906027 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.812943935 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.812978029 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.812980890 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.813004017 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.813009977 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.813019037 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.813055992 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.813066006 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.813077927 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.813091993 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.813118935 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.813157082 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.815201998 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.828435898 CET	443	49854	87.250.250.36	192.168.2.3
Jan 7, 2021 07:33:06.828530073 CET	49854	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:06.836538076 CET	49854	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:06.838161945 CET	443	49853	87.250.250.36	192.168.2.3
Jan 7, 2021 07:33:06.838273048 CET	49853	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:06.838850975 CET	49853	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:06.857745886 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:06.857856035 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:06.858463049 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:06.859469891 CET	443	49856	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:06.859569073 CET	49856	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:06.860120058 CET	49856	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:06.868568897 CET	80	49857	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.868695021 CET	49857	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.869405031 CET	49857	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.872844934 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.872963905 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.873131037 CET	443	49847	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.873208046 CET	49847	443	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.873689890 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.874908924 CET	80	49859	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.874994040 CET	49859	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.875654936 CET	49859	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.877600908 CET	80	49851	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.877840042 CET	80	49851	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.877883911 CET	80	49851	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.877922058 CET	80	49851	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.877955914 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.877959013 CET	80	49851	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.877993107 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.877999067 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.878009081 CET	80	49851	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.878019094 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.878051043 CET	80	49851	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.878073931 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.878083944 CET	80	49851	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.878103971 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.878148079 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.878760099 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.878799915 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.878845930 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.878849030 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.878869057 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.878890038 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.878911018 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.878926992 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.878937960 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.878963947 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.878981113 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.879002094 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.879020929 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.879036903 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.879054070 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.879075050 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.879090071 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.879111052 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.879127979 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.879157066 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.879162073 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.879198074 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.879214048 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.879234076 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.879252911 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.879271984 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.879283905 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.879307985 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.879324913 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.879345894 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.879359961 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.879383087 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.879399061 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.879420996 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.879432917 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.879467010 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.879482985 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.879508018 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.879527092 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.879559040 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.882863045 CET	80	49852	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.882967949 CET	80	49852	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.883042097 CET	49852	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.885559082 CET	49852	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.886600018 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.892987967 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.893033028 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.893086910 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.893117905 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.895035028 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.912307978 CET	443	49854	87.250.250.36	192.168.2.3
Jan 7, 2021 07:33:06.912367105 CET	443	49854	87.250.250.36	192.168.2.3
Jan 7, 2021 07:33:06.912405968 CET	443	49854	87.250.250.36	192.168.2.3
Jan 7, 2021 07:33:06.912444115 CET	443	49854	87.250.250.36	192.168.2.3
Jan 7, 2021 07:33:06.912451029 CET	49854	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:06.912470102 CET	443	49854	87.250.250.36	192.168.2.3
Jan 7, 2021 07:33:06.912472963 CET	49854	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:06.912498951 CET	49854	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:06.912523985 CET	49854	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:06.915035963 CET	443	49853	87.250.250.36	192.168.2.3
Jan 7, 2021 07:33:06.915211916 CET	443	49853	87.250.250.36	192.168.2.3
Jan 7, 2021 07:33:06.915256977 CET	443	49853	87.250.250.36	192.168.2.3
Jan 7, 2021 07:33:06.915290117 CET	49853	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:06.915296078 CET	443	49853	87.250.250.36	192.168.2.3
Jan 7, 2021 07:33:06.915316105 CET	49853	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:06.915332079 CET	443	49853	87.250.250.36	192.168.2.3
Jan 7, 2021 07:33:06.915358067 CET	49853	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:06.915391922 CET	49853	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:06.923587084 CET	49854	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:06.923897028 CET	49854	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:06.930815935 CET	49853	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:06.933049917 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:06.933105946 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:06.933144093 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:06.933227062 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:06.933840036 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:06.935003042 CET	443	49856	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:06.935101032 CET	443	49856	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:06.935138941 CET	443	49856	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:06.935185909 CET	49856	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:06.935420990 CET	49856	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:06.938278913 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:06.938313961 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:06.938409090 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:06.940319061 CET	443	49856	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:06.940356970 CET	443	49856	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:06.940392971 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:06.940444946 CET	49856	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:06.940452099 CET	49856	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:06.946266890 CET	80	49857	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.946486950 CET	80	49857	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.946564913 CET	49857	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.948849916 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.949151039 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.949192047 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.949229956 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.949239969 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.949266911 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.949270964 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.949287891 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.949305058 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.949332952 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.949333906 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.949362993 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.949410915 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.951087952 CET	80	49859	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.951328039 CET	80	49859	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.951359034 CET	80	49859	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.951389074 CET	49859	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.951426983 CET	49859	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.957474947 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.957516909 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.957555056 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.957556963 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.957576036 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.957593918 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.957607985 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.957632065 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.957658052 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:06.957659006 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.957683086 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.957705021 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:06.961308956 CET	80	49852	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.961411953 CET	49852	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.962091923 CET	80	49851	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.962234974 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.962367058 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:06.968837023 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:06.969074965 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:06.970433950 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:06.970525026 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:06.972603083 CET	49856	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:06.978435040 CET	49856	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:06.999139071 CET	443	49854	87.250.250.36	192.168.2.3
Jan 7, 2021 07:33:06.999190092 CET	443	49854	87.250.250.36	192.168.2.3
Jan 7, 2021 07:33:06.999274969 CET	49854	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:07.007009983 CET	443	49853	87.250.250.36	192.168.2.3
Jan 7, 2021 07:33:07.007083893 CET	49853	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:07.020071030 CET	443	49854	87.250.250.36	192.168.2.3
Jan 7, 2021 07:33:07.020114899 CET	443	49854	87.250.250.36	192.168.2.3
Jan 7, 2021 07:33:07.020194054 CET	49854	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:07.020236015 CET	49854	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:33:07.037511110 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.037612915 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.037796974 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.037863970 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.038990974 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.043569088 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.043615103 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.043653011 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.043661118 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.043680906 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.043699026 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.047278881 CET	443	49856	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.047378063 CET	49856	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.047760963 CET	443	49856	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.047827959 CET	49856	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.048002005 CET	49856	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.048748970 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.048791885 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.048820019 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.048844099 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.052957058 CET	443	49856	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.053086042 CET	49856	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.053855896 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.053898096 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.053925037 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.054095030 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.058990002 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.059035063 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.059112072 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.064040899 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.064083099 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.064101934 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.064132929 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.069142103 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.069209099 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.112555027 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.112597942 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.112636089 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.112667084 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.117635965 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.117679119 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.117718935 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.117743015 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.122730970 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.122772932 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.122803926 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.122843981 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.127804041 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.127837896 CET	443	49855	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.127868891 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.127895117 CET	49855	443	192.168.2.3	178.154.131.217
Jan 7, 2021 07:33:07.165667057 CET	443	49856	178.154.131.217	192.168.2.3
Jan 7, 2021 07:33:07.829545975 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:33:07.829618931 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:33:07.829853058 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:33:07.834290981 CET	80	49731	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:07.834566116 CET	49731	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:09.018884897 CET	49747	443	192.168.2.3	46.4.114.109
Jan 7, 2021 07:33:09.036740065 CET	49859	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.039159060 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.040095091 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.043114901 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.053061008 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:09.056704998 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:09.087908983 CET	443	49747	46.4.114.109	192.168.2.3
Jan 7, 2021 07:33:09.110773087 CET	49852	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.112171888 CET	49857	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.112656116 CET	80	49859	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.112741947 CET	49859	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.114537001 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.114571095 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.114687920 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.114733934 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.115345001 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.115387917 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.115423918 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.115432978 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.115452051 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.115470886 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.115483999 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.115511894 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.115526915 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.115550041 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.115567923 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.115588903 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.115602970 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.115624905 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.115643978 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.115659952 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.115679026 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.115698099 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.115714073 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.115751982 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.118508101 CET	80	49851	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.118549109 CET	80	49851	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.118586063 CET	80	49851	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.118632078 CET	80	49851	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.118658066 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.118674994 CET	80	49851	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.118689060 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.118695021 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.118699074 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.118711948 CET	80	49851	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.118730068 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.118751049 CET	80	49851	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.118776083 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.118784904 CET	80	49851	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.118801117 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.118843079 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.129158020 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:09.129240036 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:09.132971048 CET	443	49756	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:09.133054018 CET	49756	443	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:09.186839104 CET	80	49852	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.186888933 CET	80	49852	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.186950922 CET	49852	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.186980963 CET	49852	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.187509060 CET	80	49857	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.187549114 CET	80	49857	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.187582970 CET	80	49857	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.187607050 CET	49857	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.187643051 CET	49857	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.190979004 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.191020012 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.191059113 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.191090107 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.191097975 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.191107988 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.191116095 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.191135883 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.191147089 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.191174030 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.191190004 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.191210985 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.191224098 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.191257000 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.191262007 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.191298008 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.191308975 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.191334963 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.191349983 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.191371918 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.191385031 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.191409111 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.191421986 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.191443920 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.191458941 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.191481113 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.191493988 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.191517115 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.191548109 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.191562891 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.191576004 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.191605091 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.191617012 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.191641092 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.191658974 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.191679001 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.191709995 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.191719055 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.191736937 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.191797972 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.267147064 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.267206907 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.267244101 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.267245054 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.267282009 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.267285109 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.267321110 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.267328978 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.267350912 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.267370939 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.267375946 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.267409086 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.267421007 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.267447948 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.267457962 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.267484903 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.267496109 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.267513990 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:09.267534018 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:09.267554998 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:10.306344986 CET	80	49843	90.156.201.82	192.168.2.3
Jan 7, 2021 07:33:10.306576014 CET	49843	80	192.168.2.3	90.156.201.82
Jan 7, 2021 07:33:11.374545097 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:11.374830008 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:11.375982046 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:11.376075029 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:11.380850077 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:11.380974054 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:11.427958012 CET	443	49795	81.222.128.216	192.168.2.3
Jan 7, 2021 07:33:11.428002119 CET	443	49795	81.222.128.216	192.168.2.3
Jan 7, 2021 07:33:11.428191900 CET	49795	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:33:11.428242922 CET	49795	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:33:11.435539007 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:11.435751915 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:11.446907043 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:11.447026968 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:12.399179935 CET	443	49767	94.100.180.197	192.168.2.3
Jan 7, 2021 07:33:12.399236917 CET	443	49767	94.100.180.197	192.168.2.3
Jan 7, 2021 07:33:12.399521112 CET	49767	443	192.168.2.3	94.100.180.197
Jan 7, 2021 07:33:13.360200882 CET	49714	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.360444069 CET	49715	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.360735893 CET	49713	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.360913992 CET	49710	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.361171007 CET	49711	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.361663103 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.435337067 CET	80	49715	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.435931921 CET	80	49710	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.435980082 CET	80	49711	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.436176062 CET	80	49714	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.437014103 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.440288067 CET	80	49713	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.495953083 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.496005058 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.496042967 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.496081114 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.496103048 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.496117115 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.496136904 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.496143103 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.496148109 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.496155024 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.496170044 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.496212959 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.496592045 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.496637106 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.496659040 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.496674061 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.496697903 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.496710062 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.496738911 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.496757984 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.520590067 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.523694992 CET	49861	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.525175095 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.527709961 CET	49863	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.529315948 CET	49864	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.541636944 CET	49865	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.596092939 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.598829985 CET	80	49861	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.598910093 CET	49861	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.599045038 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.599172115 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.600764036 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.600891113 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.603594065 CET	80	49863	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.603710890 CET	49863	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.607870102 CET	80	49864	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.608016014 CET	49864	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.609754086 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.609965086 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.610141039 CET	49863	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.614723921 CET	49864	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.616441965 CET	80	49865	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.616528034 CET	49865	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.621944904 CET	49865	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.622723103 CET	49861	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.685231924 CET	80	49863	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.685355902 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.687930107 CET	80	49863	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.688004971 CET	49863	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.688694954 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.688725948 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.688777924 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.688818932 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.689321041 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.689460039 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.692843914 CET	80	49864	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.695555925 CET	80	49864	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.695596933 CET	80	49864	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.695612907 CET	80	49864	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.695760965 CET	49864	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.696639061 CET	80	49865	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.697675943 CET	80	49861	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.699414968 CET	80	49865	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.699490070 CET	49865	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.707123995 CET	80	49861	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.707170010 CET	80	49861	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.707221031 CET	49861	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.707247972 CET	49861	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.873688936 CET	49865	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.895725965 CET	49861	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.904222965 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.915519953 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:13.952322006 CET	80	49865	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.952364922 CET	80	49865	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.952416897 CET	49865	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.952456951 CET	49865	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.975387096 CET	80	49861	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.975455999 CET	80	49861	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.975486040 CET	49861	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.975511074 CET	49861	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.982661009 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.982706070 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.982747078 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:13.982826948 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.982877970 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.982883930 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:13.999463081 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:33:13.999511957 CET	443	49783	185.15.175.130	192.168.2.3
Jan 7, 2021 07:33:13.999564886 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:33:13.999594927 CET	49783	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:33:14.063971996 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:14.064426899 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:14.064506054 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:14.085941076 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:14.112190962 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:14.164915085 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:14.165024996 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:14.168311119 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:14.263268948 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:14.263412952 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:14.282779932 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:14.363878012 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:14.363934040 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:14.363962889 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:14.364123106 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:14.364172935 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:14.364666939 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:14.364749908 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:15.048082113 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:15.122925043 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:15.168401957 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:15.168457031 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:15.168504953 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:15.168549061 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:15.168566942 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:15.168586016 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:15.168601036 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:15.168606043 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:15.168610096 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:15.168625116 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:15.168636084 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:15.168678999 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:15.169128895 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:15.169200897 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:15.266697884 CET	443	49754	185.15.175.130	192.168.2.3
Jan 7, 2021 07:33:15.266732931 CET	443	49754	185.15.175.130	192.168.2.3
Jan 7, 2021 07:33:15.266803026 CET	49754	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:33:15.266853094 CET	49754	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:33:15.275779963 CET	443	49755	185.15.175.130	192.168.2.3
Jan 7, 2021 07:33:15.275811911 CET	443	49755	185.15.175.130	192.168.2.3
Jan 7, 2021 07:33:15.275916100 CET	49755	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:33:15.275963068 CET	49755	443	192.168.2.3	185.15.175.130
Jan 7, 2021 07:33:15.306510925 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:15.458076000 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:15.458151102 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:15.512825012 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:15.869502068 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:16.081547022 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:16.084914923 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:16.260175943 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:16.416418076 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:16.822720051 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:16.869587898 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:17.510207891 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:17.516386986 CET	443	49808	217.65.2.150	192.168.2.3
Jan 7, 2021 07:33:17.516617060 CET	49808	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:33:17.557454109 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:17.557497025 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:17.557512999 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:17.585206032 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:17.592814922 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:17.592859983 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:17.592896938 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:17.592946053 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:17.592953920 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:17.592997074 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:17.593004942 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:17.593713045 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:17.593755960 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:17.593794107 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:17.593826056 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:17.630353928 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:17.630397081 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:17.630434036 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:17.630522013 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:18.330009937 CET	443	49826	188.42.29.81	192.168.2.3
Jan 7, 2021 07:33:18.330161095 CET	49826	443	192.168.2.3	188.42.29.81
Jan 7, 2021 07:33:18.799473047 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:18.952765942 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:18.952820063 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:18.952855110 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:18.952898026 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:19.766048908 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:19.915143013 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:19.916646004 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:19.916773081 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:20.152302027 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:20.231729031 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:20.231884956 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:20.273559093 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:20.351953983 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:20.352107048 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:20.393249035 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:20.508922100 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:20.543955088 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:20.544029951 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:20.544070005 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:20.544107914 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:20.544125080 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:20.544143915 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:20.544157982 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:20.544163942 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:20.544167995 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:20.544192076 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:20.544193983 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:20.544251919 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:20.544670105 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:20.544708967 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:20.544735909 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:20.544745922 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:20.544751883 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:20.544780016 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:20.544796944 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:20.544827938 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:21.100292921 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:21.248897076 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:21.248944044 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:21.249069929 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:21.309432030 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:21.459557056 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:21.459748983 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:22.217659950 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:22.292872906 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:22.337260962 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:22.337311983 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:22.337342024 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:22.337371111 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:22.337429047 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:22.337476969 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:22.337582111 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:22.337631941 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:22.337639093 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:22.337642908 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:22.337951899 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:22.338028908 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:22.558162928 CET	49721	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:22.558298111 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:22.707674980 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:22.707719088 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:22.707768917 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:22.707814932 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:22.709412098 CET	443	49721	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:22.709505081 CET	49721	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:22.794008017 CET	49727	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:22.794199944 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:22.946355104 CET	443	49727	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:22.946480036 CET	49727	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:22.946980953 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:22.947145939 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:23.365972042 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:23.440851927 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:23.491036892 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:23.491080999 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:23.491115093 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:23.491153002 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:23.491189003 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:23.491225004 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:23.491290092 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:23.491331100 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:23.491337061 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:23.491811037 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:23.491899967 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:23.716288090 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:23.865120888 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:23.865156889 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:23.865417957 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:24.114592075 CET	80	49850	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:24.114713907 CET	80	49859	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:24.114752054 CET	49850	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:24.114782095 CET	49859	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:24.115554094 CET	80	49858	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:24.115716934 CET	49858	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:24.118834019 CET	80	49851	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:24.118983030 CET	49851	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:24.186971903 CET	80	49852	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:24.187174082 CET	49852	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:24.187671900 CET	80	49857	213.180.204.205	192.168.2.3
Jan 7, 2021 07:33:24.187748909 CET	49857	80	192.168.2.3	213.180.204.205
Jan 7, 2021 07:33:24.706495047 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:24.859368086 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:24.859532118 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:25.206010103 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:25.281018019 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:25.332191944 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:25.332299948 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:25.335172892 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:25.410609961 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:25.484149933 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:25.484215021 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:25.484253883 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:25.484253883 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:25.484281063 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:25.484291077 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:25.484307051 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:25.484328985 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:25.484376907 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:25.484376907 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:25.484419107 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:25.484445095 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:25.484458923 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:25.484461069 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:25.484488010 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:25.484498024 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:25.484505892 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:25.484533072 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:25.484559059 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:25.484589100 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:25.619824886 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:25.769360065 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:25.769452095 CET	443	49720	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:25.769917965 CET	49720	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:25.837877035 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:25.988395929 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:25.988547087 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:27.114353895 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:33:27.114398956 CET	443	49739	95.163.114.204	192.168.2.3
Jan 7, 2021 07:33:27.114572048 CET	49739	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:33:27.138842106 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:33:27.138875008 CET	443	49740	95.163.114.204	192.168.2.3
Jan 7, 2021 07:33:27.139012098 CET	49740	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:33:27.612431049 CET	443	49808	217.65.2.150	192.168.2.3
Jan 7, 2021 07:33:27.612507105 CET	49808	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:33:32.047977924 CET	443	49788	195.201.243.72	192.168.2.3
Jan 7, 2021 07:33:32.048027992 CET	443	49788	195.201.243.72	192.168.2.3
Jan 7, 2021 07:33:32.048091888 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:33:32.048121929 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:33:32.048301935 CET	49788	443	192.168.2.3	195.201.243.72
Jan 7, 2021 07:33:32.117805958 CET	443	49788	195.201.243.72	192.168.2.3
Jan 7, 2021 07:33:37.708620071 CET	443	49808	217.65.2.150	192.168.2.3
Jan 7, 2021 07:33:37.708707094 CET	49808	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:33:40.320563078 CET	443	49793	81.222.128.216	192.168.2.3
Jan 7, 2021 07:33:40.320610046 CET	443	49793	81.222.128.216	192.168.2.3
Jan 7, 2021 07:33:40.320780039 CET	49793	443	192.168.2.3	81.222.128.216
Jan 7, 2021 07:33:40.879472017 CET	80	49752	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:40.879667997 CET	49752	80	192.168.2.3	77.88.21.119
Jan 7, 2021 07:33:41.485637903 CET	80	49744	81.19.89.1	192.168.2.3
Jan 7, 2021 07:33:41.486054897 CET	49744	80	192.168.2.3	81.19.89.1
Jan 7, 2021 07:33:42.040189028 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:42.190510035 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:42.190682888 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:42.341990948 CET	443	49759	159.69.74.8	192.168.2.3
Jan 7, 2021 07:33:42.342056036 CET	443	49759	159.69.74.8	192.168.2.3
Jan 7, 2021 07:33:42.342190981 CET	49759	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:33:42.343071938 CET	49759	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:33:42.448457003 CET	80	49738	81.19.89.16	192.168.2.3
Jan 7, 2021 07:33:42.448683977 CET	49738	80	192.168.2.3	81.19.89.16
Jan 7, 2021 07:33:42.489614964 CET	443	49770	195.209.108.46	192.168.2.3
Jan 7, 2021 07:33:42.489659071 CET	443	49770	195.209.108.46	192.168.2.3
Jan 7, 2021 07:33:42.489850998 CET	49770	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:33:43.088548899 CET	443	49758	88.212.252.2	192.168.2.3
Jan 7, 2021 07:33:43.088599920 CET	443	49758	88.212.252.2	192.168.2.3
Jan 7, 2021 07:33:43.088857889 CET	49758	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:33:43.088964939 CET	49758	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:33:43.688031912 CET	80	49863	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:43.688082933 CET	80	49712	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:43.688218117 CET	49863	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:43.689065933 CET	49712	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:43.695529938 CET	80	49864	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:43.695782900 CET	49864	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:43.782387018 CET	443	49757	88.212.252.2	192.168.2.3
Jan 7, 2021 07:33:43.782432079 CET	443	49757	88.212.252.2	192.168.2.3
Jan 7, 2021 07:33:43.782675028 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:33:43.951869965 CET	80	49865	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:43.952121973 CET	49865	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:43.973759890 CET	80	49861	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:43.973942995 CET	49861	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:43.980228901 CET	443	49798	80.64.106.147	192.168.2.3
Jan 7, 2021 07:33:43.980268955 CET	443	49798	80.64.106.147	192.168.2.3
Jan 7, 2021 07:33:43.980381012 CET	49798	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:33:43.981067896 CET	49798	443	192.168.2.3	80.64.106.147
Jan 7, 2021 07:33:44.084657907 CET	443	49809	176.99.5.102	192.168.2.3
Jan 7, 2021 07:33:44.084702015 CET	443	49809	176.99.5.102	192.168.2.3
Jan 7, 2021 07:33:44.084872007 CET	49809	443	192.168.2.3	176.99.5.102
Jan 7, 2021 07:33:44.135545015 CET	443	49808	217.65.2.150	192.168.2.3
Jan 7, 2021 07:33:44.135587931 CET	443	49808	217.65.2.150	192.168.2.3
Jan 7, 2021 07:33:44.135809898 CET	49808	443	192.168.2.3	217.65.2.150
Jan 7, 2021 07:33:45.280761957 CET	49757	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:33:45.280862093 CET	49758	443	192.168.2.3	88.212.252.2
Jan 7, 2021 07:33:45.365788937 CET	443	49757	88.212.252.2	192.168.2.3
Jan 7, 2021 07:33:45.365838051 CET	443	49758	88.212.252.2	192.168.2.3
Jan 7, 2021 07:33:46.497550964 CET	80	49743	81.19.89.1	192.168.2.3
Jan 7, 2021 07:33:46.497797012 CET	49743	80	192.168.2.3	81.19.89.1
Jan 7, 2021 07:33:47.526377916 CET	443	49760	159.69.74.8	192.168.2.3
Jan 7, 2021 07:33:47.526422024 CET	443	49760	159.69.74.8	192.168.2.3
Jan 7, 2021 07:33:47.526550055 CET	49760	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:33:47.526606083 CET	49760	443	192.168.2.3	159.69.74.8
Jan 7, 2021 07:33:47.869898081 CET	443	49830	89.108.119.28	192.168.2.3
Jan 7, 2021 07:33:47.869947910 CET	443	49830	89.108.119.28	192.168.2.3
Jan 7, 2021 07:33:47.870198011 CET	49830	443	192.168.2.3	89.108.119.28
Jan 7, 2021 07:33:55.484487057 CET	80	49862	91.189.114.9	192.168.2.3
Jan 7, 2021 07:33:55.484613895 CET	49862	80	192.168.2.3	91.189.114.9
Jan 7, 2021 07:33:57.023072958 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:57.107744932 CET	443	49833	5.9.154.76	192.168.2.3
Jan 7, 2021 07:33:57.107789993 CET	443	49833	5.9.154.76	192.168.2.3
Jan 7, 2021 07:33:57.108033895 CET	49833	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:33:57.173297882 CET	443	49726	208.100.17.188	192.168.2.3
Jan 7, 2021 07:33:57.173547983 CET	49726	443	192.168.2.3	208.100.17.188
Jan 7, 2021 07:33:57.217135906 CET	443	49834	95.163.114.204	192.168.2.3
Jan 7, 2021 07:33:57.217183113 CET	443	49834	95.163.114.204	192.168.2.3
Jan 7, 2021 07:33:57.217411041 CET	49834	443	192.168.2.3	95.163.114.204
Jan 7, 2021 07:33:57.225532055 CET	80	49836	78.24.221.88	192.168.2.3
Jan 7, 2021 07:33:57.225672007 CET	49836	80	192.168.2.3	78.24.221.88
Jan 7, 2021 07:33:57.569125891 CET	80	49752	77.88.21.119	192.168.2.3
Jan 7, 2021 07:33:58.085552931 CET	443	49772	195.209.108.46	192.168.2.3
Jan 7, 2021 07:33:58.085598946 CET	443	49772	195.209.108.46	192.168.2.3
Jan 7, 2021 07:33:58.085720062 CET	49772	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:33:58.085774899 CET	49772	443	192.168.2.3	195.209.108.46
Jan 7, 2021 07:34:06.771766901 CET	443	49854	87.250.250.36	192.168.2.3
Jan 7, 2021 07:34:06.771936893 CET	49854	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:34:07.100002050 CET	443	49853	87.250.250.36	192.168.2.3
Jan 7, 2021 07:34:07.100097895 CET	49853	443	192.168.2.3	87.250.250.36
Jan 7, 2021 07:34:07.187494993 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:34:07.187536955 CET	443	49832	5.9.154.76	192.168.2.3
Jan 7, 2021 07:34:07.187573910 CET	49832	443	192.168.2.3	5.9.154.76
Jan 7, 2021 07:34:07.187608957 CET	49832	443	192.168.2.3	5.9.154.76

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2021 07:32:19.521148920 CET	65110	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:19.579401016 CET	53	65110	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:20.560553074 CET	58361	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:20.676884890 CET	53	58361	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:21.255117893 CET	63492	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:21.279964924 CET	60831	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:21.306145906 CET	53	63492	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:21.339081049 CET	53	60831	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:21.443928957 CET	60100	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:21.449099064 CET	53195	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:21.503333092 CET	53	60100	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:21.505609989 CET	53	53195	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:21.536751986 CET	50141	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:21.587470055 CET	53	50141	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:21.817354918 CET	53023	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:21.873770952 CET	53	53023	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:23.152143002 CET	49563	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:23.200202942 CET	53	49563	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:24.696605921 CET	51352	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:24.744743109 CET	53	51352	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:28.849914074 CET	59349	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:28.898046017 CET	53	59349	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:37.608050108 CET	57084	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:37.667011023 CET	53	57084	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:40.504626989 CET	58823	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:40.552782059 CET	53	58823	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:41.144684076 CET	57568	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:41.178081036 CET	50540	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:41.178317070 CET	54366	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:41.186240911 CET	53034	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:41.208969116 CET	53	57568	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:41.220730066 CET	57762	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:41.237266064 CET	53	50540	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:41.242527008 CET	53	53034	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:41.276966095 CET	53	57762	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:41.281909943 CET	53	54366	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:41.354743004 CET	55435	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:41.402451992 CET	53	55435	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:41.564874887 CET	50713	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:41.593400002 CET	56132	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:41.631886005 CET	53	50713	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:41.644053936 CET	53	56132	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:41.651875973 CET	58987	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:41.699784994 CET	53	58987	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:42.119874001 CET	56579	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:42.146155119 CET	60633	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:42.156299114 CET	61292	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:42.161921978 CET	63619	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:42.167951107 CET	53	56579	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:42.168931961 CET	64938	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:42.188608885 CET	61946	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:42.202219009 CET	53	60633	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:42.209726095 CET	53	63619	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:42.220664024 CET	53	61292	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:42.225992918 CET	64910	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:42.230339050 CET	52123	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:42.239440918 CET	53	61946	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:42.245608091 CET	53	64938	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:42.272995949 CET	56130	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:42.283487082 CET	56338	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:42.289279938 CET	53	52123	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:42.290391922 CET	53	64910	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:42.331176996 CET	53	56338	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:42.332153082 CET	53	56130	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:42.447894096 CET	59420	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:42.473121881 CET	58784	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:42.504230022 CET	53	59420	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:42.550415039 CET	53	58784	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:42.857526064 CET	63978	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:42.905771017 CET	53	63978	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:42.918411016 CET	62938	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:42.985924006 CET	53	62938	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:43.055795908 CET	55708	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:43.112009048 CET	53	55708	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:43.236342907 CET	56803	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:43.253601074 CET	57145	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:43.263710022 CET	55359	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:43.269517899 CET	58306	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:43.292726040 CET	53	56803	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:43.309921980 CET	53	57145	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:43.314369917 CET	53	55359	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:43.317217112 CET	53	58306	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:43.642533064 CET	64124	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:43.686232090 CET	49361	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:43.690355062 CET	53	64124	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:43.697740078 CET	53279	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:43.730776072 CET	56881	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:43.742559910 CET	53	49361	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:43.756556988 CET	53	53279	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:43.787538052 CET	63150	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:43.808612108 CET	53642	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:43.811872959 CET	55667	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:43.814861059 CET	54833	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:43.817487955 CET	62476	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:43.818142891 CET	49705	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:43.838413954 CET	53	56881	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:43.846021891 CET	53	63150	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:43.862729073 CET	53	54833	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:43.864979982 CET	53	53642	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:43.865842104 CET	53	49705	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:43.873604059 CET	53	62476	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:43.915997982 CET	53	55667	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:43.948266983 CET	61477	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:43.951136112 CET	61633	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:43.969737053 CET	55949	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:43.998892069 CET	53	61633	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:44.007205009 CET	53	61477	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:44.060266972 CET	53	55949	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:45.295711994 CET	57601	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:45.302037954 CET	49342	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:45.346307993 CET	53	57601	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:45.352642059 CET	53	49342	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:45.450963974 CET	56253	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:45.512212992 CET	53	56253	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:45.979670048 CET	49667	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:46.027513027 CET	53	49667	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:47.591917992 CET	49667	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:47.637547970 CET	55439	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:47.648236990 CET	53	49667	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:47.685622931 CET	53	55439	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:51.071665049 CET	57069	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:51.122509956 CET	53	57069	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:51.159224033 CET	57659	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:51.207129002 CET	53	57659	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:53.182532072 CET	57069	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:53.210123062 CET	57659	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:53.223035097 CET	54717	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:53.233230114 CET	53	57069	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:53.262128115 CET	53	57659	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:53.279542923 CET	53	54717	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:56.960880041 CET	57069	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:56.980601072 CET	57659	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:57.009289980 CET	63975	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:57.011634111 CET	53	57069	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:57.028541088 CET	53	57659	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:57.042907953 CET	56639	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:57.065628052 CET	53	63975	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:57.109751940 CET	53	56639	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:57.563505888 CET	51856	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:57.623994112 CET	53	51856	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:58.034512997 CET	56546	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:58.152877092 CET	53	56546	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:58.960413933 CET	57069	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:58.976142883 CET	57659	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:59.011306047 CET	53	57069	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:59.021733046 CET	62152	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:32:59.024167061 CET	53	57659	8.8.8.8	192.168.2.3
Jan 7, 2021 07:32:59.072741985 CET	53	62152	8.8.8.8	192.168.2.3
Jan 7, 2021 07:33:02.976227999 CET	57069	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:33:03.015800953 CET	57659	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:33:03.027048111 CET	53	57069	8.8.8.8	192.168.2.3
Jan 7, 2021 07:33:03.063786983 CET	53	57659	8.8.8.8	192.168.2.3
Jan 7, 2021 07:33:03.071413040 CET	53470	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:33:03.129079103 CET	53	53470	8.8.8.8	192.168.2.3
Jan 7, 2021 07:33:06.687784910 CET	56446	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:33:06.730900049 CET	59631	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:33:06.744563103 CET	53	56446	8.8.8.8	192.168.2.3
Jan 7, 2021 07:33:06.779782057 CET	53	59631	8.8.8.8	192.168.2.3
Jan 7, 2021 07:33:07.005110979 CET	55515	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:33:07.052927971 CET	53	55515	8.8.8.8	192.168.2.3
Jan 7, 2021 07:33:15.838450909 CET	64547	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:33:17.529947996 CET	53	64547	8.8.8.8	192.168.2.3
Jan 7, 2021 07:33:21.731978893 CET	51759	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:33:21.791452885 CET	53	51759	8.8.8.8	192.168.2.3
Jan 7, 2021 07:33:25.812839031 CET	59207	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:33:25.863679886 CET	53	59207	8.8.8.8	192.168.2.3
Jan 7, 2021 07:33:27.506867886 CET	54269	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:33:27.557832003 CET	53	54269	8.8.8.8	192.168.2.3
Jan 7, 2021 07:33:35.163063049 CET	54856	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:33:35.220735073 CET	53	54856	8.8.8.8	192.168.2.3
Jan 7, 2021 07:33:50.086162090 CET	64140	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:33:50.137135029 CET	53	64140	8.8.8.8	192.168.2.3
Jan 7, 2021 07:33:50.951586962 CET	62271	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:33:50.999598026 CET	53	62271	8.8.8.8	192.168.2.3
Jan 7, 2021 07:33:51.755402088 CET	57404	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:33:51.822244883 CET	53	57404	8.8.8.8	192.168.2.3
Jan 7, 2021 07:34:03.143021107 CET	62997	53	192.168.2.3	8.8.8.8
Jan 7, 2021 07:34:03.191170931 CET	53	62997	8.8.8.8	192.168.2.3

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 7, 2021 07:32:47.648334980 CET	192.168.2.3	8.8.8.8	d03f	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Jan 7, 2021 07:32:20.560553074 CET	192.168.2.3	8.8.8.8	0x70ea	Standard query (0)	ovd.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:21.255117893 CET	192.168.2.3	8.8.8.8	0x730d	Standard query (0)	tcr.tynt.com	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:21.279964924 CET	192.168.2.3	8.8.8.8	0x3fae	Standard query (0)	loginza.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:21.443928957 CET	192.168.2.3	8.8.8.8	0x9d0e	Standard query (0)	ic.tynt.com	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:21.449099064 CET	192.168.2.3	8.8.8.8	0xd79e	Standard query (0)	sc.tynt.com	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:21.817354918 CET	192.168.2.3	8.8.8.8	0xa6f8	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:37.608050108 CET	192.168.2.3	8.8.8.8	0xe0e5	Standard query (0)	ovd.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.178081036 CET	192.168.2.3	8.8.8.8	0xfcf6	Standard query (0)	counter.rambler.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.178317070 CET	192.168.2.3	8.8.8.8	0x666f	Standard query (0)	top100-images.rambler.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.186240911 CET	192.168.2.3	8.8.8.8	0xabde	Standard query (0)	w.uptolike.com	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.220730066 CET	192.168.2.3	8.8.8.8	0x1637	Standard query (0)	www.acint.net	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.354743004 CET	192.168.2.3	8.8.8.8	0x7482	Standard query (0)	hit5.hotlog.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.564874887 CET	192.168.2.3	8.8.8.8	0x495d	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.593400002 CET	192.168.2.3	8.8.8.8	0x271e	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.651875973 CET	192.168.2.3	8.8.8.8	0x1918	Standard query (0)	dmg.digitaltarget.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.119874001 CET	192.168.2.3	8.8.8.8	0xf0c6	Standard query (0)	ads.betweendigital.com	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.146155119 CET	192.168.2.3	8.8.8.8	0xf3c7	Standard query (0)	ssp-rtb.sape.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.161921978 CET	192.168.2.3	8.8.8.8	0x421e	Standard query (0)	px.adhigh.net	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.168931961 CET	192.168.2.3	8.8.8.8	0xa9a	Standard query (0)	adservice.google.co.uk	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.188608885 CET	192.168.2.3	8.8.8.8	0x73c9	Standard query (0)	ad.mail.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.230339050 CET	192.168.2.3	8.8.8.8	0xa392	Standard query (0)	ad.adriver.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.272995949 CET	192.168.2.3	8.8.8.8	0xca02	Standard query (0)	sync.republer.com	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.283487082 CET	192.168.2.3	8.8.8.8	0x41f	Standard query (0)	dm.hybrid.ai	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.447894096 CET	192.168.2.3	8.8.8.8	0x6e50	Standard query (0)	tag.digitaltarget.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.473121881 CET	192.168.2.3	8.8.8.8	0x45d8	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.857526064 CET	192.168.2.3	8.8.8.8	0xa99c	Standard query (0)	sync.dmp.otm-r.com	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.918411016 CET	192.168.2.3	8.8.8.8	0x810e	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.055795908 CET	192.168.2.3	8.8.8.8	0xf62e	Standard query (0)	stat.adlabs.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.236342907 CET	192.168.2.3	8.8.8.8	0x116a	Standard query (0)	acint.net	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.253601074 CET	192.168.2.3	8.8.8.8	0x7af0	Standard query (0)	ssp.adriver.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.263710022 CET	192.168.2.3	8.8.8.8	0x2e88	Standard query (0)	relap.io	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.269517899 CET	192.168.2.3	8.8.8.8	0xbc8e	Standard query (0)	sync.bumlam.com	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.642533064 CET	192.168.2.3	8.8.8.8	0xac1f	Standard query (0)	sync.1dmp.io	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.686232090 CET	192.168.2.3	8.8.8.8	0x5867	Standard query (0)	adx.com.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.697740078 CET	192.168.2.3	8.8.8.8	0x6c79	Standard query (0)	sape-sync.rutarget.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.730776072 CET	192.168.2.3	8.8.8.8	0xca7e	Standard query (0)	0100007f09abf65ffe0029a40224c90b-sp.ops.beeline.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.787538052 CET	192.168.2.3	8.8.8.8	0xcf73	Standard query (0)	adlmerge.com	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.808612108 CET	192.168.2.3	8.8.8.8	0x1880	Standard query (0)	ut.rktch.com	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.811872959 CET	192.168.2.3	8.8.8.8	0xf7d2	Standard query (0)	sm.rtb.mts.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.814861059 CET	192.168.2.3	8.8.8.8	0x3073	Standard query (0)	exchange.buzzoola.com	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.817487955 CET	192.168.2.3	8.8.8.8	0xa0ed	Standard query (0)	s.uuidksinc.net	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.818142891 CET	192.168.2.3	8.8.8.8	0x1057	Standard query (0)	match.new-programmatic.com	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.948266983 CET	192.168.2.3	8.8.8.8	0x2041	Standard query (0)	s3.advarkads.com	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.951136112 CET	192.168.2.3	8.8.8.8	0xb349	Standard query (0)	fcgi.gnezdo.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.969737053 CET	192.168.2.3	8.8.8.8	0x17a7	Standard query (0)	sync3.adsniper.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:45.295711994 CET	192.168.2.3	8.8.8.8	0x9e0f	Standard query (0)	redirect.frontend.weborama.fr	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:45.302037954 CET	192.168.2.3	8.8.8.8	0x509	Standard query (0)	tech.rtb.mts.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:45.450963974 CET	192.168.2.3	8.8.8.8	0x3bea	Standard query (0)	api.advarkads.com	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:45.979670048 CET	192.168.2.3	8.8.8.8	0x6a8e	Standard query (0)	an.yandex.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:47.591917992 CET	192.168.2.3	8.8.8.8	0x6a8e	Standard query (0)	an.yandex.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:47.637547970 CET	192.168.2.3	8.8.8.8	0x8fe7	Standard query (0)	x01.aidata.io	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:53.223035097 CET	192.168.2.3	8.8.8.8	0x3560	Standard query (0)	sonar.semantiqo.com	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:57.009289980 CET	192.168.2.3	8.8.8.8	0xee9b	Standard query (0)	utl-utils.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:57.563505888 CET	192.168.2.3	8.8.8.8	0x86a6	Standard query (0)	s.click.aliexpress.com	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:58.034512997 CET	192.168.2.3	8.8.8.8	0x688b	Standard query (0)	perviyshkaf.ru	A (IP address)	IN (0x0001)
Jan 7, 2021 07:33:06.687784910 CET	192.168.2.3	8.8.8.8	0xda61	Standard query (0)	favicon.yandex.net	A (IP address)	IN (0x0001)
Jan 7, 2021 07:33:06.730900049 CET	192.168.2.3	8.8.8.8	0xdca2	Standard query (0)	yandex.st	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Jan 7, 2021 07:32:20.676884890 CET	8.8.8.8	192.168.2.3	0x70ea	No error (0)	ovd.ru		91.189.114.9	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:21.306145906 CET	8.8.8.8	192.168.2.3	0x730d	No error (0)	tcr.tynt.com	tcr.tynt.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Jan 7, 2021 07:32:21.339081049 CET	8.8.8.8	192.168.2.3	0x3fae	No error (0)	loginza.ru		213.180.204.205	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:21.503333092 CET	8.8.8.8	192.168.2.3	0x9d0e	No error (0)	ic.tynt.com		208.100.17.188	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:21.505609989 CET	8.8.8.8	192.168.2.3	0xd79e	No error (0)	sc.tynt.com	sc.tynt.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Jan 7, 2021 07:32:21.873770952 CET	8.8.8.8	192.168.2.3	0xa6f8	No error (0)	de.tynt.com		208.100.17.188	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:37.667011023 CET	8.8.8.8	192.168.2.3	0xe0e5	No error (0)	ovd.ru		91.189.114.9	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.208969116 CET	8.8.8.8	192.168.2.3	0x5c24	No error (0)	pagead46.l.doubleclick.net		142.250.180.162	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.237266064 CET	8.8.8.8	192.168.2.3	0xfcf6	No error (0)	counter.rambler.ru		81.19.89.16	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.237266064 CET	8.8.8.8	192.168.2.3	0xfcf6	No error (0)	counter.rambler.ru		81.19.89.18	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.237266064 CET	8.8.8.8	192.168.2.3	0xfcf6	No error (0)	counter.rambler.ru		81.19.89.17	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.242527008 CET	8.8.8.8	192.168.2.3	0xabde	No error (0)	w.uptolike.com		95.163.114.204	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.242527008 CET	8.8.8.8	192.168.2.3	0xabde	No error (0)	w.uptolike.com		95.163.114.203	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.276966095 CET	8.8.8.8	192.168.2.3	0x1637	No error (0)	www.acint.net		46.4.114.109	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.276966095 CET	8.8.8.8	192.168.2.3	0x1637	No error (0)	www.acint.net		46.4.121.26	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.276966095 CET	8.8.8.8	192.168.2.3	0x1637	No error (0)	www.acint.net		195.201.243.71	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.276966095 CET	8.8.8.8	192.168.2.3	0x1637	No error (0)	www.acint.net		195.201.243.72	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.281909943 CET	8.8.8.8	192.168.2.3	0x666f	No error (0)	top100-images.rambler.ru	top100.rambler.ru		CNAME (Canonical name)	IN (0x0001)
Jan 7, 2021 07:32:41.281909943 CET	8.8.8.8	192.168.2.3	0x666f	No error (0)	top100.rambler.ru		81.19.89.1	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.402451992 CET	8.8.8.8	192.168.2.3	0x7482	No error (0)	hit5.hotlog.ru	catch-all.hotlog.ru		CNAME (Canonical name)	IN (0x0001)
Jan 7, 2021 07:32:41.402451992 CET	8.8.8.8	192.168.2.3	0x7482	No error (0)	catch-all.hotlog.ru		89.208.236.251	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.631886005 CET	8.8.8.8	192.168.2.3	0x495d	No error (0)	googleads.g.doubleclick.net	pagead46.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Jan 7, 2021 07:32:41.631886005 CET	8.8.8.8	192.168.2.3	0x495d	No error (0)	pagead46.l.doubleclick.net		216.58.209.34	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.644053936 CET	8.8.8.8	192.168.2.3	0x271e	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.644053936 CET	8.8.8.8	192.168.2.3	0x271e	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.644053936 CET	8.8.8.8	192.168.2.3	0x271e	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.644053936 CET	8.8.8.8	192.168.2.3	0x271e	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.699784994 CET	8.8.8.8	192.168.2.3	0x1918	No error (0)	dmg.digitaltarget.ru		185.15.175.130	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.699784994 CET	8.8.8.8	192.168.2.3	0x1918	No error (0)	dmg.digitaltarget.ru		185.15.175.131	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.699784994 CET	8.8.8.8	192.168.2.3	0x1918	No error (0)	dmg.digitaltarget.ru		185.15.175.132	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.699784994 CET	8.8.8.8	192.168.2.3	0x1918	No error (0)	dmg.digitaltarget.ru		185.15.175.133	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.699784994 CET	8.8.8.8	192.168.2.3	0x1918	No error (0)	dmg.digitaltarget.ru		185.15.175.134	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.699784994 CET	8.8.8.8	192.168.2.3	0x1918	No error (0)	dmg.digitaltarget.ru		185.15.175.144	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.699784994 CET	8.8.8.8	192.168.2.3	0x1918	No error (0)	dmg.digitaltarget.ru		185.15.175.145	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.699784994 CET	8.8.8.8	192.168.2.3	0x1918	No error (0)	dmg.digitaltarget.ru		185.15.175.146	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.699784994 CET	8.8.8.8	192.168.2.3	0x1918	No error (0)	dmg.digitaltarget.ru		185.15.175.147	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.699784994 CET	8.8.8.8	192.168.2.3	0x1918	No error (0)	dmg.digitaltarget.ru		185.15.175.148	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.699784994 CET	8.8.8.8	192.168.2.3	0x1918	No error (0)	dmg.digitaltarget.ru		185.15.175.157	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.699784994 CET	8.8.8.8	192.168.2.3	0x1918	No error (0)	dmg.digitaltarget.ru		185.15.175.158	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.699784994 CET	8.8.8.8	192.168.2.3	0x1918	No error (0)	dmg.digitaltarget.ru		185.15.175.159	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:41.699784994 CET	8.8.8.8	192.168.2.3	0x1918	No error (0)	dmg.digitaltarget.ru		185.15.175.174	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.167951107 CET	8.8.8.8	192.168.2.3	0xf0c6	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)
Jan 7, 2021 07:32:42.167951107 CET	8.8.8.8	192.168.2.3	0xf0c6	No error (0)	ssp.ads.betweendigital.com		88.212.252.2	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.167951107 CET	8.8.8.8	192.168.2.3	0xf0c6	No error (0)	ssp.ads.betweendigital.com		23.111.200.117	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.167951107 CET	8.8.8.8	192.168.2.3	0xf0c6	No error (0)	ssp.ads.betweendigital.com		188.42.29.196	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.167951107 CET	8.8.8.8	192.168.2.3	0xf0c6	No error (0)	ssp.ads.betweendigital.com		88.212.252.22	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.167951107 CET	8.8.8.8	192.168.2.3	0xf0c6	No error (0)	ssp.ads.betweendigital.com		23.111.200.118	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.202219009 CET	8.8.8.8	192.168.2.3	0xf3c7	No error (0)	ssp-rtb.sape.ru		159.69.74.8	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.202219009 CET	8.8.8.8	192.168.2.3	0xf3c7	No error (0)	ssp-rtb.sape.ru		159.69.74.9	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.202219009 CET	8.8.8.8	192.168.2.3	0xf3c7	No error (0)	ssp-rtb.sape.ru		116.202.82.143	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.202219009 CET	8.8.8.8	192.168.2.3	0xf3c7	No error (0)	ssp-rtb.sape.ru		116.202.85.240	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.202219009 CET	8.8.8.8	192.168.2.3	0xf3c7	No error (0)	ssp-rtb.sape.ru		116.202.114.134	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.202219009 CET	8.8.8.8	192.168.2.3	0xf3c7	No error (0)	ssp-rtb.sape.ru		116.202.128.114	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.202219009 CET	8.8.8.8	192.168.2.3	0xf3c7	No error (0)	ssp-rtb.sape.ru		95.181.171.214	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.202219009 CET	8.8.8.8	192.168.2.3	0xf3c7	No error (0)	ssp-rtb.sape.ru		95.181.171.232	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.202219009 CET	8.8.8.8	192.168.2.3	0xf3c7	No error (0)	ssp-rtb.sape.ru		193.232.121.218	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.202219009 CET	8.8.8.8	192.168.2.3	0xf3c7	No error (0)	ssp-rtb.sape.ru		193.232.121.241	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.202219009 CET	8.8.8.8	192.168.2.3	0xf3c7	No error (0)	ssp-rtb.sape.ru		195.201.152.25	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.202219009 CET	8.8.8.8	192.168.2.3	0xf3c7	No error (0)	ssp-rtb.sape.ru		195.201.152.26	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.202219009 CET	8.8.8.8	192.168.2.3	0xf3c7	No error (0)	ssp-rtb.sape.ru		159.69.74.6	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.202219009 CET	8.8.8.8	192.168.2.3	0xf3c7	No error (0)	ssp-rtb.sape.ru		159.69.74.7	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.220664024 CET	8.8.8.8	192.168.2.3	0xffd5	No error (0)	partnerad.l.doubleclick.net		216.58.206.66	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.239440918 CET	8.8.8.8	192.168.2.3	0x73c9	No error (0)	ad.mail.ru	r.mail.ru		CNAME (Canonical name)	IN (0x0001)
Jan 7, 2021 07:32:42.239440918 CET	8.8.8.8	192.168.2.3	0x73c9	No error (0)	r.mail.ru		94.100.180.197	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.245608091 CET	8.8.8.8	192.168.2.3	0xa9a	No error (0)	adservice.google.co.uk	pagead46.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Jan 7, 2021 07:32:42.245608091 CET	8.8.8.8	192.168.2.3	0xa9a	No error (0)	pagead46.l.doubleclick.net		216.58.198.34	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.289279938 CET	8.8.8.8	192.168.2.3	0xa392	No error (0)	ad.adriver.ru		195.209.108.46	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.289279938 CET	8.8.8.8	192.168.2.3	0xa392	No error (0)	ad.adriver.ru		195.209.108.39	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.289279938 CET	8.8.8.8	192.168.2.3	0xa392	No error (0)	ad.adriver.ru		195.209.108.35	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.289279938 CET	8.8.8.8	192.168.2.3	0xa392	No error (0)	ad.adriver.ru		195.209.108.38	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.289279938 CET	8.8.8.8	192.168.2.3	0xa392	No error (0)	ad.adriver.ru		195.209.108.36	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.289279938 CET	8.8.8.8	192.168.2.3	0xa392	No error (0)	ad.adriver.ru		195.209.108.37	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.289279938 CET	8.8.8.8	192.168.2.3	0xa392	No error (0)	ad.adriver.ru		195.209.108.47	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.290391922 CET	8.8.8.8	192.168.2.3	0xdfd6	No error (0)	pagead46.l.doubleclick.net		216.58.206.34	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.331176996 CET	8.8.8.8	192.168.2.3	0x41f	No error (0)	dm.hybrid.ai		37.18.16.16	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.331176996 CET	8.8.8.8	192.168.2.3	0x41f	No error (0)	dm.hybrid.ai		37.18.16.23	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.331176996 CET	8.8.8.8	192.168.2.3	0x41f	No error (0)	dm.hybrid.ai		37.18.16.21	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.331176996 CET	8.8.8.8	192.168.2.3	0x41f	No error (0)	dm.hybrid.ai		37.18.16.22	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.332153082 CET	8.8.8.8	192.168.2.3	0xca02	No error (0)	sync.republer.com	ru2.republer.com		CNAME (Canonical name)	IN (0x0001)
Jan 7, 2021 07:32:42.332153082 CET	8.8.8.8	192.168.2.3	0xca02	No error (0)	ru2.republer.com		194.190.117.93	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.332153082 CET	8.8.8.8	192.168.2.3	0xca02	No error (0)	ru2.republer.com		194.190.117.94	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.504230022 CET	8.8.8.8	192.168.2.3	0x6e50	No error (0)	tag.digitaltarget.ru		185.15.175.130	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.504230022 CET	8.8.8.8	192.168.2.3	0x6e50	No error (0)	tag.digitaltarget.ru		185.15.175.133	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.504230022 CET	8.8.8.8	192.168.2.3	0x6e50	No error (0)	tag.digitaltarget.ru		185.15.175.145	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.504230022 CET	8.8.8.8	192.168.2.3	0x6e50	No error (0)	tag.digitaltarget.ru		185.15.175.146	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.504230022 CET	8.8.8.8	192.168.2.3	0x6e50	No error (0)	tag.digitaltarget.ru		185.15.175.144	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.504230022 CET	8.8.8.8	192.168.2.3	0x6e50	No error (0)	tag.digitaltarget.ru		185.15.175.158	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.504230022 CET	8.8.8.8	192.168.2.3	0x6e50	No error (0)	tag.digitaltarget.ru		185.15.175.147	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.504230022 CET	8.8.8.8	192.168.2.3	0x6e50	No error (0)	tag.digitaltarget.ru		185.15.175.134	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.504230022 CET	8.8.8.8	192.168.2.3	0x6e50	No error (0)	tag.digitaltarget.ru		185.15.175.148	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.504230022 CET	8.8.8.8	192.168.2.3	0x6e50	No error (0)	tag.digitaltarget.ru		185.15.175.131	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.504230022 CET	8.8.8.8	192.168.2.3	0x6e50	No error (0)	tag.digitaltarget.ru		185.15.175.132	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.504230022 CET	8.8.8.8	192.168.2.3	0x6e50	No error (0)	tag.digitaltarget.ru		185.15.175.174	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.504230022 CET	8.8.8.8	192.168.2.3	0x6e50	No error (0)	tag.digitaltarget.ru		185.15.175.157	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.504230022 CET	8.8.8.8	192.168.2.3	0x6e50	No error (0)	tag.digitaltarget.ru		185.15.175.159	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.550415039 CET	8.8.8.8	192.168.2.3	0x45d8	No error (0)	www.googletagservices.com	pagead46.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Jan 7, 2021 07:32:42.550415039 CET	8.8.8.8	192.168.2.3	0x45d8	No error (0)	pagead46.l.doubleclick.net		142.250.180.162	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:42.985924006 CET	8.8.8.8	192.168.2.3	0x810e	No error (0)	cm.g.doubleclick.net	pagead.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Jan 7, 2021 07:32:42.985924006 CET	8.8.8.8	192.168.2.3	0x810e	No error (0)	pagead.l.doubleclick.net		142.250.180.98	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.112009048 CET	8.8.8.8	192.168.2.3	0xf62e	No error (0)	stat.adlabs.ru		109.248.237.37	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.112009048 CET	8.8.8.8	192.168.2.3	0xf62e	No error (0)	stat.adlabs.ru		109.248.237.36	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.292726040 CET	8.8.8.8	192.168.2.3	0x116a	No error (0)	acint.net		195.201.243.72	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.292726040 CET	8.8.8.8	192.168.2.3	0x116a	No error (0)	acint.net		195.201.243.71	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.309921980 CET	8.8.8.8	192.168.2.3	0x7af0	No error (0)	ssp.adriver.ru		81.222.128.216	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.309921980 CET	8.8.8.8	192.168.2.3	0x7af0	No error (0)	ssp.adriver.ru		81.222.128.213	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.309921980 CET	8.8.8.8	192.168.2.3	0x7af0	No error (0)	ssp.adriver.ru		81.222.128.214	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.309921980 CET	8.8.8.8	192.168.2.3	0x7af0	No error (0)	ssp.adriver.ru		81.222.128.215	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.314369917 CET	8.8.8.8	192.168.2.3	0x2e88	No error (0)	relap.io		95.163.37.253	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.317217112 CET	8.8.8.8	192.168.2.3	0xbc8e	No error (0)	sync.bumlam.com		31.172.81.158	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.317217112 CET	8.8.8.8	192.168.2.3	0xbc8e	No error (0)	sync.bumlam.com		31.172.81.159	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.317217112 CET	8.8.8.8	192.168.2.3	0xbc8e	No error (0)	sync.bumlam.com		31.172.81.160	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.317217112 CET	8.8.8.8	192.168.2.3	0xbc8e	No error (0)	sync.bumlam.com		31.172.81.172	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.690355062 CET	8.8.8.8	192.168.2.3	0xac1f	No error (0)	sync.1dmp.io		136.243.148.229	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.690355062 CET	8.8.8.8	192.168.2.3	0xac1f	No error (0)	sync.1dmp.io		88.99.149.88	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.690355062 CET	8.8.8.8	192.168.2.3	0xac1f	No error (0)	sync.1dmp.io		95.216.101.186	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.690355062 CET	8.8.8.8	192.168.2.3	0xac1f	No error (0)	sync.1dmp.io		88.99.214.77	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.690355062 CET	8.8.8.8	192.168.2.3	0xac1f	No error (0)	sync.1dmp.io		88.99.213.228	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.690355062 CET	8.8.8.8	192.168.2.3	0xac1f	No error (0)	sync.1dmp.io		78.46.100.125	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.742559910 CET	8.8.8.8	192.168.2.3	0x5867	No error (0)	adx.com.ru		176.9.238.190	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.742559910 CET	8.8.8.8	192.168.2.3	0x5867	No error (0)	adx.com.ru		176.9.238.188	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.742559910 CET	8.8.8.8	192.168.2.3	0x5867	No error (0)	adx.com.ru		176.9.238.189	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.756556988 CET	8.8.8.8	192.168.2.3	0x6c79	No error (0)	sape-sync.rutarget.ru	sync.rutarget.ru		CNAME (Canonical name)	IN (0x0001)
Jan 7, 2021 07:32:43.756556988 CET	8.8.8.8	192.168.2.3	0x6c79	No error (0)	sync.rutarget.ru		80.64.106.147	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.756556988 CET	8.8.8.8	192.168.2.3	0x6c79	No error (0)	sync.rutarget.ru		80.64.106.148	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.756556988 CET	8.8.8.8	192.168.2.3	0x6c79	No error (0)	sync.rutarget.ru		80.64.106.149	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.838413954 CET	8.8.8.8	192.168.2.3	0xca7e	No error (0)	0100007f09abf65ffe0029a40224c90b-sp.ops.beeline.ru		37.9.245.57	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.846021891 CET	8.8.8.8	192.168.2.3	0xcf73	No error (0)	adlmerge.com		95.211.66.35	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.862729073 CET	8.8.8.8	192.168.2.3	0x3073	No error (0)	exchange.buzzoola.com		116.202.236.171	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.862729073 CET	8.8.8.8	192.168.2.3	0x3073	No error (0)	exchange.buzzoola.com		168.119.8.212	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.862729073 CET	8.8.8.8	192.168.2.3	0x3073	No error (0)	exchange.buzzoola.com		176.9.158.88	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.862729073 CET	8.8.8.8	192.168.2.3	0x3073	No error (0)	exchange.buzzoola.com		168.119.9.59	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.862729073 CET	8.8.8.8	192.168.2.3	0x3073	No error (0)	exchange.buzzoola.com		148.251.156.238	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.862729073 CET	8.8.8.8	192.168.2.3	0x3073	No error (0)	exchange.buzzoola.com		88.198.31.232	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.862729073 CET	8.8.8.8	192.168.2.3	0x3073	No error (0)	exchange.buzzoola.com		144.76.119.17	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.862729073 CET	8.8.8.8	192.168.2.3	0x3073	No error (0)	exchange.buzzoola.com		94.130.13.220	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.864979982 CET	8.8.8.8	192.168.2.3	0x1880	No error (0)	ut.rktch.com		176.99.5.102	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.865842104 CET	8.8.8.8	192.168.2.3	0x1057	No error (0)	match.new-programmatic.com		217.65.2.150	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.873604059 CET	8.8.8.8	192.168.2.3	0xa0ed	No error (0)	s.uuidksinc.net		31.220.27.134	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.915997982 CET	8.8.8.8	192.168.2.3	0xf7d2	No error (0)	sm.rtb.mts.ru		217.66.147.170	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.915997982 CET	8.8.8.8	192.168.2.3	0xf7d2	No error (0)	sm.rtb.mts.ru		217.66.147.167	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.915997982 CET	8.8.8.8	192.168.2.3	0xf7d2	No error (0)	sm.rtb.mts.ru		217.66.147.161	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.915997982 CET	8.8.8.8	192.168.2.3	0xf7d2	No error (0)	sm.rtb.mts.ru		217.66.147.169	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.915997982 CET	8.8.8.8	192.168.2.3	0xf7d2	No error (0)	sm.rtb.mts.ru		217.66.147.168	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.915997982 CET	8.8.8.8	192.168.2.3	0xf7d2	No error (0)	sm.rtb.mts.ru		217.66.147.163	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.915997982 CET	8.8.8.8	192.168.2.3	0xf7d2	No error (0)	sm.rtb.mts.ru		217.66.147.162	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.915997982 CET	8.8.8.8	192.168.2.3	0xf7d2	No error (0)	sm.rtb.mts.ru		217.66.147.165	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.915997982 CET	8.8.8.8	192.168.2.3	0xf7d2	No error (0)	sm.rtb.mts.ru		217.66.147.166	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.915997982 CET	8.8.8.8	192.168.2.3	0xf7d2	No error (0)	sm.rtb.mts.ru		217.66.147.164	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:43.998892069 CET	8.8.8.8	192.168.2.3	0xb349	No error (0)	fcgi.gnezdo.ru		185.148.37.80	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:44.007205009 CET	8.8.8.8	192.168.2.3	0x2041	No error (0)	s3.advarkads.com		104.22.4.87	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:44.007205009 CET	8.8.8.8	192.168.2.3	0x2041	No error (0)	s3.advarkads.com		172.67.13.171	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:44.007205009 CET	8.8.8.8	192.168.2.3	0x2041	No error (0)	s3.advarkads.com		104.22.5.87	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:44.060266972 CET	8.8.8.8	192.168.2.3	0x17a7	No error (0)	sync3.adsniper.ru		31.172.81.172	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:44.060266972 CET	8.8.8.8	192.168.2.3	0x17a7	No error (0)	sync3.adsniper.ru		31.172.81.158	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:44.060266972 CET	8.8.8.8	192.168.2.3	0x17a7	No error (0)	sync3.adsniper.ru		31.172.81.159	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:44.060266972 CET	8.8.8.8	192.168.2.3	0x17a7	No error (0)	sync3.adsniper.ru		31.172.81.160	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:45.346307993 CET	8.8.8.8	192.168.2.3	0x9e0f	No error (0)	redirect.frontend.weborama.fr		35.190.16.14	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:45.352642059 CET	8.8.8.8	192.168.2.3	0x509	No error (0)	tech.rtb.mts.ru		213.87.44.207	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:45.512212992 CET	8.8.8.8	192.168.2.3	0x3bea	No error (0)	api.advarkads.com		188.42.29.81	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:45.512212992 CET	8.8.8.8	192.168.2.3	0x3bea	No error (0)	api.advarkads.com		88.212.233.108	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:45.512212992 CET	8.8.8.8	192.168.2.3	0x3bea	No error (0)	api.advarkads.com		188.42.29.80	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:45.512212992 CET	8.8.8.8	192.168.2.3	0x3bea	No error (0)	api.advarkads.com		88.212.233.36	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:46.027513027 CET	8.8.8.8	192.168.2.3	0x6a8e	No error (0)	an.yandex.ru		93.158.134.90	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:46.027513027 CET	8.8.8.8	192.168.2.3	0x6a8e	No error (0)	an.yandex.ru		213.180.193.90	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:46.027513027 CET	8.8.8.8	192.168.2.3	0x6a8e	No error (0)	an.yandex.ru		213.180.204.90	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:46.027513027 CET	8.8.8.8	192.168.2.3	0x6a8e	No error (0)	an.yandex.ru		87.250.250.90	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:46.027513027 CET	8.8.8.8	192.168.2.3	0x6a8e	No error (0)	an.yandex.ru		77.88.21.90	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:47.648236990 CET	8.8.8.8	192.168.2.3	0x6a8e	No error (0)	an.yandex.ru		87.250.250.90	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:47.648236990 CET	8.8.8.8	192.168.2.3	0x6a8e	No error (0)	an.yandex.ru		213.180.193.90	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:47.648236990 CET	8.8.8.8	192.168.2.3	0x6a8e	No error (0)	an.yandex.ru		93.158.134.90	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:47.648236990 CET	8.8.8.8	192.168.2.3	0x6a8e	No error (0)	an.yandex.ru		77.88.21.90	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:47.648236990 CET	8.8.8.8	192.168.2.3	0x6a8e	No error (0)	an.yandex.ru		213.180.204.90	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:47.685622931 CET	8.8.8.8	192.168.2.3	0x8fe7	No error (0)	x01.aidata.io		89.108.119.28	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:47.685622931 CET	8.8.8.8	192.168.2.3	0x8fe7	No error (0)	x01.aidata.io		89.108.120.76	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:47.685622931 CET	8.8.8.8	192.168.2.3	0x8fe7	No error (0)	x01.aidata.io		89.108.119.43	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:47.685622931 CET	8.8.8.8	192.168.2.3	0x8fe7	No error (0)	x01.aidata.io		89.108.120.68	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:53.279542923 CET	8.8.8.8	192.168.2.3	0x3560	No error (0)	sonar.semantiqo.com	semantiqo.com		CNAME (Canonical name)	IN (0x0001)
Jan 7, 2021 07:32:53.279542923 CET	8.8.8.8	192.168.2.3	0x3560	No error (0)	semantiqo.com		5.9.154.76	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:53.279542923 CET	8.8.8.8	192.168.2.3	0x3560	No error (0)	semantiqo.com		148.251.41.166	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:57.065628052 CET	8.8.8.8	192.168.2.3	0xee9b	No error (0)	utl-utils.ru		78.24.221.88	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:57.623994112 CET	8.8.8.8	192.168.2.3	0x86a6	No error (0)	s.click.aliexpress.com	global.aliexpress.com		CNAME (Canonical name)	IN (0x0001)
Jan 7, 2021 07:32:57.623994112 CET	8.8.8.8	192.168.2.3	0x86a6	No error (0)	global.aliexpress.com	global.aliexpress.com.gds.alibabadns.com		CNAME (Canonical name)	IN (0x0001)
Jan 7, 2021 07:32:57.623994112 CET	8.8.8.8	192.168.2.3	0x86a6	No error (0)	global.aliexpress.com.gds.alibabadns.com	eu1111.alicdn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jan 7, 2021 07:32:58.152877092 CET	8.8.8.8	192.168.2.3	0x688b	No error (0)	perviyshkaf.ru		90.156.201.82	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:58.152877092 CET	8.8.8.8	192.168.2.3	0x688b	No error (0)	perviyshkaf.ru		90.156.201.71	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:58.152877092 CET	8.8.8.8	192.168.2.3	0x688b	No error (0)	perviyshkaf.ru		90.156.201.37	A (IP address)	IN (0x0001)
Jan 7, 2021 07:32:58.152877092 CET	8.8.8.8	192.168.2.3	0x688b	No error (0)	perviyshkaf.ru		90.156.201.112	A (IP address)	IN (0x0001)
Jan 7, 2021 07:33:06.744563103 CET	8.8.8.8	192.168.2.3	0xda61	No error (0)	favicon.yandex.net		87.250.250.36	A (IP address)	IN (0x0001)
Jan 7, 2021 07:33:06.744563103 CET	8.8.8.8	192.168.2.3	0xda61	No error (0)	favicon.yandex.net		213.180.204.36	A (IP address)	IN (0x0001)
Jan 7, 2021 07:33:06.744563103 CET	8.8.8.8	192.168.2.3	0xda61	No error (0)	favicon.yandex.net		77.88.21.36	A (IP address)	IN (0x0001)
Jan 7, 2021 07:33:06.744563103 CET	8.8.8.8	192.168.2.3	0xda61	No error (0)	favicon.yandex.net		93.158.134.36	A (IP address)	IN (0x0001)
Jan 7, 2021 07:33:06.779782057 CET	8.8.8.8	192.168.2.3	0xdca2	No error (0)	yandex.st		178.154.131.217	A (IP address)	IN (0x0001)
Jan 7, 2021 07:33:06.779782057 CET	8.8.8.8	192.168.2.3	0xdca2	No error (0)	yandex.st		178.154.131.215	A (IP address)	IN (0x0001)
Jan 7, 2021 07:33:06.779782057 CET	8.8.8.8	192.168.2.3	0xdca2	No error (0)	yandex.st		178.154.131.216	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

ovd.ru

loginza.ru

counter.rambler.ru

www.acint.net

top100-images.rambler.ru

hit5.hotlog.ru

mc.yandex.ru

utl-utils.ru

perviyshkaf.ru

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49710	91.189.114.9	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:32:20.763649940 CET	12	OUT	GET /forum/register.php?a=act&u=84666&i=25545989 HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive
Jan 7, 2021 07:32:20.896619081 CET	13	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:20 GMT Content-Type: text/html; charset=windows-1251 Content-Length: 7909 Connection: keep-alive X-Powered-By: PHP/4.4.9 Set-Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; path=/; HttpOnly Set-Cookie: bblastvisit=1610001140; expires=Fri, 07 Jan 2022 06:32:20 GMT; path=/ Set-Cookie: bblastactivity=0; expires=Fri, 07 Jan 2022 06:32:20 GMT; path=/ Cache-Control: private Pragma: private Content-Encoding: gzip Data Raw: 1f 8b 08 00 00 00 00 00 00 ff d5 5c ed 73 1b c7 79 ff 2c cd e8 7f d8 5c 26 06 68 12 6f 7c 11 45 90 07 8d 45 91 a9 32 7e ab 25 37 ed b8 1e cc 01 38 00 67 1e 70 f0 dd 81 14 65 fb ff ca c7 c6 f5 4c 3a 6e 62 c7 9d ce a4 5f 3a 03 51 44 04 53 24 44 52 71 9c 8e d4 a8 bf 67 77 6f ef 0e 38 02 90 62 b5 0d 15 07 f7 b2 fb ec ee f3 b6 cf db de c6 8f 6e be b3 79 e7 1f de dd 62 4d bf 65 b3 77 df bf f1 e6 ad 4d a6 65 72 b9 9f 2f 6d e6 72 37 ef dc 64 7f ff 37 77 de 7a 93 15 b2 79 76 c7 35 da 9e e5 5b 4e db b0 73 b9 ad b7 35 a6 35 7d bf 53 cc e5 f6 f6 f6 b2 7b 4b 59 c7 6d e4 ee bc 97 bb 4b b0 0a d4 59 5e 66 fc 48 cf 6c cd af 69 a5 2b 97 37 f8 88 77 5b 76 db d3 13 e0 14 d6 d6 d6 44 77 8d d5 2c 57 d7 6c df d5 98 6d b4 1b ba e6 76 05 00 d3 a8 11 a0 96 e9 1b ac 6d b4 4c bc 71 2a 8e ef 69 ac ea b4 7d b3 ed eb 5a db b1 da 35 f3 ee 42 dd b1 6d 67 4f 63 39 d5 81 a6 9e 31 3f ee 5a bb ba b6 29 9a 67 ee ec 77 cc 48 67 df bc eb e7 68 9a eb ac da 34 5c cf f4 f5 3d 80 73 f6 bc 4c 61 71 a5 10 85 26 86 6f 98 6d d3 35 7c 07 33 55 33 d8 bd d1 b5 6d d3 b7 da 6c 29 bb 0a 2c de a0 d9 2e 8b be f1 c9 ef 98 fb 7b 8e 5b 8b 4e ff eb fe 69 ff f1 a3 de c9 e0 74 78 70 d4 5b 60 a7 fd e3 e1 c9 39 3b 3a e8 9d 9e 0f 4e 17 d8 e1 e0 61 ef db 13 36 38 39 ef 9f 3e eb a3 d1 02 1b 9e 1f f6 1f 51 db c7 c3 e3 fe 7f f5 4f 06 df 2e b0 5f f7 ef f7 1f 3d 5b 60 7f 3a ea fd e1 29 3b 7a f2 b8 8f ae 07 fd d3 01 9a 1f 9d a0 ed 61 ff fc ec 68 80 a7 47 4f be 3b c1 d3 a3 e1 c1 e9 53 fa 39 39 1c fc 71 30 3c e9 d3 dd d9 e3 de a3 67 f4 f6 4f e7 43 ba 7f 3c 7c c4 ff ff 7c f8 e8 08 4f cf 7a 98 05 7a d3 d8 7f 18 9e 3e 39 1e c7 4f cd f4 aa ae d5 21 16 8a 60 28 be 48 36 98 be 4a b4 91 cb 0c 57 99 fd df 5e 65 36 9b 8d ae f3 ca 65 50 f3 47 99 0c db bc 7d 9b dd f6 f7 6d d3 6b 9a a6 cf 32 19 62 39 8f 1e 30 1f fc a5 6b 9c ad aa 1e e8 6c d5 74 6d b7 22 f9 a3 4c 8f a8 2d 80 5c b9 9c 7b 9d 45 38 87 03 dd 76 5c 01 98 a5 6e 9a 75 a3 6b fb e2 36 c5 d2 1c bc 55 2b b2 c2 1c 7b 3d 77 e5 72 c5 a9 ed 5f b9 fc c9 95 cb 97 2a 46 75 a7 e1 3a dd 36 5e fe 78 ab 80 7f 8b eb 78 5c 75 6c c7 c5 93 3c ff a3 27 75 c8 00 fa e7 3b 3e db 35 dd 9a d1 36 16 18 f1 f3 2e 7e ed 6e d5 aa e1 37 25 2e 58 03 f2 5c 33 53 0b cc 70 2d c3 5e 60 4d d3 de 05 8b 57 d1 c4 83 8e c8 78 a6 6b d5 09 68 cb 70 1b 56 bb c8 56 3a 77 09 74 e4 ff e8 6d c7 a8 d5 ac 76 a3 c8 f0 06 f7 9f 5d b9 6c 14 6d ab bd b3 c0 68 fe 65 83 ae c5 2a 82 e9 2e e2 6f 6d 33 68 bb 6b 41 1d 99 b5 a0 b9 bc 9d d4 a3 e9 60 6d 98 76 d1 a8 fa d6 ae 19 f4 e4 8f e3 fd b6 b7 97 97 f3 79 31 52 b6 63 34 cc 04 74 6e f3 3f Data Ascii: \sy,\&ho\|EE2~%78gpeL:nb_:QDS$DRqgwo8bnybMewMer/mr7d7wzyv5[Ns55}S{KYmKY^fHli+7w[vDw,WlmvmLqi}Z5BmgOc91?Z)gwHgh4\=sLaq&om5\|3U3ml),.{[Nitxp[`9;:Na689>QO._=[`:);zahGO;S99q0<gOC<\|\|Ozz>9O!`(H6JW^e6ePG}mk2b90kltm"L-\{E8v\nuk6U+{=wr_Fu:6^xx\ul<'u;>56.~n7%.X\3Sp-^`MWxkhpVV:wtmv]lmhe*.om3hkA`mvy1Rc4tn?
Jan 7, 2021 07:32:20.896673918 CET	15	IN	Data Raw: 5a 49 30 3f 85 4e ac c5 c7 c4 fc e6 02 eb 00 7f 96 e8 fd 2a 70 8c 91 b2 7e 05 7a c3 74 13 a6 78 b3 70 13 34 4f 9c e2 25 d1 09 34 07 5d 3c c7 b6 6a 60 87 1b 85 b5 6b 12 bf 59 bf 6a f8 09 20 af 5d 5d bb 71 63 9b 75 5d 3b 6d b5 80 18 2f 07 76 a8 59 Data Ascii: ZI0?Np~ztxp4O%4]<j`kYj ]]qcu];m/vYPUfV}f4];fu?:5<hz$YuMR'%2AE8TOdWq7],WM2+i/ML.h:-(LpB"T$vOK_bWE'9
Jan 7, 2021 07:32:20.896713972 CET	16	IN	Data Raw: 24 52 fc 9a 6c 57 03 a4 77 8b 46 1d 7b 34 f9 f2 b6 53 dd 29 bb ce 9e 78 42 e0 d1 06 82 5f d4 b2 da 3a 12 6f 5e c7 36 f6 8b bc d9 3a c2 fc dc 3b ca af 33 3e 4c 11 44 6f ae 33 12 8e 0a ed 52 fb c5 26 50 61 b6 c5 cc e3 23 46 c7 c2 28 01 60 81 d7 8c Data Ascii: $RlWwF{4S)xB_:o^6:;3>LDo3R&Pa#F(`@*,#MuYS"XNDltxD',HLO.1C{>2vTc[#anka: }#,k3K/1Ft\xiYE%vdn&
Jan 7, 2021 07:32:20.896753073 CET	18	IN	Data Raw: e3 7d 01 a3 6e 91 1d 52 34 6c b8 ba 69 87 14 b5 bf af 2f c2 3e ca b4 9c 7b 19 f9 a0 98 cf 2e ae d3 06 80 89 8f ce 1e d5 6d 7f 55 b3 e7 6b 48 81 e4 70 55 4d 46 6c a0 68 0f 0f 06 8a 85 98 59 3d 0a d8 c1 e2 ef 88 68 70 e9 76 60 5a 21 21 86 4a bd d0 Data Ascii: }nR4li/>{.mUkHpUMFlhY=hpv`Z!!J"t1IUxhZV.QZS/S.<\|XlSEIZVK!K\uavx00P?zNc7D&7hA!fI)+D
Jan 7, 2021 07:32:20.896790981 CET	19	IN	Data Raw: 81 45 31 5c 84 66 97 22 ab ca 05 02 dd 20 55 e9 f2 f5 19 3a b2 d8 af 19 ad ce 7a 57 bf b6 8c d2 4d 7e 6d e9 8b 2b 2b cb 2b 6b d7 d6 24 91 24 a2 54 b2 54 ea 0b 1e 26 f2 72 94 c9 c9 05 64 43 06 1a 16 21 b2 26 65 9c eb 8b 90 8f ce 82 3d ec 3d 38 7d Data Ascii: E1\f" U:zWM~m+++k$$TT&rdC!&e==8}p#8'd8R:7}:z\!]'bO!01;B?`,(CTBIP r-PQC1q5G7q(x`GnYpo[-4L~Zj
Jan 7, 2021 07:32:20.896840096 CET	20	IN	Data Raw: 72 2f 92 2b 3b 46 81 f1 f8 b6 3c a5 26 2b b2 0d 4f 90 3c 91 f8 97 3e 51 68 89 05 bb 33 af 62 e6 dd 8b 24 21 eb 8c 57 98 c8 c3 64 d2 11 26 7b 25 ee d7 8e aa e7 d0 ab 45 d2 81 e3 7f 82 6d f5 c2 d6 dd 04 58 28 e9 f1 3a 6e b7 8d d8 9f b4 18 03 6a c8 Data Ascii: r/+;F<&+O<>Qh3b$!Wd&{%EmX(:nj/}na/mt\|32P(yh\|.w0x@5"8<A$gWEXkQI8B\|<b?\|<&1J_!b=dM
Jan 7, 2021 07:32:20.897291899 CET	21	IN	Data Raw: 1e 87 e7 f1 70 fa 90 ab be 76 b5 90 5f 83 62 e6 05 34 61 41 10 0e 9d f2 03 df 54 b0 12 55 da 39 18 49 2e db 77 ba a8 e1 47 b6 b8 d6 b5 e9 4b 0a 86 b7 e3 21 dd 83 cf 49 54 4d 03 47 30 7c 87 a9 0a 47 19 f1 52 85 3c ff 77 33 4f 66 c8 bf 5e 9c 62 3d Data Ascii: pv_b4aATU9I.wGK!ITMG0\|GR<w3Of^b=rB~=b`[5U6UabJ^\p^2Y92s\Vn7ScnReQ>2,_]).eHsWwE`FD)3So
Jan 7, 2021 07:32:20.971972942 CET	21	OUT	GET /forum/clientscript/yui/yahoo-dom-event/yahoo-dom-event.js?v=370b4 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Jan 7, 2021 07:32:21.050950050 CET	24	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: W/"77fd-558f3247ca900" Cache-Control: max-age=315360000 Expires: Sun, 05 Jan 2031 06:32:21 GMT Content-Encoding: gzip Data Raw: 39 64 34 0d 0a 1f 8b 08 00 00 00 00 00 00 03 bd 7d f9 73 db b8 92 f0 ef f3 57 c8 ac 29 2d 39 82 65 2b c9 1c 4f 0c 92 a2 4e cb a2 6e d9 8e 57 a3 71 c9 12 ed f0 45 16 5d 12 9d c4 2b 69 ff f6 ed c6 45 f0 90 e3 d4 ee f7 bd 9a 17 93 20 d0 68 74 37 fa c2 a1 93 df 7e a9 06 8f cf 6b ff fe 73 98 33 e7 56 ee cd e9 e9 9f 24 77 3d fb 1c 04 47 b9 d6 6a 5e cc 39 cb 65 8e 7d df e4 d6 de c6 5b 7f f5 16 45 68 b4 f0 72 4b 7f ee ad 36 de 22 f7 b4 5a 78 eb 5c f8 d9 cb 55 46 b5 9c cb 8b cb bf 7c 0e c3 c7 f2 c9 c9 c2 fb ea 2d 83 47 6f 5d 7c 46 b0 c5 95 17 9e 3c 3f f9 27 a2 79 31 fc 1e fe f2 d5 5b 6f fc 60 55 ce bd 29 be 2b 96 7e f9 ed e4 17 ff ce 0c 9f 1f bd e0 2e 77 ed 9c f5 7a 94 1a d8 cb 9d bf f2 16 c6 6e 77 c4 0a ad ed d7 d9 5a 7c df ee ed 3d 7b 2a ae 66 0f de e6 71 36 f7 e8 dd d3 6a 1e 02 58 93 57 74 e8 6c 7d ff f4 e0 ad c2 0d a9 d3 d5 d3 72 49 aa a4 42 6a f6 5d b0 36 ab f4 d4 ae be 77 8a 4b 6f 75 1f 7e b6 ab b4 5a 28 59 db 1a 75 26 d5 69 71 f3 b8 f4 43 d3 28 1a 96 5d a7 ac 17 d6 a6 42 cd da e4 74 0a b8 b1 32 c3 fa 58 2a 9f da 95 f7 35 09 a5 42 2b 08 a5 3e a9 4d 2a d3 29 15 7f 77 3b 40 b6 2e df ec fd 7e ed 85 4f eb 55 ae 6e ef 6d 3e 84 65 70 1f 21 5f 23 0e a9 f2 11 54 78 e7 c5 6f fe e2 de 0b 8b 6e 70 7f ef ad 6d 20 55 25 9f af 60 2b 6b 2b 60 b1 37 d1 d4 de 7b cb 8d 27 bf dc cd e0 05 3a 15 5d ad bd 7b 7f 13 7a eb a8 3f 87 d4 49 8d f7 d7 12 fd 79 ab af c5 87 60 f1 b4 f4 36 d8 db 51 6b e2 4c ad 2d fe 4b b7 82 75 9b f2 64 4a 6e 9f fc e5 02 9f 80 19 1c 5f ac 43 ce 68 ad 28 aa 91 26 3c b3 6a a4 a1 01 5f 22 0e 2b a8 62 57 18 ff a8 03 0f a2 09 3d 83 67 d6 84 36 a3 d2 4d f1 f1 69 f3 d9 3c b3 e4 47 51 d0 c4 82 87 99 bf aa 2e 67 9b 0d ad 33 46 21 2e 9c c1 8d 04 83 1b c0 5e b3 02 24 82 61 d5 81 53 c5 cb fa 70 d4 ea 75 a1 d3 7a b1 72 d1 72 6b d0 29 a7 9f 62 8d 69 28 f8 39 7f 93 53 72 99 83 ae 72 9c 4c 39 a3 e0 10 e3 db 6c bd 02 91 51 b4 86 91 46 63 06 29 10 24 45 ca 29 02 30 e2 45 84 01 36 5f 0a 32 44 0c 52 5c 4e 71 07 a8 bd db a1 64 db 3a 90 a7 59 72 2a 54 e9 d6 f7 ca a7 04 a7 e5 0c fe de 7b f3 2f 01 fc fd e6 dd 7e f1 43 78 78 08 6e fd a5 57 46 50 7b 9b b3 72 35 fb ea df cf c2 60 5d 7c 02 35 e0 dc c3 3c 22 0e 8a 83 79 d2 3e 1b 77 dc 13 ab 18 7a 9b 10 a8 69 6d ab 45 0e 89 96 ec bd 43 91 21 e1 fc b3 79 e2 3c 3e 2e bd 2b ef b6 ed 87 7f 9f 98 93 7f fe de 4c 7f b3 4e 2c 04 e2 e4 f3 ce a4 34 d5 9a 3e ce d6 1b af b1 0c 66 a1 c9 be 60 ad 93 5c 87 21 f6 f7 c9 89 de 19 c7 96 1a 0c be 21 f8 a5 f5 db 0d be f8 b3 2e f4 77 32 fd 4d 74 a7 35 73 60 0e 03 93 50 04 8e 64 ef 96 de bc 87 54 9a fc bd 81 e6 07 91 66 94 4c e3 9c 84 92 eb f8 2b 7f f2 8f fd 02 1e 49 e4 3b a3 56 fd ef 8d c9 1a a5 fb f5 bd 74 a7 29 10 4d 64 6f 8a e2 d8 9c 31 1e b8 a4 55 5e 7f 2d b3 8a 7f 5b 59 fd f1 06 e9 2e f1 7f 42 2a ab f6 de b4 6c 53 13 b9 84 62 36 8d a7 d0 5f 1a 30 41 98 1e 83 07 ef fb ec 01 59 c7 7a d3 34 fd 11 a5 ba 15 b8 99 07 ab 3b ff 3e a6 0c 45 99 52 21 c4 c9 d2 2b a4 46 c3 f5 93 47 aa 4c 5b 5a db c3 2a 1f 87 Data Ascii: 9d4}sW)-9e+ONnWqE]+iE ht7~ks3V$w=Gj^9e}[EhrK6"Zx\UF\|-Go]\|F<?'y1[o`U)+~.wznwZ\|={fq6jXWtl}rIBj]6wKou~Z(Yu&iqC(]Bt2X5B+>M)w;@.~OUnm>ep!_#Txonpm U%`+k+`7{':]{z?Iy`6QkL-KudJn_Ch(&<j_"+bW=g6Mi<GQ.g3F!.^$aSpuzrrk)bi(9SrrL9lQFc)$E)0E6_2DR\Nqd:YrT{/~CxxnWFP{r5`]\|5<"y>wzimEC!y<>.+LN,4>f`\!!.w2Mt5s`PdTfL+I;Vt)Mdo1U^-[Y.BlSb6_0AYz4;>ER!+FGL[Z
Jan 7, 2021 07:32:21.051024914 CET	25	IN	Data Raw: 0b 4a 81 d2 0a aa 7f ae 2d 6f d7 de ec 8b cd 24 04 34 a3 c3 35 4d 85 8f da 82 b1 0a d5 30 5b dd d3 e8 11 26 b8 bf 71 d6 eb d9 73 59 91 a2 c2 e0 57 a4 3d 8a 2a db 82 76 4e d1 df 74 9f 1e 6e 3d b0 2e 02 31 0b 88 0f a5 0d 05 83 99 a3 b9 07 dd c7 55 Data Ascii: J-o$45M0[&qsYW=*vNtn=.1U:7 XzU9CW::-f6U4CV#ezy<hi V:vLp"FBMFjb.\|uo5v2eF4
Jan 7, 2021 07:32:21.051945925 CET	26	IN	Data Raw: 8c ef 41 c8 5b 53 9b c7 e7 ba d5 44 65 2f 2c e7 83 17 7e 0e 16 51 2e c6 e0 92 18 77 8e b9 ec 83 22 87 b9 0d aa 08 27 b0 46 a3 aa b0 70 15 9c c9 7b f0 5a cd ba f5 71 e3 c1 fc 87 21 81 8b 6b 36 c8 99 55 86 82 b1 ff e0 05 4f 21 7b 17 71 db d6 17 95 Data Ascii: A[SDe/,~Q.w"'Fp{Zq!k6UO!{qu2GL0EY\+tV,;LYqv,<?N4+8%.1%0</pNM1GT}]-_Ov,,clccO>Sq9SP0
Jan 7, 2021 07:32:21.051989079 CET	27	IN	Data Raw: 31 64 38 38 0d 0a 21 1a f8 4f 97 7e 03 e5 16 7c 2b 2e 82 39 9b 1c b6 ee c9 88 e0 87 65 78 48 27 5e c8 b3 45 b1 9c 03 94 b2 24 09 88 76 22 78 b2 79 ec b4 3d bb ee 9f d5 bb e5 13 f3 78 32 3b fe af a9 75 e2 93 61 af 37 be 19 3b cd f2 c9 3f b7 c1 e2 Data Ascii: 1d88!O~\|+.9exH'^E$v"xy=x2;ua7;?y9\|Xzyt "`q0oOSU/e3j}Piz,Y/ULO219!6&Cf1u=i~,e\|clkf6fi^\|>Yj
Jan 7, 2021 07:32:21.052025080 CET	29	IN	Data Raw: 99 d0 9c 61 29 01 45 9c b2 f1 06 6f 2f 81 f7 da 7b 08 be 7a 3f 4d 30 94 89 f8 30 2e c8 30 35 0c 6e 7b 34 72 da da 33 c8 8e 8c 32 21 6a ca 71 43 94 05 93 95 69 78 b2 62 7b 7f f1 02 8d 62 1c fc 21 55 d2 dc 14 88 25 c8 32 26 8c a7 cc 7d 07 af 16 34 Data Ascii: a)Eo/{z?M00.05n{4r32!jqCixb{b!U%2&}4 kh.vP8_FHMK{AO8&),Z;C#FB_8/pV(xr(xz$+TPYA5h^?n-[0)a_m
Jan 7, 2021 07:32:21.071326017 CET	41	OUT	GET /forum/images/misc/vbulletin3_logo_white.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Jan 7, 2021 07:32:21.148878098 CET	43	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: image/gif Content-Length: 3472 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: "d90-558f3247ca900" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 f7 00 40 00 d5 00 00 ff ff ff ff ff 00 ff 00 ff ff 00 00 00 ff ff 00 ff 00 00 00 ff 00 00 00 e1 e1 e2 d3 d8 de 5a 6e 84 90 9d ab bd c5 ce cd d3 da 42 5a 72 4f 65 7b 5b 70 85 68 7b 8e 6e 80 93 74 86 98 80 90 a1 7f 8f 9f 81 91 a1 8e 9c aa 93 a1 af 9a a7 b4 a3 af bb a9 b4 bf a7 b2 bd b0 ba c4 b3 bd c7 b9 c2 cb c1 c9 d1 c0 c8 d0 c7 ce d5 c6 cd d4 ce d4 da cd d3 d9 d9 de e3 e0 e4 e8 df e3 e7 e9 ec ef e6 e9 ec f2 f4 f6 64 78 8b 9d aa b6 b3 bd c6 d6 dc e1 e9 ec ee f3 f5 f6 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 32 00 2c 00 00 00 00 f7 00 40 00 00 06 ff 40 04 60 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a 9f c2 ab 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df f0 f8 38 e4 a8 9b 00 91 bc 45 ce ef fb dd 21 2d 00 14 13 1c 0e 28 24 7b 7f 8b 8c 8d 5d 21 0a 00 2f 0a 0e 2e 00 2e 8a 8e 9a 9b 9c 4a 2b 0e 0c 45 30 0a 1c 9d a6 a7 9c 19 95 43 2f 14 10 2b a8 9d 2a 1c 0f 75 b6 16 1e 46 17 b6 bc bd 75 74 bc a5 44 86 bc b0 00 26 c4 bc 19 25 44 be ce 75 25 cf b7 cc 46 1e 16 bd 0f 1c 2a ba bc 13 dd bd 46 1c de bc 11 c2 00 d2 be d1 e8 e5 48 b3 b5 bc b8 8d 86 12 2e 31 44 24 1b 0e 11 db 43 17 23 4d 0e 02 11 71 01 a1 c8 04 4b 43 14 c0 32 44 01 e1 10 06 0b 1c 28 72 e0 64 41 89 05 4a 48 44 cc 35 44 45 04 07 1b 48 10 89 e1 42 82 03 73 00 fc b1 9a 40 c4 84 83 17 cd 88 78 ac 04 73 08 0a 17 0e 1e 30 a3 d8 c4 22 c6 ff 24 37 f5 85 73 40 cf de 10 7c fa f8 f5 31 e4 d0 08 0a 09 0f f8 a9 64 12 d0 01 8c 21 30 1c 50 fb 54 f3 85 83 15 4c 93 90 90 78 ae e2 45 26 f9 b6 a9 80 20 01 45 12 9c 19 88 4c 7d c1 b2 1f 85 22 3c d7 b6 45 12 23 a2 4b b3 3f 95 a0 38 39 6c 15 92 a7 51 fb b8 6c 7a 24 86 84 08 fd fe 51 05 00 c1 e1 82 0b 43 3c 44 1a b2 61 42 34 c6 46 c6 46 03 dc 44 02 66 0b 12 ae 2a 61 10 30 f2 ca 8e 0e 24 0f e1 39 21 f5 12 42 3c 99 f8 6c e2 e2 c1 90 c5 4b 1c 43 e6 33 e1 ee c0 3a 12 64 0f ce 35 75 04 3a 00 1c 36 03 18 e1 1b 80 85 0d 43 62 28 f0 30 21 70 ab 3a 1b 8c 02 58 70 8d 97 04 22 11 79 9d 1d 62 12 79 cd e9 10 a2 89 64 45 01 bc 6a 00 2d 0a a6 94 4c b7 df 79 bc 00 44 f3 1e 4e 44 cd 27 89 2f ff 8d d7 cb 7a 00 b4 87 9c 6a 31 38 70 47 71 45 10 98 1c 11 cb c9 e1 d2 7b f5 69 b3 ff 4b 28 9c 41 d6 1c 66 9e c4 96 5d 40 2b 3c 30 1f 09 0f 6c 68 93 03 13 98 e0 c1 03 c6 01 90 48 11 2a 24 68 51 11 0c 4a a0 d6 04 0a a8 96 95 05 81 8d 15 a3 07 6c 19 95 55 08 fb bd a6 82 89 00 12 49 44 0b 27 a9 70 8d 81 14 dc d1 91 8e d4 0c d1 23 3f 6b 09 32 04 05 25 b8 38 66 95 1f 12 b1 c1 70 70 70 50 23 4e 5a 02 a0 8a 6a 83 ad 30 22 13 17 04 d6 82 05 90 18 b5 a7 9b 44 3c d6 92 03 24 90 80 53 26 00 e4 88 5e 97 01 06 e6 e3 10 2b 40 00 e2 39 2a 66 a7 40 26 2a 3c 80 dd 10 2d c4 35 17 4b 17 24 18 53 a5 d3 b5 36 84 05 14 90 e4 97 4c 5c f2 e8 a8 52 21 70 09 e8 10 70 12 31 e7 8b c6 bc 61 81 43 12 a0 44 99 43 0a 84 70 e7 12 d1 b8 65 a3 03 17 88 19 61 08 bb be a8 94 75 16 44 eb ab a2 43 ec 48 c4 97 b6 3a 54 87 51 d4 e5 0a 80 66 46 31 20 22 7f 13 3c 29 5b 33 2e f9 49 ff e2 6f 0f b4 cb 01 a3 d4 8e c7 28 b6 43 c4 4a 04 99 cd b2 e7 6b 65 44 04 1b 47 04 f3 65 f5 2c 74 7a 72 d0 9c 33 16 30 1a 01 b0 0f 48 46 1d 1e f3 89 0b 45 bc d6 7a f9 2a a4 0f 4c ea 40 8d 1b ac 8b 71 4d 28 f8 f6 69 a8 44 dc 17 50 8d fe 3a 41 f1 bc 17 07 08 81 b2 12 02 8c 95 03 03 73 50 Data Ascii: GIF89a@ZnBZrOe{[ph{ntdx!2,@@`H,rl:tJZvzxL.zn8E!-(${]!/..J+E0C/+uFutD&%Du%FFH.1D$C#MqKC2D(rdAJHD5DEHBs@xs0"$7s@\|1d!0PTLxE& EL}"<E#K?89lQlz$QC<DaB4FFDfa0$9!B<lKC3:d5u:6Cb(0!p:Xp"ybydEj-LyDND'/zj18pGqE{iK(Af]@+<0lhH$hQJlUID'p#?k2%8fpppP#NZj0"D<$S&^+@9f@&<-5K$S6L\R!pp1aCDCpeauDCH:TQfF1 "<)[3.Io(CJkeDGe,tzr30HFEz*L@qM(iDP:AsP
Jan 7, 2021 07:32:21.160500050 CET	67	OUT	GET /forum/images/misc/navbits_finallink_ltr.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Jan 7, 2021 07:32:21.240720034 CET	72	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: image/gif Content-Length: 1035 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: "40b-558f3247ca900" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 1e 00 0f 00 f7 98 00 00 00 00 ff ff ff 8c a0 f2 8f a3 f7 89 9d f0 f2 f3 fe 94 a8 ff 92 a6 fb 86 84 83 8e a3 f7 87 9a ea 8d a0 f1 8d 96 ba b2 b8 d3 8f 97 bb 8b 9f f1 8a a1 f7 9b b0 ff 5f 65 99 b3 bc cf 5b 66 95 e1 ff ff 81 99 e6 8b a0 f4 87 9c f0 85 78 aa 87 9b ec 90 a5 fa f4 ff ff 4b 58 86 ee ee fb 6a 7d d3 ed ee fb 92 a7 fe c0 c3 d4 90 a7 fe f1 f1 fc 7c 90 e1 9b 9a a2 8d 97 aa 9e b2 ff 85 9a ee 8d a2 f5 e4 e4 ee 8f a4 f8 8f 98 bc 90 aa ff 7b 93 ed da db e5 77 8e e5 ba b4 b2 89 92 b8 89 92 b7 ba c4 d8 90 8f 8e 23 23 23 a9 a9 b1 87 9c ee b5 b4 ab 83 98 ec c9 cf e1 83 7b 98 84 7b a6 ef ef f9 94 a7 fb b0 af ab 70 75 98 46 53 81 93 9e b0 9e ae ec 47 54 95 93 8a bc ef ff ff d2 d2 da ae c5 ff 8d a3 fe 82 85 95 b9 b9 c1 bf bd b1 a0 b8 ff 88 9b ee f2 ff ff 92 9f b0 54 5f 9d 76 6c a0 85 9b f4 c5 c9 d5 ca cd db 82 97 ed ad c4 ff 85 99 ea 91 a4 fc 7e 93 e4 6a 7b bf a7 bf ff 72 8a df 88 9c ec b5 c3 c0 be cb fb 88 82 96 b7 ac d3 be c0 d1 c7 c5 c1 d5 d6 e0 37 4d b9 90 a4 f6 74 8f ff 64 7c cc bb c4 eb 83 97 e9 7f 95 f0 67 64 93 ba d1 d3 b5 cc e0 bd c3 d3 a9 b2 c4 c9 c8 c4 b1 b6 c4 88 9b ef 81 86 9b c9 cb da 9b b3 ff f1 ff ff c8 d5 ec 93 a7 fb 7b 92 e3 a8 ad bf 98 ab ff 8e a2 fa ad b2 c4 90 99 bd 70 7d c2 6c 69 8f dd dd de 89 9e f1 8c 8c 90 86 9a ec 95 aa fd da de f4 8f 98 c0 a7 a2 9e c0 c6 d8 88 9f be 8c a2 f6 8a 9e f0 a1 b8 ff c4 c8 c8 8a 94 b9 a0 b6 ff a8 b1 c4 8a 9f f1 c3 c9 db f5 f5 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 98 00 2c 00 00 00 00 1e 00 0f 00 40 08 e8 00 31 09 1c 08 60 a0 c1 83 08 13 1a 2c c8 10 53 c1 1b 98 8a 54 79 c4 62 c3 01 3e 40 22 0c ea 71 e4 cd 19 84 05 15 0e 2c 10 25 8c 0c 46 01 0a 39 99 92 a5 8e 48 85 1e be 60 49 81 81 80 1d 28 0f 20 19 19 92 30 e4 4b 4c 7b 38 04 70 64 22 c0 a1 32 56 60 80 54 28 c6 45 9e 27 94 50 44 f2 a2 a4 84 8d 20 3a d6 88 f8 89 90 cb 8e 1c 04 2c 09 10 b0 60 84 84 0c 1d 7e 70 5d cb f6 27 89 4a 73 f0 60 c2 91 a4 6d c2 02 15 f4 c0 91 14 20 00 1d 34 48 88 b4 e5 d1 e8 92 9c 1a 71 26 9c 90 e2 07 81 19 26 6a 02 b5 05 e1 06 02 a0 2d 21 0c 18 f8 b3 44 c8 18 32 14 ae d8 55 f4 c2 d0 05 15 09 06 a4 49 d4 87 90 0f 2a 2b ec 62 62 13 a3 8d 16 44 1a c0 28 18 d0 e5 83 05 d9 02 1b cc 70 30 89 86 a0 16 0c 16 dd 69 82 29 20 00 3b Data Ascii: GIF89a_e[fxKXj}\|{w###{{puFSGTT_vl~j{r7Mtd\|gd{p}li!,@1`,STyb>@"q,%F9H`I( 0KL{8pd"2V`T(E'PD :,`~p]'Js`m 4Hq&&j-!D2UI*+bbD(p0i) ;
Jan 7, 2021 07:32:21.255145073 CET	73	OUT	GET /images/banners/garderobnye_uno.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Jan 7, 2021 07:32:21.336237907 CET	87	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: image/gif Content-Length: 44956 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:57 GMT ETag: "af9c-558f3248beb40" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 f6 01 50 00 f7 ff 00 18 15 13 d6 d5 d4 aa a6 a6 f9 fb fb c9 c3 bc 37 28 21 28 25 26 65 48 37 34 23 1a 9a 96 96 76 49 6f c4 bc ba 4c 34 48 d4 ce cb e6 d8 06 47 32 29 23 1b 16 78 90 0c d4 d3 ce 77 63 54 59 43 37 47 39 33 ca b4 c5 b3 90 ab e4 de db 93 85 79 de dd db 7a 76 77 98 8e 06 dc d6 d4 a9 a3 9d 87 68 56 69 69 69 56 49 45 b2 ac aa 8a 84 86 4a 4b 0a 67 53 47 ce cd cc 92 71 8c 36 4a 0c 90 a9 0a 62 61 62 a3 9c 9b 74 57 43 2a 1f 18 a5 88 73 85 7a 78 dd db d6 e4 e3 de 15 10 0c b9 b3 ac 93 8b 88 75 6a 64 03 02 02 af 6a ad 68 5a 55 8e 4a 8d 53 3b 32 e5 e4 e4 b0 a8 09 2a 14 25 4a 49 4c c5 c4 c2 63 4b 41 52 51 53 6f 6a 0b 52 37 29 80 50 78 be bd bb bc b5 b4 5b 5a 5b 42 40 44 73 6f 31 cd c5 c4 38 30 27 83 5b 51 b4 ad 22 39 38 3a 88 74 67 a8 7b 87 4d 4c 51 f6 f4 ef 32 2b 2f 98 77 75 75 2f 6b 32 30 32 cb bd 09 97 92 8e cd cb c6 50 66 0c 52 4c 52 4b 41 39 41 2c 1a 4a 44 4b bb ba b5 96 79 65 a3 98 0e b9 ab b3 b4 b3 b1 60 2d 56 79 58 54 9a 32 90 ea e6 e4 3f 2c 24 10 0b 09 a7 98 88 ab 84 88 a3 77 7b 75 69 70 eb ec f5 7b 71 6b 81 7a 0e e6 df e4 d7 ce d2 98 8b 92 f0 f4 f7 45 44 48 c0 a9 c2 14 0b 11 89 62 63 5a 50 4a a8 5a a9 39 33 3a c0 c3 97 8c 8a 2c 83 37 79 b3 87 8b de d6 dc ec ec ed 33 33 37 f4 ec e9 94 67 69 de e3 dd b9 95 98 3d 3b 3f dc dd e4 5b 54 52 81 74 7f 5e 5d 5f 4b 43 43 59 41 2d ed eb e7 6b 63 62 53 1c 48 55 54 57 59 65 4d 3b 33 30 2b 2a 2d 64 46 5b 71 47 48 98 a9 2c 62 3e 2d 1a 22 0a cf d4 d6 d6 db d5 44 25 3d 65 65 66 f4 f0 f5 ce c5 cc 6a 64 6a dd e4 e4 26 38 03 d7 dd dd bf 98 b7 9b a4 8d 5d 61 62 ec e6 ed ad 9c 20 cd ce d7 3b 41 40 5a 55 5b 98 6d 71 89 64 81 cd d3 cb 40 15 36 77 49 53 62 18 54 a8 86 9f b8 8e 91 e7 e7 ea bc b5 bc 49 44 27 35 31 16 27 23 07 4c 52 53 3c 37 06 59 51 34 e7 ec ee 1d 1a 1b a9 b7 4d ec f4 ef 75 1e 65 62 5b 11 b9 bf 7c 5d 65 2e d7 d6 dc 63 6b 63 3a 38 2f e6 eb e5 a1 4c a0 ad ac ae 6b 69 65 5d 59 53 c5 9b 9e c3 82 c5 9f 9c 9f c7 cc c4 8d 99 87 c7 c5 c8 2c 30 33 6d 6d 6d b0 b4 a8 6c 75 63 8f 8d 8f 59 54 21 ae b2 b4 54 5a 5d 4b 49 42 45 4a 4b 4a 58 34 0c 0a 0d 7f 7f 7f 67 75 70 9a 59 9b 30 2a 0c 9b a3 66 34 39 3a 27 35 0f b3 91 86 b4 ba b4 91 95 99 b6 ba bd 10 10 11 0b 0f 08 a9 a6 80 ba 79 bd b5 b6 b7 be cf c7 64 6a 6d a8 83 60 a1 a2 a0 9f ad 3f 32 3a 32 50 2e 26 c9 ce cf d1 d8 8e 43 52 22 42 49 46 20 20 21 4e 59 57 2e 2e 29 9f 7d 62 57 2c 40 ff f0 00 ff ff ff 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 05 2c 01 ff 00 2c 00 00 00 00 f6 01 50 00 00 08 ff 00 d1 2c 79 30 e9 c1 03 1d 8d 28 20 68 b1 b0 85 c3 85 10 11 48 2c 40 b1 62 01 89 8d 4a 90 23 87 62 98 a4 2d 5e 0c b4 c0 85 0b 0d c5 16 27 25 a2 79 a0 10 02 04 87 30 1f 9a 2c d0 e5 e2 01 1d 69 d2 c9 90 91 26 0d 4f 9f 3e 77 0a 0d 2a 54 06 80 a3 bd 92 42 e8 b5 b4 29 d3 a7 4e a3 26 4d 0a a0 d7 d1 ab 47 d3 01 d0 99 4e a7 8e 32 0f ba a5 eb 06 40 6c d9 ad 00 ee 74 15 ab b6 6b db 3b dd c4 8a b5 51 81 0a 8b b1 71 c5 6a 45 5a 15 2b 56 a3 46 fd 5e b5 4a 95 b0 0c ab 7d 07 57 25 0c 95 f0 51 2e 19 4a a4 e9 95 4e 5d 57 ad 97 8f 1e 46 dc 97 f3 54 c7 58 31 23 0d 6c 94 71 e7 5e 93 b3 02 30 9a 2e 4d 08 30 21 6c a4 d1 db d3 ed 65 db b7 6f 67 55 97 86 02 0b 0a 5d 77 a2 15 cc 37 b1 e9 c2 9f 93 3b f5 5b 74 27 d1 a1 3f a3 cf 1e 82 09 81 45 8a 0d 1d be 74 d9 a2 d1 90 02 53 2e 4a ff b4 7e b1 40 8b 97 31 1d 1e 2d Data Ascii: GIF89aP7(!(%&eH74#vIoL4HG2)#xwcTYC7G93yzvwhViiiVIEJKgSGq6JbabtWCszxujdjhZUJS;2%JILcKARQSojR7)Px[Z[B@Dso180'[Q"98:tg{MLQ2+/wuu/k202PfRLRKA9A,JDKye`-VyXT2?,$w{uip{qkzEDHbcZPJZ93:,7y337gi=;?[TRt^]_KCCYA-kcbSHUTWYeM;30+-dF[qGH,b>-"D%=eefjdj&8]ab ;A@ZU[mqd@6wISbTID'51'#LRS<7YQ4Mueb[\|]e.ckc:8/Lkie]YS,03mmmlucYT!TZ]KIBEJKJX4gupY0f49:'5ydjm`?2:2P.&CR"BIF !NYW..)}bW,@!NETSCAPE2.0!,,P,y0( hH,@bJ#b-^'%y0,i&O>w*TB)N&MGN2@ltk;QqjEZ+VF^J}W%Q.JN]WFTX1#lq^0.M0!leogU]w7;[t'?EtS.J~@1-
Jan 7, 2021 07:32:21.524153948 CET	208	OUT	GET /1x1.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Jan 7, 2021 07:32:21.602231026 CET	236	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: image/gif Content-Length: 807 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:27:41 GMT ETag: "327-558f31c70b940" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 f7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 ff 05 04 00 3b Data Ascii: GIF89a!,;
Jan 7, 2021 07:32:21.628462076 CET	247	OUT	GET /social.png HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Jan 7, 2021 07:32:21.706146955 CET	257	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: image/png Content-Length: 8406 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:27:41 GMT ETag: "20d6-558f31c70b940" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 d0 08 06 00 00 00 0e 1b e1 d5 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b 08 80 14 00 40 7a 8e 42 a6 00 40 46 01 80 9d 98 26 53 00 a0 04 00 60 cb 63 62 e3 00 50 2d 00 60 27 7f e6 d3 00 80 9d f8 99 7b 01 00 5b 94 21 15 01 a0 91 00 20 13 65 88 44 00 68 3b 00 ac cf 56 8a 45 00 58 30 00 14 66 4b c4 39 00 d8 2d 00 30 49 57 66 48 00 b0 b7 00 c0 ce 10 0b b2 00 08 0c 00 30 51 88 85 29 00 04 7b 00 60 c8 23 23 78 00 84 99 00 14 46 f2 57 3c f1 2b ae 10 e7 2a 00 00 78 99 b2 3c b9 24 39 45 81 5b 08 2d 71 07 57 57 2e 1e 28 ce 49 17 2b 14 36 61 02 61 9a 40 2e c2 79 99 19 32 81 34 0f e0 f3 cc 00 00 a0 91 15 11 e0 83 f3 fd 78 ce 0e ae ce ce 36 8e b6 0e 5f 2d ea bf 06 ff 22 62 62 e3 fe e5 cf ab 70 40 00 00 e1 74 7e d1 fe 2c 2f b3 1a 80 3b 06 80 6d fe a2 25 ee 04 68 5e 0b a0 75 f7 8b 66 b2 0f 40 b5 00 a0 e9 da 57 f3 70 f8 7e 3c 3c 45 a1 90 b9 d9 d9 e5 e4 e4 d8 4a c4 42 5b 61 ca 57 7d fe 67 c2 5f c0 57 fd 6c f9 7e 3c fc f7 f5 e0 be e2 24 81 32 5d 81 47 04 f8 e0 c2 cc f4 4c a5 1c cf 92 09 84 62 dc e6 8f 47 fc b7 0b ff fc 1d d3 22 c4 49 62 b9 58 2a 14 e3 51 12 71 8e 44 9a 8c f3 32 a5 22 89 42 92 29 c5 25 d2 ff 64 e2 df 2c fb 03 3e df 35 00 b0 6a 3e 01 7b 91 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c 30 2e c6 c3 42 b1 38 2c 09 93 63 cb b1 22 ac 0c ab c6 1a b0 56 ac 03 bb 89 f5 63 cf b1 77 04 12 81 45 c0 09 36 04 77 42 20 61 1e 41 48 58 4c 58 4e d8 48 a8 20 1c 24 34 11 da 09 37 09 03 84 51 c2 27 22 93 a8 4b b4 26 ba 11 f9 c4 18 62 32 31 87 58 48 2c 23 d6 12 8f 13 2f 10 7b 88 43 c4 37 24 12 89 43 32 27 b9 90 02 49 b1 a4 54 d2 12 d2 46 d2 6e 52 23 e9 2c a9 9b 34 48 1a 23 93 c9 da 64 6b b2 07 39 94 2c 20 2b c8 85 e4 9d e4 c3 e4 33 e4 1b e4 21 f2 5b 0a 9d 62 40 71 a4 f8 53 e2 28 52 ca 6a 4a 19 e5 10 e5 34 e5 06 65 98 32 41 55 a3 9a 52 dd a8 a1 54 11 35 8f 5a 42 ad a1 b6 52 af 51 87 a8 13 34 75 9a 39 cd 83 16 49 4b a5 ad a2 95 d3 1a 68 17 68 f7 69 af e8 74 ba Data Ascii: PNGIHDRpHYsodOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K@zB@F&S`cbP-`'{[! eDh;VEX0fK9-0IWfH0Q){`##xFW<+x<$9E[-qWW.(I+6aa@.y24x6_-"bbp@t~,/;m%h^uf@Wp~<<EJB[aW}g_Wl~<$2]GLbG"IbXQqD2"B)%d,>5j>{-]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(*`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0.B8,c"VcwE6wB aAHXLXNH $47Q'"K&b21XH,#/{C7$C2'ITFnR#,4H#dk9, +3![b@qS(RjJ4e2AURT5ZBRQ4u9IKhhit
Jan 7, 2021 07:32:41.121783972 CET	472	OUT	GET /templates/biz_blue_ii/css/template.css HTTP/1.1 Accept: text/css, / Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Jan 7, 2021 07:32:41.199805021 CET	478	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Tue, 12 Sep 2017 00:30:04 GMT ETag: W/"369d-558f324f6bb00" Cache-Control: max-age=315360000 Expires: Sun, 05 Jan 2031 06:32:41 GMT Content-Encoding: gzip Data Raw: 61 36 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 1a 59 6f e3 b8 f9 d9 01 f2 1f 58 04 0b ec 2e 62 c5 47 1c 67 ec a7 c9 61 f4 65 df 8a be 1a b4 c4 d8 6a 64 51 a0 64 67 52 63 fe fb f2 16 29 91 94 9c a4 68 8b 56 9e 4c 62 f1 f8 ee 93 bc f9 9d 3e 97 17 f0 50 ed 30 01 43 40 b6 9b 5f 09 4c 0e 5b f8 1b d8 55 55 b1 b8 b9 d9 c3 fd 06 96 30 87 11 39 5c 5e d0 e9 37 97 17 ec b3 c1 c9 fb f5 ae da 67 e0 74 79 01 40 01 93 24 cd b7 40 3f 0b 30 5a b2 81 3d 24 db 34 07 be 81 e1 06 57 15 de 8b 81 f1 a8 f8 c1 c7 18 00 f6 ea e7 e5 c5 15 03 b4 de 6c 29 94 0d 8c 5f b7 04 1f f2 44 6e 74 20 d9 af 51 74 93 ee e1 16 95 37 9b ed ba c2 45 b4 4d 5f 7e 03 57 2f fc 01 04 15 08 56 c3 1f 80 8e 80 0c bd 54 74 fb 9f 6c f7 68 0f 29 56 27 c0 e0 54 e8 47 35 84 59 ba cd 35 8a 7c 2a 1f 7c 4b 93 6a 07 2c fc c7 a3 d1 2f 7e da 40 80 1d 3f 05 ef a2 3d 4e 04 db 1a 24 b1 79 57 2b fe 48 3e f0 15 55 72 0d 2a 72 0d 8a 6b 90 a4 47 b1 f2 05 e7 d5 f0 05 ee d3 ec 5d ad fc 4e 52 98 5d 83 bf 23 92 50 79 5d 83 bf c1 1d de d3 df 7f 45 d9 11 55 69 4c ff a4 82 2c 87 25 22 e9 cb 52 6f 52 a6 ff 44 06 71 13 2d 03 0a 7b 47 04 b4 18 67 54 41 2c 4a af be f1 87 cf dd a1 74 bb ab 6c 26 c9 6d fc fc e3 a4 bd 60 b2 67 20 7c ac ec 60 24 93 13 c1 6f 02 49 17 a8 bb 6f 12 0f 17 8a b6 1c 87 44 cf 50 3a ea 12 0f 55 ab 25 83 2d d4 88 af d1 18 84 80 04 b1 93 18 30 72 40 6f 0c 80 40 81 4d 59 6f 0e d4 8c f2 5e c2 72 68 8e d2 94 a6 06 9d a9 3a 4a e6 7c ec cd e0 c5 02 e4 54 ce 30 5b 1a b6 51 5b fe 02 4c 6d 36 98 82 b8 55 7b 66 18 56 36 51 7c 1a 1f cc d2 1c 0d 77 16 c0 89 f2 25 92 49 06 7f 42 a8 bb 78 37 e5 8f 10 07 26 09 22 d6 30 5d 09 4a 9c a5 09 b8 7a b8 7d 1c 3f 8d 7d ae 41 11 59 8b 74 28 a0 51 10 cf df 9f 1f 9f 9f 97 1e d7 41 4d 12 fc 25 dd 17 98 54 30 af 7c b3 34 09 07 52 62 1b c7 02 a7 79 85 88 76 7e 69 5e 1c aa 0d fe c1 f9 41 ff 59 5a b6 50 de 93 ed 66 11 ec 21 d6 a2 55 d1 59 db 68 4c d9 0d e3 6a 8d a8 cb cd 80 df 54 0d af d0 58 63 e3 eb 5a 3c bd 9d 99 50 2b b8 c9 10 f3 b2 87 0c f1 bf a9 ff 6c be 5a ef 51 7e 60 1b 0e 5c be 87 7e ee 29 ad cc 08 07 a1 10 c0 1e 87 8d da 91 89 42 5d 0b 6d 97 d1 69 75 bf fa b6 fa 5e 47 27 69 0a 75 d4 61 8f c3 4e 84 6f 1e b8 69 04 d5 ce 4b 66 b5 3b a9 6d c5 ef 96 13 10 78 9f ed 08 06 2d 63 32 82 c8 a0 e5 08 d8 e0 06 67 09 1b 6c 85 5d 1d 78 5d 3c ef e6 ba 93 ef 92 e1 cf 73 66 61 8e 74 40 73 bb 65 f8 dc 10 66 d3 bb d9 9c 2b 41 cb e0 6a 79 88 6f 9c 9c 34 4f 50 6e d0 2a 33 9a 41 cb 41 f1 c1 7b 63 b9 b4 34 29 6d cb d2 9e 26 4f b3 a7 7b b6 8d 90 9f 57 fe 89 5f fe 89 94 bf 52 2a ca 00 03 7d 31 26 f6 8d 32 ca 8a f6 3e 5c bb 3c 63 4a c7 e8 04 12 58 ec 1e f3 28 68 5f 01 af 33 22 65 7c f7 74 ff f4 30 3b 5f c6 ab bb d5 7c c5 42 e3 a0 c1 e1 a8 44 71 95 32 4f 44 d1 dc 21 c8 1c a1 37 80 4c fc b1 ef 41 28 3c 0d 53 a8 a2 5e 78 58 16 30 16 aa 54 3b ed af 25 36 48 68 9d f3 7a b4 d5 19 5d 84 57 97 e9 a8 8b 33 90 f1 a6 83 c3 6d b6 52 f8 e4 7d 2c d8 7a 44 84 79 98 4c 3b 85 05 23 2b 8c 90 27 85 be 5d cd 56 73 23 62 db 65 46 6d 5a 75 a0 73 e5 10 d2 40 bd 78 4f 3e Data Ascii: a68YoX.bGgaejdQdgRc)hVLb>P0C@_L[UU09\^7gty@$@?0Z=$4Wl)_Dnt Qt7EM_~W/VTtlh)V'TG5Y5\|\|Kj,/~@?=N$yW+H>UrrkG]NR]#Py]EUiL,%"RoRDq-{GgTA,Jtl&m`g \|`$oIoDP:U%-0r@o@MYo^rh:J\|T0[Q[Lm6U{fV6Q\|w%IBx7&"0]Jz}?}AYt(QAM%T0\|4Rbyv~i^AYZPf!UYhLjTXcZ<P+lZQ~`\~)B]miu^G'iuaNoiKf;mx-c2gl]x]<sfat@sef+Ajyo4OPn3AA{c4)m&O{W_R}1&2>\<cJX(h_3"e\|t0;_\|BDq2OD!7LA(<S^xX0T;%6Hhz]W3mR},zDyL;#+']Vs#beFmZus@xO>
Jan 7, 2021 07:32:41.202300072 CET	488	OUT	GET /pictures/akrilovaya_vanna.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Jan 7, 2021 07:32:41.279946089 CET	526	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: image/jpeg Content-Length: 11927 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:30:02 GMT ETag: "2e97-558f324d83680" Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 80 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fa b4 9c 7e 15 89 d0 6b f8 2a 22 f7 33 5c 67 85 8c 8c 7d 4f ff 00 5a b6 a6 b5 26 ae c5 ed 5a f3 ec 3e 18 d6 23 6b 83 07 96 ce 37 e0 1c 29 0a 4f 5f 62 7f 2a 9c 4c f9 29 36 2a 6a f3 43 bc 0c 64 d5 bc 3b 75 07 92 f1 4d 23 dd d8 be c2 15 bc c8 d9 90 30 f4 e4 02 3d 3d eb 92 85 aa 61 e4 a2 ad 67 25 f3 4d a3 4a 9e ed 44 df 93 36 fc 1e 8b 73 a5 8f 29 d6 65 7d 8d 1b a8 c6 e5 db e9 d8 f2 32 3f fa c4 f3 50 f7 e9 a9 27 7d 8a a9 a4 9a 3b 51 c7 06 bd 03 9c 50 dc f1 54 90 12 23 12 79 a6 04 f1 9c 1c 50 04 d9 e2 80 1e 92 11 4a e0 73 9e 31 bf bc 86 e7 4d 5b 5b 68 e6 06 56 c8 77 2a 37 63 8e c7 3c 67 b7 a5 7c ef 10 55 51 85 37 6f b5 d7 d1 f9 33 d5 ca e1 cc e7 e8 3a 3d 57 52 44 0d 77 a6 ac 67 b8 4b a0 3f 9e da e5 86 2e aa 8a 72 8f dd 2f f3 b1 b3 a1 4d bd 25 f8 7f c3 91 49 e2 29 63 6c 0d 12 ee 41 dc ab 23 ff 00 ed 4a 6f 30 6b 6a 6d fc d7 ff 00 24 1f 55 5f cc bf 1f f2 24 4d 7c 32 6e 3a 6d fc 03 fe bd 73 fc 81 aa 78 ff 00 ee c9 7c bf e0 31 7d 57 cd 7d ff 00 f0 c4 0f e3 3d 32 16 db 2b dd a9 1e b1 32 ff 00 24 a8 fe d3 a6 b4 6e 5f 77 fc 01 fd 4e 6f 6b 7d ff 00 f0 49 07 8b 34 c6 5d eb a8 00 bc ff 00 ac 73 fd 48 f5 a6 f3 2a 7d 25 f7 ff 00 c3 87 d4 67 b5 be ef e9 84 7e 31 d0 e1 8c bc f7 f6 c8 bb b0 1d 8e d5 27 d0 12 f8 27 d7 f0 ad a9 66 14 da bb 6b d7 a7 e6 44 f0 73 e6 d9 ff 00 5f 22 d4 1e 28 d0 ee c0 fb 3d e5 b3 e7 fb 8c 87 ff 00 66 35 ba c7 52 ee bf 0f f3 33 fa a4 fb 7f 5f 71 3f f6 bc 03 84 Data Ascii: JFIFCC}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?~k"3\g}OZ&Z>#k7)O_bL)6jCd;uM#0==ag%MJD6s)e}2?P'};QPT#yPJs1M[[hVw7c<g\|UQ7o3:=WRDwgK?.r/M%I)clA#Jo0kjm$U_$M\|2n:msx\|1}W}=2+2$n_wNok}I4]sH*}%g~1''fkDs_"(=f5R3_q?
Jan 7, 2021 07:32:41.300182104 CET	625	OUT	GET /templates/biz_blue_ii/images/mod_bottom.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Jan 7, 2021 07:32:41.377052069 CET	705	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: image/gif Content-Length: 162 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:30:04 GMT ETag: "a2-558f324f6bb00" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 2a 00 c4 00 00 f7 f8 fa f6 f8 f9 f8 f8 f9 f4 f6 f8 f1 f3 f6 f4 f5 f7 ef f2 f4 f4 f6 f7 f5 f6 f8 f0 f2 f5 f2 f4 f6 f5 f7 f8 f6 f7 f9 f1 f4 f6 f1 f3 f5 ee f1 f4 f8 f9 fa ef f1 f4 ed f0 f3 f7 f8 f9 f3 f5 f7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 2a 00 00 05 1f 20 24 4e 80 30 9d 01 c3 2c 0b 32 1c 05 25 53 8a d2 34 84 e3 24 49 64 44 8f 47 44 f2 90 18 43 00 3b Data Ascii: GIF89a!, $N0,2%S4$IdDGDC;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.3	49711	91.189.114.9	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:32:20.972795963 CET	22	OUT	GET /forum/clientscript/yui/connection/connection-min.js?v=370b4 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Jan 7, 2021 07:32:21.052151918 CET	33	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: W/"2e32-558f3247ca900" Cache-Control: max-age=315360000 Expires: Sun, 05 Jan 2031 06:32:21 GMT Content-Encoding: gzip Data Raw: 65 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b5 1a 59 73 a3 38 fa bd 7f 85 5b 0f 2e 18 13 e2 a4 7b 6a 76 a1 99 14 36 d8 71 e7 ac 4e 7a a7 a7 3c a9 14 01 39 66 1a 83 97 23 47 39 fe ef fb e9 02 81 21 93 d9 ed 7d 89 89 f4 49 fa ee 4b da ff e9 dd 38 59 3f a7 e1 fd 32 ef 29 be da 3b 1c 0e 7f d1 7a bf 7b cb 24 79 df 9b c5 be de b3 a3 a8 47 e7 b3 5e 8a 33 9c 3e e0 40 87 45 01 ee 45 a1 8f e3 0c 07 bd 22 0e 70 da cb 97 b8 37 ba 72 7a a7 6c d8 78 b7 cc f3 b5 b1 bf 1f e0 07 1c 25 6b 9c ea cf 64 5b 3d c6 f9 fe 73 11 ee f3 e5 7a fe 94 bf 7b c0 69 16 26 b1 d1 3b d4 3f ea 07 ef 7e da 7f f7 bb 7d 7c 71 a1 17 79 18 e9 e3 24 8e b1 9f 5b 9b db 55 f6 b4 8a 6e d7 69 72 1f 06 c6 1c 9d 85 7e 9a 64 c9 22 d7 bf 9d 9d 1e 5f 5f 5f 22 0d 9d 5d c1 f7 a1 18 d0 3f e8 c3 9d 41 74 a3 dd 12 dc 6e 97 d8 03 c4 33 63 b3 85 01 2f ab 0f 2e bc 28 c3 da 6d 91 e1 db 00 2f bc 22 ca 6f d7 49 96 f3 79 23 4f 0b 98 6d 9b 41 de 7a 0d b4 79 39 10 b4 ff b4 f7 f8 f8 b8 b7 48 d2 d5 5e 91 46 38 f6 81 71 81 d9 f3 97 5e 9a e1 dc fa 7a 3d d9 fb 07 aa f6 21 80 6f df 07 d5 d1 7b 5a a6 ed d8 49 13 88 f0 00 c8 fc 82 ff 5d e0 2c 47 8c 70 01 28 68 af 2f 97 d9 14 66 13 c0 e1 aa b8 5b 85 b9 60 11 8c 85 11 fe ba 8e 12 2f 10 63 04 d3 73 c0 d1 88 8b 28 d2 6e e9 2a c7 cb 3d fe ff 3a 89 22 ba 5f 1e ae f0 45 91 d3 6f 32 18 c6 f7 b7 61 9c 83 9a 79 91 f1 f3 10 00 52 2f ce 3c 9f 30 e1 16 84 0e 23 19 3d dc 8d f0 0a c7 f9 bf bc a8 10 87 00 25 0c b1 d3 30 cb 71 0c d4 2a 8b 22 a6 4b 15 75 13 2e 14 49 a7 dc 07 58 ac 6e 9a 23 ba 17 04 62 b5 12 24 7e 41 ce d0 90 0f 72 f8 8e b4 72 b7 91 ba 79 f0 d2 9e 6d ed ac bf c7 f9 b5 97 c2 5f 80 31 e1 48 5b cf 9f d7 b8 df 67 bf 7a 9e 9c 26 8f 38 1d 7b 19 56 54 cb 42 8c 16 54 43 84 ab bb de 42 a8 c5 04 ff f5 cb 6c 9c ac d6 49 0c e3 70 42 ec ad b0 3a 40 16 1a b4 4e 3f 90 95 aa b9 dd aa 66 8a f3 22 8d 7b 44 bc e6 96 ff 43 05 66 6e 55 45 d5 b2 dc 4b 73 4a 87 11 e3 c7 9e 8c 53 91 e5 c9 8a 4e 29 88 82 21 55 f3 e1 90 08 e7 f8 af 57 08 48 58 94 15 be 8f b3 ec 0d a7 30 40 58 b2 f0 c2 a8 48 df 70 0c 07 84 25 05 55 c6 bf 5e c1 e0 60 81 77 97 bc 85 74 0a 06 e0 b7 7e 35 0a 86 91 c4 57 84 27 e0 92 2a 16 82 db 61 8c ba d1 92 78 cc 19 00 10 35 ae 01 50 c9 1b 02 77 c5 88 26 1b 49 7c 22 5b 71 6e 10 a0 09 23 13 80 64 ce 00 90 a0 9f 00 71 73 9c 23 89 15 00 c2 09 26 10 36 a1 05 00 2a d2 61 9e 11 78 b3 d5 c0 3b 5d 82 9f 9d 81 45 0b ad b7 d5 4d be 0c 33 bd e6 86 f5 22 ce 96 e1 02 14 0d 54 8c ac 72 98 d7 b8 04 8f 78 cc 7c 8e bc 01 98 04 31 84 64 01 c6 03 ea 9f a7 60 f0 48 ec db e2 4d 2d db dc 62 50 d0 c6 c2 bb 24 89 b0 17 97 2b 3b bc 34 59 bd 95 b1 fa b6 4c ff 5b a4 2a 27 5a e2 b4 7b 76 1d 88 71 91 79 b5 99 70 6a dd 07 c7 c5 ea 0e a7 a8 df 27 0e 35 0e 73 0c 20 02 8b a6 6f 64 db fb 29 f6 72 0c 44 5d dc fd 09 2e a3 da db 65 0e ca d1 6c 33 4f 9f 37 b6 45 94 ba ee fa 15 d5 74 ac 8d 0f ce c6 b0 b5 1c e4 ec 6e cd 2d 44 1b 7f a9 8c d5 0d f8 6f 85 ec 30 b2 86 e6 e8 53 8b d8 21 06 dd e7 4b 73 30 00 5f 58 1d 61 c3 f1 0f f8 Data Ascii: ea1Ys8[.{jv6qNz<9f#G9!}IK8Y?2);z{$yG^3>@EE"p7rzlx%kd[=sz{i&;?~}\|qy$[Unir~d"___"]?Atn3c/.(m/"oIy#OmAzy9H^F8q^z=!o{ZI],Gp(h/f[`/cs(n=:"_Eo2ayR/<0#=%0q"Ku.IXn#b$~Arrym_1H[gz&8{VTBTCBlIpB:@N?f"{DCfnUEKsJSN)!UWHX0@XHp%U^`wt~5W'ax5Pw&I\|"[qn#dqs#&6ax;]EM3"Trx\|1d`HM-bP$+;4YL[*'Z{vqypj'5s od)rD].el3O7Etn-Do0S!Ks0_Xa
Jan 7, 2021 07:32:21.052190065 CET	34	IN	Data Raw: 1b 43 47 d9 5d 36 1f dd b4 1c 7b 07 64 7c 97 0e 07 99 2d c2 d8 8b a2 e7 0d 77 52 0e a1 16 bc 2a f7 8d 40 62 93 62 9b 51 3c 36 29 dd 16 3b ba 1e 3c 28 2b 80 e5 ef 01 76 cc 20 1a 0c 54 1c 95 8b 76 6c 6d b6 e6 58 07 04 2d 07 7e c3 8c d9 93 c5 5c 27 Data Ascii: CG]6{d\|-wR@bbQ<6);<(+v TvlmX-~\'l21`L1!c5WT8Z#:`DCxaM=i%dPi\|t)zz=N?QTEfPIA00%\&{;2`9t>56--kX"$b#
Jan 7, 2021 07:32:21.052227974 CET	36	IN	Data Raw: a8 bb 43 d4 bf b5 0b 8e 77 69 b7 1a 4d fb 79 37 eb 58 5c 55 54 39 5d ed b8 06 db cc d6 d1 fa a1 cd 49 7e ae c6 6b 8d ea a8 13 28 d1 47 5d a5 08 61 fc 67 b3 ea 6e 9d c8 6d b5 cf 56 d9 59 27 3e 88 f7 b7 47 cf b3 40 39 51 5f 5e ca 39 72 85 90 cd 4f Data Ascii: CwiMy7X\UT9]I~k(G]agnmVY'>G@9Q_^9rOn .>nwZC[aet4BKEdE!YHkmy)%3NhnYLDD&I<jf]sf9x+iN*v2V~BB:1^]Ht
Jan 7, 2021 07:32:21.052253962 CET	36	IN	Data Raw: c5 e7 7b cb fa 28 a0 ea c3 c3 2a d9 a7 fb b4 4a da 2e 25 3d a2 92 e6 c7 74 89 da 56 8f c8 5a 83 73 51 6e 63 09 c6 92 32 4d b2 db 66 c3 d6 26 6f 4b 19 49 ec 97 95 5e 36 bf 64 d9 0a e3 4e f1 3d 51 9b 94 3c c6 14 cf 83 90 b6 fb ec 54 db 88 b7 d8 88 Data Ascii: {(*J.%=tVZsQnc2Mf&oKI^6dN=Q<TF]zd_>j=2.
Jan 7, 2021 07:32:21.053020000 CET	38	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Jan 7, 2021 07:32:21.070944071 CET	40	OUT	GET /forum/clientscript/vbulletin_global.js?v=370b4 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Jan 7, 2021 07:32:21.149092913 CET	47	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: W/"b737-558f3247ca900" Cache-Control: max-age=315360000 Expires: Sun, 05 Jan 2031 06:32:21 GMT Content-Encoding: gzip Data Raw: 34 32 63 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c5 7d eb 76 db 38 92 f0 6f fb 29 10 4d 12 49 b1 2c 5f d2 b7 b1 e3 64 1d 27 99 78 36 b7 8d 9d ee 99 63 b9 75 28 91 92 d8 a1 48 35 49 d9 d6 b4 f3 40 df 5b 7e 75 03 08 90 94 ec 74 c7 bb 39 dd 96 04 14 0a 40 a1 00 54 15 0a 85 ad 47 07 df e4 df a3 de fa f5 b5 fa db 37 f8 a7 ae af 09 95 ba 78 3e 8f a2 20 0f 63 f5 b8 fb 63 77 5b 3d 0f 72 4f 7d c7 79 9b 7f f1 9f 2a aa 39 4a 66 8b 34 1c 4f 72 f5 ff 76 b7 b7 b7 37 e1 cf 4f ea 9f 41 94 25 a3 5c bd 8c f3 20 9d a5 61 16 64 ea 4d ee 77 d5 61 14 a9 8f 08 9d a9 8f 41 16 a4 17 01 24 6a 54 a7 93 30 53 a3 30 0a d4 d4 5b a8 38 c9 d5 20 50 69 e0 87 59 9e 86 83 79 1e f8 0a 7a 73 39 49 00 22 49 55 16 8e e3 70 14 0e bd 38 57 33 2f cd bb 56 ab 2a 0d fe f9 f9 a7 37 6f 5e 9e 1e bf 53 c7 27 ea dd fb 53 f5 ea e3 cb 97 ea e4 fd ab d3 5f 0e 3f be ac c2 17 a8 26 79 3e db db da ba bc bc ec 5e 0c 84 a4 dd 61 32 55 d7 4b b3 b6 a2 70 18 c4 59 d0 9d e4 d3 a8 40 f5 8d 46 b7 f7 ad 78 6e 6b 7d 7d eb d1 a3 f5 47 ea b5 17 fb 40 d3 57 61 1a 0c e6 63 35 f4 a2 28 03 3a 07 b1 49 82 81 c1 f1 f0 2e bc 30 f2 06 00 db 1a 07 f9 88 33 b1 c7 ed 75 c0 16 8e 54 eb de 65 18 fb c9 25 a4 c5 19 8e 13 f4 fb 9e 7c ef 0a 7c 7b fd 8f f5 b5 12 d8 81 fa e3 cb fe fa da 85 97 aa d8 9b 02 b7 1c a8 b3 46 94 8c 1b 1d d5 f0 b1 10 7e 09 e3 51 82 9f 97 5e 1a e3 67 90 a6 49 8a 5f bc 0c 58 29 27 d8 30 95 8f ab 69 84 df c6 69 32 9f 99 2f 2f 63 1f bf e7 e1 34 d0 9f 92 34 4c e6 31 61 c8 53 6f 48 99 b3 34 41 5e b4 be 22 e8 39 b4 72 04 cc d7 c2 a6 86 d0 cc ed 7d f8 78 c2 ad ee 46 41 3c ce 27 fb 6a 63 23 6c 2b b7 8b 67 04 71 16 9e 9f 43 a1 d1 3c 1e e6 61 12 b7 da d4 ef 2f a5 81 f8 f7 a7 63 35 9c 67 39 30 59 70 11 00 7b 5b 23 82 79 d5 d1 18 46 21 c0 65 c3 34 9c e5 5b 8b 79 b8 b5 f0 26 49 b2 e9 27 d3 4d c2 d0 fd 2d 33 43 94 2f 66 41 32 52 ff 3e 7c fd fe bd 3a 38 50 8d 79 ec 07 a3 30 0e fc 06 0d 8d 6e 9c 8a 81 a5 fb 54 1c db a9 72 98 9e 34 86 95 0e 70 56 36 1f 60 03 06 35 f9 76 1f 4f 82 7c 3e 53 3f 7b 69 88 4d cf d6 31 ed bf 80 9a 6b 38 cb e3 f1 da c9 cb 93 93 e3 f7 ef 3e 7d 7c a3 36 15 d0 20 05 6e c8 27 81 82 35 24 c3 56 41 86 2e e1 a5 a9 b7 58 bb 18 cc 26 a9 97 05 16 78 70 05 4b 02 25 66 25 d8 e7 fd 97 7e 08 50 00 4c 29 0a 28 01 89 a7 50 42 e7 24 83 df 82 61 6e 0a 0e 12 18 3d 2f 5e 83 d5 06 90 ff 3e 4f f2 60 38 f1 d2 0c 30 70 92 c2 9f de 10 56 ba 0c d6 a7 2c f4 03 75 46 60 e7 2a f7 c6 b0 a2 01 4e 18 fa cc 1b 07 8a 19 04 4a 04 c3 cf ba 82 10 16 c9 71 90 ae cd 00 20 f6 2e 88 13 03 6c 20 7d e3 ce c7 f3 e9 00 d2 a0 b1 02 85 35 e5 5e 3c 84 de 06 b1 14 81 f5 31 4b d4 c8 4b 2b 4d cf fa 29 54 71 35 03 a4 7e 02 45 84 35 21 f1 25 24 06 57 b0 c2 3e 83 bc 23 2f 1f 4e 14 4d 2b 84 81 86 c2 00 65 c0 7d 33 e2 b2 41 9a 5c c2 44 ab 50 e6 f0 9f 87 ff ea 1f 25 d3 99 97 87 08 27 95 60 bb 87 f3 34 45 06 96 a2 2a 9b cf 66 49 9a 2b 2c f2 ac 34 f0 b3 04 29 91 f6 a1 4c 46 03 34 09 a2 99 4a e6 b9 4a 22 5f 5d 40 c5 30 fc 19 d2 e0 f8 25 20 f7 72 a8 26 6e e6 0a d9 Data Ascii: 42c}v8o)MI,_d'x6cu(H5I@[~ut9@TG7x> ccw[=rO}y9Jf4Orv7OA%\ adMwaA$jT0S0[8 PiYyzs9I"IUp8W3/V7o^S'S_?&y>^a2UKpY@Fxnk}}G@Wac5(:I.03uTe%\|\|{F~Q^gI_X)'0ii2//c44L1aSoH4A^"9r}xFA<'jc#l+gqC<a/c5g90Yp{[#yF!e4[y&I'M-3C/fA2R>\|:8Py0nTr4pV6`5vO\|>S?{iM1k8>}\|6 n'5$VA.X&xpK%f%~PL)(PB$an=/^>O`80pV,uF`NJq .l }5^<1KK+M)Tq5~E5!%$W>#/NM+e}3A\DP%'`4EfI+,4)LF4JJ"_]@0% r&n
Jan 7, 2021 07:32:21.149132967 CET	47	IN	Data Raw: 37 45 62 40 f7 f3 05 ac 33 82 e0 40 09 46 97 05 7e 0e 83 4b 6a 03 2e 27 cc 04 38 33 70 3e 5b ac c7 ff 0e f4 6c 69 15 59 ed d2 9c 51 cf 54 a3 a1 f6 ac c2 ed 7d c2 66 f8 52 55 b0 e9 ac 1a 5c 71 70 a9 0e b1 51 30 75 f6 0c 0e 8d d2 b0 af 41 69 c1 33 Data Ascii: 7Eb@3@F~Kj.'83p>[liYQT}fRU\qpQ0uAi3LOa6zQpn`\0I\
Jan 7, 2021 07:32:21.150151014 CET	49	IN	Data Raw: 33 30 63 61 0d 0a c4 27 6d 68 5d 9e ce 03 68 96 85 b0 3c f8 a5 ea dc 31 25 a4 50 51 18 00 ae e6 04 86 ac 09 d8 9a 02 d5 d4 bd 94 11 ea d3 08 71 2f 61 29 da d7 2b c8 0b a2 16 f1 97 e6 ab 28 f1 7c e0 21 4a c3 2e 56 56 95 39 40 1d 8e 91 15 3f c1 37 Data Ascii: 30ca'mh]h<1%PQq/a)+(\|!J.VV9@?7qVdIf{_B_5!s1v9@HE0bu69zkgcy:?&A(y0Nj\|\yKILc.-zC97to
Jan 7, 2021 07:32:21.150187969 CET	51	IN	Data Raw: 0c d1 a8 16 3d c7 d6 22 10 1a 3c ac c5 df 06 2d 33 ab 6e 42 37 cb 93 d9 07 10 37 bd b1 c7 fb d5 be 9d 2b 74 81 2d d5 9b 47 39 67 0a 76 0d e3 32 f9 5d 8c 02 4d 0a b2 ee c1 44 b9 f4 16 b8 7f 17 e4 6d ff a5 41 0a fa 83 45 7f 3c 9f fe d9 51 fa f3 23 Data Ascii: ="<-3nB77+t-G9gv2]MDmAE<Q#u:PWf+J MQ?p}P2Y$AvdVYVS/g!qAV}-"y,Gd;,^Wtha/2Y\yZI!Y$s`1\h R:#E!~Um
Jan 7, 2021 07:32:21.150233984 CET	52	IN	Data Raw: 96 13 32 c2 52 ee f9 4a 6a 9b c5 9c b5 fa d7 5e b6 81 a7 5e 34 bf 4b 8d cd 53 90 26 ef ba b5 e9 d7 b4 b6 05 ad 6d df 5f d6 5e 4d 5c 14 12 fe 57 da 7e 43 d3 f9 c8 83 76 6a 3e 6b 34 9b b6 dd 76 c6 8b 0b 0c 70 32 54 d4 44 e9 26 18 f7 49 24 69 d5 cd Data Ascii: 2RJj^^4KS&m_^M\W~Cvj>k4vp2TD&I$iae_$ET[susUW=@\|02X6'FX6?{_{^wv;]_{{^_zuww{3^NJEP,N:LnWef1m
Jan 7, 2021 07:32:21.150275946 CET	54	IN	Data Raw: 8c a8 93 9d 6b 97 e2 4b 40 5e 81 3c c2 2b 60 a3 91 36 17 0e 82 11 1e a9 53 a5 2a 19 0e e7 29 cc c0 80 dc bd 90 d5 f5 ac fd da 89 cc bd 28 89 99 b0 d3 cf 73 a8 bb 6c c0 e3 d4 7a 2f 3a e2 cf 79 ce a6 41 94 a4 b4 85 4e 50 ed cb 71 b8 c0 3c 55 db 86 Data Ascii: kK@^<+`6S*)(slz/:yANPq<UXK>6`[bVcWbUlfXZoHNj{BwfXXNt`ulT~~8Zt.0%q-ytQ3=P{2!!@Q4KT]r
Jan 7, 2021 07:32:21.150312901 CET	55	IN	Data Raw: 3b 49 a6 07 ba 61 19 f0 ff b0 9e 77 38 ab b6 51 52 aa a6 49 e4 f1 cc b9 e4 1e 00 84 09 67 51 c1 35 c6 74 f3 1b 63 fb ad c0 86 f0 62 44 33 88 7f 63 6b a8 f0 4a 09 b9 00 9f fd 76 de e5 d4 1b 39 cb 2a cc c4 a9 c7 56 61 b3 3a 37 fa 3f 87 dd 4a d2 6d Data Ascii: ;Iaw8QRIgQ5tcbD3ckJv9*Va:7?Jm>F])WB^vcZsn4sWcygtf\wu/H;!abo+rL,8<+Cby VF{x@ey3%,;fK;KhKFY8L
Jan 7, 2021 07:32:21.257204056 CET	74	OUT	GET /images/banners/kotkopi2g.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Jan 7, 2021 07:32:21.335896015 CET	76	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: image/jpeg Content-Length: 14537 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:57 GMT ETag: "38c9-558f3248beb40" Accept-Ranges: bytes Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 2d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 44 39 41 33 42 37 43 34 44 30 38 46 31 31 45 34 38 33 44 38 46 36 31 33 31 31 46 41 36 42 43 41 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 44 39 41 33 42 37 43 33 44 30 38 46 31 31 45 34 38 33 44 38 46 36 31 33 31 31 46 41 36 42 43 41 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 34 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 30 38 33 46 39 43 45 32 31 41 43 46 41 32 42 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 34 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 30 38 33 46 39 43 45 32 31 41 43 46 41 32 42 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 04 03 03 03 03 03 04 03 03 04 06 04 03 04 06 07 05 04 04 05 07 08 06 06 07 06 06 08 0a 08 09 09 09 09 08 0a 0a 0c 0c 0c 0c 0c 0a 0c 0c 0d 0d 0c 0c 11 11 11 11 11 14 14 14 14 14 14 14 14 14 14 01 04 05 05 08 07 08 0f 0a 0a 0f 14 0e 0e 0e 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 3c 01 d4 03 01 11 00 02 11 01 03 11 01 ff c4 00 c7 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 01 02 07 08 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 06 05 Data Ascii: ExifII*DuckyF-http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:D9A3B7C4D08F11E483D8F61311FA6BCA" xmpMM:InstanceID="xmp.iid:D9A3B7C3D08F11E483D8F61311FA6BCA" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.did:04801174072068118083F9CE21ACFA2B" stRef:documentID="xmp.did:04801174072068118083F9CE21ACFA2B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Adobed<
Jan 7, 2021 07:32:21.642595053 CET	254	OUT	GET /forum/images/gradients/gradient_panel.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Jan 7, 2021 07:32:21.720314026 CET	274	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: image/gif Content-Length: 3314 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: "cf2-558f3247ca900" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 0a 00 c2 01 e6 00 00 f3 f4 fe ed ee fa ec ee fa e5 e8 f5 f4 f4 ff ef f0 fb ef f0 fc ea ec f9 f2 f3 fd ea ec f8 e5 e7 f5 eb ec f9 f4 f5 ff ee f0 fb ec ed fa e7 e9 f6 ed ef fa f1 f2 fc e4 e8 f5 ed ef fb f1 f1 fc e8 eb f8 f2 f3 fe e9 ec f8 e6 e9 f7 f3 f3 fd f4 f5 fe e8 eb f7 f5 f4 ff ec ed f9 e8 ea f8 f0 f0 fc f1 f1 fd ee ef fa ea eb f8 ef ef fb e5 e9 f6 ea ed f9 eb ed fa ed ee fb e4 e7 f6 e5 e7 f6 f5 f5 fe e9 eb f7 ef f1 fc f5 f4 fe f4 f3 fe ec ee f9 e4 e8 f6 e7 ea f6 f0 f2 fc f3 f4 fd f0 f1 fd f1 f3 fd e9 ea f8 e9 ea f7 f2 f2 fe ea eb f9 ef f1 fb ee ee fa f3 f4 ff eb ee fa ee f0 fc e6 e8 f7 e6 e8 f5 e8 e9 f7 f0 f0 fb ee ee fb e9 ec f9 ef ef fc eb ec f8 f0 f1 fb f0 f2 fd e9 eb f9 f3 f2 fd f2 f2 fc eb ec fa e7 ea f8 ed ed fa f3 f2 fe e6 ea f6 e6 e9 f5 e7 e8 f6 e5 e9 f5 f2 f4 fe eb ee f9 eb ed f8 ec ef fa f4 f3 ff ee f0 fa e6 ea f7 ee ef fc f3 f5 fe ea ed fa ed f0 fb ea ed f8 ed ed f9 ed f0 fa ec ec f9 e5 e9 f7 ed ee f9 e7 eb f7 f1 f3 fc f2 f4 fd f1 f3 fe ee ef fb e7 e9 f7 e8 ea f7 e7 ea f7 f1 f2 fd e6 e9 f6 eb ed f9 e6 e8 f6 f2 f2 fd f3 f3 fe f0 f1 fc e9 eb f8 e5 e8 f6 f4 f4 fe f5 f5 ff e4 e7 f5 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 0a 00 c2 01 00 07 ff 80 77 82 83 84 85 86 87 87 1c 82 8a 88 84 0c 89 8d 83 0c 8a 2a 77 2d 77 04 98 96 8c 8a 99 77 0c 8f 86 97 8e 9f 84 2a 95 92 a3 1a 77 2a 1a 9d 93 8c a0 1c 8a b3 b4 a0 82 b2 a5 95 1c 8f a1 ad bd 8c 77 ab b4 9a 82 95 a0 a7 a8 a1 96 2a 1c 04 8f bc d0 b3 76 0c 04 2a 76 cd 98 04 cf 96 0c 95 76 76 ab a5 bc ab 2a 2d bc 76 d1 2a 04 2d 2d 76 a3 04 76 04 1a d5 f3 f3 76 ac d5 1a 1a 2d b2 ed 2d d7 c0 f5 db f4 68 9d 06 70 e1 e8 3d cb 04 4a a1 33 79 fb 30 35 3b b8 ed 92 3c 80 f6 38 a8 a8 46 cd 9e c1 47 2d b6 69 78 06 11 14 35 7c 1c c0 31 40 18 2f 53 ba 83 14 39 b4 38 68 8e 23 4c 85 e0 52 ee 03 17 0f 1c 45 79 db 20 86 03 ba 92 e5 ca 9e 23 b7 05 e5 79 8f 27 4f 00 40 0f f2 40 e8 d4 0e 54 2e 3f 09 40 a5 0a a0 a7 d3 96 3d bd ca b3 33 75 2c 38 a8 00 78 00 e8 5a 95 2a 50 02 2e ff e2 f1 88 07 75 ea 54 af 73 b5 c6 c3 52 16 e1 5a 00 2e d6 c6 93 73 16 9c 0b 2c 76 5c 04 96 b7 d6 8e 1c 39 5b 01 40 fe eb d8 05 64 70 6a 01 bb b0 da 38 f0 df bf 9b c1 3d 16 7d 99 f3 e4 c4 8f 3b 13 96 bc 56 8e 65 c9 86 5d c3 fe 6c 79 32 e4 cd 6b 3d 73 66 ed 22 c3 e7 d4 ad 83 a7 be dd fa f2 e3 19 81 67 64 98 21 f9 78 6b ab 8f 87 47 8f 9e 21 3a 80 19 d3 59 57 c7 7e 3c 3a 15 0b 72 aa 3f f6 0d 79 86 72 00 e0 11 88 97 73 7e ba 72 0b 92 33 9c 19 1f 3e 83 78 f0 c3 c5 53 41 80 bf 7a 75 04 fc 71 f7 18 7f 16 e0 27 a0 1c fc f1 67 9f 05 cb c9 91 1e 02 08 fa 07 21 02 4a 10 f8 18 83 0e da 97 01 80 e1 41 c8 20 02 4f 14 28 a2 78 1b 76 c8 a0 05 4a 64 80 5f 87 08 5a 80 83 05 00 c6 81 22 78 e0 c9 a8 44 88 2f c6 01 20 02 3a e2 f0 84 83 08 e0 b0 a1 7a 15 02 68 81 8c fc c5 b1 a1 ff 8e 71 c8 21 63 1c 50 f6 b8 23 90 50 82 97 01 0e 50 c6 08 25 0e 3b 4a c9 24 93 3c 22 f9 a5 8e 5a 62 19 66 1c 35 80 59 03 8f 69 c6 81 65 9b 59 66 89 06 9a 4f c6 d1 46 1b 71 da 89 66 9b 78 42 d9 06 9c 7c ea 89 e7 a0 7d b6 81 c0 9d 82 fa c9 e3 9f 7d f2 18 26 9e 87 ea f8 a7 9d 77 36 0a 26 9d 83 52 4a 69 1b 11 98 b1 84 9f 7d 82 aa 27 a8 11 44 10 c7 12 95 46 80 28 9e 9f a6 0a 25 aa 7d 9a 0a 82 a9 a6 c6 5a 2b 08 9c e2 79 eb 9d 20 c4 a1 6a 04 b8 e6 8a 6b b0 6d cc 7a 27 b0 77 c2 8a Data Ascii: GIF89a!,ww-wwwwvvvv-v--vvv--hp=J3y05;<8FG-ix5\|1@/S98h#LREy #y'O@@T.?@=3u,8xZP.uTsRZ.s,v\9[@dpj8=};Ve]ly2k=sf"gd!xkG!:YW~<:r?yrs~r3>xSAzuq'g!JA O(xvJd_Z"xD/ :zhq!cP#PP%;J$<"Zbf5YieYfOFqfxB\|}}&w6&RJi}'DF(%}Z+y jkmz'w
Jan 7, 2021 07:32:41.123631001 CET	473	OUT	GET /dom/CHto-luchshe-metallocherepitsa-ili-ondulin.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Jan 7, 2021 07:32:41.202039003 CET	481	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: image/jpeg Content-Length: 12345 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:55 GMT ETag: "3039-558f3246d66c0" Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 07 04 04 04 05 04 07 05 05 07 0a 07 05 07 0a 0c 09 07 07 09 0c 0d 0b 0b 0c 0b 0b 0d 11 0d 0d 0d 0d 0d 0d 11 0d 0f 10 11 10 0f 0d 14 14 16 16 14 14 1e 1d 1d 1d 1e 22 22 22 22 22 22 22 22 22 22 ff db 00 43 01 08 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 20 20 20 20 20 20 20 20 20 20 20 20 20 21 20 20 20 20 20 20 21 21 21 20 20 20 21 21 21 21 21 21 21 21 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 ff c0 00 11 08 00 7d 01 2c 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 04 06 01 03 07 02 08 ff c4 00 4c 10 00 01 03 02 04 03 05 04 07 05 05 05 06 07 00 00 01 02 03 04 05 11 00 06 21 31 12 41 51 07 13 22 61 71 14 23 32 81 08 42 52 62 91 a1 b1 15 33 72 c1 d1 24 43 82 92 e1 16 53 b2 f0 f1 17 25 63 73 b3 d2 26 34 44 54 74 a2 c2 ff c4 00 1b 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 2a 11 00 02 02 02 02 02 02 02 01 04 03 01 00 00 00 00 00 01 02 03 04 11 12 21 05 31 13 41 22 51 32 06 14 61 71 15 42 52 23 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 a9 e6 17 2a 12 aa 12 df 81 31 f0 a4 bc e0 5b 21 c5 8f ae 76 d7 f2 c6 4d e8 e8 71 10 37 5d af c6 77 ff 00 9c 90 08 d2 c5 c5 fc f9 e1 ef 64 1f 43 21 55 9d 52 45 8c c7 db 91 c9 41 d5 81 f3 d7 5c 2f 44 bd 8a e4 54 33 24 37 6c b9 72 38 77 0a ef 57 6b 79 1b eb 87 cb 62 71 24 0a f5 42 63 7d dc 89 72 38 b6 4a d2 ea c2 87 e7 af a6 01 91 de a9 66 58 0e 03 ed af ad ae 4e 87 17 c3 e8 75 d0 fa e0 d8 b8 82 ea 15 19 c3 89 99 cf b3 23 98 ef 56 10 a3 f8 e8 7f 2c 3d 8b 46 da 0e 7e ce 59 6a a8 97 d9 9d 21 0f b7 6f 02 d6 a5 25 43 cc 12 a0 41 c3 d8 b4 7d 0d d9 9f d2 0e 83 99 12 dc 1a ca 91 02 a8 74 0b 26 cc b8 7c 89 f8 4f 91 d3 cf 16 46 45 33 ab 5e 8e a2 95 05 0b 8d 47 2c 58 52 67 00 6c 30 00 60 00 c0 01 80 03 00 00 c0 06 70 00 60 00 c0 01 80 03 00 06 00 0c 00 18 00 30 00 60 03 18 00 39 60 02 34 8a 8c 38 e3 de 2c 03 d3 73 f8 0c 27 22 71 aa 52 2b f5 fc e7 39 98 c7 f6 2c 74 3f 2b 90 7c a9 29 b7 97 08 51 bf ae 2b 76 9b 2b f1 ef ec ab d5 73 86 7e 7a 27 1b 0b 44 37 94 07 ba 50 41 b1 e6 09 1d ef e4 71 53 b0 e9 55 e3 e9 fb 2a 32 4e 67 9e ea a6 cd 7a 4b 72 8d d0 b4 2d f5 77 7a 6c 52 94 1b 5b a1 e1 07 a8 c5 2d 9d 1a 6a 84 3d 0a 5a 4d 69 72 78 5f 2f 21 68 b9 0e b6 ea cb 0a 1d 0f c3 af 91 1e 87 11 d9 a3 f1 22 55 9f aa 32 6c 7b c5 c6 b8 25 51 dc 58 74 2b af 08 f8 87 95 c9 f5 db 08 9f 12 4b 92 65 26 31 5b 27 de b8 9b 59 45 6d dd 24 6a 15 a5 fe 56 c3 d8 b8 10 28 d3 f8 57 ec 52 1b 79 99 17 2a 48 57 1b a9 b7 dc 70 0d bc 94 6e 30 6c 72 af 66 fa a2 44 c9 65 f7 98 6a 43 84 0e 27 5f 5a 94 b3 ea 6c bf d7 06 c8 7c 25 2e 74 d9 11 ab 93 0a 0f ff 00 50 ee 9c be 33 8b f5 b3 c9 47 a2 62 d8 87 55 63 8e e1 b9 83 5e 97 f5 c4 7d 16 f4 c4 ce c7 93 19 e2 d3 82 c5 3c bc ba e2 5e c8 7a 26 47 9a cb cd 86 65 0e 26 ba f3 1f eb 83 5a 1a 7b 23 cd a5 29 8b be c9 e3 67 af 31 eb fd 70 b6 06 98 d5 17 12 0a 17 e2 49 d1 49 56 a2 de 98 90 b6 0e 53 52 bf 7f 4f 3e 6a 63 9f f8 49 df d3 7c 00 6a 44 a6 9f 4f 73 31 3c 68 d8 1d 94 93 e4 79 7a 61 88 d2 ec 59 30 8f b4 c7 3c 71 f9 2c 72 3c b8 87 2f d3 0c 49 71 f6 74 de cb 3e 90 f5 9a 01 6e 9f 59 26 6d 2c 58 00 a3 e3 6c 7d c5 1f f8 4e 9e 9b e2 71 91 09 c1 48 fa 33 2d e6 8a 26 63 a7 26 a1 48 90 97 e3 ab a7 c4 93 d1 49 dc 1c 58 67 Data Ascii: JFIF``C""""""""""C ! !!! !!!!!!!!"""""""""""""""},L!1AQ"aq#2BRb3r$CS%cs&4DTt!1A"Q2aqBR#?1[!vMq7]wdC!UREA\/DT3$7lr8wWkybq$Bc}r8JfXNu#V,=F~Yj!o%CA}t&\|OFE3^G,XRgl0`p`0`9`48,s'"qR+9,t?+\|)Q+v+s~z'D7PAqSU2NgzKr-wzlR[-j=ZMirx_/!h"U2l{%QXt+Ke&1['YEm$jV(WRyHWpn0lrfDejC'_Zl\|%.tP3GbUc^}<^z&Ge&Z{#)g1pIIVSRO>jcI\|jDOs1<hyzaY0<q,r</Iqt>nY&m,Xl}NqH3-&c&HIXg
Jan 7, 2021 07:32:41.205956936 CET	505	OUT	GET /pictures/planirovka_kuhni.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Jan 7, 2021 07:32:41.283709049 CET	559	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: image/jpeg Content-Length: 14112 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:30:02 GMT ETag: "3720-558f324d83680" Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 85 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fb 2a d7 e7 40 dd fb d7 32 77 02 ec 6b c0 e2 98 d1 61 08 07 9e 95 71 43 7a 6c 48 0f 7e d5 41 71 db fb ff 00 4a 06 47 34 9e 58 dd b5 9b 27 a0 19 a0 4c 8a 39 26 95 49 92 3d 9e 9c f5 a9 95 c2 36 ea 24 93 45 0a c8 f3 48 11 63 43 23 16 c8 18 fa f4 ac db 49 5d 96 ae f6 3c 37 51 4d 4f e3 9f 8b e2 b3 d3 d1 e2 f0 de 98 f9 33 36 46 e6 07 ef e3 b9 23 80 3a 81 fd dd dc 78 75 1c f3 2a bc b0 f8 11 ef 53 e4 ca e8 f3 cb e3 67 bb e8 7a 1d 96 87 a7 41 a6 58 43 e5 41 02 85 03 d7 dc ff 00 9f a7 15 ee d3 84 68 c1 46 3a 24 78 55 2a 4a b4 9c e5 ab 65 89 e7 03 29 19 fc 7f c2 9b 95 c8 b7 72 00 09 3c e6 90 d8 c9 11 64 56 46 40 ca 78 20 f2 08 a1 ea 09 d8 c0 d4 7c 0b e1 cb f5 63 f6 01 6e e5 40 0f 6e 76 6d c1 cf 0a 3e 5c f6 e9 5c 55 72 ec 35 5d e3 67 e5 a7 fc 03 ba 96 65 88 a4 f4 95 fd 75 ff 00 82 72 f7 ff 00 0f 2f ac dc c9 a4 ea 88 d1 f9 9b c4 52 82 b8 03 80 32 32 1b 8e 0f 03 b7 e1 e4 e2 32 3d 5b a5 2f bf fc ff 00 e0 1e ad 0c e5 4a ca aa b3 f2 fe bf cc e6 2f 6c 35 3b 2d ab 7d 04 b1 90 a3 73 ab e5 5b 27 b9 07 6e 78 f6 ff 00 0f 16 b6 5d 56 8e b3 8f f9 1e bd 1c 75 2a 8f dd 77 fc c7 da de 4d 0a 85 42 08 e9 cf 7c 7d 3a 7a d7 1c a8 c9 1d 3c d0 9e a4 ec d6 37 be 52 dd 5b 45 23 44 e9 3a ac a8 0e c7 07 2a e0 1e 8c 0f 43 59 49 35 a0 d2 71 d5 31 0d 95 94 33 be ad 05 ba 8b a4 81 d0 30 ea c8 70 c5 7f ef a5 07 be 32 71 d4 d3 8a 6f 41 6b 2d 05 b4 db a9 cd 1a cf 71 f3 a8 29 19 72 14 20 fe e8 19 eb 8c 73 d4 Data Ascii: JFIFCC}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?@2wkaqCzlH~AqJG4X'L9&I=6$EHcC#I]<7QMO36F#:xuSgzAXCAhF:$xUJe)r<dVF@x \|cn@nvm>\\Ur5]geur/R222=[/J/l5;-}s['nx]VuwMB\|}:z<7R[E#D:*CYI5q130p2qoAk-q)r s
Jan 7, 2021 07:32:41.297830105 CET	624	OUT	GET /templates/biz_blue_ii/images/mod_lr.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Jan 7, 2021 07:32:41.375641108 CET	704	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: image/gif Content-Length: 155 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:30:04 GMT ETag: "9b-558f324f6bb00" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 1d 00 c4 00 00 65 81 a6 62 7d a0 64 80 a4 67 85 ab 66 83 a8 5d 76 96 6a 88 b0 69 87 ae 63 7f a2 60 7b 9c 5f 79 9a 5f 78 99 68 86 ac 61 7b 9d 60 7a 9b 66 82 a7 6b 89 b1 6c 8b b3 5d 76 97 66 84 aa 5c 77 96 6c 8a b2 63 7f a3 6a 88 ae 61 7d 9f 6c 8c b4 5e 77 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 1d 00 00 05 18 60 41 49 9a b6 28 4e d2 60 01 62 09 c0 43 4c 03 73 5c 06 54 45 59 16 02 00 3b Data Ascii: GIF89aeb}dgf]vjic`{_y_xha{`zfkl]vf\wlcja}l^w!,`AI(N`bCLs\TEY;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.3	49743	81.19.89.1	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:32:41.389323950 CET	729	OUT	GET /top100/banner-88x31-rambler-gray2.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: top100-images.rambler.ru Connection: Keep-Alive
Jan 7, 2021 07:32:41.483625889 CET	807	IN	Data Raw: 67 3c 18 c8 c0 8a 14 08 e4 40 02 1f 09 88 68 97 bc 24 69 e6 83 08 5c b5 d0 03 9b 35 68 69 9c 58 5c 05 e0 07 57 12 e0 dd 01 0c 30 73 65 05 13 c1 53 c6 55 15 f2 e8 4d 79 12 18 c0 aa 5b 0f 5c 45 24 a4 ed 60 f8 c1 a5 f7 60 8a 40 95 1f 38 30 15 47 09 Data Ascii: g<@h$i\5hiX\W0seSUMy[\E$``@80G.UVxrXYDjGuxm%Y1grIkAtwz'@\|;/W<b[o5+;
Jan 7, 2021 07:32:41.483675003 CET	808	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: image/gif Content-Length: 939 Connection: keep-alive Keep-Alive: timeout=40 x-amz-request-id: 18940a64-41fe-4deb-a544-6e856934b3b5 etag: "d6fa18366030d4590f797dbd3ac11f98" x-varnish: 202101099 199155304 age: 3216 via: 1.1 varnish (Varnish/6.1) x-varnish-hostname: fb048d08da58cc88b746725af521d114 accept-ranges: bytes Set-Cookie: ruid=HQAAAAmr9l+VSe4bAVKKEQB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/ P3P: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV" Data Raw: 47 49 46 38 39 61 58 00 1f 00 b3 00 00 84 84 84 8b 8b 8b 95 95 95 9b 9b 9b a3 a3 a3 ab ab ab b5 b5 b5 bd bd bd c3 c3 c3 cd cd cd d3 d3 d3 dd dd dd e3 e3 e3 ed ed ed f4 f4 f4 fe fe fe 21 f9 04 00 00 00 00 00 2c 00 00 00 00 58 00 1f 00 00 04 ff 10 c8 49 ab bd 38 eb cd f7 fb 60 28 8e 64 69 9e 68 5a 4a 8f e1 be 70 2c cf 74 6d db 05 21 04 53 20 10 05 da 83 75 28 1a 8f c8 a4 72 c9 6c 2e 0d 83 cd c0 90 1c 02 1e 88 ac 76 cb ed 7a bf e0 b0 97 c0 e3 04 08 5c 2b 56 cc 6e bb c3 84 0e 05 ad 55 27 0a 00 44 22 01 d0 09 f6 02 7f 80 00 07 7b 7b 51 00 67 15 07 84 7b 7d 8c 85 8c 7f 81 09 8c 05 86 7b 71 72 73 86 6a 0a 0a 01 03 0a 06 00 09 81 9f a7 0a 7c 00 a2 aa 01 01 09 aa 95 51 46 84 9f 00 05 90 a0 00 02 0a 94 ac 9f c1 a4 9b 15 06 9f 6a 0b 0b a4 09 01 05 0b 81 c9 d0 0b 64 a4 0a ca a5 c9 d9 78 c9 08 00 06 59 b8 dd 08 06 3e 02 cf 81 04 d9 dc 65 08 22 84 0f 0e a4 04 20 dd 89 08 0b c8 c9 a1 00 c9 71 05 05 a1 92 e1 5a e0 6d c1 36 75 06 f9 2d a8 37 a1 80 b8 00 07 06 0c 58 80 e8 9e 3a 3c 12 7e 24 78 40 80 c0 00 8e 05 ff 1e 0c 98 d7 b1 85 04 67 6a 18 a8 ec 56 40 a5 41 89 ac 18 48 8a 12 40 26 00 05 2a 73 92 52 c9 27 81 4a 6f 7c 06 08 60 20 91 e8 00 3c 38 55 ee a2 d0 4e 42 d3 2b 07 48 06 c0 22 21 80 02 35 0d 1a 5c 5b 90 b5 6b 03 89 5f 05 b8 c0 e3 33 91 a1 ac a4 b2 f6 cc 0a 54 42 82 af 03 e0 36 08 c4 20 2b a3 0a 4f 9f 62 99 c7 c0 c1 dc 09 07 b0 36 88 73 c0 6b d7 a2 79 ba e2 6a c0 40 93 00 b4 00 b2 2a b8 c9 d6 58 9f ac 60 c1 32 b8 dc 00 23 53 2b 7a a3 3e 88 5a 21 24 0b 07 a8 53 ab 5e cd ba b5 eb d7 b0 51 23 fa 2c e1 23 15 91 24 2d 7c 64 a1 a2 b7 6f df 65 68 3b 85 27 8f a3 85 a9 2c 88 29 5f 4e e1 03 73 0c 6a 9e 4b 97 e3 e0 41 f0 e9 c8 af 4c df ae a1 81 48 0b 05 1c 10 24 50 bd 1e 79 aa 14 76 6b a7 70 60 c1 28 e5 f7 86 49 48 36 1b c3 c4 fa 37 4d 52 08 af 15 80 03 04 53 31 f2 5f ff 80 14 18 10 dd 04 ed 80 70 97 1c f8 30 74 85 71 1a e4 c6 de 03 ab f4 30 d1 34 c6 b9 97 9b 7b 14 6c 94 dc 04 e5 e1 43 90 37 e3 4c 80 06 39 07 20 20 00 3f 14 96 f8 60 1c 02 64 01 63 16 0e 49 a5 85 00 1f 35 70 dd 7c 18 c6 d1 4f 86 23 26 e2 dd 87 bc 11 60 60 37 0c 80 c0 40 33 20 54 07 8f 39 0f e0 43 e1 8b 21 d1 33 0f 08 67 58 05 82 8f a3 59 f0 a3 8f 0a 6c 38 99 04 81 1d c8 9b 94 07 18 f8 df 07 06 88 e8 1d 57 58 e0 93 40 82 1f 71 94 64 2c 0f 74 f6 41 02 9a 00 90 64 Data Ascii: GIF89aX!,XI8`(dihZJp,tm!S u(rl.vz\+VnU'D"{{Qg{}{qrsj\|QFjdxY>e" qZm6u-7X:<~$x@gjV@AH@&sR'Jo\|` <8UNB+H"!5\[k_3TB6 +Ob6skyj@X`2#S+z>Z!$S^Q#,#$-\|doeh;',)_NsjKALH$Pyvkp`(IH67MRS1_p0tq04{lC7L9 ?`dcI5p\|O#&``7@3 T9C!3gXYl8WX@qd,tAd

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.3	49746	89.208.236.251	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:32:41.480791092 CET	807	OUT	GET /cgi-bin/hotlog/count?0.11948515321103914&s=90390&im=134&r=&pg=http%3A//ovd.ru/index.php%3Fs%3D8848772e8198313ee133bfa7158b7b6c&c=Y&j=Y&wh=1280x1024&px=24&js=1.3& HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: hit5.hotlog.ru Connection: Keep-Alive
Jan 7, 2021 07:32:41.558896065 CET	836	IN	HTTP/1.1 302 Found Content-Length: 0 Content-Type: text/plain Date: Thu, 07 Jan 2021 06:32:41 GMT Location: /cgi-bin/hotlog/count?0.11948515321103914&s=90390&im=134&r=&pg=http%3A//ovd.ru/index.php%3Fs%3D8848772e8198313ee133bfa7158b7b6c&c=Y&j=Y&wh=1280x1024&px=24&js=1.3&&hl_ignore=Y P3p: policyref="/p3p.xml", CP="NON ADM DEV TAI PSA PSD IVA OUR IND UNI COM NAV INT" Server: HotLog/1.2 Set-Cookie: hotcli=a5a145f0fb782e2c11ee1de7bbbf8be1; path=/; domain=.hotlog.ru; expires=Sat, 20-Apr-2030 13:21:04 GMT
Jan 7, 2021 07:32:41.566801071 CET	836	OUT	GET /cgi-bin/hotlog/count?0.11948515321103914&s=90390&im=134&r=&pg=http%3A//ovd.ru/index.php%3Fs%3D8848772e8198313ee133bfa7158b7b6c&c=Y&j=Y&wh=1280x1024&px=24&js=1.3&&hl_ignore=Y HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: hit5.hotlog.ru Connection: Keep-Alive Cookie: hotcli=a5a145f0fb782e2c11ee1de7bbbf8be1
Jan 7, 2021 07:32:41.643574953 CET	847	IN	HTTP/1.1 302 Found Content-Length: 0 Content-Type: text/plain Date: Thu, 07 Jan 2021 06:32:41 GMT Location: https://dmg.digitaltarget.ru/1/19/i/i?a=19&e=a5a145f0fb782e2c11ee1de7bbbf8be1&i=1443502446&r=https://hit5.hotlog.ru/cgi-bin/hotlog/count?s%3D90390%26im%3D134%26hl_hitback%3DY Server: HotLog/1.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.3	49742	46.4.114.109	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:32:41.669635057 CET	860	OUT	GET /mc/?dp=10 HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.acint.net Connection: Keep-Alive
Jan 7, 2021 07:32:41.740441084 CET	867	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: text/html Content-Length: 142 Connection: keep-alive Location: https://www.acint.net/mc/?dp=10 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>
Jan 7, 2021 07:32:45.119873047 CET	1463	OUT	GET /ping/?v=0.3.0&uid=5574be45-a7ff-46d8-a54c-9f941462aa89&dp=10&tz=-08%3A00&nc=63752476&dT=2021-01-07T07%3A32%3A44.365 HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.acint.net Connection: Keep-Alive
Jan 7, 2021 07:32:45.190409899 CET	1496	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Thu, 07 Jan 2021 06:32:45 GMT Content-Type: text/html Content-Length: 142 Connection: keep-alive Location: https://www.acint.net/ping/?v=0.3.0&uid=5574be45-a7ff-46d8-a54c-9f941462aa89&dp=10&tz=-08%3A00&nc=63752476&dT=2021-01-07T07%3A32%3A44.365 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.3	49752	77.88.21.119	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:32:41.722322941 CET	865	OUT	GET /metrika/watch.js HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: mc.yandex.ru Connection: Keep-Alive
Jan 7, 2021 07:32:41.797707081 CET	906	IN	HTTP/1.1 302 Moved temporarily Content-Length: 0 Location: https://mc.yandex.ru/metrika/watch.js

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.3	49835	78.24.221.88	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:32:57.211743116 CET	1661	OUT	GET /check/ HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: utl-utils.ru Connection: Keep-Alive
Jan 7, 2021 07:32:57.328542948 CET	1676	IN	HTTP/1.1 200 OK Server: nginx/1.13.12 Date: Thu, 07 Jan 2021 06:32:57 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Set-Cookie: uid=374988a6-8074-4522-ba69-cb44805b96b9; expires=Fri, 07 Jan 2022 06:32:57 GMT; Max-Age=31536000; Path=/ Last-Modified: Thursday, 07-Jan-2021 06:32:57 GMT Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0 Content-Encoding: gzip Data Raw: 32 36 31 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 bd 7d 69 57 e3 48 96 e8 f7 f7 2b ba 4e 57 95 93 21 fb a4 76 c9 cd d0 33 89 c1 80 0d 5e 01 b1 4c f6 3b 52 84 84 8d bc 00 5e 30 54 e7 fb ed ef 2e 21 5b b2 64 aa 3f 4d 9f d3 d9 96 22 e2 c6 dd b7 08 d1 cb e0 f5 2f ff 57 5b 19 66 e4 06 55 cb f4 5c 29 c2 e0 b0 f2 50 75 bf fe 45 d7 2c f8 a7 6a 7c fd 8b 8d 4f 86 0d ff 38 55 f8 c7 c6 5f a6 a3 fe b1 f1 87 83 53 6d 1d fe 31 34 7c 84 45 3c d7 c3 01 c3 83 7f 74 1c b5 71 c0 83 f5 55 9c e6 d1 2b 82 06 3b b8 26 4e 80 57 38 ae 1b f8 64 e1 2c da c0 85 5f 6e 0a c6 41 7c 74 85 58 15 67 eb 30 db 03 dc 1c 78 a0 ff 85 41 0b 11 d3 e0 85 05 ff 75 e1 c1 03 18 56 0a 83 00 c2 0a 9c 6d c3 4b 1c 40 b8 b8 a5 0b ab 11 41 7c e7 19 3f 2a 07 4b c5 26 dd 31 0f 1f 2a d2 4b 66 b2 9f b4 2a 5f 2b 7e bb 21 2f ef 3f 5e fc ee fb 21 3c ae 16 81 75 ec 25 12 47 dc ab 89 df 7d 3a 8f 5e 0e 71 e4 f9 e5 e5 63 e4 4d db f0 73 79 f9 4d 76 fa 49 cf b7 c7 38 f2 d1 9f ba ab fe f4 1e 7e be d4 92 d6 74 ee 8a 3e af 79 35 3c bb fe e6 e1 a4 d1 fd a4 09 5b fa f0 b3 3e 6f 89 8b 5a 72 f5 72 4a 80 9f ce 86 fb be 55 17 57 fc b8 5a bc ec 1f f5 93 19 4c 4c 06 37 a2 2f 96 63 f8 19 de 35 9b be b3 12 1d 9f d6 bc bf 5e 05 ef 6f 2f 08 f8 dd 4b 6c bf fd 2c 2f 0c 1f 1f 17 80 c1 e0 ce 15 0d 86 f6 16 0f e4 b9 37 75 7c bb 8f a3 93 f1 f4 c3 ef b9 a2 d5 4f 6e 11 aa 37 3d f6 bb 0d d1 ba 5d d0 68 6d 7a e2 5b 47 e2 b2 96 44 30 1a 34 cf 26 0b 2f 71 e0 e7 d8 6c c8 5e 3c a9 c1 4f df e9 c9 be e8 89 7e 2d d9 87 c7 a5 e1 d5 8f 96 a0 71 c0 87 71 e2 45 01 e1 e7 db 4d e9 3b b7 dd 0f c6 c2 77 be 89 d3 fe d4 3e aa 25 3a 82 70 bd a5 ef 1e 0f 57 4c 4c e4 4d 9f 7c 6b 20 ae 6b c9 05 8c ce 4d 57 b6 c7 d3 be 6f 9f 22 d4 5a 3f 39 11 fe b3 b8 64 96 46 b1 f5 cd 77 4c 99 72 ab 79 24 cf fa 30 d9 22 66 1c c7 47 f2 1c b0 f7 3b 44 d0 93 37 15 be 7d 2f fb 5e 32 c5 7d db 4f e2 c5 ac 8b 0b 06 e5 3b fd bb e1 78 fa 7a c2 38 d7 6e 47 e2 66 61 ca a6 1a ed 0d e4 a9 97 5c 00 cb 90 55 e3 f1 b4 ee db cf b2 ed 11 6f 7c a7 16 fa 6e 4c 7a d2 06 79 cb ce fe 0b 53 e3 f7 3a c1 72 51 17 2d 7e 7c ea 4f 87 be db 90 9d 5a d2 04 30 e1 78 7a e7 3b 47 a2 39 4e 6e 10 a3 ee b3 bc f4 80 40 6f da c7 c7 9e 8b d4 0c 7c 6b 72 4e 8f 73 79 56 43 e6 7c a0 de 8c 1f 83 86 ef b8 f2 54 f1 b8 03 9a 3b b3 2f fc 5e 1b f9 f4 36 4e 06 4f 73 53 9c a5 a3 f7 b2 73 bb 12 d7 4d 52 3f 40 41 34 fb c9 35 68 56 8c 90 3b ae 68 47 c3 89 ef 36 71 ad df 5d 7c 0c 67 c3 6b f8 19 1a 57 c9 71 48 cc f4 3b 67 53 bf 77 23 ba 3a 4d 7a f4 a6 f0 d8 12 97 7d 16 a2 33 ec f8 f6 47 6f a9 d8 d5 6e c9 96 1f 5f fb 5d de af dd 0c e2 7b 6f 01 10 3f 6a 49 e0 5b ed Data Ascii: 2617}iWH+NW!v3^L;R^0T.![d?M"/W[fU\)PuE,j\|O8U_Sm14\|E<tqU+;&NW8d,_nA\|tXg0xAuVmK@A\|?K&1Kf*_+~!/?^!<u%G}:^qcMsyMvI8~t>y5<[>oZrrJUWZLL7/c5^o/Kl,/7u\|On7=]hmz[GD04&/ql^<O~-qqEM;w>%:pWLLM\|k kMWo"Z?9dFwLry$0"fG;D7}/^2}O;xz8nGfa\Uo\|nLzyS:rQ-~\|OZ0xz;G9Nn@o\|krNsyVC\|T;/^6NOsSsMR?@A45hV;hG6q]\|gkWqH;gSw#:Mz}3Gon_]{o?jI[
Jan 7, 2021 07:32:57.328572989 CET	1678	IN	Data Raw: a6 df 56 7b b9 b2 71 37 12 cd d6 10 b7 7e ec 23 54 e0 3c 7a ad af 95 93 cb 1b d1 9b 0f e4 35 2b 8e 3c 83 11 2f e9 4f d5 26 9d 81 e8 8e 93 63 00 87 93 8f 9a a6 ec 84 81 05 3f 9f de 2e 4e a3 3b 32 47 a0 69 ea 3b 7a aa 5d a0 3f 43 e1 7f 13 67 2c 8f Data Ascii: V{q7~#T<z5+</O&c?.N;2Gi;z]?Cg,~L7ycUOdg1av}'ZEq!eeo~b0aNOG7^;-y$eK&am%l/wWD-o[$vx_a"~Vpf}RjIvF
Jan 7, 2021 07:32:57.328589916 CET	1679	IN	Data Raw: dd 3a 38 9d 5b 72 1a dd 7e 57 ce c7 18 e4 20 d6 bd 0e 66 90 c6 a6 d2 74 c5 b5 e9 9d fb 2e 67 35 bd f6 71 c0 5c 05 4f 01 89 c6 5c b4 18 30 44 5d c8 b1 4f 27 00 e2 bd 36 7d f3 5d fb 08 b4 99 cc a0 db fe f0 3b 57 42 a5 05 90 ad 81 97 e9 89 eb 33 82 Data Ascii: :8[r~W ft.g5q\O\0D]O'6}];WB38Bf_\|=Ql1!d^rNBx8e;+&kx&{uVc&sOQ^yFxStY@D-+NYG~3+zR`1<L19=x?
Jan 7, 2021 07:32:57.328608990 CET	1681	IN	Data Raw: 0d 1c eb 2a 60 0e 2c fa c9 f1 d8 83 ac ca e2 88 d6 bd 01 26 1e 63 34 f3 9d ab 27 c8 af dd 88 79 53 5b 82 1d 9d 5a 68 61 f5 08 32 f6 da 74 df 77 38 60 9f 2e 34 6c 30 a8 a2 f6 3b 34 ee da a7 7d 2e 82 24 a6 a3 98 e2 49 7d 0c b6 74 2f d3 80 dd bb 17 Data Ascii: `,&c4'yS[Zha2tw8`.4l0;4}.$I}t/7HSy _Dlk_@%f\+6-xGc29;2/m~$Lzi+-(Q{=8)bPYDt_qxx(
Jan 7, 2021 07:32:57.328625917 CET	1682	IN	Data Raw: eb 3f ac 5d 8c 32 91 93 6c 9a 79 82 6d 19 4a 8d 4a 1b 4b b3 4c 0b 52 c1 0d 99 3c 46 61 9d c6 76 d1 26 50 f3 18 a9 3c 70 c3 76 a1 28 20 83 d4 4d 5b 3a 59 e0 3c 86 e5 11 a4 dd 30 b6 0b b8 ae 6d cc 27 c7 39 89 b2 bf 8a e0 7f 72 de 46 37 f1 70 e1 e6 Data Ascii: ?]2lymJJKLR<Fav&P<pv( M[:Y<0m'9rF7p{OC0:f`]:bhr9hNdd9T>nvTL63T/m+V!Wa<G s$cO~2b>1w`c"k8
Jan 7, 2021 07:32:57.328641891 CET	1683	IN	Data Raw: 4b 79 80 0e 36 c5 4c 4c 27 f3 68 35 ff 1a bc 3e 2e c6 70 d8 34 83 b3 b3 c9 e1 64 31 1a 1d 6c b2 31 8b c0 c0 99 f4 df 33 3b fd 3c 58 23 70 88 8d f4 cc 74 c2 4f 75 a0 95 34 2c dd 8a 0d 0f a5 cb f2 cc e2 9c 0a 4c 8b 74 d7 4c 05 46 0f 59 b4 a9 4a e7 Data Ascii: Ky6LL'h5>.p4d1l13;<X#ptOu4,LtLFYJ&iKvFT^P9A'u\|Wq1e&#u5BDUb`L#/[&8R/A=rI_/@c6Ma4uE0ZA0n[HxpZ5/": z"U
Jan 7, 2021 07:32:57.328656912 CET	1685	IN	Data Raw: 36 7e f8 21 ab 4a 10 83 01 5a ea 16 d7 cb 71 63 03 aa 6f 3a 13 33 35 1b 6e 5b 67 c3 1c 8b 21 0b c7 43 2b 57 7a 43 ec de 5e cd 2a 59 44 c0 43 21 a4 77 d3 b2 fb db 21 74 ac 68 7f 69 19 66 35 17 5b 8a fb 07 68 7c ca 31 e3 fe 85 d5 bb f6 af 62 ce 96 Data Ascii: 6~!JZqco:35n[g!C+WzC^YDC!w!thif5[h\|1b^aYlPeKBiRmMnewtRr"T(OJ[:JpMs7]xyjJUMjYWR:i?\^>RoBZ=p
Jan 7, 2021 07:32:57.328677893 CET	1686	IN	Data Raw: d0 c9 50 61 9f bb 1b 9b 82 73 9d 41 56 03 c3 13 e9 8d 36 7e c8 52 a4 d3 5d a2 6c 06 97 fe ed 92 b0 6a d9 01 b5 6e dd a8 6a 07 7f d6 8c 47 cd 51 e7 de c8 d1 c2 6a ee 53 95 20 60 a0 a3 fb b4 8f 2e 31 7b 56 7e 0c 99 5b 02 84 ae ce a7 e9 4a 39 ff 51 Data Ascii: PasAV6~R]ljnjGQjS `.1{V~[J9QtR &*Eq1J9W>h05rMz'"iho_Cn{1PEC4xmBh.EPj4PW[',zdu@fRD,92]hu

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.3	49843	90.156.201.82	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:32:58.228722095 CET	1729	OUT	GET /garderobnye-komnaty.html HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Connection: Keep-Alive Host: perviyshkaf.ru
Jan 7, 2021 07:32:58.309055090 CET	1730	IN	HTTP/1.1 404 Not Found Date: Thu, 07 Jan 2021 06:32:58 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=10 Vary: Accept-Encoding Server: Apache Content-Encoding: gzip Data Raw: 63 66 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4c 8e bb 0e c2 30 0c 45 f7 7e 85 e9 4e 0d 88 31 ca 00 6d 05 52 79 08 85 81 31 28 a6 45 94 b8 24 01 d4 bf a7 81 85 f1 da f7 71 c4 28 df 2d d5 69 5f c0 4a 6d 2a d8 1f 17 d5 7a 09 e9 18 71 5d a8 12 31 57 f9 ef 33 cb 26 88 c5 36 95 89 68 c2 bd 95 a2 21 6d 06 11 ae a1 25 39 9f cc 61 cb 01 4a 7e 5a 23 f0 77 4c 04 7e 4d e2 cc a6 8f b9 a9 fc f3 0c 2a 11 9d 54 0d 81 a3 c7 93 7c 20 03 c7 43 05 58 b3 63 e3 83 7e 39 ee b8 c5 5a 3b 43 8e cf b6 a7 f1 8d ef 56 87 3e 8b 08 f0 d6 1e ec 50 78 89 85 c0 16 42 73 f5 e0 c9 bd c8 65 02 bb 08 f0 9d 1e c6 22 72 f2 01 00 00 ff ff 03 00 c0 6f f9 b7 ed 00 00 00 0d 0a Data Ascii: cfL0E~N1mRy1(E$q(-i_Jmzq]1W3&6h!m%9aJ~Z#wL~MT\| CXc~9Z;CV>PxBse"ro
Jan 7, 2021 07:32:58.309103966 CET	1730	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Jan 7, 2021 07:33:00.226941109 CET	1738	OUT	GET /3d-konstruktor-shkafov-kupe.html HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Connection: Keep-Alive Host: perviyshkaf.ru
Jan 7, 2021 07:33:00.305562019 CET	1738	IN	HTTP/1.1 404 Not Found Date: Thu, 07 Jan 2021 06:33:00 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=10 Vary: Accept-Encoding Server: Apache Content-Encoding: gzip Data Raw: 64 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4c 8e b1 8e c2 30 10 44 fb 7c c5 1e 7d b2 70 50 5a 2e 2e 09 3a a4 c0 21 64 8a 2b 83 bc 60 94 90 0d f6 26 e8 fe 9e 18 9a 2b 67 67 76 e6 a9 8f e2 27 37 bf fb 12 be cd b6 82 fd f1 ab da e4 30 4b 11 37 a5 59 23 16 a6 78 3b 9f d9 1c b1 dc cd 74 a2 9c dc 5a ad 1c d5 76 12 72 95 96 f4 6a be 82 1d 0b ac 79 e8 ac c2 f7 31 51 f8 0a a9 13 db bf f8 b7 d0 ff 32 93 4a 54 af 8d 23 f0 74 1f 28 08 59 38 1e 2a c0 0b 7b b6 41 ea d1 73 cf 2d 2e 6d da 70 17 c4 0f 8d b0 4f 83 6b ea 33 8f 69 33 f4 94 45 14 78 d4 01 ba a9 f8 1c 8b 81 3b 10 77 0d 10 c8 8f e4 33 85 7d 04 79 21 4c a3 11 3d 79 02 00 00 ff ff 03 00 6c 1b 4b 16 f5 00 00 00 0d 0a Data Ascii: d8L0D\|}pPZ..:!d+`&+ggv'70K7Y#x;tZvrjy1Q2JT#t(Y8*{As-.mpOk3i3Ex;w3}y!L=ylK
Jan 7, 2021 07:33:00.305609941 CET	1738	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.3	49850	213.180.204.205	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:33:03.346309900 CET	1760	OUT	GET /api/widget?token_url=http://ovd.ru/forum/vb_loginza.php HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Connection: Keep-Alive Host: loginza.ru
Jan 7, 2021 07:33:04.429546118 CET	1765	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 07 Jan 2021 06:33:04 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: sid=rta120dn4viv7jbvmqlds6ndq3; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Encoding: gzip Data Raw: 62 66 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 1a db 6e dc c6 f5 59 05 fa 0f 63 e6 22 a9 d0 92 bb 92 e5 da 7b 13 ea 4b 12 01 8e 23 38 0a 52 d7 30 16 43 72 76 77 24 2e 87 1e 0e 77 b5 89 0d b8 69 8b 16 48 81 a2 79 29 8a 02 05 fa d2 67 a5 4d 5a c7 46 93 5f a0 7e 21 5f d2 33 33 1c 5e f6 26 d9 f1 4b 00 2f 6c 91 1c 9e 39 e7 cc b9 9f 19 b6 2f dd fc e0 c6 e1 bd 83 5b 68 28 46 01 3a f8 e8 fa ed fd 1b 68 bd e6 38 1f ef dc 70 9c 9b 87 37 d1 2f df 3b 7c ff 36 6a d8 75 74 c8 71 18 53 41 59 88 03 c7 b9 75 67 1d ad 0f 85 88 9a 8e 33 99 4c ec c9 8e cd f8 c0 39 bc eb 9c 48 5c 0d 39 39 bb ad 89 d2 4c db 17 fe 7a f7 a7 3f 69 2b 8a 27 a3 20 8c 3b d6 3c 9e c6 b5 6b d7 f4 74 4b 02 35 03 1c 0e 3a 16 4f 2c 94 df 29 24 04 fb 70 5d 6b 0b 2a 02 d2 bd cd 06 34 44 82 21 36 f6 6d 9e 20 07 a9 91 4f 70 db d1 00 12 74 44 04 46 92 62 8d 3c 4c e8 b8 63 dd 60 a1 20 a1 a8 1d 4e 23 62 21 4f 3f 75 2c 41 4e 84 23 39 68 21 6f 88 79 4c 44 27 11 fd da 55 0b 39 12 0f fc 5b 5b 6b 07 34 3c 46 9c 04 1d 2b 16 d3 80 c4 43 42 84 85 04 60 ca 10 78 71 6c a1 21 27 fd 8e e5 38 81 e6 06 58 93 e3 ce 84 fa 03 22 7a 6a a6 0d 03 7b 63 90 b3 7d 2d 23 a0 29 48 8e 2f d5 6a f7 69 1f 05 02 ed df 42 57 1f a8 55 bc 32 c2 3d 4a ae 14 c4 77 76 33 ea ed d8 e3 34 12 28 e6 de 0c 82 a3 d8 d9 bf 75 d5 3e 8a 2b e4 8e f0 18 eb 29 56 b7 ed e8 3b 85 e7 d2 7d 12 fa b4 ff a0 56 93 0a 73 32 8d b5 5d e6 4f 91 17 e0 18 d4 cf c6 84 07 78 2a 35 0a 6f 3c 90 3e e1 48 31 d7 b1 22 ec fb 34 1c 34 1b db bb d1 09 aa 47 27 2d c0 0f 02 41 e9 df d3 67 67 4f ce 7e 93 fe 3b 7d 7e f6 79 fa 0d 4a ff 9c 3e 4f bf 4d 9f 21 4d 49 60 37 20 08 56 2a 86 1d 6b 67 17 a4 3a 24 74 30 04 c5 6e ef d4 95 f1 08 6e 18 e0 2c 09 fd eb 01 f3 8e 91 e4 4f dd 59 da ae 7c 03 03 76 41 78 2f 8e 38 15 04 54 d1 53 cf 56 f7 ed d0 8d a3 16 d8 97 3f 03 3f 74 19 f7 01 02 e1 80 0e 42 a0 21 89 03 ef 38 53 4a 66 f3 da 52 9d 3e e3 c9 c8 19 bb 3d 23 e8 68 18 59 b9 7c 12 39 31 8e 70 68 46 30 e7 6c 62 98 f1 02 16 13 25 75 80 80 0b ee 2e 60 a7 c2 3e 5f cc 3e 5c b8 16 cc cc e4 b1 5e cb 6d d2 17 2b 56 5c 48 31 f3 28 ad d0 b5 35 ad af bf a4 a7 a0 ab 6f 95 92 fe 55 28 0a 5e 0f 1b b3 9e 0b 76 d2 e8 e6 53 9d 55 93 b5 2d 9c fd 21 7d 9a 7e 99 3e 4b 9f e6 2f 7c 3a 36 9c 11 10 17 bf ce 4e 2c 63 55 3e 8d 23 b0 b8 66 08 52 68 59 8b e1 df 8f 07 fa cd 5a 09 fd a9 02 75 00 b6 3b 73 97 31 ba 80 93 82 cd 7f a4 df a5 4f cf 7e ad f8 4f bf 3b 7b a2 16 73 9a 7e 93 7e 95 7e ad 9f 2a dc 53 1f ec 9f b3 31 05 d9 c7 bd 80 c6 62 e5 02 22 75 b9 c7 12 e4 81 a5 80 21 21 2d 52 31 a4 31 8a a5 de 93 18 5c 09 4d 59 c2 11 f6 3c 50 97 90 20 38 9c 22 d6 07 30 82 62 c2 c7 d4 23 31 3c f7 09 27 3e 72 49 c0 26 36 fa 90 04 c4 13 08 1b 00 39 6d 32 a4 de 50 22 43 98 13 b0 72 0e 9e 33 85 Data Ascii: bfdnYc"{K#8R0Crvw$.wiHy)gMZF_~!_33^&K/l9/[h(F:h8p7/;\|6jutqSAYug3L9H\99Lz?i+' ;<ktK5:O,)$p]k4D!6m OptDFb<Lc` N#b!O?u,AN#9h!oyLD'U9[[k4<F+CB`xql!'8X"zj{c}-#)H/jiBWU2=Jwv34(u>+)V;}Vs2]Ox5o<>H1"44G'-AggO~;}~yJ>OM!MI`7 Vkg:$t0nn,OY\|vAx/8TSV??tB!8SJfR>=#hY\|91phF0lb%u.`>_>\^m+V\H1(5oU(^vSU-!}~>K/\|:6N,cU>#fRhYZu;s1O~O;{s~~~S1b"u!!-R11\MY<P 8"0b#1<'>rI&69m2P"Cr3
Jan 7, 2021 07:33:04.429608107 CET	1766	IN	Data Raw: 90 34 00 3e e5 5c 5b 0b 28 9a 93 6e b1 24 88 a9 d2 6e 8d 0c 73 c0 aa ef d7 94 eb 34 c1 ff 5b 48 c6 9a 9a f2 a8 26 52 c3 10 9c 03 82 79 13 b9 4c 0c 33 49 ac 55 7c 25 e2 64 bc 4c 6e cb 9d 4a ce ea a9 91 dc b3 32 c3 37 0e 5c 44 bc a6 8e a7 ef 30 3e Data Ascii: 4>\[(n$ns4[H&RyL3IU\|%dLnJ27\D0>!M#GlR+RKb9;X%'G$X+$fYbdZ7Y!ATCpwvH&ff$W!qC^QYO9TDn^Xv%( l.>
Jan 7, 2021 07:33:04.429632902 CET	1767	IN	Data Raw: 70 30 c6 de b4 16 31 70 87 e9 ea 6d ee 03 0d 8b 0e 14 6c f9 1c 72 de eb 72 13 65 13 b9 f3 e2 4e ad 6e 76 8b dc e9 8a ed f7 d5 1c e4 5b fb 78 b5 27 2d 90 60 f5 7c 74 b1 c4 8d 2e 73 44 f9 a1 df ca a3 68 80 f3 4b 87 5a 4c 7f 0a d1 c4 6e cc 82 44 90 Data Ascii: p01pmlrreNnv[x'-`\|t.sDhKZLnD`QRr%44@SG[Ep?X\{ujOHJ\=r8VDWsgWkzenuUK udh;:gxX8GNlog
Jan 7, 2021 07:33:04.429651976 CET	1767	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Jan 7, 2021 07:33:06.656469107 CET	1769	OUT	GET /css/widget_style.css?v1.0.9 HTTP/1.1 Accept: text/css, / Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: loginza.ru Connection: Keep-Alive Cookie: sid=rta120dn4viv7jbvmqlds6ndq3
Jan 7, 2021 07:33:06.732043982 CET	1771	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 07 Jan 2021 06:33:06 GMT Content-Type: text/css Last-Modified: Wed, 05 Apr 2017 10:44:48 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"58e4caa0-1b93" Expires: Sat, 06 Feb 2021 06:33:06 GMT Cache-Control: max-age=2592000 Content-Encoding: gzip Data Raw: 39 30 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 bd 59 49 6f 23 c7 15 3e 47 80 fe 43 43 83 40 1e 63 d8 e2 a6 11 17 64 f1 0c 62 f8 10 5f ec c9 99 28 76 17 c9 0a 9b 5d 44 77 53 a4 2c 04 f0 82 6c 98 43 90 53 82 e4 10 f8 1f 68 64 4f 2c 7b 6c f9 2f 34 ff 51 be 57 4b b3 5a 64 53 9a 20 88 a8 a5 97 57 6f 7f df 7b 55 fa e5 f3 0f de fb e8 e3 5f bd f0 8e 7e f3 e2 fd 5a e7 a8 7f 78 30 94 e1 85 77 19 c8 48 26 bd 47 5d f5 d5 1f c9 38 ab a5 e2 13 de 6b 34 e7 2b 7d 3b 62 33 11 5d f4 8e de 4b 04 8b 8e 9e 1c bd 60 13 39 63 47 fd 39 0b 43 11 8f 7b 75 10 ce 58 32 16 b1 ba fc dd e1 c1 c9 bb 5e fe af fc 36 7f b3 fe 22 ff 71 fd 29 ae be c1 ef ab f5 1f f3 1f f0 fb 2f 5e fe 4d 7e 45 97 f9 75 fe 7a fd 59 fe 5d 7e e5 bd 7b 72 78 e0 cb 73 9e 44 0c 4a 0d 59 30 1d 27 72 11 87 3d 11 4f 78 22 b2 fe e6 51 4d ab 9c 25 2c 4e e7 2c e1 71 e9 a5 98 b1 31 ef 2d 92 e8 9d 13 31 1b 9f 2c 45 38 e6 d9 89 e1 ec cf e3 f1 e3 be d1 f0 cb f5 67 eb 97 f9 1b 88 bf 51 e2 59 e1 8c 7a bd db 1d 8d fa 19 5f 65 b5 90 07 32 61 99 90 71 2f 96 31 ef 0f 65 12 f2 a4 36 94 59 26 67 bd c6 7c e5 85 2c 9d f0 d0 7b 64 56 81 3b eb 4d 48 60 c1 ef ac 11 74 9a ed b7 e5 67 56 11 3f 5f 2e 32 78 45 89 76 9c 1c f0 28 82 0b 02 44 e1 67 75 65 43 c6 86 11 b7 94 e4 a8 88 cd 53 de f3 ec 95 1b 28 65 1e 8b c4 38 ee 45 7c 94 19 b7 10 4f 13 d9 12 cf 2c f4 2e 6d c4 3d 0a b9 f1 e2 6d fe dd fa 53 c4 f9 2b 44 fb 65 fe ad 97 bf 82 4b f1 50 ab 93 f8 2a 8a cf 22 19 4c 3d 62 e1 24 18 7c d7 8f 44 cc 6b 13 2e c6 93 ac d7 a0 07 e0 9a 25 fe 84 b3 50 af b9 dc 7e 39 92 32 2b bf 6c b5 cc ca d0 9f 68 27 b9 29 64 f2 e5 d1 08 21 25 f6 a1 7f ae 89 7e 0d ab 9f 40 2b 7b ff 11 a9 51 5a b9 3b 99 c6 09 bf 18 84 32 f3 c7 62 f4 d8 4d cc 84 cf 39 cb 7a fa 4f ed c2 7d 65 ca 8c 74 40 4a 66 93 8d b5 85 78 52 a7 24 7d 2e 53 a1 12 2f 93 73 cf 86 68 9f ba a5 05 09 59 63 0c de 04 e1 39 0a 1c 15 53 92 e3 e8 86 ac cd 44 c0 a2 9a ce 0b 08 36 1c c8 e9 94 d1 4e 19 ee 76 8e 26 1c 0c c7 f7 78 67 65 2a c9 a6 33 ec 32 32 7e ee e9 2c 76 32 ae a6 8c e9 79 a7 f3 95 49 bb bf 01 3d be 22 88 c1 cf b5 ca 37 fc b9 c9 bf ce ff 0d 48 f9 dc 00 ca a4 51 94 a0 29 4e 27 fd da c8 99 0d 6c 51 4a 13 7b 37 b5 ff 01 8c ba cd 7f 2c 00 42 c4 f3 45 e6 0f c5 f8 d9 02 c5 1f 17 bc 3b 2d fa ec 8a 76 7d 84 8f fb 62 b7 cf 86 8a df 43 7c e6 e8 df 81 fe ea 76 a9 cb 67 28 a3 70 17 60 5b 3f 13 54 a5 32 12 40 aa a0 4d 9f 02 c0 61 36 45 f9 8e 79 77 30 ac c9 bb 41 d8 71 6d b1 69 d3 1e b1 51 e8 be d8 6b a4 42 c6 8d a9 1a d2 1c dd c2 16 0f c0 ce 84 59 77 11 74 8c 6b 15 e5 af 4d 60 0b 55 df 17 3c 02 aa e8 92 ea 9e fe b4 6f 94 3a 53 5f ae 52 56 5b 14 e0 fd 39 4c 5c 37 3a 16 cd a8 56 2e 70 e3 7f d5 2e 9b e4 44 37 1c b1 4c 66 2c 2a 07 c4 76 4e 03 e4 8e d5 bc 4e 9f 22 22 d4 7b e1 01 dd 49 dd 34 cc af 01 b2 af f2 5b 6a a7 9e e9 ad d7 28 85 6f 91 f9 af d5 43 d5 48 e7 89 3c 17 68 53 d6 33 8d 3a 71 34 50 da 3a d3 dc 7d 4b f5 1c 90 bf a1 24 43 0c 65 9b 72 4c e9 51 a2 7d e2 15 b7 de a5 d3 45 02 00 0b 4f ee 77 af 95 4b 1e 56 0d d9 09 88 f1 70 2c 8d af 5d 6e 05 bc 69 41 9e 91 07 05 0b 7d c8 14 9d b8 8e 92 36 93 1d 31 bb 53 d4 Data Ascii: 908YIo#>GCC@cdb_(v]DwS,lCShdO,{l/4QWKZdS Wo{U_~Zx0wH&G]8k4+};b3]K`9cG9C{uX2^6"q)/^M~EuzY]~{rxsDJY0'r=Ox"QM%,N,q1-1,E8gQYz_e2aq/1e6Y&g\|,{dV;MH`tgV?_.2xEv(DgueCS(e8E\|O,.m=mS+DeKP"L=b$\|Dk.%P~92+lh')d!%~@+{QZ;2bM9zO}et@JfxR$}.S/shYc9SD6Nv&xge322~,v2yI="7HQ)N'lQJ{7,BE;-v}bC\|vg(p`[?T2@Ma6Eyw0AqmiQkBYwtkM`U<o:S_RV[9L\7:V.p.D7Lf,*vNN""{I4[j(oCH<hS3:q4P:}K$CerLQ}EOwKVp,]niA}61S
Jan 7, 2021 07:33:06.732084990 CET	1773	IN	Data Raw: 51 6c a0 f2 b4 98 17 54 db 28 5e 8b 40 16 fe 22 67 da 1e 45 d7 33 b6 aa 19 84 b7 b7 ee 6b 93 d7 7f d5 4d 12 93 87 8a 28 21 18 e5 36 86 a1 5b 7c 5e ad ff 9c bf 06 f8 dc 50 3f bd c5 f7 fa 4f b8 7e 45 83 d2 fa f7 aa b1 86 e2 dc e7 49 22 93 67 72 e5 Data Ascii: QlT(^@"gE3kM(!6[\|^P?O~EI"gr]"cnJG[y(PZde\5j!t#b86,2'M!e-Ojvh@IZ&h>CFf Ki<c`e{*N[.g?9V1M,
Jan 7, 2021 07:33:06.735996962 CET	1773	OUT	GET /js/widget_plugins.js HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: loginza.ru Connection: Keep-Alive Cookie: sid=rta120dn4viv7jbvmqlds6ndq3
Jan 7, 2021 07:33:06.812849045 CET	1790	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 07 Jan 2021 06:33:06 GMT Content-Type: application/javascript Content-Length: 8906 Last-Modified: Wed, 05 Apr 2017 10:44:48 GMT Connection: keep-alive ETag: "58e4caa0-22ca" Expires: Sat, 06 Feb 2021 06:33:06 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 2f 2a 2a 0d 0a 20 2a 20 43 6f 6f 6b 69 65 20 70 6c 75 67 69 6e 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 36 20 4b 6c 61 75 73 20 48 61 72 74 6c 20 28 73 74 69 6c 62 75 65 72 6f 2e 64 65 29 0d 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 61 6e 64 20 47 50 4c 20 6c 69 63 65 6e 73 65 73 3a 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6e 75 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 67 70 6c 2e 68 74 6d 6c 0d 0a 20 2a 0d 0a 20 2a 2f 0d 0a 0d 0a 2f 2a 2a 0d 0a 20 2a 20 43 72 65 61 74 65 20 61 20 63 6f 6f 6b 69 65 20 77 69 74 68 20 74 68 65 20 67 69 76 65 6e 20 6e 61 6d 65 20 61 6e 64 20 76 61 6c 75 65 20 61 6e 64 20 6f 74 68 65 72 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 73 2e 0d 0a 20 2a 0d 0a 20 2a 20 40 65 78 61 6d 70 6c 65 20 24 2e 63 6f 6f 6b 69 65 28 27 74 68 65 5f 63 6f 6f 6b 69 65 27 2c 20 27 74 68 65 5f 76 61 6c 75 65 27 29 3b 0d 0a 20 2a 20 40 64 65 73 63 20 53 65 74 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 61 20 63 6f 6f 6b 69 65 2e 0d 0a 20 2a 20 40 65 78 61 6d 70 6c 65 20 24 2e 63 6f 6f 6b 69 65 28 27 74 68 65 5f 63 6f 6f 6b 69 65 27 2c 20 27 74 68 65 5f 76 61 6c 75 65 27 2c 20 7b 20 65 78 70 69 72 65 73 3a 20 37 2c 20 70 61 74 68 3a 20 27 2f 27 2c 20 64 6f 6d 61 69 6e 3a 20 27 6a 71 75 65 72 79 2e 63 6f 6d 27 2c 20 73 65 63 75 72 65 3a 20 74 72 75 65 20 7d 29 3b 0d 0a 20 2a 20 40 64 65 73 63 20 43 72 65 61 74 65 20 61 20 63 6f 6f 6b 69 65 20 77 69 74 68 20 61 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 6f 70 74 69 6f 6e 73 2e 0d 0a 20 2a 20 40 65 78 61 6d 70 6c 65 20 24 2e 63 6f 6f 6b 69 65 28 27 74 68 65 5f 63 6f 6f 6b 69 65 27 2c 20 27 74 68 65 5f 76 61 6c 75 65 27 29 3b 0d 0a 20 2a 20 40 64 65 73 63 20 43 72 65 61 74 65 20 61 20 73 65 73 73 69 6f 6e 20 63 6f 6f 6b 69 65 2e 0d 0a 20 2a 20 40 65 78 61 6d 70 6c 65 20 24 2e 63 6f 6f 6b 69 65 28 27 74 68 65 5f 63 6f 6f 6b 69 65 27 2c 20 6e 75 6c 6c 29 3b 0d 0a 20 2a 20 40 64 65 73 63 20 44 65 6c 65 74 65 20 61 20 63 6f 6f 6b 69 65 20 62 79 20 70 61 73 73 69 6e 67 20 6e 75 6c 6c 20 61 73 20 76 61 6c 75 65 2e 20 4b 65 65 70 20 69 6e 20 6d 69 6e 64 20 74 68 61 74 20 79 6f 75 20 68 61 76 65 20 74 6f 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 70 61 74 68 20 61 6e 64 20 64 6f 6d 61 69 6e 0d 0a 20 2a 20 20 20 20 20 20 20 75 73 65 64 20 77 68 65 6e 20 74 68 65 20 63 6f 6f 6b 69 65 20 77 61 73 20 73 65 74 2e 0d 0a 20 2a 0d 0a 20 2a 20 40 70 61 72 61 6d 20 53 74 72 69 6e 67 20 6e 61 6d 65 20 54 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 63 6f 6f 6b 69 65 2e 0d 0a 20 2a 20 40 70 61 72 61 6d 20 53 74 72 69 6e 67 20 76 61 6c 75 65 20 54 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 63 6f 6f 6b 69 65 2e 0d 0a 20 2a 20 40 70 61 72 61 6d 20 4f 62 6a 65 63 74 20 6f 70 74 69 6f 6e 73 20 41 6e 20 6f 62 6a 65 63 74 20 6c 69 74 65 72 61 6c 20 63 6f 6e 74 61 69 6e 69 6e 67 20 6b 65 79 2f 76 61 6c 75 65 Data Ascii: /** * Cookie plugin * * Copyright (c) 2006 Klaus Hartl (stilbuero.de) * Dual licensed under the MIT and GPL licenses: * http://www.opensource.org/licenses/mit-license.php * http://www.gnu.org/licenses/gpl.html * //* * Create a cookie with the given name and value and other optional parameters. * * @example $.cookie('the_cookie', 'the_value'); * @desc Set the value of a cookie. * @example $.cookie('the_cookie', 'the_value', { expires: 7, path: '/', domain: 'jquery.com', secure: true }); * @desc Create a cookie with all available options. * @example $.cookie('the_cookie', 'the_value'); * @desc Create a session cookie. * @example $.cookie('the_cookie', null); * @desc Delete a cookie by passing null as value. Keep in mind that you have to use the same path and domain * used when the cookie was set. * * @param String name The name of the cookie. * @param String value The value of the cookie. * @param Object options An object literal containing key/value
Jan 7, 2021 07:33:06.812906027 CET	1791	IN	Data Raw: 20 70 61 69 72 73 20 74 6f 20 70 72 6f 76 69 64 65 20 6f 70 74 69 6f 6e 61 6c 20 63 6f 6f 6b 69 65 20 61 74 74 72 69 62 75 74 65 73 2e 0d 0a 20 2a 20 40 6f 70 74 69 6f 6e 20 4e 75 6d 62 65 72 7c 44 61 74 65 20 65 78 70 69 72 65 73 20 45 69 74 68 Data Ascii: pairs to provide optional cookie attributes. * @option Number\|Date expires Either an integer specifying the expiration date from now on in days or a Date object. * If a negative value is specified (e.g. a date
Jan 7, 2021 07:33:06.812943935 CET	1793	IN	Data Raw: 69 6c 62 75 65 72 6f 2e 64 65 0d 0a 20 2a 2f 0d 0a 6a 51 75 65 72 79 2e 63 6f 6f 6b 69 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 2c 20 76 61 6c 75 65 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 Data Ascii: ilbuero.de */jQuery.cookie = function(name, value, options) { if (typeof value != 'undefined') { // name and value given, set cookie options = options \|\| {}; if (value === null) { value = '';
Jan 7, 2021 07:33:06.812980890 CET	1794	IN	Data Raw: 6c 73 65 20 7b 20 2f 2f 20 6f 6e 6c 79 20 6e 61 6d 65 20 67 69 76 65 6e 2c 20 67 65 74 20 63 6f 6f 6b 69 65 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 56 61 6c 75 65 20 3d 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 Data Ascii: lse { // only name given, get cookie var cookieValue = null; if (document.cookie && document.cookie != '') { var cookies = document.cookie.split(';'); for (var i = 0; i < cookies.length; i++) {
Jan 7, 2021 07:33:06.813019037 CET	1796	IN	Data Raw: 64 73 3d 27 30 27 2b 73 65 63 6f 6e 64 73 3b 76 61 72 20 6d 69 6c 6c 69 3d 6f 2e 67 65 74 55 54 43 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 28 29 3b 69 66 28 6d 69 6c 6c 69 3c 31 30 30 29 6d 69 6c 6c 69 3d 27 30 27 2b 6d 69 6c 6c 69 3b 69 66 28 6d 69 Data Ascii: ds='0'+seconds;var milli=o.getUTCMilliseconds();if(milli<100)milli='0'+milli;if(milli<10)milli='0'+milli;return'"'+year+'-'+month+'-'+day+'T'+hours+':'+minutes+':'+seconds+'.'+milli+'Z"';}if(o.constructor===Array){var ret=[];for(var i=0;
Jan 7, 2021 07:33:06.813055992 CET	1797	IN	Data Raw: 6f 64 65 41 74 28 29 3b 72 65 74 75 72 6e 27 5c 5c 75 30 30 27 2b 4d 61 74 68 2e 66 6c 6f 6f 72 28 63 2f 31 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 28 63 25 31 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3b 7d 29 2b 27 22 27 3b 7d 0d 0a Data Ascii: odeAt();return'\\u00'+Math.floor(c/16).toString(16)+(c%16).toString(16);})+'"';}return'"'+string+'"';};var _escapeable=/["\\\x00-\x1f\x7f-\x9f]/g;var _meta={'\b':'\\b','\t':'\\t','\n':'\\n','\f':'\\f','\r':'\\r','"':'\\"','\\':'\\\\'};})(jQu
Jan 7, 2021 07:33:06.813091993 CET	1798	IN	Data Raw: 24 32 2e 4e 29 3b 24 28 6c 29 2e 4f 28 24 32 2e 70 29 3b 24 28 6c 29 2e 31 68 28 24 32 2e 70 29 3b 24 28 6c 29 2e 41 28 24 32 2e 70 29 3b 24 28 31 69 29 2e 31 6a 28 24 32 2e 70 29 3b 33 28 24 2e 31 6b 2e 31 6c 29 7b 6c 2e 4f 28 29 7d 24 32 2e 68 Data Ascii: $2.N);$(l).O($2.p);$(l).1h($2.p);$(l).A($2.p);$(1i).1j($2.p);3($.1k.1l){l.O()}$2.h.y=1}},N:j(){3($2.h.m){l.1m($2.h.m);$2.h.m=0}},B:{6:j(a){t b=\'\';3(a){3(a.C($2.5.s.6)){3(I a.C($2.5.s.6)[1]!==\'J\'){b=a.C($2.5.s.6)[1]}}}1n b}},A:j(){w(t i K $
Jan 7, 2021 07:33:06.815201998 CET	1799	OUT	GET /img/widget/coner_sprite.png HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: loginza.ru Connection: Keep-Alive Cookie: sid=rta120dn4viv7jbvmqlds6ndq3
Jan 7, 2021 07:33:06.892987967 CET	1843	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 07 Jan 2021 06:33:06 GMT Content-Type: image/png Content-Length: 1482 Last-Modified: Wed, 05 Apr 2017 10:44:48 GMT Connection: keep-alive ETag: "58e4caa0-5ca" Expires: Sat, 06 Feb 2021 06:33:06 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0b 00 00 00 58 08 06 00 00 00 23 b6 0d 7f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 35 35 37 35 39 46 42 45 33 45 36 39 31 31 45 30 39 36 37 39 46 46 44 42 43 35 45 46 44 30 33 30 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 35 35 37 35 39 46 42 46 33 45 36 39 31 31 45 30 39 36 37 39 46 46 44 42 43 35 45 46 44 30 33 30 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 35 35 37 35 39 46 42 43 33 45 36 39 31 31 45 30 39 36 37 39 46 46 44 42 43 35 45 46 44 30 33 30 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 35 35 37 35 39 46 42 44 33 45 36 39 31 31 45 30 39 36 37 39 46 46 44 42 43 35 45 46 44 30 33 30 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 0d ae 38 6d 00 00 02 40 49 44 41 54 78 da ec 56 3b 6b 1b 41 10 9e 3d 9d 74 ba 23 44 72 61 cb 55 54 ba 70 e3 ca 20 50 91 32 55 c0 10 48 15 70 65 50 4a bb 0a 84 40 0a 63 57 22 95 05 69 0d 81 54 01 41 fe 41 aa 40 20 10 48 e5 c2 4a 61 b9 91 8d 20 48 67 3d 76 f3 cd e9 6c 9f 94 7b ec a5 92 82 06 86 b9 93 be fd 76 1e 7b 33 2b 94 52 14 25 bf 5a ad 27 30 cf a0 5b d0 0d 33 02 b4 0b 53 cb db f6 b6 e3 38 94 cb e5 28 9b cd 12 31 73 50 5b e7 e7 ef da ed b6 ba 71 5d 35 2b b3 c0 Data Ascii: PNGIHDRX#tEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:55759FBE3E6911E09679FFDBC5EFD030" xmpMM:DocumentID="xmp.did:55759FBF3E6911E09679FFDBC5EFD030"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:55759FBC3E6911E09679FFDBC5EFD030" stRef:documentID="xmp.did:55759FBD3E6911E09679FFDBC5EFD030"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>8m@IDATxV;kA=t#DraUTp P2UHpePJ@cW"iTAA@ HJa Hg=vl{v{3+R%Z'0[3S8(1sP[q]5+
Jan 7, 2021 07:33:06.895035028 CET	1844	OUT	GET /img/widget/overlay.png HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: loginza.ru Connection: Keep-Alive Cookie: sid=rta120dn4viv7jbvmqlds6ndq3
Jan 7, 2021 07:33:06.970433950 CET	1883	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 07 Jan 2021 06:33:06 GMT Content-Type: image/png Content-Length: 264 Last-Modified: Wed, 05 Apr 2017 10:44:48 GMT Connection: keep-alive ETag: "58e4caa0-108" Expires: Sat, 06 Feb 2021 06:33:06 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 66 00 00 00 65 08 06 00 00 00 bf 4b 96 cc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 aa 49 44 41 54 78 da ec d1 41 01 00 00 04 c0 40 c4 52 49 48 d5 d4 f0 b8 45 d8 65 f4 6c e8 5d 65 01 18 81 01 23 30 60 04 46 60 c0 08 0c 18 81 11 18 30 02 03 46 60 c0 08 8c c0 80 11 18 30 02 23 30 60 04 06 8c c0 80 11 18 81 01 23 30 60 04 46 60 c0 08 0c 18 81 01 23 30 02 03 46 60 c0 08 8c c0 80 11 18 30 02 23 30 60 04 06 8c c0 80 11 18 81 01 23 30 60 04 46 60 c0 08 0c 18 81 01 23 30 02 03 46 60 c0 08 8c c0 80 11 18 30 02 03 46 60 04 06 8c c0 80 11 18 81 01 23 30 60 04 46 60 c0 08 0c 18 81 01 a3 27 9d 00 03 00 bc 91 02 2e 59 66 58 f7 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRfeKtEXtSoftwareAdobe ImageReadyqe<IDATxA@RIHEel]e#0`F`0F`0#0`#0`F`#0F`0#0`#0`F`#0F`0F`#0`F`'.YfXIENDB`
Jan 7, 2021 07:33:09.039159060 CET	1924	OUT	GET /img/widget/provider_bg.png HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: loginza.ru Connection: Keep-Alive Cookie: sid=rta120dn4viv7jbvmqlds6ndq3; _ym_uid=1610033587112486313; _ym_d=1610033587
Jan 7, 2021 07:33:09.114537001 CET	1929	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 07 Jan 2021 06:33:09 GMT Content-Type: image/png Content-Length: 1340 Last-Modified: Wed, 05 Apr 2017 10:44:48 GMT Connection: keep-alive ETag: "58e4caa0-53c" Expires: Sat, 06 Feb 2021 06:33:09 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 66 00 00 00 25 08 06 00 00 00 b0 13 9c a0 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 38 37 45 44 32 35 44 43 44 30 42 41 31 31 44 46 41 36 46 30 45 44 34 39 37 31 39 32 41 41 30 36 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 38 37 45 44 32 35 44 44 44 30 42 41 31 31 44 46 41 36 46 30 45 44 34 39 37 31 39 32 41 41 30 36 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 38 37 45 44 32 35 44 41 44 30 42 41 31 31 44 46 41 36 46 30 45 44 34 39 37 31 39 32 41 41 30 36 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 38 37 45 44 32 35 44 42 44 30 42 41 31 31 44 46 41 36 46 30 45 44 34 39 37 31 39 32 41 41 30 36 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 5a 5a 97 f1 00 00 01 b2 49 44 41 54 78 da ec 9b 41 4b 02 41 18 86 9d 75 27 59 dd 45 74 09 42 02 89 45 84 08 fa 25 dd 82 e8 26 1d 92 bc d8 ad b3 3f 20 a1 4b 50 50 87 0e 1d ba f6 23 3a 76 8b c2 bd 24 e2 6d 45 5c dc d8 5a b4 77 c4 53 77 db 89 de 07 86 19 3d 7e 0f ef f7 ad b8 23 7c df cf 2c 69 60 9d 08 21 b6 0c c3 78 c5 1e 64 c8 ca 99 cd 66 d5 f9 7c be 8d 75 8b 8f 5d cf f3 16 42 c4 52 cc 39 64 ec 3b 8e d3 71 5d f7 85 e5 fa 7d 86 c3 e1 61 1c c7 4d 08 3a 82 9c 7b 25 e6 Data Ascii: PNGIHDRf%tEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:87ED25DCD0BA11DFA6F0ED497192AA06" xmpMM:DocumentID="xmp.did:87ED25DDD0BA11DFA6F0ED497192AA06"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:87ED25DAD0BA11DFA6F0ED497192AA06" stRef:documentID="xmp.did:87ED25DBD0BA11DFA6F0ED497192AA06"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>ZZIDATxAKAu'YEtBE%&? KPP#:v$mE\ZwSw=~#\|,i`!xdf\|u]BR9d;q]}aM:{%

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.3	49851	213.180.204.205	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:33:06.801182985 CET	1775	OUT	GET /js/widget_api.pack.js?rev=20110902vk HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: loginza.ru Connection: Keep-Alive Cookie: sid=rta120dn4viv7jbvmqlds6ndq3
Jan 7, 2021 07:33:06.877840042 CET	1804	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 07 Jan 2021 06:33:06 GMT Content-Type: application/javascript Content-Length: 8663 Last-Modified: Wed, 05 Apr 2017 10:44:48 GMT Connection: keep-alive ETag: "58e4caa0-21d7" Expires: Sat, 06 Feb 2021 06:33:06 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 65 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 70 2c 61 2c 63 2c 6b 2c 65 2c 64 29 7b 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 28 63 3c 61 3f 22 22 3a 65 28 70 61 72 73 65 49 6e 74 28 63 2f 61 29 29 29 2b 28 28 63 3d 63 25 61 29 3e 33 35 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 63 2b 32 39 29 3a 63 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 29 7d 3b 69 66 28 21 27 27 2e 72 65 70 6c 61 63 65 28 2f 5e 2f 2c 53 74 72 69 6e 67 29 29 7b 77 68 69 6c 65 28 63 2d 2d 29 64 5b 65 28 63 29 5d 3d 6b 5b 63 5d 7c 7c 65 28 63 29 3b 6b 3d 5b 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 5b 65 5d 7d 5d 3b 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 27 5c 5c 77 2b 27 7d 3b 63 3d 31 3b 7d 3b 77 68 69 6c 65 28 63 2d 2d 29 69 66 28 6b 5b 63 5d 29 70 3d 70 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 27 5c 5c 62 27 2b 65 28 63 29 2b 27 5c 5c 62 27 2c 27 67 27 29 2c 6b 5b 63 5d 29 3b 72 65 74 75 72 6e 20 70 3b 7d 28 27 6b 20 33 3d 7b 77 3a 7b 32 55 3a 7b 37 3a 64 2c 66 3a 7a 2c 67 3a 5c 27 33 64 5c 27 2c 35 3a 5c 27 6d 3a 2f 2f 32 55 2e 4b 5c 27 7d 2c 32 46 3a 7b 37 3a 64 2c 66 3a 64 2c 67 3a 5c 27 33 66 5c 27 2c 35 3a 5c 27 6d 3a 2f 2f 32 46 2e 47 5c 27 7d 2c 33 68 3a 7b 37 3a 64 2c 4a 3a 5c 27 32 61 5c 27 2c 67 3a 5c 27 31 49 2e 47 5c 27 2c 35 3a 5c 27 6d 3a 2f 2f 33 6c 2e 31 49 2e 47 5c 27 7d 2c 32 41 3a 7b 37 3a 64 2c 4a 3a 5c 27 31 43 5c 27 2c 67 3a 5c 27 33 65 5c 27 2c 35 3a 5c 27 6d 3a 2f 2f 32 41 2e 47 5c 27 7d 2c 32 4f 3a 7b 37 3a 64 2c 4a 3a 5c 27 32 6b 5c 27 2c 67 3a 5c 27 33 6a 5c 27 2c 35 3a 5c 27 6d 3a 2f 2f 31 71 2e 32 4f 2e 47 5c 27 7d 2c 32 4e 3a 7b 37 3a 64 2c 4a 3a 5c 27 32 74 5c 27 2c 67 3a 5c 27 33 6e 5c 27 2c 35 3a 5c 27 6d 3a 2f 2f 31 71 2e 32 4e 2e 4b 5c 27 7d 2c 31 54 3a 7b 37 3a 64 2c 66 3a 64 2c 67 3a 5c 27 33 46 5c 27 2c 35 3a 5c 27 6d 3a 2f 2f 31 54 2e 47 5c 27 7d 2c 32 50 3a 7b 37 3a 64 2c 4a 3a 5c 27 31 43 5c 27 2c 67 3a 5c 27 33 48 5c 27 2c 35 3a 5c 27 6d 3a 2f 2f 32 50 2e 4b 5c 27 7d 2c 32 7a 3a 7b 37 3a 64 2c 4a 3a 5c 27 31 43 5c 27 2c 67 3a 5c 27 33 44 5c 27 2c 35 3a 5c 27 6d 3a 2f 2f 31 71 2e 32 7a 2e 4b 5c 27 7d 2c 33 39 3a 7b 37 3a 7a 2c 66 3a 64 2c 67 3a 5c 27 33 4c 20 33 70 5c 27 2c 35 3a 5c 27 6d 3a 2f 2f 33 39 2e 47 5c 27 7d 2c 32 5a 3a 7b 37 3a 64 2c 66 3a 64 2c 67 3a 5c 27 33 71 5c 27 2c 35 3a 5c 27 6d 3a 2f 2f 32 5a 2e 4b 5c 27 7d 2c 32 56 3a 7b 37 3a 7a 2c 66 3a 64 2c 67 3a 5c 27 33 75 5c 27 2c 35 3a 5c 27 6d 3a 2f 2f 32 56 2e 47 5c 27 7d 2c 33 34 3a 7b 37 3a 7a 2c 66 3a 64 2c 67 3a 5c 27 33 41 5c 27 2c 35 3a 5c 27 6d 3a 2f 2f 33 34 2e 47 5c 27 7d 2c 33 32 3a 7b 37 3a 64 2c 66 3a 7a 2c 67 3a 5c 27 33 78 5c 27 2c 35 3a 5c 27 6d 3a 2f 2f 33 32 2e 4b 5c 27 7d 2c 32 65 3a 7b 37 3a 64 2c 66 3a 64 2c 67 3a 5c 27 32 63 2e 32 64 5c 27 2c 35 3a 5c 27 6d 3a 2f 2f 31 71 2e 32 63 2e 32 64 5c 27 7d 2c 32 71 3a 7b 37 3a 7a 2c 66 3a 64 2c 67 3a 5c 27 33 77 5c 27 2c 35 3a 71 7d 2c 33 76 3a 7b 37 3a 7a 2c 66 3a 64 2c 67 3a 5c 27 33 7a 2e 33 79 5c 27 2c 35 3a 5c 27 6d 3a 2f 2f 32 71 2e 31 49 2e 47 2f 5c 27 7d 2c 32 67 3a 7b 37 Data Ascii: eval(function(p,a,c,k,e,d){e=function(c){return(c<a?"":e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)d[e(c)]=k[c]\|\|e(c);k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1;};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p;}('k 3={w:{2U:{7:d,f:z,g:\'3d\',5:\'m://2U.K\'},2F:{7:d,f:d,g:\'3f\',5:\'m://2F.G\'},3h:{7:d,J:\'2a\',g:\'1I.G\',5:\'m://3l.1I.G\'},2A:{7:d,J:\'1C\',g:\'3e\',5:\'m://2A.G\'},2O:{7:d,J:\'2k\',g:\'3j\',5:\'m://1q.2O.G\'},2N:{7:d,J:\'2t\',g:\'3n\',5:\'m://1q.2N.K\'},1T:{7:d,f:d,g:\'3F\',5:\'m://1T.G\'},2P:{7:d,J:\'1C\',g:\'3H\',5:\'m://2P.K\'},2z:{7:d,J:\'1C\',g:\'3D\',5:\'m://1q.2z.K\'},39:{7:z,f:d,g:\'3L 3p\',5:\'m://39.G\'},2Z:{7:d,f:d,g:\'3q\',5:\'m://2Z.K\'},2V:{7:z,f:d,g:\'3u\',5:\'m://2V.G\'},34:{7:z,f:d,g:\'3A\',5:\'m://34.G\'},32:{7:d,f:z,g:\'3x\',5:\'m://32.K\'},2e:{7:d,f:d,g:\'2c.2d\',5:\'m://1q.2c.2d\'},2q:{7:z,f:d,g:\'3w\',5:q},3v:{7:z,f:d,g:\'3z.3y\',5:\'m://2q.1I.G/\'},2g:{7
Jan 7, 2021 07:33:06.877883911 CET	1805	IN	Data Raw: 3a 64 2c 66 3a 64 2c 67 3a 5c 27 33 74 5c 27 2c 35 3a 5c 27 33 73 3a 2f 2f 33 72 2e 4b 2f 5c 27 7d 2c 32 6e 3a 7b 37 3a 7a 2c 66 3a 7a 2c 67 3a 5c 27 33 42 5c 27 2c 35 3a 5c 27 6d 3a 2f 2f 32 6e 2e 4b 5c 27 7d 2c 33 4b 3a 7b 37 3a 64 2c 66 3a 64 Data Ascii: :d,f:d,g:\'3t\',5:\'3s://3r.K/\'},2n:{7:z,f:z,g:\'3B\',5:\'m://2n.K\'},3K:{7:d,f:d,g:\'3J\',5:\'m://3O.3N.K\'}},s:q,3M:q,p:q,B:0,h:q,I:q,1t:d,2X:d,1J:6(){k 1s=0;8(3.I!=q&&3.I!=\'q\'&&3.I!=\'\'){3.I=3.I.3I(\',\');1s=3.I.1a}3.s=3E 3C();8(1s>0){P
Jan 7, 2021 07:33:06.877922058 CET	1806	IN	Data Raw: 5d 2e 66 29 7b 34 2e 44 28 35 2b 5c 27 26 46 3d 66 5c 27 2c 33 2e 42 29 7d 6a 7b 38 28 33 2e 68 3d 3d 5c 27 32 65 5c 27 29 7b 34 2e 44 28 35 2b 5c 27 26 46 3d 66 5c 27 2c 33 2e 42 2c 34 76 2c 32 39 29 7d 6a 20 38 28 33 2e 68 3d 3d 5c 27 32 67 5c Data Ascii: ].f){4.D(5+\'&F=f\',3.B)}j{8(3.h==\'2e\'){4.D(5+\'&F=f\',3.B,4v,29)}j 8(3.h==\'2g\'){4.D(5+\'&F=f\',3.B,4w,29)}j{4.D(5+\'&F=f\',3.B,20,4t)}}}}},1X:6(a){8(!a\|\|a==\'q\'){v d}j{v 3.w[a].7}},E:6(5){8(3.1t){T.1y=\'/H/E?1t=1&1u=\'+1j.1z()}j{8(19 5==
Jan 7, 2021 07:33:06.877959013 CET	1808	IN	Data Raw: 79 5c 27 29 2e 63 28 29 3b 24 28 5c 27 23 5a 5c 27 29 2e 63 28 29 3b 24 28 5c 27 23 31 30 5c 27 29 2e 63 28 29 3b 34 2e 31 33 28 29 7d 2c 57 3a 36 28 29 7b 38 28 33 2e 73 2e 31 61 3c 3d 31 68 2e 31 78 29 7b 24 28 5c 27 52 2e 31 50 5c 27 29 2e 63 Data Ascii: y\').c();$(\'#Z\').c();$(\'#10\').c();4.13()},W:6(){8(3.s.1a<=1h.1x){$(\'R.1P\').c()}$(\'#C .I\').17(\'\');P(k i=0;i<9;i++){18=i+(4.1c-1)*4.1x;8(3.s[18]!=12){k t=$(\'#C .I\').44(\'<U 1Y="a" 41="\'+3.w[3.s[18][0]].g+\'"><U 1Y="42 \'+3.s[18][0]+
Jan 7, 2021 07:33:06.878009081 CET	1809	IN	Data Raw: 23 31 65 5c 27 29 2e 63 28 29 3b 24 28 5c 27 23 79 5c 27 29 2e 63 28 29 3b 24 28 5c 27 23 43 5c 27 29 2e 63 28 29 3b 24 28 5c 27 23 5a 5c 27 29 2e 63 28 29 3b 24 28 5c 27 23 31 30 5c 27 29 2e 63 28 29 7d 2c 32 49 3a 36 28 29 7b 24 28 5c 27 2e 4f Data Ascii: #1e\').c();$(\'#y\').c();$(\'#C\').c();$(\'#Z\').c();$(\'#10\').c()},2I:6(){$(\'.O > 1B.O\').c();$(\'.O > U.2M\').o()},2H:6(){$(\'.O > 1B.O\').o();$(\'.O > U.2M\').c()},13:6(){$(\'#1g\').c()},33:6(2L){4.13();$(\'#\'+2L).o()},2K:6(1D){$(\'.2R U
Jan 7, 2021 07:33:06.878051043 CET	1811	IN	Data Raw: 6f 61 64 69 6e 67 7c 64 6f 63 75 6d 65 6e 74 7c 64 69 76 7c 35 30 30 7c 73 68 6f 77 50 72 6f 76 69 64 65 72 73 7c 69 66 72 7c 64 69 73 63 6f 76 65 72 79 7c 70 72 6f 76 69 64 65 72 5f 70 72 6f 70 65 72 74 79 7c 70 72 6f 76 69 64 65 72 5f 72 65 64 Data Ascii: oading\|document\|div\|500\|showProviders\|ifr\|discovery\|provider_property\|provider_redirect\|iframeNode\|undefined\|hideLoading\|width\|click\|event\|html\|index\|typeof\|length\|setProvider\|page\|fullname\|loginza_login\|height\|loading\|this\|data\|Math\|window\|lo
Jan 7, 2021 07:33:06.878083944 CET	1812	IN	Data Raw: 63 6f 6d 65 5f 61 67 61 69 6e 7c 6c 6f 61 64 69 6e 67 53 74 61 72 74 7c 77 65 6c 63 6f 6d 65 5f 63 6f 6e 74 69 6e 75 65 7c 6c 69 76 65 6a 6f 75 72 6e 61 6c 7c 70 6f 73 74 4d 65 73 73 61 67 65 7c d0 bb d0 be d0 b3 d0 b8 d0 bd 7c d0 92 d0 b0 d1 88 Data Ascii: come_again\|loadingStart\|welcome_continue\|livejournal\|postMessage\|\|\|Google\|\|\|\|mailruapi\|\|\|pre\|my\|\|Facebook\|visible\|\|
Jan 7, 2021 07:33:06.886600018 CET	1842	OUT	GET /img/widget/field_bg.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: loginza.ru Connection: Keep-Alive Cookie: sid=rta120dn4viv7jbvmqlds6ndq3
Jan 7, 2021 07:33:06.962091923 CET	1882	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 07 Jan 2021 06:33:06 GMT Content-Type: image/gif Content-Length: 108 Last-Modified: Wed, 05 Apr 2017 10:44:48 GMT Connection: keep-alive ETag: "58e4caa0-6c" Expires: Sat, 06 Feb 2021 06:33:06 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 37 00 b3 00 00 f7 f7 f7 f5 f5 f5 f3 f3 f3 fa fa fa fc fc fc fb fb fb f8 f8 f8 f2 f2 f2 f9 f9 f9 f6 f6 f6 fd fd fd f4 f4 f4 f1 f1 f1 fe fe fe f0 f0 f0 ff ff ff 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 37 00 00 04 19 d0 49 c9 ea 39 62 ad 90 12 30 06 82 0c 45 41 28 4a a3 3e 6c eb be b0 1b 01 00 3b Data Ascii: GIF89a7!,7I9b0EA(J>l;
Jan 7, 2021 07:33:09.043114901 CET	1925	OUT	GET /img/widget/providers_ico_sprite.png?linkedin HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: loginza.ru Connection: Keep-Alive Cookie: sid=rta120dn4viv7jbvmqlds6ndq3; _ym_uid=1610033587112486313; _ym_d=1610033587
Jan 7, 2021 07:33:09.118508101 CET	1945	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 07 Jan 2021 06:33:09 GMT Content-Type: image/png Content-Length: 9992 Last-Modified: Wed, 05 Apr 2017 10:44:48 GMT Connection: keep-alive ETag: "58e4caa0-2708" Expires: Sat, 06 Feb 2021 06:33:09 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 01 30 08 06 00 00 00 be 28 f1 e3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 39 43 36 42 44 34 44 41 42 46 35 32 31 31 45 30 42 39 31 33 45 45 38 36 38 46 41 31 41 43 31 35 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 43 36 42 44 34 44 42 42 46 35 32 31 31 45 30 42 39 31 33 45 45 38 36 38 46 41 31 41 43 31 35 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 39 43 36 42 44 34 44 38 42 46 35 32 31 31 45 30 42 39 31 33 45 45 38 36 38 46 41 31 41 43 31 35 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 43 36 42 44 34 44 39 42 46 35 32 31 31 45 30 42 39 31 33 45 45 38 36 38 46 41 31 41 43 31 35 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 3b cd 64 89 00 00 23 7e 49 44 41 54 78 da ec 7c 77 7c 55 45 fa f7 f7 9c 5b 92 dc dc f4 4e 02 a4 11 02 21 74 09 1d a4 a9 08 48 57 11 6c b8 ae 2e ba bb 16 7c 15 04 0b a2 ec 8a 7d 15 90 a2 08 82 05 41 69 d2 22 35 10 90 92 04 12 42 12 48 48 ef fd f6 32 ef 33 e7 de 9b dc 34 08 ae 7f ec 1f bf f9 64 72 ce 99 f2 cc 33 cf 3c 33 4f 99 99 0b 50 30 99 19 3b 9f 9d cf c2 1f db c6 e4 53 36 b3 77 77 a4 32 0b 33 33 43 5d 0d 3b 39 66 38 4b 17 c0 8c a2 c8 2c 00 45 91 69 e9 bb 9a Data Ascii: PNGIHDR0(tEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:9C6BD4DABF5211E0B913EE868FA1AC15" xmpMM:DocumentID="xmp.did:9C6BD4DBBF5211E0B913EE868FA1AC15"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9C6BD4D8BF5211E0B913EE868FA1AC15" stRef:documentID="xmp.did:9C6BD4D9BF5211E0B913EE868FA1AC15"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>;d#~IDATx\|w\|UE[N!tHWl.\|}Ai"5BHH234dr3<3OP0;S6ww233C];9f8K,Ei
Jan 7, 2021 07:33:09.118549109 CET	1947	IN	Data Raw: de 79 5d d1 6c 62 4c 26 03 de f9 2e 03 79 7a 3f 58 83 e2 b0 6a 7f 05 72 4b b4 50 7a 78 60 d0 e7 eb e1 eb ae 82 cc 6a 85 20 50 41 c1 ca eb c1 0a 39 f2 44 30 51 26 07 2c 66 33 ae 94 51 86 da 0b 56 82 56 af 53 60 fb d9 3c 2a 26 83 6b 6c 6f 18 86 8f Data Ascii: y]lbL&.yz?XjrKPzx`j PA9D0Q&,f3QVVS`<*&kloEzL0QryB4Z!Zk85jPDd,!,.hCx$]-V+(DQ(@`m#M0E9,#d\|ypGe%,+&a\|=
Jan 7, 2021 07:33:09.118586063 CET	1948	IN	Data Raw: f5 67 57 ed bb 0e 83 d1 80 35 0b 7a 62 42 6f df 8d e9 85 8d f8 26 a9 28 62 6f 6a 79 7f 0b 2d df 4b ee 0f df f2 d4 a8 60 9c c9 ae c4 d7 a7 0a 79 9d 17 a5 51 a0 38 28 b3 b8 61 76 62 5a 31 56 cf 8b 27 7d 48 b1 f1 bd dd d7 16 ee b9 58 d2 44 18 37 a5 Data Ascii: gW5zbBo&(bojy-K`yQ8(avbZ1V'}HXD77zH/rSxpHnGKY04J!8\|,!X#Kh4Zz kT2,'GLQO]4"&]nEn=yz v~V&=\.Y-&^
Jan 7, 2021 07:33:09.118632078 CET	1949	IN	Data Raw: 7f 17 48 19 4f a9 6f d6 15 b8 e8 70 21 20 b3 c2 64 88 8f ed f9 58 5c 5c 1c 17 98 c7 3b 64 24 33 b3 75 c7 11 f5 84 45 09 89 90 f4 7a de 71 99 87 af 8f 4f 44 87 b3 91 0b 14 57 d1 d6 22 73 c2 20 c8 45 c0 20 1f 7a 37 9b 1a af 66 66 16 b6 0b 80 d9 5b Data Ascii: HOop! dX\\;d$3uEzqODW"s E z7ff[#n?@Hp}624d{+JI{?UUUaoN.2I*>b}6\|1~n4~,R;Rkmx/\i#p01nqA~;{l~xBJ
Jan 7, 2021 07:33:09.118674994 CET	1951	IN	Data Raw: 92 ba a8 29 f2 95 d2 fe f5 97 81 78 65 56 bc 43 23 6b 0e 55 0d 7a 56 5c ad 69 b1 c3 f7 af 1d 69 0c 23 d7 33 e1 fe af d8 b8 a5 fb 59 62 6a 51 8b fc 36 7a dc f8 d5 e9 bd ad 82 65 21 65 8c e1 6e 73 7b f2 05 c6 d5 5a 26 db 98 f8 72 5c 46 1b ff 01 0f Data Ascii: )xeVC#kUzV\ii#3YbjQ6ze!ens{Z&r\FsLWVyX>uGB2pS~\|3$}6V%`ik_>SW{M['rSeh<9*wc71wU[gs$&\|O<b72-.k` eJFz]

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.3	49852	213.180.204.205	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:33:06.806461096 CET	1789	OUT	GET /img/widget/footer_bg.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: loginza.ru Connection: Keep-Alive Cookie: sid=rta120dn4viv7jbvmqlds6ndq3
Jan 7, 2021 07:33:06.882967949 CET	1841	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 07 Jan 2021 06:33:06 GMT Content-Type: image/gif Content-Length: 163 Last-Modified: Wed, 05 Apr 2017 10:44:48 GMT Connection: keep-alive ETag: "58e4caa0-a3" Expires: Sat, 06 Feb 2021 06:33:06 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 37 00 c4 00 00 e3 e3 e3 ee ee ee e6 e6 e6 ea ea ea ec ec ec f2 f2 f2 f3 f3 f3 f7 f7 f7 f6 f6 f6 e1 e1 e1 eb eb eb f1 f1 f1 e7 e7 e7 ed ed ed f0 f0 f0 f9 f9 f9 e5 e5 e5 f5 f5 f5 e8 e8 e8 e2 e2 e2 e4 e4 e4 f8 f8 f8 ef ef ef e9 e9 e9 fa fa fa f4 f4 f4 e1 e0 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 37 00 00 05 20 20 86 3d 55 75 20 51 96 19 c5 e2 58 56 d0 10 ca 70 5d 12 23 40 14 05 4c 09 8d 70 48 2c 1a 85 21 00 3b Data Ascii: GIF89a7!,7 =Uu QXVp]#@LpH,!;
Jan 7, 2021 07:33:06.885559082 CET	1841	OUT	GET /img/widget/button_bg.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: loginza.ru Connection: Keep-Alive Cookie: sid=rta120dn4viv7jbvmqlds6ndq3
Jan 7, 2021 07:33:06.961308956 CET	1882	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 07 Jan 2021 06:33:06 GMT Content-Type: image/gif Content-Length: 160 Last-Modified: Wed, 05 Apr 2017 10:44:48 GMT Connection: keep-alive ETag: "58e4caa0-a0" Expires: Sat, 06 Feb 2021 06:33:06 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 37 00 c4 00 00 f7 f7 f7 f5 f5 f5 f3 f3 f3 fa fa fa fc fc fc fb fb fb f8 f8 f8 f2 f2 f2 f9 f9 f9 f6 f6 f6 fd fd fd f4 f4 f4 f1 f1 f1 fe fe fe f0 f0 f0 ff ff ff ed ed ed 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 37 00 00 05 1d e0 23 8a 4d a9 28 44 51 0c 08 62 18 40 92 04 cb 22 1c 07 a3 3b 3c 0f fd c0 a0 50 18 02 00 3b Data Ascii: GIF89a7!,7#M(DQb@";<P;
Jan 7, 2021 07:33:09.110773087 CET	1926	OUT	GET /img/exchange.png HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: loginza.ru Connection: Keep-Alive Cookie: sid=rta120dn4viv7jbvmqlds6ndq3; _ym_uid=1610033587112486313; _ym_d=1610033587
Jan 7, 2021 07:33:09.186839104 CET	1957	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 07 Jan 2021 06:33:09 GMT Content-Type: image/png Content-Length: 1736 Last-Modified: Wed, 05 Apr 2017 10:44:48 GMT Connection: keep-alive ETag: "58e4caa0-6c8" Expires: Sat, 06 Feb 2021 06:33:09 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 1e 08 06 00 00 00 3b 30 ae a2 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 31 42 42 37 33 36 38 44 30 42 44 31 31 44 46 39 37 45 33 46 41 33 41 38 31 33 34 38 31 41 43 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 31 42 42 37 33 36 39 44 30 42 44 31 31 44 46 39 37 45 33 46 41 33 41 38 31 33 34 38 31 41 43 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 31 42 42 37 33 36 36 44 30 42 44 31 31 44 46 39 37 45 33 46 41 33 41 38 31 33 34 38 31 41 43 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 31 42 42 37 33 36 37 44 30 42 44 31 31 44 46 39 37 45 33 46 41 33 41 38 31 33 34 38 31 41 43 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 77 8e 5a 98 00 00 03 3e 49 44 41 54 78 da c4 96 cb 4f 13 51 14 87 4f 81 29 2d 06 15 84 da b0 50 9b 28 25 b4 35 18 5b da 95 0b 70 a5 e1 b1 80 a8 98 08 82 71 a5 fe 01 ba c1 c4 f8 d8 e8 da 07 06 63 8a 26 b0 40 13 0c 0b da 04 03 91 47 8b 26 02 31 26 ca 43 48 9a d2 16 a1 45 da 99 76 c6 73 c7 c1 b4 65 da 4e 29 0d 27 39 8b 73 66 e6 7e f7 9c fb 9b 7b af 8c e3 38 d8 0b cb 81 3d b2 3d 03 e7 65 f0 ad 06 dd 84 5e 29 c4 eb e8 0e f4 8f d9 04 e7 32 0c d3 31 3e 31 de 12 0c 06 35 Data Ascii: PNGIHDR;0tEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:21BB7368D0BD11DF97E3FA3A813481AC" xmpMM:DocumentID="xmp.did:21BB7369D0BD11DF97E3FA3A813481AC"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:21BB7366D0BD11DF97E3FA3A813481AC" stRef:documentID="xmp.did:21BB7367D0BD11DF97E3FA3A813481AC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>wZ>IDATxOQO)-P(%5[pqc&@G&1&CHEvseN)'9sf~{8==e^)21>15
Jan 7, 2021 07:33:09.186888933 CET	1958	IN	Data Raw: 7c 22 27 67 53 a7 d3 bf 52 a9 54 20 05 be d3 56 47 28 8a ea 32 57 9b 7b 14 0a c5 1c 9f 60 59 e5 cc cc 74 ab db ed be 84 e1 99 54 03 c8 32 54 b5 26 be 72 1c ef 8f 41 6f 78 a9 56 ab 7b 93 55 9e a9 b8 e6 62 2b e7 c0 eb f5 14 d8 ec 43 ad 2e 97 ab 29 Data Ascii: \|"'gSRT VG(2W{`YtT2T&rAoxV{Ub+C.)Y*):e6R9S.kkvc}b'iP($-f,7MXy,F~vX4B1y~y].'cY:dV[aG`445>$&U_zx;H

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.3	49857	213.180.204.205	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:33:06.869405031 CET	1801	OUT	GET /img/widget/grey_dot.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: loginza.ru Connection: Keep-Alive Cookie: sid=rta120dn4viv7jbvmqlds6ndq3
Jan 7, 2021 07:33:06.946486950 CET	1864	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 07 Jan 2021 06:33:06 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Wed, 05 Apr 2017 10:44:48 GMT Connection: keep-alive ETag: "58e4caa0-2b" Expires: Sat, 06 Feb 2021 06:33:06 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 e1 e0 e0 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Jan 7, 2021 07:33:09.112171888 CET	1927	OUT	GET /img/widget/loading_small.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: loginza.ru Connection: Keep-Alive Cookie: sid=rta120dn4viv7jbvmqlds6ndq3; _ym_uid=1610033587112486313; _ym_d=1610033587
Jan 7, 2021 07:33:09.187509060 CET	1959	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 07 Jan 2021 06:33:09 GMT Content-Type: image/gif Content-Length: 3208 Last-Modified: Wed, 05 Apr 2017 10:44:48 GMT Connection: keep-alive ETag: "58e4caa0-c88" Expires: Sat, 06 Feb 2021 06:33:09 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 20 00 20 00 f3 00 00 ff ff ff 00 99 ff c6 e7 fe 84 cd fe b6 e1 fe 9a d6 fe 36 ae fe 56 bb fe d8 ee fe e4 f3 fe bc e3 fe 1e a4 fe 04 9a fe 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 04 e7 10 c8 49 69 61 a5 ea cd e7 62 4b 85 24 9d 46 0c 15 a3 52 02 41 94 54 b2 2c 07 a5 32 53 e2 2a 30 35 2f 2f c9 6d a2 70 21 7a 93 c1 cc 30 19 02 10 3b 24 c5 30 43 01 9c 2e 02 49 2a 21 fc 48 43 28 41 40 11 6f 01 04 83 21 33 39 54 35 ba 5c d1 38 29 a8 0d 87 a0 60 c1 ee b4 b2 64 14 07 77 78 47 3d 59 04 0a 67 14 04 83 77 48 62 86 1d 76 06 41 3d 92 30 09 56 5c 9c 5c 88 3b 09 02 05 03 a4 a5 9c 9f 3b a5 aa 9b 48 a8 8a a2 ab ac 9d b3 1d 98 30 b6 b5 74 25 91 48 73 89 8b 72 59 3c 48 7f 2e 81 13 c5 89 b7 96 09 be 92 62 bf 13 5a 1a 62 c7 4f 45 67 3a 04 98 7f 47 59 5d 2e c0 3d da 41 df 4f 51 9c 73 86 e6 00 ea 5c 62 c3 68 2e 39 ec 3d 73 67 f5 7f 9e 63 8c f3 65 e2 1d 12 d8 2a 12 8f d6 86 66 00 37 44 00 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 04 ea 10 c8 49 69 59 a4 ea cd a7 59 46 35 14 9d 46 90 d4 a2 52 06 c3 94 54 62 18 47 ba 4a 85 bb c0 ec ac 4c aa 9d 64 e1 1a f0 26 85 59 6d 78 1b e8 8e 94 c3 0c 15 04 20 5c 0c 14 14 40 98 19 12 80 ea c1 15 9a 20 08 04 b0 04 31 18 fc 26 52 83 b1 92 13 48 12 0a 34 01 31 51 b4 db 7c 56 06 19 25 02 7a 04 76 14 04 7f 23 6a 30 87 0a 8e 14 6c 8c 47 67 7b 30 7e 03 89 3c 81 3c 09 84 5b a2 5b 87 68 91 78 a5 a1 47 a9 04 0a 79 a9 a2 a9 a7 af 87 a3 b6 96 5b 9e 30 97 ba 1b bc 47 b4 91 1b a8 a6 50 86 7a 9c 12 c7 68 c9 be a1 c4 98 6b 7a c2 12 69 1a 97 c9 08 79 8e a0 d1 ca 68 7c 7a d5 68 92 47 dd 84 e2 56 c5 a2 af 81 e9 00 ed b9 eb 5c 68 13 e7 5b af 8e ef 00 c7 a4 88 8a f5 26 95 2b 91 a0 57 9e 37 b7 38 e0 19 c8 21 02 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 04 ee 10 c8 49 29 31 a4 ea cd e7 31 47 35 64 5d 85 28 95 a1 52 c7 b2 94 54 32 8c 94 6a 4c 84 7b c3 d3 3c 20 13 5b d0 35 e0 4d 14 be e0 0a 30 d0 19 29 85 19 0a 20 4c b8 16 a4 49 02 86 f0 6d 85 cd 45 a8 c7 60 14 b4 04 05 70 12 a5 55 0a 0b 81 04 5e 66 14 25 08 82 5e b1 05 c8 e4 1d 02 06 75 0c 3b 13 02 7a 7a 02 7d 30 84 58 1b 09 0a 89 53 30 03 65 77 1d 79 04 6b 3c 07 9c 25 09 9f 4f a3 a3 89 93 09 91 a6 7a a4 aa 7b 92 ad ac aa 7c a9 aa a4 b6 a3 a2 25 b9 1c 9a bb 14 bd 46 af 69 8c 31 c2 94 30 88 89 80 87 a6 cb bc 59 b4 9b 13 9a c3 38 c4 78 8a bf 92 8c 09 7a 9f c9 40 89 12 89 d7 3c dd ab 00 e2 00 9a c7 c1 de e3 e8 00 af be 1b ec 38 f1 e7 59 3c af 8c ea 12 c9 a5 08 38 f3 87 a7 5c 87 50 15 24 b5 bb a5 21 92 c1 0d 11 00 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 04 e7 10 c8 49 a9 18 a2 ea cd 67 19 45 55 10 9d 96 20 d5 a0 52 87 61 94 54 42 10 d9 a4 0e 13 e1 be 70 3e 27 b6 95 a4 65 08 f5 24 88 99 22 88 03 14 5c 87 23 45 31 43 01 6e 80 c4 8e 14 83 c9 7e d7 d5 00 4a 19 2c 16 dc 2c 41 61 95 08 aa 1a 9d 55 77 5e 34 01 49 25 50 dd de 08 0e 75 0b 51 16 33 33 02 7b 30 81 06 69 31 54 85 47 05 67 77 1c 79 7d 25 03 88 25 27 52 9c 9d 13 0c a0 a1 0b 05 09 8e 85 8c 3d a1 aa 0c a6 a7 9d ab Data Ascii: GIF89a 6V!NETSCAPE2.0!Created with ajaxload.info!, IiabK$FRAT,2S05//mp!z0;$0C.I!HC(A@o!39T5\8)`dwxG=YgwHbvA=0V\\;;H0t%HsrY<H.bZbOEg:GY].=AOQs\bh.9=sgce*f7D!, IiYYF5FRTbGJLd&Ymx \@ 1&RH41Q\|V%zv#j0lGg{0~<<[[hxGy[0GPzhkziyh\|zhGV\h[&+W78!!, I)11G5d](RT2jL{< [5M0) LImE`pU^f%^u;zz}0XS0ewyk<%Oz{\|%Fi10Y8xz@<8Y<8\P$!!, IgEU RaTBp>'e$"\#E1Cn~J,,AaUw^4I%PuQ33{0i1TGgwy}%%'R=
Jan 7, 2021 07:33:09.187549114 CET	1960	IN	Data Raw: 0c a3 a5 a7 33 9e b6 47 96 25 b9 94 70 ba bd 30 a6 0a 99 13 b3 4a 52 6f 85 35 13 c8 86 30 49 c4 a6 6d 79 6b 88 04 c3 78 cd 13 08 54 88 5f 7d c8 28 8f 00 85 d7 5e e2 e2 79 4b 9d 8e 73 b5 12 ec 9c e9 3e 69 5f a8 25 8e d5 ee 6e fa 3d d9 12 e2 da ca Data Ascii: 3G%p0JRo50ImykxT_}(^yKs>i_%n=q4e-MD!, I)*')Ed]PRA:!zrbw%6"G(d$["JFhaQP`p%/BFP\cU?TtW/pG&OtDa_sylD'Mqtc
Jan 7, 2021 07:33:09.187582970 CET	1961	IN	Data Raw: 0b 19 d6 06 12 0a da 8a 06 d3 d0 e2 13 05 c8 39 43 03 d3 e3 12 eb 44 e6 4b e8 0b 90 00 f5 12 ed bc 4b a6 85 a2 75 8d 09 b7 12 c7 2a 1c 30 30 90 53 1e 03 ca 74 44 00 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 04 eb 10 c8 49 69 52 a9 Data Ascii: 9CDKKu00StD!, IiR"Jd] RZNP;$P{N\E!1UO2D_r6IbH8B;"'ZtbK#C'KGzz5C:A/C}u\Eh}b6[

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.3	49713	91.189.114.9	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:32:21.070734978 CET	39	OUT	GET /forum/clientscript/ame.js HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Jan 7, 2021 07:32:21.152179003 CET	66	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: application/javascript Content-Length: 502 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: "1f6-558f3247ca900" Accept-Ranges: bytes Cache-Control: max-age=315360000 Expires: Sun, 05 Jan 2031 06:32:21 GMT Data Raw: 66 75 6e 63 74 69 6f 6e 20 61 6d 65 5f 74 6f 67 67 6c 65 5f 76 69 65 77 28 6f 62 6a 29 0d 0a 7b 0d 0a 09 65 20 3d 20 66 65 74 63 68 5f 74 61 67 73 28 64 6f 63 75 6d 65 6e 74 2c 20 27 64 69 76 27 29 3b 0d 0a 09 0d 0a 09 66 6f 72 20 28 69 20 3d 20 30 3b 20 69 20 3c 20 65 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 0d 0a 09 7b 0d 0a 09 09 69 66 20 28 65 5b 69 5d 2e 69 64 2e 73 75 62 73 74 72 28 30 2c 34 29 20 3d 3d 20 22 61 6d 65 5f 22 29 0d 0a 09 09 7b 0d 0a 09 09 09 70 61 72 74 73 20 3d 20 65 5b 69 5d 2e 69 64 2e 73 70 6c 69 74 28 22 5f 22 29 3b 0d 0a 09 09 09 7a 6f 6e 65 20 3d 20 70 61 72 74 73 5b 32 5d 3b 0d 0a 09 09 09 0d 0a 09 09 09 69 66 20 28 70 61 72 74 73 5b 31 5d 20 3d 3d 20 27 6e 6f 73 68 6f 77 27 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 64 69 73 70 6c 61 79 20 3d 20 28 6f 62 6a 5b 7a 6f 6e 65 5d 20 3d 3d 20 27 74 72 75 65 27 20 3f 20 27 6e 6f 6e 65 27 20 3a 20 27 69 6e 6c 69 6e 65 27 29 3b 0d 0a 09 09 09 09 65 5b 69 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 64 69 73 70 6c 61 79 3b 0d 0a 09 09 09 7d 0d 0a 09 09 09 65 6c 73 65 20 69 66 20 28 70 61 72 74 73 5b 31 5d 20 3d 3d 20 27 64 6f 73 68 6f 77 27 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 64 69 73 70 6c 61 79 20 3d 20 28 6f 62 6a 5b 7a 6f 6e 65 5d 20 3d 3d 20 27 74 72 75 65 27 20 3f 20 27 69 6e 6c 69 6e 65 27 20 3a 20 27 6e 6f 6e 65 27 29 3b 0d 0a 09 09 09 09 65 5b 69 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 64 69 73 70 6c 61 79 3b 09 09 09 09 0d 0a 09 09 09 7d 09 09 09 0d 0a 09 09 7d 0d 0a 09 7d 0d 0a 7d Data Ascii: function ame_toggle_view(obj){e = fetch_tags(document, 'div');for (i = 0; i < e.length; i++){if (e[i].id.substr(0,4) == "ame_"){parts = e[i].id.split("_");zone = parts[2];if (parts[1] == 'noshow'){display = (obj[zone] == 'true' ? 'none' : 'inline');e[i].style.display = display;}else if (parts[1] == 'doshow'){display = (obj[zone] == 'true' ? 'inline' : 'none');e[i].style.display = display;}}}}
Jan 7, 2021 07:32:21.166173935 CET	68	OUT	GET /forum/cron.php?s=8848772e8198313ee133bfa7158b7b6c&rand=961090 HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Jan 7, 2021 07:32:21.362327099 CET	131	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: image/gif Content-Length: 43 Connection: keep-alive X-Powered-By: PHP/4.4.9 Cache-Control: private Pragma: private Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Jan 7, 2021 07:32:21.633537054 CET	254	OUT	GET /forum/images/gradients/gradient_panelsurround.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Jan 7, 2021 07:32:21.716291904 CET	270	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: image/gif Content-Length: 3395 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: "d43-558f3247ca900" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 0a 00 c2 01 e6 00 00 d5 d8 e5 db de eb dd e0 ee dd e0 ed d5 d8 e4 de e1 ee d6 d9 e5 dc df ed d4 d7 e4 d3 d6 e3 d2 d5 e2 e0 e3 f0 d4 d6 e3 db de ec d1 d4 e1 e0 e4 f1 df e2 ef de e2 ef d2 d4 e0 e0 e4 f2 d5 d9 e5 d5 d7 e4 d1 d5 e0 e1 e3 f1 e1 e3 f2 d2 d4 e1 d7 da e6 d2 d6 e2 d3 d5 e2 d7 d9 e6 d8 db e7 df e3 f0 e1 e4 f1 dd df ed dc e0 ed d4 d8 e4 e0 e2 f0 d1 d5 e1 d7 db e7 de e0 ee da dd eb df e1 ef da de eb d2 d5 e0 db df ec db dd eb dd e1 ee dc de ec d8 da e7 da de ea d9 dc e8 d2 d6 e1 e0 e3 f2 d3 d7 e3 d6 da e6 d6 d8 e5 d9 dd ea e0 e2 f1 d9 db e8 da dc e9 d9 dc ea d9 dd e9 da dd e9 d8 dc e8 d3 d7 e2 db dd ea d8 db e9 d6 da e7 df e3 f1 da dc ea d8 dc e9 d9 db e9 d3 d5 e1 d3 d6 e1 df e2 f1 d7 db e8 d4 d6 e2 dd e1 ef d7 d9 e7 de e2 f0 d8 da e8 dc de eb db de ea d5 d9 e6 d5 d7 e3 db df eb dc e0 ec df e1 f0 d4 d8 e3 d4 d8 e5 d7 da e8 dc df eb de e1 f0 de e0 ef de e0 ed d6 d8 e6 d5 d7 e5 db df ed d4 d6 e4 dc de ed d6 d9 e7 d7 d9 e5 dd df ee de e2 ee d6 da e5 dd e1 ed da de ec d6 d8 e4 dd e0 ec dd e0 ef dc e0 ee d4 d7 e5 d5 d8 e6 d2 d6 e3 d6 d9 e6 dc df ec da dd ea d7 da e7 d8 db e8 d4 d7 e3 d3 d6 e2 d9 dc e9 de e1 ef e1 e4 f2 d1 d4 e0 df e2 f0 e0 e3 f1 d2 d5 e1 21 f9 04 00 00 00 00 00 2c 00 00 00 00 0a 00 c2 01 00 07 ff 80 7b 82 83 84 85 86 87 88 7b 20 89 83 13 7b 8e 8f 8c 92 83 17 8a 7b 18 91 86 98 7b 17 0f 99 82 8b 84 a1 95 82 18 9b 18 20 8e 13 a7 9c 8f 18 ab 91 8b 18 34 86 13 20 b7 95 a9 a8 13 0f 34 7e 13 34 34 0f 17 13 c5 97 9d 97 20 17 af 9e 82 ab a6 a4 95 c5 a8 0f ca 7e 8b c0 17 20 c3 20 98 7e 8f b6 20 34 cf 7e 9e b7 a6 9b e2 c2 0f 18 7e b4 bc db 7e 18 0f f2 13 95 c2 20 bf 9e 17 cb a1 82 0f c5 dc 6d 13 a7 88 dd b8 61 a8 da e5 a3 71 41 58 31 5f dd 3a f1 2b f7 a0 22 aa 6f e5 5c 55 22 76 a1 9c 3c 0c 0d 7d ad ea 14 6f 98 30 3f 1c e9 a1 d4 87 d2 57 bb 4e 15 2b fa 99 79 8d a6 cd 99 c4 50 76 92 b7 92 5e 47 7a 2a e3 e1 bc e9 91 68 c7 9a 44 69 aa f4 b3 80 66 d3 99 4b 99 da 24 62 93 c4 cc a7 37 b1 e6 b0 d9 74 c1 d3 ad 52 bf d2 a4 2a f5 83 d3 99 1f a8 12 59 60 f6 a9 5a af 4a ff fc 58 f5 d3 b6 2b 91 b5 1f 72 6c 25 c1 36 c7 02 12 7c 67 92 c8 d1 67 81 92 bf 76 99 a6 25 4c 77 66 1f a9 52 f5 2a e9 b3 55 09 e0 c0 83 ff fa 21 4c e4 03 60 b9 7d 3e f4 e9 33 98 2f 91 d0 7e f3 b6 25 42 c2 f2 e3 d0 a1 17 90 26 5c f8 c3 61 c3 1f 64 8f a6 dc e7 f6 68 d1 a2 49 17 de 0d 7b 78 f0 c2 5e 45 93 20 6d f8 b0 67 b6 a3 01 87 7e 4e 3a 38 5f e2 bb 75 f7 81 f0 7b 79 70 e5 1f 82 73 17 fe 01 02 74 ec bf 77 8f c7 be 7e fc fa dd e5 df ab 47 cf 7e 77 84 d1 f2 fb a4 18 1d 81 bb ff ed 10 3c b1 5d 0a 57 f4 71 df 68 4f 40 a0 60 04 5c 40 10 c1 15 0f f6 a1 c7 76 4f 3c d1 a0 81 f7 71 61 e0 84 fb 15 78 85 83 0e ea 11 41 0a 01 ea c1 dd 88 7a ec 17 c1 83 22 a6 f0 04 8a 23 f6 d7 9f 86 20 a6 60 63 04 2f 92 88 a1 82 29 e8 e1 a3 85 10 d8 08 e1 8f 24 fa 18 81 8f 3c 16 69 a2 ff 89 3d de 07 81 8f 4d f6 d8 a2 88 46 56 99 a2 88 21 fa 58 80 96 50 ae e8 23 94 5f ea b1 e5 96 53 1e 79 65 01 4f 5e a9 c7 19 5a 92 d9 66 0a 2b c2 f9 65 01 64 d2 e9 23 9b 73 8a 39 e7 96 2e b8 39 66 17 5c 86 69 a7 9f 61 b6 21 26 99 7d 36 a1 87 00 7a f4 e9 c2 a2 80 36 51 c0 09 7d fa 78 82 a4 7d 16 d0 85 a4 80 ba 70 a9 8f 92 6e 29 80 a7 27 1c 0a 2a 9d 05 08 80 ea 09 02 50 da 44 13 7d b2 8a 6a a3 ad 7a 3a ea a1 02 b4 91 aa a3 74 8e 1a eb 09 a9 8e 2a 80 aa 94 b6 ba ea a4 02 a4 71 Data Ascii: GIF89a!,{{ {{{ 4 4~44 ~ ~ 4~~~ maqAX1_:+"o\U"v<}o0?WN+yPv^GzhDifK$b7tRY`ZJX+rl%6\|ggv%LwfRU!L`}>3/~%B&\adhI{x^E mg~N:8_u{ypstw~G~w<]WqhO@`\@vO<qaxAz"# `c/)$<i=MFV!XP#_SyeO^Zf+ed#s9.9f\ia!&}6z6Q}x}pn)'PD}jz:t*q
Jan 7, 2021 07:32:21.716356039 CET	272	IN	Data Raw: 42 b1 03 00 3b 6c aa c8 0e db aa 00 03 4c 6b ab aa c3 0e 30 80 17 ac 52 5b 80 ad 7d aa 5a 2d b5 94 36 3b ac b3 e7 8e 5b 6b b5 d5 7a 91 ed 09 da c6 9b ad 0b 69 68 4b 2d bb e3 7a e1 c5 b8 f6 de 2b af b4 d4 02 2c ef 00 21 54 1b 82 bf d2 aa 4b b0 1b Data Ascii: B;lLk0R[}Z-6;[kzihK-z+,!TK\|0`F";@Cpk"L(W$! ,2\(2/[!s \|`sArsq4+}=A4RlsltQu'6RoL6o=cBdw/DF/>G
Jan 7, 2021 07:32:21.716393948 CET	273	IN	Data Raw: a8 fe 34 a4 57 8d 69 5a 7f fa 06 aa ae f5 1a 68 ad 6a 5b b3 ba d6 a9 fe 34 af 81 3d ec 60 67 ba d7 a9 ce 42 ae 7b ff 0d 06 02 54 60 04 ab 26 c0 08 c0 00 ed 0a 00 c0 da d2 86 36 01 10 d0 6c 68 43 3b 0b 23 50 b6 aa b5 5d 01 04 f4 fa 0d 6f 70 76 16 Data Ascii: 4WiZhj[4=`gB{T`&6lhC;#P]opv]g;NmK.h#l{HP;wpm,8^\|Gr#\`rs0qp,H_s,bytw`;
Jan 7, 2021 07:32:41.121568918 CET	471	OUT	GET /templates/biz_blue_ii/images/space.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Jan 7, 2021 07:32:41.203635931 CET	494	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: image/gif Content-Length: 49 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:30:04 GMT ETag: "31-558f324f6bb00" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 91 00 00 00 00 00 ff ff ff ff ff ff 00 00 00 21 f9 04 05 14 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;
Jan 7, 2021 07:32:41.211127043 CET	521	OUT	GET /pictures/armstrong_laminate.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Jan 7, 2021 07:32:41.293195009 CET	611	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: image/jpeg Content-Length: 12905 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:30:02 GMT ETag: "3269-558f324d83680" Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 7b 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f8 90 c5 72 c7 6b 5c b0 f6 c5 7c 0d d1 f6 3c 8c 8d e2 91 72 aa fb 9b 1f dd ce 3f a5 34 d3 dc 39 58 e4 b1 ba 9d 37 b5 c9 42 39 21 aa b9 a2 b6 1a 83 63 1e d5 a2 e2 4b c0 49 ea 00 c9 fd 28 52 57 d8 5c 8c 7a 5a 4b c1 8a 47 90 13 d1 97 68 cf f3 a1 ca 3d 07 c8 fb 96 92 d2 66 6d ad 75 b4 8e 08 40 06 07 ae 7f fa f5 1c dd c7 c8 c7 7d 9e c2 3d bb dd e5 62 7d 46 df a7 a7 f3 a3 9a db 1a 28 97 a0 e1 70 bb b9 e8 31 fc aa 77 0b 33 b5 f8 63 a4 dc 6b 3e 2d b5 b2 2e ed 94 93 23 96 21 76 e3 23 bf 7e 83 d6 bb f2 c8 f3 57 57 3c fc cd f2 e1 c4 fd b1 ac e0 d1 6f fc 2f a0 24 a8 d2 25 9c f7 f2 1f e3 1e 63 08 82 9e 72 4f ee 0e 3d 8d 7d 24 f7 b1 f3 f4 95 d5 d9 e4 3f 0e 2d 92 39 ae 75 4b 96 2b 1c 2b b2 3e 38 2c 7a f2 7a 70 06 7e b5 e4 e6 5c f3 8a 84 0f 4b 02 a3 09 f3 c9 e8 7a 8e 99 a4 f8 9b c4 16 cd 77 a1 e8 3a 85 cd a2 70 66 b7 b6 76 8d 79 03 97 0b 8e a5 47 5e a4 0e f5 e4 7d 46 a5 2d 64 8f 55 63 e8 cb 4b 98 93 44 db 86 f3 c1 e7 18 e0 fb e6 a3 58 ee 68 ad 51 be 53 1b c4 90 2c 7a 15 fb 19 02 6e 81 c0 e3 24 e4 62 b6 c3 c9 fb 68 db b8 9d 2d 1e a7 05 f0 c2 d2 c6 f3 e2 1f 86 ac e7 98 b0 97 55 b4 52 a5 30 3f d6 af a5 7b d8 c9 4a 34 24 d2 e8 72 54 b2 8b 47 da 3f b4 a0 b6 97 e3 f7 8d 6e d2 45 9e 39 b5 26 74 f2 d8 15 61 b5 79 c8 eb 5f 13 4e 5c d0 b2 ee 76 e5 f1 fd c4 64 cf 38 69 5c a8 0b 94 1e 83 a5 68 77 ca 4f a1 13 22 37 2e 8c dd fa f1 41 0e cf 56 30 98 ff 00 e7 92 81 f4 19 14 12 9d f6 22 7f 20 82 Data Ascii: JFIFCC{}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?rk\\|<r?49X7B9!cKI(RW\zZKGh=fmu@}=b}F(p1w3ck>-.#!v#~WW<o/$%crO=}$?-9uK++>8,zzp~\Kzw:pfvyG^}F-dUcKDXhQS,zn$bh-UR0?{J4$rTG?nE9&tay_N\vd8i\hwO"7.AV0"
Jan 7, 2021 07:32:41.293227911 CET	612	IN	Data Raw: ad 0a 03 9e 0e 39 a7 72 5a 4d ea 39 2c 54 10 f2 46 14 1e 40 03 0c 68 e7 b8 7b 07 7b c8 7a 94 88 15 58 c0 e3 a0 ff 00 1a 4d dc d5 25 1d 86 09 06 4a 95 c7 a8 a4 b6 25 bb 9c 3f c6 2b 58 a6 f0 b4 33 8e 5a 1b b4 e8 3a 02 ac 0f f4 af 57 28 9d b1 16 ee Data Ascii: 9rZM9,TF@h{{zXM%J%?+X3Z:W(;4tS;&u2BKwfFzm&EOw\|]`y6z_m"?*fjGUtncbX{M52b]8?6?h,
Jan 7, 2021 07:32:41.293270111 CET	613	IN	Data Raw: b9 76 7a 38 7a 36 a6 93 67 2b 1e 8b 35 c2 85 88 30 c7 52 a3 24 fe 55 52 af 18 9d 8b 0b 7d 8b a9 e1 f8 ed 54 2d d8 62 e7 a2 b1 c9 6f f8 0d 64 f1 57 d8 b8 50 50 d1 90 c9 a6 40 8c 5a f1 96 31 fd c3 cb 1f c0 1e 3f 1a b7 56 4f 61 ba 49 bb 95 ee a3 b3 Data Ascii: vz8z6g+50R$UR}T-bodWPP@Z1?VOaI_scFN[ElT,92qG4V7\|ob[uQ Nl[+uRYt]?`of+O\|Y&4ty60HS&*I"g:_</Pj
Jan 7, 2021 07:32:41.293306112 CET	615	IN	Data Raw: 68 91 7e ce db b2 85 c4 91 d9 e2 3b 1b ad f2 33 63 39 07 9f 60 7a fe 1f 9d 69 08 b7 ac 88 93 51 d8 75 bc 1a a5 e1 2f 79 70 44 64 f0 8c 00 27 db 1d bf 1a bf 72 1a a4 47 bd 33 46 de d8 5b 31 fd ec 31 70 73 b4 8d c7 db d4 71 4e 13 e6 e8 63 55 72 ae Data Ascii: h~;3c9`ziQu/ypDd'rG3F[11psqNcUrfp(tUF`uzTv9Kc$cTsHrFB`NqJTw<:-Ty'R;xB$UT'eyI?MtO$Qb
Jan 7, 2021 07:32:41.293343067 CET	616	IN	Data Raw: ca e5 e5 6c e0 72 49 c9 cf e5 5d 6a 16 d1 19 dc ab f6 99 39 44 42 15 b8 1c 93 5a 28 2e a4 b9 15 df 01 81 28 d9 ec e3 8a 7b 6e 16 1e ce b0 85 ce 10 fa 96 c6 68 57 7a 85 d2 dd 94 f5 09 df ec 73 5c 24 d0 aa a8 c1 7d c4 00 71 dc 8f e9 cf 5e 2b 4a 70 Data Ascii: lrI]j9DBZ(.({nhWzs\$}q^+Jpz'gb(<9H 6NX}5F4vqz_dK1DT!c;zf1H9F2~UJ/m=3*7Ok0Zz%jwA>5
Jan 7, 2021 07:32:41.293400049 CET	618	IN	Data Raw: 6c f4 d6 49 59 40 58 c8 58 d0 00 31 e8 07 f4 af 2e 38 75 52 a5 d1 b3 9f 2a 39 88 b5 4b 8b 88 36 35 a0 2d e6 0c 33 01 9e 9d 87 41 5e 94 28 25 ad cc 65 55 1d f5 de a5 26 af 67 6f 35 e4 49 13 47 85 79 24 73 82 42 fa f7 27 81 81 d3 23 3c 73 58 2f dd Data Ascii: lIY@XX1.8uR*9K65-3A^(%eU&go5IGy$sB'#<sX/^!&&EPq zEi_FdG1,zn3`-`1USV.4t7h!!=O&F-gIPqogx_\jV=5nU:>I$v#>u<
Jan 7, 2021 07:32:41.294059992 CET	619	IN	Data Raw: 20 f4 c5 73 cf 11 37 a2 46 f1 a3 15 ab 21 fe c2 d6 75 26 db a7 ea 57 31 42 98 1b 7c e2 ea a0 e7 19 24 95 ce 33 8e 39 a9 fa c5 28 7c 6a e0 e9 c9 ec cb b6 ba 0d a6 8f b5 ef 66 7b f9 43 0e 59 ca c2 08 c6 06 3f e5 a1 fa f1 cf 2b 59 4f 12 ea fc 3a 15 Data Ascii: s7F!u&W1B\|$39(\|jf{CY?+YO:ihFR[vTmt+6:[5DP-<G(U[mxEK@3+GWX>n<N{Z)SWf#I[%.c#6.\|IN
Jan 7, 2021 07:32:41.294097900 CET	620	IN	Data Raw: 73 bc b1 3f 5e 1b 19 35 e7 54 af 06 ce e8 41 a4 4f 76 92 41 08 01 4b 60 9c 30 dc b9 e3 ae de 9e 9f a7 a8 a8 a5 28 c9 dc a9 b7 62 be 8b a5 5d 6a b3 ad fd d4 32 4b 66 b9 da 8b b4 b4 d2 67 80 01 fe 1c 9e 49 e3 8c 7a 91 b5 6a ea 9c 79 21 bb 30 8c 1c Data Ascii: s?^5TAOvAK`0(b]j2KfgIzjy!04+K7ck3(:9g0m)j9WF{=<_29$ycD,3;X@Cv.!xIku9@\##8B'Ga{_@2ZiW6;0[q
Jan 7, 2021 07:32:41.294137001 CET	622	IN	Data Raw: f7 c7 4e 05 d1 72 93 b0 e7 18 c4 c2 b7 95 e4 97 ed 00 47 e5 86 e4 48 cd bf 19 ef d8 7d 3a fb 63 9a ec 6b 91 58 c3 77 a1 ba 96 ee 8a 27 90 80 1b 1b 42 e0 64 7d 3a d7 3b 93 7a 23 68 27 d4 86 1d 3d ee af 39 3e 64 79 38 01 88 1e fc f5 c7 03 f5 a2 55 Data Ascii: NrGH}:ckXw'Bd}:;z#h'=9>dy8Ut]nS}7p8.M%-$\|!Ga2ual]G}3WbJ9\!2_aN<;m1tNS~Y^cTh2
Jan 7, 2021 07:32:41.300529003 CET	626	OUT	GET /templates/biz_blue_ii/images/shadow.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Jan 7, 2021 07:32:41.382891893 CET	714	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: image/jpeg Content-Length: 344 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:30:04 GMT ETag: "158-558f324f6bb00" Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 02 02 02 02 02 02 02 02 02 03 03 03 03 03 03 03 03 03 03 01 01 01 01 01 01 01 02 01 01 02 02 02 01 02 02 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 ff c0 00 11 08 00 1c 00 0a 03 01 11 00 02 11 01 03 11 01 ff c4 00 56 00 01 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 09 0a 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 01 02 07 00 00 00 00 00 00 00 00 00 00 00 00 00 01 93 04 55 a6 07 27 67 19 11 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 b7 8e 3a 5b 89 0c 3b 2a 03 8e 96 e2 43 0e ca 81 a1 00 00 00 01 1a e6 1d 6b 54 00 cc 3a d6 a8 03 ff d9 Data Ascii: JFIFddDuckydAdobedVU'g?:[;*CkT:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.3	49858	213.180.204.205	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:33:06.873689890 CET	1802	OUT	GET /img/widget/loading.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: loginza.ru Connection: Keep-Alive Cookie: sid=rta120dn4viv7jbvmqlds6ndq3
Jan 7, 2021 07:33:06.949151039 CET	1866	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 07 Jan 2021 06:33:06 GMT Content-Type: image/gif Content-Length: 6820 Last-Modified: Wed, 05 Apr 2017 10:44:48 GMT Connection: keep-alive ETag: "58e4caa0-1aa4" Expires: Sat, 06 Feb 2021 06:33:06 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 42 00 42 00 f3 00 00 ff ff ff 00 99 ff 4c b7 fe 7a c9 fe dc f0 fe a0 d8 fe f8 fb fe 1c a4 fe c2 e6 fe 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 42 00 42 00 00 04 ff 10 c8 49 ab bd 54 1c cc bb ff 15 71 14 d6 b1 55 c5 61 80 6c 4b 89 27 65 96 07 e1 de a0 61 da 72 2c c1 2b 9c 10 30 18 58 34 a4 5e 65 70 10 58 08 c1 21 47 77 40 a0 9a 95 59 66 54 31 10 78 52 4e 4a 10 05 00 95 13 2a 18 e0 85 86 3b 06 8d b1 67 9d 68 25 88 bb a4 5d 7e 5b f2 35 14 4c 49 12 58 13 4c 73 7b 5f 7d 52 04 03 8c 72 14 08 02 75 18 93 95 6c 5f 16 5e 8c 1f 4c 64 21 3b 61 7c 5d 5f 6b 2c 71 4d a7 83 a3 9a 14 6d 6e 38 a9 a0 69 08 9d 2d 06 b9 af a6 b7 39 1a 02 a7 7e a5 8b 6f b3 bd c5 04 08 b1 c5 1a 98 c2 69 c4 2e 29 05 8c 5e cf 18 ba c3 c1 12 29 4d ce d7 2e 5e ca db 3f 1a aa e0 e1 c9 ca c7 78 e6 8f e8 1e 6d eb ec 69 05 cd f0 70 c9 cb 2d c9 f4 e0 9c f8 02 b2 70 25 50 58 b6 5f 03 0a 90 2b 98 4f 5d 1d 7b bf 9a 0c 58 c8 50 11 82 8b 17 09 9a 41 30 e0 97 93 8a 1c ff 1c 42 39 46 40 21 c8 29 fb 4e aa 5c c9 b2 a5 4b 3f 02 62 36 89 19 f3 a5 24 8c 38 39 7a 6c 72 20 91 cd 9c 38 6d 0a 1d 4a b4 68 c5 92 df 56 02 0c 59 a0 63 4c 9f 2d 11 14 c0 b8 0f 22 4d 01 26 6d 8a 9b 3a 55 99 04 a7 53 fd a9 94 37 55 91 51 38 62 cf 7e 28 99 d6 60 ca 1c 10 29 c2 2b 19 16 d5 a4 98 d4 94 22 55 c8 4e 27 d6 b6 ff a4 4e 5d 08 71 40 52 96 06 04 93 6b 6a 6b d3 e1 67 6f c5 c9 dd d4 71 f2 10 03 05 f2 fa 31 d0 f1 1d 3e cc 75 47 75 06 7c 03 b4 66 21 9c 05 78 de d3 58 ca 52 d6 99 49 b3 19 8d c2 70 18 a9 ce 12 c7 c6 61 6f f5 8f ca a3 32 9f 02 fd 78 ca e9 43 09 5f 4c ec 50 72 8d 60 c7 b2 2f 38 f2 cd 98 42 66 49 b6 eb 65 fd dc d1 59 91 35 45 5e 25 97 b4 1b 1f 47 df 9c 7d 87 af 87 5e 38 f7 e5 d8 09 7d 85 ca f1 14 dd e8 1e ca d6 f6 4e ff 7a 85 8b 63 15 d1 c7 1c 7a 69 24 84 9f 30 d3 59 40 e0 04 4d 1d e8 07 52 0a 42 05 80 54 0e 06 e4 1f 3c 11 00 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 42 00 42 00 00 04 ff 10 c8 49 ab bd 54 08 cc bb ff 15 21 14 d6 71 58 c5 61 80 6c 4b 11 66 79 56 26 e1 de a0 61 ae 54 fc ee b8 a0 64 30 b0 0c 0e a4 de 6c 92 2a 56 88 42 8f 41 70 40 54 9a b4 a5 84 ea 9c 20 7c 51 4e 4a c0 93 c0 54 4a 8a ee 60 9b ac bb e1 cb 14 59 a1 b6 25 60 c0 f9 09 8c 73 be 6c 14 47 49 5b 1b 13 47 70 6b 56 7e 7a 03 65 87 74 13 22 8b 18 08 02 94 00 47 86 2f 03 98 2c 63 8f 7a 35 61 80 77 12 6f 38 53 1a a6 00 29 84 41 88 21 26 68 a9 54 64 6a 08 a1 37 06 05 8f 6b b4 41 aa b7 8c 18 67 c0 42 73 c3 c4 6a 26 ca 61 aa 9e cb 80 ba 1e 05 23 ba 06 d1 cb 00 b9 16 06 06 04 d4 ad 07 1a da db 39 04 04 08 ac 2f 1a 07 03 ec e7 1c e0 e9 e1 1f d6 5c e2 f2 a7 f4 e9 fa 15 bc ca ed 9b b7 ce de 0d 75 ff e4 7d 4b 38 b0 a1 9e 78 0e 83 f1 d0 20 60 40 01 88 11 e7 d1 5b 27 a1 c0 00 8a 1a ff e0 65 ec b0 71 5d c1 17 08 3e 86 1c c9 21 5d c1 6f 1d 08 5c 64 89 01 1c 43 9a 38 73 ea dc c9 b3 83 4a 90 15 7b 4a 42 40 b4 e8 ba 9f 20 e1 f0 54 67 94 28 46 a1 50 a3 4a 9d 1a 46 a6 39 96 36 63 a6 54 a9 34 a7 51 7f 14 3c 26 9d d9 13 5c 53 8e 99 2a 16 e8 46 b5 Data Ascii: GIF89aBBLz!NETSCAPE2.0!Created with ajaxload.info!,BBITqUalK'ear,+0X4^epX!Gw@YfT1xRNJ;gh%]~[5LIXLs{_}Rrul_^Ld!;a\|]_k,qMmn8i-9~oi.)^)M.^?xmip-p%PX_+O]{XPA0B9F@!)N\K?b6$89zlr 8mJhVYcL-"M&m:US7UQ8b~(`)+"UN'N]q@Rkjkgoq1>uGu\|f!xXRIpao2xC_LPr`/8BfIeY5E^%G}^8}Nzczi$0Y@MRBT<!,BBIT!qXalKfyV&aTd0lVBAp@T \|QNJTJ`Y%`slGI[GpkV~zet"G/,cz5awo8S)A!&hTdj7kAgBsj&a#9/\u}K8x `@['eq]>!]o\dC8sJ{JB@ Tg(FPJF96cT4Q<&\S*F
Jan 7, 2021 07:33:06.949192047 CET	1867	IN	Data Raw: e4 22 70 54 35 c6 65 84 10 67 d6 5d 62 9f ca 63 ca f6 43 b6 8f 16 6f 2e cb 56 d4 60 4b c0 8e 78 12 26 aa cf 1a 11 bd 23 d5 ad 85 98 b2 af 1b c8 55 b1 a9 c3 ac e6 f1 40 a6 82 a5 10 49 bc 2f db da d0 35 47 a3 4e 85 e0 74 14 03 aa 71 ad 06 68 18 80 Data Ascii: "pT5eg]bcCo.V`Kx&#U@I/5GNtqhi-`UZqHZz'.d>N!UwWU59##/p/r7$J{B_)E#+M:4R`OVWK4J\!,BBIT!qX
Jan 7, 2021 07:33:06.949229956 CET	1868	IN	Data Raw: 74 0c cc bb ff 95 31 14 96 20 58 c5 60 80 6c 4b 11 c2 56 99 a5 40 b8 38 28 0a 2b 45 bf a6 5e 6e 58 20 55 0a 02 c4 ec 44 41 c4 50 c6 61 47 34 50 36 05 51 c9 6f 32 48 56 9c 4c 69 07 a1 11 02 0c 31 f3 f6 6c ba 4d d0 87 ac f8 b2 b3 72 6d be 30 00 a6 Data Ascii: t1 X`lKV@8(+E^nX UDAPaG4P6Qo2HVLi1lMrm0 ys0*HvXh^fHYn]29)/C\|lO8sHp9TfCeSRbcU{qdRNS:ZC~A7)l">&D
Jan 7, 2021 07:33:06.949266911 CET	1870	IN	Data Raw: 19 01 2b ab 10 f4 2b d8 62 47 ba 2e ab 46 18 d9 27 10 46 b8 8b e2 cc 1c 1c 31 82 a1 07 74 e9 ff ca 71 b8 45 31 e0 24 8f 28 53 aa 5c c9 72 a5 91 97 30 5b 96 38 80 f1 a2 11 8e 09 65 ce a0 c9 53 c0 81 3d 3a 83 0a 1d 4a d4 23 49 a1 63 00 6a 24 10 33 Data Ascii: ++bG.F'F1tqE1$(S\r0[8eS=:J#Icj$3xTX^jS3\e.,h,CJG25[oIe+[y-VvWV9{[q<jP48HfDRnY04{XJ!j\f<4ur<'c-q+
Jan 7, 2021 07:33:06.949305058 CET	1871	IN	Data Raw: 49 3d c1 2d 8f e2 3f de ca 33 b0 73 ec 4e 35 3b 33 38 7f 3e f9 5d 01 c9 7a c0 53 e0 f9 62 27 69 dd d7 0c 28 ae f0 fd b7 84 ec 14 58 ca 70 ab b9 05 97 f8 62 2b 48 66 0f 9d c7 d8 79 d4 1d e0 06 19 79 2f 88 c7 d1 6c 02 58 b0 5f 6f b8 69 d4 d8 7f 04 Data Ascii: I=-?3sN5;38>]zSb'i(Xpb+Hfyy/lX_oi>WF]!,BBI!f,%njko=!EX@;!J7@(\<2oTptmNyiMOtysc'}sxQYr"T+D.S`X R#P][+RDd
Jan 7, 2021 07:33:06.949333906 CET	1872	IN	Data Raw: 08 5c 37 06 48 64 14 99 81 43 86 a0 95 7a 2b 04 a6 68 06 05 af 9e 06 b3 a2 87 43 a5 55 9d 88 4c ae 6c 51 02 b6 88 a1 a2 c6 a4 48 91 c0 4c 79 37 99 b5 27 cd ce 4c af 76 bf 5f 90 d6 bc ba bf 00 08 a6 02 e0 dd d4 ba ca 13 db 03 e9 e6 76 a2 41 1f 06 Data Ascii: \7HdCz+hCULlQHLy7'Lv_vA7=S#(_:L0->4S^2waEiH\8$s8s>'U0oxHZU}zZ3UP\H0N3xRNN1\Th_n*}P
Jan 7, 2021 07:33:09.040095091 CET	1924	OUT	GET /img/widget/providers_sprite.png?linkedin HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: loginza.ru Connection: Keep-Alive Cookie: sid=rta120dn4viv7jbvmqlds6ndq3; _ym_uid=1610033587112486313; _ym_d=1610033587
Jan 7, 2021 07:33:09.115345001 CET	1931	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 07 Jan 2021 06:33:09 GMT Content-Type: image/png Content-Length: 52116 Last-Modified: Wed, 05 Apr 2017 10:44:48 GMT Connection: keep-alive ETag: "58e4caa0-cb94" Expires: Sat, 06 Feb 2021 06:33:09 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5a 00 00 01 f4 08 06 00 00 00 bd c9 3a 28 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 41 34 36 44 33 34 33 42 42 46 35 32 31 31 45 30 38 45 38 41 38 38 46 30 41 37 45 33 33 38 41 43 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 41 34 36 44 33 34 33 43 42 46 35 32 31 31 45 30 38 45 38 41 38 38 46 30 41 37 45 33 33 38 41 43 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 41 34 36 44 33 34 33 39 42 46 35 32 31 31 45 30 38 45 38 41 38 38 46 30 41 37 45 33 33 38 41 43 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 41 34 36 44 33 34 33 41 42 46 35 32 31 31 45 30 38 45 38 41 38 38 46 30 41 37 45 33 33 38 41 43 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 59 54 a5 49 00 00 c8 0a 49 44 41 54 78 da ec 5d 05 80 17 55 fe ff 4e fc 3a b6 3b 61 59 96 5a 1a 94 50 2c c4 2e ec 3a 6c 3d f3 f4 ec d6 b3 ee ce b3 cf 2e 54 14 04 0b 41 04 e9 ee 5a d8 25 97 ed ae 5f e7 cc ff fb 9d 79 b3 3b ac bb c0 21 a7 fe 4f 46 1f 3b bf 99 37 2f 3e ef db ef cd 1b 4e 96 65 38 52 c7 9a 2d 95 86 c2 de e9 82 c5 cc 07 e0 ff c1 e1 0b 79 73 9a 64 57 9e 5f 0e c4 f8 dd ee 98 14 21 79 51 6a 7c ea be ff 46 5d e2 e1 3e 18 8a c8 bc 28 72 05 3f 6d ac e9 Data Ascii: PNGIHDRZ:(tEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:A46D343BBF5211E08E8A88F0A7E338AC" xmpMM:DocumentID="xmp.did:A46D343CBF5211E08E8A88F0A7E338AC"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A46D3439BF5211E08E8A88F0A7E338AC" stRef:documentID="xmp.did:A46D343ABF5211E08E8A88F0A7E338AC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>YTIIDATx]UN:;aYZP,.:l=.TAZ%_y;!OF;7/>Ne8R-ysdW_!yQj\|F]>(r?m
Jan 7, 2021 07:33:09.115387917 CET	1932	IN	Data Raw: 39 ed 87 9d 89 65 fb 1a 0c c7 0f 4e b6 6d de e9 e2 57 16 7b db 06 0f 48 08 9c 36 26 65 b7 cf 1d 5d 37 38 cf 29 01 04 b9 70 38 22 1b 0c b6 df 05 c8 55 2d d5 b9 f5 de 86 6b aa c5 9a dc 92 a6 62 6b b0 da 6f be b0 ef 45 42 8a 33 e9 33 4e 14 02 bf 1b Data Ascii: 9eNmW{H6&e]78)p8"U-kbkoEB33N+B.Ps-h qpJ+kaJNWn/n9C8y_{$qUOS2x{yci&164 z6Bo:a3y'mkcq26a
Jan 7, 2021 07:33:09.115423918 CET	1934	IN	Data Raw: d5 5a 75 86 5f 82 5e 9f ce a9 79 64 fd ea ad ce 13 0b 05 6f af 74 db eb e3 06 26 dd f6 f0 f5 3d 37 67 24 99 60 65 91 1b 6a 9b 43 be 94 8c f4 bf 63 1f 66 4a b2 64 02 94 16 08 b3 2c 18 8d 3e 08 f9 06 d6 7d f6 ee 5d bb 6a 6a 4c e6 b3 af 6c b1 f3 a6 Data Ascii: Zu_^ydot&=7g$`ejCcfJd,>}]jjLl}&m`@XU4gX<OZZ!:mSJNIz.1.}`j?M=}&_P_T5@ffbb9pZBJ\r}w7
Jan 7, 2021 07:33:09.115470886 CET	1935	IN	Data Raw: ef e3 dd 50 04 c6 04 73 72 da a0 61 8b 50 09 d5 ba 77 6e 15 a2 35 65 13 b7 bc f7 fe 55 6b 1a 3d ce bc 4b ae 82 11 23 47 7c 62 b3 a4 bd da d0 50 7b 4a 73 c5 9a e4 48 b0 3c 3e 31 73 f0 6e ab 55 dc 1e e5 91 91 e4 e6 78 6f dd 0f 77 cc fb f6 8b 13 dc Data Ascii: PsraPwn5eUk=K#G\|bP{JsH<>1snUxowypq+N4".;=5.fZ}"V3N81,S)0nP~J`adMwlBA<3z]-vg6\4UV\$+b
Jan 7, 2021 07:33:09.115511894 CET	1937	IN	Data Raw: 32 fc ff 70 88 3e 39 12 e0 d6 6e 2c bb 6a e5 c6 46 a8 6a 85 b4 a4 04 47 ba 60 30 96 06 c3 51 d8 57 17 28 58 b1 b1 fa e2 79 8b 36 5f 3c a6 0f ef 9c 30 a6 df 86 e4 d4 f4 d7 4d 66 73 d3 af d1 3a ee 48 2e 37 f8 ad 0f 29 1a ce 59 ba 6e cf e4 e7 df 5d Data Ascii: 2p>9n,jFjG`0QW(Xy6_<0Mfs:H.7)Yn]2zT+%oCPr\yh/[mcUOrX)\|-]3)Tjv RL&;&j6Y.4S2uQ`:Y00%L7IrbO
Jan 7, 2021 07:33:09.115550041 CET	1938	IN	Data Raw: 64 d7 66 32 05 09 dd 38 52 2d 4c e4 01 b3 96 4e 64 26 df 33 ec 2f d5 33 0b d3 fb ac 9c 59 ba 7e ff 2a ca f0 4f 4c 86 46 99 ff ef fd 0f 5c ed 03 b9 e5 24 22 f2 31 9d a0 f3 fa fa 74 93 7f 02 ab 7b 37 73 95 c9 5c 7b 8a 0d d0 cd 3a 0f 71 d7 41 da 33 Data Ascii: df28R-LNd&3/3Y~OLF\$"1t{7s\{:qA3Fa+L~"8kpgYXLGnV3cZNP0$tyL\tgfdO\wsDAUabMg\JU<1bL(zA7!y61ME

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.3	49859	213.180.204.205	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:33:06.875654936 CET	1802	OUT	GET /img/widget/arrow_sprite.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: loginza.ru Connection: Keep-Alive Cookie: sid=rta120dn4viv7jbvmqlds6ndq3
Jan 7, 2021 07:33:06.951328039 CET	1873	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 07 Jan 2021 06:33:06 GMT Content-Type: image/gif Content-Length: 1139 Last-Modified: Wed, 05 Apr 2017 10:44:48 GMT Connection: keep-alive ETag: "58e4caa0-473" Expires: Sat, 06 Feb 2021 06:33:06 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 08 00 15 00 91 02 00 00 99 ff b2 b2 b2 00 00 00 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 46 33 37 45 35 46 35 32 33 45 36 45 31 31 45 30 41 38 32 39 45 39 38 43 31 38 36 33 35 39 34 41 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 46 33 37 45 35 46 35 33 33 45 36 45 31 31 45 30 41 38 32 39 45 39 38 43 31 38 36 33 35 39 34 41 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 46 33 37 45 35 46 35 30 33 45 36 45 31 31 45 30 41 38 32 39 45 39 38 43 31 38 36 33 35 39 34 41 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 46 33 37 45 35 46 35 31 33 45 36 45 31 31 45 30 41 38 32 39 45 39 38 43 31 38 36 33 35 39 34 41 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 01 ff fe fd fc fb fa f9 f8 f7 f6 f5 f4 f3 f2 f1 f0 ef ee ed ec eb ea e9 e8 e7 e6 e5 e4 e3 e2 e1 e0 df de dd dc db da d9 d8 d7 d6 d5 d4 d3 d2 d1 d0 cf ce cd cc cb ca c9 c8 c7 c6 c5 c4 c3 c2 c1 c0 bf be bd bc bb ba b9 b8 b7 b6 b5 b4 b3 b2 b1 b0 af ae ad ac ab aa a9 a8 a7 a6 a5 a4 a3 a2 a1 a0 9f 9e 9d 9c 9b 9a 99 98 97 96 95 94 93 92 91 90 8f 8e 8d 8c 8b 8a 89 88 87 86 85 84 83 82 81 80 7f 7e 7d 7c 7b 7a 79 78 77 76 75 74 73 72 71 70 6f 6e 6d 6c 6b 6a 69 68 67 66 65 64 63 62 61 60 5f 5e 5d 5c 5b 5a 59 58 57 56 55 54 53 52 51 50 4f 4e 4d 4c 4b 4a 49 48 47 46 45 44 43 42 41 40 3f 3e 3d 3c 3b 3a 39 38 37 36 35 34 33 32 31 30 2f 2e 2d 2c 2b 2a 29 28 Data Ascii: GIF89a!XMP DataXMP<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:F37E5F523E6E11E0A829E98C1863594A" xmpMM:DocumentID="xmp.did:F37E5F533E6E11E0A829E98C1863594A"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F37E5F503E6E11E0A829E98C1863594A" stRef:documentID="xmp.did:F37E5F513E6E11E0A829E98C1863594A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>~}\|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;:9876543210/.-,+*)(
Jan 7, 2021 07:33:06.951359034 CET	1874	IN	Data Raw: 27 26 25 24 23 22 21 20 1f 1e 1d 1c 1b 1a 19 18 17 16 15 14 13 12 11 10 0f 0e 0d 0c 0b 0a 09 08 07 06 05 04 03 02 01 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 08 00 15 00 00 02 2a 94 61 12 87 ba 00 5d 80 30 d8 17 2f 33 36 35 f5 2d 9b c3 20 1a Data Ascii: '&%$#"! !,*a]0/365- \SEz_D.9^,(;
Jan 7, 2021 07:33:09.036740065 CET	1923	OUT	GET /favicon.ico HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Host: loginza.ru Connection: Keep-Alive Cookie: sid=rta120dn4viv7jbvmqlds6ndq3; _ym_uid=1610033587112486313; _ym_d=1610033587
Jan 7, 2021 07:33:09.112656116 CET	1928	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 07 Jan 2021 06:33:09 GMT Content-Type: image/x-icon Content-Length: 894 Last-Modified: Wed, 05 Apr 2017 10:44:48 GMT Connection: keep-alive ETag: "58e4caa0-37e" Expires: Sat, 06 Feb 2021 06:33:09 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 18 00 68 03 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 99 00 ff b2 2e ff b2 2e ff 99 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d8 9e ff b2 2e ff b2 2e ff b2 2e ff b2 2e ff b2 2e ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b2 2e ff b2 2e ff ff ff ff ff ff ff b2 2e ff b2 2e ff da a3 ff ff ff ff ff ff ff db a6 ff cc 7a ff d2 8c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b2 2e ff b2 2e ff ff ff ff 97 00 ff b2 2e ff b2 2e ff b2 2e ff 9a 00 ff d9 a3 ff ff ff ff ff ff ff d7 9e ff b2 2e ff b2 2e ff b2 2e ff b2 2e ff b2 2e ff b2 2e ff 9e 0f ff b2 2e e2 8b 02 7a 7a 7a ba ba ba ff b2 2e ff a0 10 ff ff ff ff ff ff ff b2 2e fb 9d 07 7a 7a 7a ba ba ba da 90 1c ff b2 2e ff b2 2e ff ac 2a fd ac 2a ff ff ff 7a 7a 7a 7a 7a 7a df be 8c ff b4 2a ff ff ff ff ff ff ff b2 2e fb db aa 7a 7a 7a 7a 7a 7a d3 ca bc ff b2 2e ff b2 2e ff a9 23 fd ab 28 ff ff ff ff ff ff ff ff ff f2 db b8 ff a9 23 ff ff ff ff ff ff ff a9 23 ff ff ff ff ff ff ff ff ff ff ff ff ff a9 23 ff a9 23 ff a9 23 ff a9 23 f8 cb 82 ff ff ff ff ff ff ff ae 27 ff a9 23 ff ff ff ff ff ff ff a9 23 ff b3 2a ff ff ff ff ff ff f5 c9 84 ff a9 23 ff a9 23 ff ff ff ff a9 23 ff ad 2a ff b7 29 ff a9 23 ff a9 23 ff a4 1a ff ff ff ff ff ff ff a5 1a ff a8 24 ff b4 2a ff b7 29 ff ae 28 ff a9 23 ff a7 20 ff ff ff ff ff ff ff a9 23 ff a9 23 ff a9 23 ff e0 af ff ff ff ff ff ff ff ff ff ff ff ff ff d4 92 ff a8 21 ff ab 2a ff d2 8d ff ff ff ff a1 12 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ba ba ba ba ba ba ce ce ce ff ff ff ce ce ce ba ba ba ba ba ba ff ff ff ff ff ff ba ba ba ba ba ba ce ce ce ff ff ff ce ce ce ba ba ba ba ba ba 00 00 00 ce ce ce ba ba ba ba ba ba ba ba ba ce ce ce ff ff ff ff ff ff ff ff ff ff ff ff ce ce ce ba ba ba ba ba ba ba ba ba ce ce ce ff ff ff 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 80 01 00 00 Data Ascii: h( ...........z............zzz..zzz..*zzzzzz.zzzzzz..#(######'#####)##$)(# ###!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.3	49862	91.189.114.9	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:33:13.609965086 CET	2032	OUT	GET /forum/images/icons/icon1.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:13.689321041 CET	2041	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:13 GMT Content-Type: image/gif Content-Length: 1032 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: "408-558f3247ca900" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 10 00 10 00 f7 95 00 ff ff ff f6 f6 f7 cb cc d5 c0 c0 c7 c7 c7 d0 cf d0 d7 ce d3 d9 d0 d4 dc 7c 81 82 a4 a7 a7 ce d2 d9 ca cb d3 d6 d9 de f6 f6 f6 e9 e9 eb 6b 6f 70 7d 82 81 da de e4 fe fe fd d7 db e8 ce d1 df cb cc d3 a3 a7 a6 cd d1 dc d1 d6 e2 c1 c3 c8 c3 c3 cb 8b 8f 91 32 35 35 89 8b 94 56 58 5d bf bf c8 f6 f8 f8 e3 e4 e8 d1 d1 d5 d6 db e3 e0 e1 e5 ec ec ef e1 e4 eb 27 29 29 14 16 16 22 25 25 e6 e9 ea cc d1 d9 d7 d8 de a6 a6 ac e7 ea ec f8 f7 f9 48 4c 4d c4 c7 d4 dd dd e6 cb cd cd c5 c8 c8 ee ee ef cd cd d5 ca cb d4 65 66 6d ce cf da ca cb d9 38 3a 3c cf d2 e0 b1 b4 c0 d2 d2 da e6 e7 ea ec eb f0 75 79 7a f3 f2 f4 d3 d8 de e3 e5 e3 cd cd d2 3f 3f 44 d7 da da d8 da e4 cb cc d0 e6 e6 ed 1a 1b 1d aa ad b8 2b 2c 2f ae ad b6 bc be c8 41 42 47 e6 e9 e9 d0 d4 dd d5 d6 db db df e5 6f 71 78 fc fd fd 92 94 9d c5 c5 cc 5a 5f 5f cf d1 d7 f0 f1 f4 e1 e2 e5 d7 d8 e0 be be c6 f0 f0 f0 dc dc df cd d2 db cd cd d7 cf ce d7 ca ca d1 c8 c8 d0 df e2 f1 42 43 47 d2 d3 dd 9a 9a a0 d8 d9 e0 f4 f2 f4 b9 b9 c1 3f 41 42 d0 d0 d2 a3 a5 b0 19 1c 1d e0 e3 f2 fc fc ff dd dd e2 de dc e3 fe fd fe c6 c8 d5 a5 a5 aa d0 d2 d6 c8 ca cd 34 38 39 d2 d3 d6 d3 d8 e4 fe fe fe a2 a5 af b9 bc c8 f5 f5 f5 d4 d5 da ca ca d2 cc cb d6 d6 d9 e8 1f 20 22 da df e9 e0 e3 e7 ff fe ff d2 d6 dc fd fb fc 2a 2b 2e f4 f4 f6 11 11 12 86 88 91 d6 d6 dc ee ed ee cb cc d8 d1 d6 de ce cf d4 fc fc fc e1 e4 f3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 95 00 2c 00 00 00 00 10 00 10 00 00 08 e5 00 2b 19 3a 64 82 4a 84 21 07 46 48 92 a2 c0 4c a5 87 6f 10 00 d8 c3 05 4c 09 00 18 31 62 78 58 e9 0a 07 00 69 ee 38 69 91 27 89 1b 8c 17 38 f6 48 01 a0 c6 97 00 6b 20 31 6a 80 71 05 47 3b 85 88 00 98 43 22 84 9a 40 2c 16 00 30 c0 91 d0 22 1a 40 3e 0c 18 30 89 40 81 31 00 18 70 ac 04 c5 82 1c 41 45 b0 68 60 03 02 a3 8a a9 1e 20 00 f0 42 c6 06 9d 47 80 32 4e ad 92 05 40 1d 8c 56 02 fc c0 d3 07 c0 04 8e 1d da 00 a8 30 45 80 80 27 65 84 50 02 10 86 a3 9f 13 00 c4 dc 18 d4 c5 87 16 11 19 14 25 e2 f8 07 05 00 34 91 74 e4 20 e0 00 11 46 17 1c 79 34 02 20 03 89 92 2d 2f 24 64 04 10 87 e3 92 28 ab 63 03 e0 c3 b1 c9 8c d5 47 12 3c d8 01 27 c6 54 23 41 36 c0 d0 73 06 87 23 26 14 a6 06 04 00 3b Data Ascii: GIF89a\|kop}255VX]'))"%%HLMefm8:<uyz??D+,/ABGoqxZ__BCG?AB489 "*+.!,+:dJ!FHLoL1bxXi8i'8Hk 1jqG;C"@,0"@>0@1pAEh` BG2N@V0E'eP%4t Fy4 -/$d(cG<'T#A6s#&;
Jan 7, 2021 07:33:13.904222965 CET	2050	OUT	GET /forum/images/gradients/gradient_thead.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:13.982661009 CET	2055	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:13 GMT Content-Type: image/gif Content-Length: 3004 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: "bbc-558f3247ca900" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 64 00 64 00 f7 00 00 33 4d 80 54 69 94 3b 54 85 4a 61 8e 45 5c 8b 4c 62 8f 43 5b 8a 38 51 83 48 5f 8d 5b 6f 98 58 6d 97 47 5e 8c 35 4f 81 3c 55 86 4f 65 91 5a 6e 98 5a 6f 98 53 68 93 34 4e 81 57 6c 96 39 53 84 51 67 92 3d 55 86 35 4e 81 36 4f 82 41 59 89 3e 57 87 55 6a 95 5b 6f 99 3e 56 87 37 50 82 51 66 92 40 58 88 59 6e 97 34 4e 80 4e 64 90 4d 64 90 57 6b 96 52 68 93 38 52 83 59 6d 97 46 5e 8c 56 6a 95 3a 52 84 49 5f 8d 4c 63 8f 55 6b 95 42 59 89 3a 53 84 3f 58 88 37 50 83 50 65 91 36 50 82 4f 65 92 37 51 82 3e 56 86 43 5a 8a 42 5a 89 40 58 87 48 60 8d 3b 53 85 4a 60 8e 59 6e 98 4d 63 90 36 4f 81 34 4d 80 56 6b 95 45 5d 8b 56 6c 96 5b 70 98 58 6c 97 47 5d 8c 58 6d 96 41 5a 89 54 6a 94 3b 54 84 43 5b 89 35 4f 82 5b 70 99 52 68 94 51 67 93 39 52 84 3e 57 86 58 6c 96 49 60 8d 5a 6e 97 40 57 88 46 5d 8c 34 4f 81 34 4d 81 53 68 94 4b 61 8e 3c 55 85 39 52 83 51 66 93 4c 62 90 37 51 83 5b 6e 98 33 4e 81 36 50 81 4e 63 90 3f 58 87 5a 6d 97 4f 66 91 44 5c 8b 45 5c 8a 33 4d 81 43 5a 89 36 50 83 38 51 84 59 6d 98 4e 64 91 57 6c 95 4d 64 91 5c 6f 98 35 50 82 54 69 95 3d 55 85 44 5b 8a 3d 56 86 4b 62 8f 39 51 83 57 6b 95 50 66 91 4b 60 8e 3f 57 88 53 67 93 44 5d 8b 5a 6d 98 50 67 92 40 57 87 41 5a 88 59 6d 96 50 66 92 41 59 88 52 67 93 36 51 82 48 5f 8e 44 5a 8a 4a 61 8f 4a 60 8f 4e 63 91 56 6c 95 47 5e 8b 56 6b 96 42 59 88 33 4e 80 54 6a 95 4f 66 92 44 5b 89 5c 70 98 50 65 92 59 6c 96 4d 63 91 46 5e 8b 4b 63 8f 35 50 81 55 69 94 3f 57 87 52 67 94 4b 60 8f 45 5d 8a 3b 53 84 55 6b 96 5a 6f 97 3a 54 84 3c 56 85 5c 6f 99 36 51 83 3a 53 83 56 6a 96 39 51 84 47 5d 8b 4b 61 8f 44 5d 8a 59 6c 97 44 5c 8a 4b 63 90 53 67 94 38 52 84 4b 62 90 5c 70 99 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 64 00 64 00 00 08 ff 00 01 08 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 61 42 11 10 b3 04 11 03 51 02 44 35 92 44 48 90 24 a1 63 16 09 59 34 06 91 40 71 e4 48 92 16 29 4a 50 a3 b1 65 10 88 23 25 aa 91 f0 32 0b 00 95 2f 45 88 01 00 32 a4 88 20 59 c4 a8 e1 09 12 e5 cb 99 11 d5 04 c9 f8 b2 a9 88 99 58 2e 30 60 70 41 aa 55 2c 12 a8 5e 90 b0 95 2a 83 ac 55 ab 62 f1 3a 35 2a d7 a9 52 d1 5a 9d ca 20 2a d6 b6 61 c9 46 ad da d1 eb d6 b8 5f b3 9a d5 3a 96 ed d7 bf 17 c6 60 c0 00 a4 09 06 06 34 30 34 a1 d1 64 f1 60 20 83 e7 d0 10 3c b9 09 e2 31 90 0d 1f 56 8c 21 f1 64 c2 34 e6 0c 26 0c 9a 06 64 d1 83 4d 8b 86 8c 99 f4 e1 c5 90 5f 03 19 c3 a9 33 83 26 63 9a cc 01 42 83 53 e1 c8 83 3d d8 90 61 c3 03 18 0f 1e d8 20 a2 21 1c 11 1b 1a 32 90 83 61 23 7c b8 87 e8 60 6c 14 97 41 dc f8 75 44 36 c0 c8 ff 10 7f 5d 06 75 e4 c5 91 47 77 7e 9d 86 0d 54 c2 b9 6f 9f 9e fd ba 70 e8 cc 8b 93 8f 7e de 83 Data Ascii: GIF89add3MTi;TJaE\LbC[8QH_[oXmG^5O<UOeZnZoSh4NWl9SQg=U5N6OAY>WUj[o>V7PQf@XYn4NNdMdWkRh8RYmF^Vj:RI_LcUkBY:S?X7PPe6POe7Q>VCZBZ@XH`;SJ`YnMc6O4MVkE]Vl[pXlG]XmAZTj;TC[5O[pRhQg9R>WXlI`Zn@WF]4O4MShKa<U9RQfLb7Q[n3N6PNc?XZmOfD\E\3MCZ6P8QYmNdWlMd\o5PTi=UD[=VKb9QWkPfK`?WSgD]ZmPg@WAZYmPfAYRg6QH_DZJaJ`NcVlG^VkBY3NTjOfD[\pPeYlMcF^Kc5PUi?WRgK`E];SUkZo:T<V\o6Q:SVj9QG]KaD]YlD\KcSg8RKb\p!,ddH\aBQD5DH$cY4@qH)JPe#%2/E2 YX.0`pAU,^Ub:5RZ aF_:`404d` <1V!d4&dM_3&cBS=a !2a#\|`lAuD6]uGw~Top~
Jan 7, 2021 07:33:13.982706070 CET	2057	IN	Data Raw: fb e1 32 9c 70 c0 80 5d 1c 90 c7 09 08 22 38 60 1e 03 1e b0 ca 80 02 9e d0 06 81 05 36 28 60 83 10 5a 98 e1 01 5d 4c c8 21 86 0a 7a 38 e1 2c 27 e4 91 47 1b 0c 1e d0 46 84 0a 1e 70 42 17 07 4e 58 21 8b 05 22 b8 42 14 14 ac 40 c1 8e 51 44 b1 82 8e Data Ascii: 2p]"8`6(`Z]L!z8,'GFpBNX!"B@QD?R0>($0#:Q$G2#>t@c9%,!<)tDrIgxYg)u9~(r<('Z`AXi\`jButu\jrbw:*
Jan 7, 2021 07:33:13.982747078 CET	2057	IN	Data Raw: 97 bc 2e 70 c4 04 f6 cb df 12 4c 00 0e 13 f0 6f 09 fc 1b e0 12 10 c1 c0 13 20 02 11 f8 fb df 03 13 41 0f 0b de af 1e 06 bc df 01 5b b8 c2 44 d0 ef 80 f5 b0 5f 00 fb 57 c1 1c f6 af 23 0c 8c 60 22 00 38 c1 03 86 04 7f 3d ac 07 15 43 c2 bf 70 80 c3 Data Ascii: .pLo A[D_W#`"8=Cp@)X@`c(`6i(0@?FP0YrmTF&pcc<> U@AB*A!xh@zCPCqv\IH67>@lD{
Jan 7, 2021 07:33:14.085941076 CET	2060	OUT	GET /favicon.ico HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.3.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:14.164915085 CET	2062	IN	HTTP/1.1 302 Found Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:14 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 336 Connection: keep-alive Location: http://ovd.ru/index.php?searchword=&option=com_search&Itemid=0 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 6f 76 64 2e 72 75 2f 69 6e 64 65 78 2e 70 68 70 3f 73 65 61 72 63 68 77 6f 72 64 3d 26 61 6d 70 3b 6f 70 74 69 6f 6e 3d 63 6f 6d 5f 73 65 61 72 63 68 26 61 6d 70 3b 49 74 65 6d 69 64 3d 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 50 48 50 2f 34 2e 34 2e 39 20 53 65 72 76 65 72 20 61 74 20 6f 76 64 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="http://ovd.ru/index.php?searchword=&option=com_search&Itemid=0">here</a>.</p><hr><address>Apache/2.4.41 (Ubuntu) PHP/4.4.9 Server at ovd.ru Port 80</address></body></html>
Jan 7, 2021 07:33:14.168311119 CET	2062	OUT	GET /search.html?searchword= HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.3.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:14.363878012 CET	2065	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:14 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/4.4.9 P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM" Expires: Mon, 1 Jan 2001 00:00:00 GMT Last-Modified: Thu, 07 Jan 2021 06:33:14 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache ETag: W/"71f668f9cfccce61efe8bc41551eaeda" Content-Encoding: gzip Data Raw: 64 30 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b5 5a 5b 6f e3 c6 15 7e 5e 01 fe 0f d3 29 76 2d c3 16 a9 8b d7 96 6d 49 8b a6 49 90 16 4d 10 b4 e9 43 11 04 c2 90 1c 49 5c 53 1c 96 a4 24 2b 17 60 2f 2d b6 41 82 2c 90 f6 a1 68 d1 4b 8a be f4 cd d9 64 1b 6f bc 71 80 fe 02 ea 1f f5 9c 99 21 45 ea b6 9b 9b 17 91 c8 99 39 67 ce 7d be 33 0a 21 ad 41 3c f4 3a 5b a5 d6 80 33 07 be 09 69 59 2c e2 64 10 f2 5e 9b 0e e2 38 38 36 4d 31 76 8c 70 64 52 62 76 70 c1 90 c7 8c e0 54 85 ff 76 e4 8e db d4 16 7e cc fd b8 12 4f 03 4e 89 7e 6b d3 98 9f c5 26 f2 3f 21 f6 80 85 11 8f db a3 b8 57 69 16 f8 f8 6c c8 db 34 14 96 88 a3 1c ad eb 3b fc 6c 8f f4 84 e7 89 c9 0a 82 53 3e 9d 88 d0 c9 93 ac 58 e5 f0 c8 0e dd 20 76 85 bf bc 10 d7 c6 6e ec f1 4e f2 8f e4 2a b9 98 dd 4d be 6c 99 6a 04 e7 3c d7 3f d5 76 30 63 3e 0c 3c 16 f3 c8 b4 dc b7 bb 96 37 e2 5d d7 35 7b 6c ec 02 57 03 3e 28 09 b9 d7 a6 d1 40 84 b1 3d 8a 09 8e 53 82 06 01 5d 86 ac cf cd b3 8a 1a 83 bd c1 dc 92 b9 22 89 a7 1e 8f 06 9c c7 74 79 b7 6e 34 8d e0 cd b4 a3 c8 ec 73 9f 87 cc 33 e0 39 e5 2c 2d 2c df cd ce f3 33 cd ab 80 8c d3 99 f5 9c f1 5f cb d4 21 02 8f 96 70 a6 c4 75 da 14 1f ba 56 1f e3 86 a0 39 99 e5 71 32 71 9d 78 d0 a6 b5 6a f5 3a 25 c4 02 37 f1 b0 4d ab 94 30 cf ed fb 10 2e e0 05 1e 82 43 b8 e7 05 cc 71 5c bf 2f a7 f1 3d 0a 98 ad df 3b 9a ab e2 1c e6 5f d3 41 27 db eb e0 08 b6 d2 fc 3d de 03 b5 c9 58 bf 0e 5d c7 f1 38 b2 bb 06 7f f8 49 16 ff 96 58 6f 18 45 26 4b 1c 24 ef 55 eb d1 5c 8b 63 10 64 da 8e f0 9d be 2d 51 a2 76 45 53 2e 9a cf 63 51 04 9e 12 81 cf c6 34 53 17 12 29 16 43 da 59 b5 f3 fa bf 96 e3 8e 57 49 a1 24 59 76 6b ce ab 1b dd 58 a3 1d f4 1d 2a e3 8b 49 c8 82 36 55 df 30 ce d2 d0 0c c4 50 44 03 53 e6 bc 81 05 23 53 6e c8 5c df e3 63 ee 55 a4 8e 2a 53 9f 26 57 b3 f7 67 1f b6 4c 96 e3 61 8b 61 20 7c 30 8d 29 64 be ef c1 40 f7 6c c8 02 f3 67 10 df ae b3 d7 ac 99 91 0b 8f 2c d8 ab 99 eb 37 f8 4b 72 3e bb 33 bb 97 9c 13 a8 07 e7 c9 13 7c 2c ec 54 ac 89 3d 11 8e 86 eb b9 fd 1b 44 bd 33 bb 9f 3c 2d 0a bb 8e 00 53 8a d9 b1 3b e6 dd 21 f7 47 72 b0 93 fc 0d 84 49 3e 4b 2e 41 9c 47 c9 57 b3 fb b3 8f 24 37 8c 1b f8 08 f1 03 1d 84 ee 5b ed c1 96 b9 c1 bb ab 68 16 63 72 fe 28 37 94 c7 84 de 54 4d fe 60 99 bf 32 f1 75 72 ac ce 07 4f f4 05 56 2a 18 ea 60 a6 aa b4 5f 93 66 1b 14 c3 67 4c d1 ef 53 31 82 55 5a ee 83 0a cc 13 b8 a6 66 c0 4b e9 60 30 41 2b b4 80 d6 4f 87 ac 10 b4 b2 21 dc ac 88 04 2c 1e 4c d8 94 76 4a c9 1f d3 c0 80 c0 7d d8 32 Data Ascii: d03Z[o~^)v-mIIMCI\S$+`/-A,hKdoq!E9g}3!A<:[3iY,d^886M1vpdRbvpTv~ON~k&?!Wil4;lS>X vnNMlj<?v0c><7]5{lW>(@=S]"tyn4s39,-,3_!puV9q2qxj:%7M0.Cq\/=;_A'=X]8IXoE&K$U\cd-QvES.cQ4S)CYWI$YvkXI6U0PDS#Sn\cUS&WgLaa \|0)d@lg,7Kr>3\|,T=D3<-S;!GrI>K.AGW$7[hcr(7TM`2urOV`_fgLS1UZfK`0A+O!,LvJ}2
Jan 7, 2021 07:33:14.363934040 CET	2067	IN	Data Raw: 91 42 9e 30 da e7 79 a6 0e 14 79 da a9 1e 1a d5 9a 51 af d6 6b d9 1a 65 1b 6d 82 b9 01 54 b5 54 ff ad f6 f1 5c 85 fa 77 b2 0b 29 b8 66 8d d3 17 86 d0 84 69 d1 03 01 e8 42 b5 ec 3c 57 60 2e 0a b2 28 a8 3c 48 b1 a8 22 45 05 b6 39 26 37 83 33 12 09 Data Ascii: B0yyQkemTT\w)fiB<W`.(<H"E9&73u{b'T^)ER@D @\|`a!4YT*e8B]SXU,Ghd"H\|rp\H]u~ny0eU_kQ{Iuruh
Jan 7, 2021 07:33:14.363962889 CET	2068	IN	Data Raw: 79 fe 06 7e 45 48 af ab d5 cb 17 ae 6b 6e 98 50 26 7c 5d 9d 59 3f 78 d1 f5 85 bc 28 55 f5 b3 03 f8 e8 7f ff b9 e1 5b 51 70 92 fc 3d f9 74 76 1f f1 a9 04 db 4f 24 52 7d 84 40 e8 63 40 54 7f 48 51 d1 9f e4 15 ea 39 a2 2a 64 b0 55 d2 0d 13 60 d3 3b Data Ascii: y~EHknP&\|]Y?x(U[Qp=tvO$R}@c@THQ9*dU`;dJt~W>U(>qQ{\|ZO#yJ@8}1?#(\s\|3$\^~\H\|.7ybhUTweT#]<Hg7_%nH~`sj
Jan 7, 2021 07:33:14.364666939 CET	2068	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Jan 7, 2021 07:33:15.048082113 CET	2069	OUT	GET /forum/register.php?a=act&u=84666&i=25545989 HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.3.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:15.168401957 CET	2070	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:15 GMT Content-Type: text/html; charset=windows-1251 Content-Length: 7714 Connection: keep-alive X-Powered-By: PHP/4.4.9 Set-Cookie: bblastactivity=0; expires=Fri, 07 Jan 2022 06:33:15 GMT; path=/ Cache-Control: private Pragma: private Content-Encoding: gzip Data Raw: 1f 8b 08 00 00 00 00 00 00 ff d5 5c 6b 6f 1b d7 99 fe 6c 03 fe 0f a7 53 34 a4 22 f1 a2 9b 2f 94 46 86 2d 4b 5d 17 71 92 8d 9d bd 20 1b 10 43 72 48 8e 35 e4 30 33 43 c9 72 92 ff d5 8f db 6c 81 2e ba 6d 52 2f 16 e8 7e 59 80 96 c5 35 23 4b b4 2c 37 4d 0b 1b f5 3e ef b9 cd 0c 39 a2 68 37 5e ec ca 4d 39 97 73 de 73 ce 7b bf 9c 33 ab 3f ba f1 c1 fa 9d 7f fc 70 83 35 c3 96 cb 3e fc f8 fa 7b 37 d7 99 91 2b 14 fe 7e 71 bd 50 b8 71 e7 06 fb 87 bf b9 73 eb 3d 36 9f 2f b2 3b be d5 0e 9c d0 f1 da 96 5b 28 6c bc 6f 30 a3 19 86 9d 52 a1 b0 b3 b3 93 df 59 cc 7b 7e a3 70 e7 a3 c2 3d 82 35 4f 9d e5 65 2e 8c f5 cc d7 c2 9a b1 76 e1 fc 2a 1f f1 5e cb 6d 07 66 0a 9c f9 2b 57 ae 88 ee 06 ab 39 be 69 b8 a1 6f 30 d7 6a 37 4c c3 ef 0a 00 b6 55 23 40 2d 3b b4 58 db 6a d9 78 e3 55 bc 30 30 58 d5 6b 87 76 3b 34 8d b6 e7 b4 6b f6 bd b9 ba e7 ba de 8e c1 0a ba 03 4d 3d 67 7f d6 75 b6 4d 63 5d 34 cf dd d9 ed d8 b1 ce a1 7d 2f 2c d0 34 57 58 b5 69 f9 81 1d 9a 3b 00 e7 ed 04 b9 f9 85 e5 f9 38 34 31 7c c3 6e db be 15 7a 98 a9 9e c1 f6 f5 ae eb da a1 d3 66 8b f9 4b c0 e2 75 9a ed 92 e8 9b 9c fc 96 bd bb e3 f9 b5 f8 f4 bf e9 1f f7 9f 3e e9 1d 0d 8e 87 7b 07 bd 39 76 dc 3f 1c 1e 9d b0 83 bd de f1 c9 e0 78 8e ed 0f 1e f7 be 3d 62 83 a3 93 fe f1 cb 3e 1a cd b1 e1 c9 7e ff 09 b5 7d 3a 3c ec ff b9 7f 34 f8 76 8e fd a6 ff b0 ff e4 e5 1c fb d3 41 ef 0f 2f d8 c1 f3 a7 7d 74 dd eb 1f 0f d0 fc e0 08 6d f7 fb 27 cf 0e 06 78 7a f0 fc bb 23 3c 3d 18 ee 1d bf a0 9f a3 fd c1 1f 07 c3 a3 3e dd 3d 7b da 7b f2 92 de fe e9 64 48 f7 4f 87 4f f8 ff 9f 0c 9f 1c e0 e9 b3 1e 66 81 de 34 f6 1f 86 c7 cf 0f c7 f1 53 b3 83 aa ef 74 88 85 62 18 4a 2e 92 0d ce 5e 25 da c8 65 46 ab cc ff 6f af 32 9f cf c7 d7 79 e1 3c a8 f9 a3 5c 8e ad df be cd 6e 87 bb ae 1d 34 6d 3b 64 b9 1c b1 5c 40 0f 58 08 fe 32 0d ce 56 d5 00 74 76 6a a6 b1 5d 91 fc 51 a6 47 d4 16 40 2e 9c 2f bc cb 62 9c c3 81 6e 7a be 00 cc 32 37 ec ba d5 75 43 71 9b 61 59 0e de a9 95 d8 fc 0c 7b b7 70 e1 7c c5 ab ed 5e 38 ff f9 85 f3 e7 2a 56 75 ab e1 7b dd 36 5e fe 78 63 1e ff 16 56 f0 b8 ea b9 9e 8f 27 45 fe 47 4f ea 90 01 f4 2f 76 42 b6 6d fb 35 ab 6d cd 31 e2 e7 6d fc ba dd aa 53 c3 6f 46 5c b0 06 e4 b9 66 67 e6 98 e5 3b 96 3b c7 9a b6 bb 0d 16 af a2 49 00 1d 91 0b 6c df a9 13 d0 96 e5 37 9c 76 89 2d 77 ee 11 e8 d8 ff d1 db 8e 55 ab 39 ed 46 89 e1 0d ee bf bc 70 de 2a b9 4e 7b 6b 8e d1 fc cb 16 5d 8b 55 a8 e9 2e e0 ef ca ba 6a bb ed 40 1d d9 35 d5 5c de 4e ea d1 f4 b0 36 4c bb 64 55 43 67 db 56 3d f9 e3 64 bf cd cd a5 a5 62 51 8c 94 ef 58 0d 3b 05 9d 9b fc 8f 56 a2 e6 a7 d1 89 b5 84 98 58 d8 9c 63 1d e0 cf 11 bd df 06 8e 31 52 3e ac 40 6f d8 7e ca 14 6f cc df 00 cd 53 a7 78 4e 74 02 cd 41 97 c0 73 9d 1a d8 e1 fa fc 95 cb 12 bf f9 b0 6a 85 29 20 2f 5f bc 72 fd fa 26 eb fa 6e d6 69 01 31 41 01 ec 50 73 a0 6e a3 ab 32 f5 cd 37 9c fa 0c f3 ed 8e 6d 85 b9 7b 2c f4 3a cc b5 eb 61 7c 32 11 06 05 6a 2a 9e 5b fb 81 79 90 e3 07 b3 01 d1 05 6f f1 75 a5 31 57 9d ff d1 f4 48 42 73 35 bb ea 41 99 43 57 95 58 db 6b db 78 11 83 a5 79 4f 82 4b 65 be Data Ascii: \kolS4"/F-K]q CrH503Crl.mR/~Y5#K,7M>9h7^M9ss{3?p5>{7+~qPqs=6/;[(lo0RY{~p=5Oe.v^mf+W9io0j7LU#@-;XjxU00Xkv;4kM=guMc]4}/,4WXi;841\|nzfKu>{9v?x=b>~}:<4vA/}tm'xz#<=>={{dHOOf4StbJ.^%eFo2y<\n4m;d\@X2Vtvj]QG@./bnz27uCqaY{p\|^8Vu{6^xcV'EGO/vBm5m1mSoF\fg;;Il7v-wU9FpN{k]U.j@5\N6LdUCgV=dbQX;VXc1R>@o~oSxNtAsj) /_r&ni1APsn27m{,:a\|2j[you1WHBs5ACWXkxyOKe
Jan 7, 2021 07:33:15.168457031 CET	2072	IN	Data Raw: d7 82 28 79 93 c3 8b 71 a8 84 9f ca a2 9b 9b 17 2f a6 ce 17 e2 6e fb 58 ae 9e 74 13 b6 32 85 96 cb eb 97 8a 57 ae 9c 45 4b ea fc c6 c4 24 ee 0a ad a6 d7 82 72 f8 c1 14 0b 27 04 4d 2b 46 55 ba 4d 23 ab e6 b1 78 a7 18 f9 44 bf 54 fa a5 76 d5 74 92 Data Ascii: (yq/nXt2WEK$r'M+FUM#xDTvt+US(IX4ZX^P&KiM[zrh)Ip~k\2m')R @,mi3.;m&DuR{n&V*JmHSJ^z[E<E
Jan 7, 2021 07:33:15.168504953 CET	2073	IN	Data Raw: cc 79 c3 c2 6e d7 29 ec c2 07 f5 72 35 af 95 b3 b7 41 80 d1 fb fc dd e0 ea b6 b9 78 a9 58 59 32 d6 56 0b 02 16 af 2c bd c1 58 20 72 1b d9 0d a4 b6 0b d1 65 ae e5 b4 df 6c 14 5d b4 da b6 50 a1 da b8 7d fb e6 07 ef 7f fc d1 7b cc 64 86 01 47 90 9e Data Ascii: yn)r5AxXY2V,X rel]P}{dG7?y{Av]ZC%0k9TfPQz=mVl2kHDQ$<q8& E9E}v7d_4dXGG(nv`M{w
Jan 7, 2021 07:33:15.168549061 CET	2074	IN	Data Raw: 9f 18 a9 e7 2c 62 6d 7e 43 84 a0 4e fa 8d 69 18 42 70 55 8b 4f e6 3f fd 11 1e 62 16 51 9b 8c f6 0a 80 2e 09 09 ed b0 42 14 6a 7c 0c 64 1a b1 17 0b 7c e9 d0 83 1a c0 ac 99 c0 97 06 c1 91 14 f3 0f d6 d0 89 b8 47 37 18 9f 0b 81 82 43 84 86 be 1d 76 Data Ascii: ,bm~CNiBpUO?bQ.Bj\|d\|G7Cv}I2FXtV^--0DMYq?+\dw\A@FbwE;l:\|\T}/PdGa{TE^t1QDny?%h^ ,D;\e,y,M.2}Zza6
Jan 7, 2021 07:33:15.168586016 CET	2076	IN	Data Raw: e5 20 76 6d d5 96 b1 9b a0 99 45 fd 8a b7 2c 77 a0 b5 e8 1c 1f 8e 3b a8 47 68 33 f9 69 b9 1b d6 e7 58 71 46 ea 30 a9 c9 d3 6b 20 29 f5 43 9d 3f 2f 63 24 28 f3 d4 4a 21 71 e7 d9 9a 61 31 4e 54 ae 19 34 4f c7 10 af f7 0d 83 c5 44 69 1d f8 03 05 b8 Data Ascii: vmE,w;Gh3iXqF0k )C?/c$(J!qa1NT4ODic__Qw7(RWXl/U7doIO[=O>s@GCExUE;h[]'4Y23\|=d(:iKxVrlZLY8MUzXF\|U$Oi
Jan 7, 2021 07:33:15.168625116 CET	2077	IN	Data Raw: c4 e5 91 2e 00 b1 26 72 4c 4c fe c8 8f cb 9c 0e 62 71 0a 18 ff a9 3f bf 73 3a 1c 8a 54 13 d3 4f 99 cb 2f c5 d7 7a 26 00 19 c5 41 0a 90 5f d3 97 7e 26 80 40 48 74 d6 3c 1e 88 0f 02 4d 00 82 38 e8 2c 20 5f e3 03 44 13 20 2c 9f 0d e1 97 f4 25 a3 09 Data Ascii: .&rLLbq?s:TO/z&A_~&@Ht<M8, _D ,% (*`d?4aS0>yk@ii#z?89g&Y<?>=;'@kc]^`M=``]9C\|A-N :N1J
Jan 7, 2021 07:33:16.081547022 CET	2082	OUT	GET /forum/register.php?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.4.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:16.416418076 CET	2084	OUT	GET /forum/register.php?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.4.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:16.822720051 CET	2085	OUT	GET /forum/register.php?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.4.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:17.510207891 CET	2086	OUT	GET /forum/register.php?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.4.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:17.592814922 CET	2088	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:17 GMT Content-Type: text/html; charset=windows-1251 Content-Length: 6709 Connection: keep-alive X-Powered-By: PHP/4.4.9 Set-Cookie: bblastactivity=0; expires=Fri, 07 Jan 2022 06:33:17 GMT; path=/ Cache-Control: private Pragma: private Content-Encoding: gzip Data Raw: 1f 8b 08 00 00 00 00 00 00 ff d5 5c dd 6f 1b 47 92 7f 96 01 ff 0f 9d 59 6c 48 45 fc 94 64 2b a6 34 32 2c 59 ca 79 11 27 b9 58 b9 bd 83 cf 20 86 e4 88 1c 6b 38 c3 cc 0c 25 cb 49 fe af 7d 5c 2c f6 70 2f 77 b7 bb c0 1e f6 71 29 45 b4 19 49 a4 45 6a 93 cd c2 86 75 bf ea ee e9 19 7e 59 b6 37 3e dc 29 88 c9 e9 e9 ae aa ae af ae ae ea e6 ca 7b b7 3f 5d df fa 97 cf 36 58 2d a8 db ec b3 2f d6 3e be b3 ce b4 74 36 fb cb 85 f5 6c f6 f6 d6 6d f6 cf ff b0 75 f7 63 96 cf e4 d8 96 67 38 be 15 58 ae 63 d8 d9 ec c6 27 1a d3 6a 41 d0 28 64 b3 7b 7b 7b 99 bd 85 8c eb 55 b3 5b 9f 67 1f 11 ac 3c 0d 96 5f d3 41 6c 64 a6 12 54 b4 d5 ab 57 56 38 c6 47 75 db f1 f5 09 70 f2 37 6e dc 10 c3 35 56 b1 3c 5d b3 03 4f 63 b6 e1 54 75 cd 6b 0a 00 a6 51 21 40 75 33 30 40 7f d0 48 9b 5f 36 ad 5d 5d 5b 77 9d c0 74 82 f4 d6 7e c3 d4 58 59 3c e9 5a 60 3e 0a b2 84 75 99 95 6b 86 e7 9b 81 be 67 39 15 77 cf 4f e7 e7 af e5 35 96 55 d0 1c a3 6e ea 5a d5 74 4c cf 08 5c 20 56 40 76 d7 9a b6 6d 06 96 c3 16 32 4b 60 ca 1a 21 5f 14 63 43 5a c4 e8 1d 73 7f cf f5 2a 7e 6c f0 ef da 67 ed 67 27 ad 6e e7 ac 77 78 dc 4a b1 b3 f6 69 af 3b 60 c7 87 ad b3 41 e7 2c c5 8e 3a 4f 5b df 75 59 a7 3b 68 9f bd 68 a3 53 8a f5 06 47 ed 13 ea fb ac 77 da fe 5b bb db f9 2e c5 fe a3 7d d0 3e 79 91 62 3f 1e b7 fe f2 9c 1d 9f 3f 6b 63 e8 61 fb ac 83 ee c7 5d f4 3d 6a 0f fa c7 1d b4 1e 9f 7f df 45 eb 71 ef f0 ec 39 7d 74 8f 3a 3f 74 7a dd 36 3d f5 9f b5 4e 5e d0 db 1f 07 3d 7a 7e d6 3b e1 ff 0e 7a 27 c7 68 ed b7 40 05 46 13 ee bf f4 ce ce 4f c7 f9 53 31 fd b2 67 35 48 23 a6 4e 92 75 2e 9f 25 fa c8 69 46 b3 cc fc 6f cf 32 93 c9 c4 e7 79 f5 0a a4 f9 5e 3a cd d6 ef dd 63 f7 82 7d db f4 6b a6 19 b0 74 9a 94 c4 a7 06 16 40 bf a4 5a 95 7d c8 d9 aa e8 da 6e 49 ea 47 91 9a a8 2f 80 5c bd 92 fd 80 c5 34 87 03 dd 74 3d 01 98 25 6e 9b db 46 d3 0e c4 63 82 25 39 78 ab 52 60 f9 59 f6 41 f6 ea 95 92 5b d9 bf 7a e5 ab ab 57 66 4a 46 79 a7 ea b9 4d 07 2f 7f b6 91 c7 7f f3 cb 68 2e bb b6 eb a1 25 c7 ff a8 65 1b 5a 8f f1 b9 46 c0 76 4d af 62 38 46 8a 91 3e ef e2 d3 6e 96 ad 0a 3e 13 e2 0b ab c2 3c 2b 66 22 c5 0c cf 32 ec 14 ab 99 f6 2e 54 bc 8c 2e 3e 4c 3e ed 9b 9e b5 4d 40 eb 86 57 b5 9c 02 bb d6 78 44 a0 63 ff d0 db 86 51 a9 58 4e b5 c0 f0 06 cf df 5c bd 62 14 6c cb d9 49 31 a2 bf 68 d0 77 31 8b 90 dc 79 fc dd 58 0f fb ee 5a f0 2e 66 25 ec 2e 1f 5f 35 a2 e6 62 6e 20 bb 60 94 03 6b d7 0c 47 f2 e6 e1 71 9b 9b 8b 8b b9 9c c0 94 69 18 55 73 02 3b 37 f9 1f cd 24 a4 4f b1 13 73 09 40 58 50 4b b1 06 f8 67 89 d1 ef 82 c7 c0 94 09 4a f0 1b a6 37 81 c4 db f9 db 90 f9 44 12 67 c4 20 c8 1c 72 f1 5d db aa 40 1d d6 f2 37 3e 94 fc cd 04 65 23 98 00 f2 c3 eb 37 d6 d6 36 59 d3 b3 93 56 1d 8c f1 b3 50 87 8a 05 ff 19 7d 2b d2 d8 4c d5 da 9e 65 9e d9 30 8d 20 fd 88 05 6e 83 d9 e6 76 10 27 26 e2 a0 60 4d c9 b5 2b 3f b1 0e 72 fe 80 1a 08 5d e8 16 9f d7 24 e5 da e6 7f 44 1e 39 fe 74 c5 2c bb 70 e6 f0 55 05 e6 b8 8e 89 17 31 58 4a f7 24 b8 89 ca f7 46 10 a5 6e 72 78 31 0d 95 f0 27 aa e8 e6 e6 f5 eb 13 e9 85 b9 9b 1e a6 ab 88 ae 61 e9 9b 20 Data Ascii: \oGYlHEd+42,Yy'X k8%I}\,p/wq)EIEju~Y7>){?]6X-/>t6lmucg8Xc'jA(d{{{U[g<_AldTWV8Gup7n5V<]OcTukQ!@u30@H_6]][wt~XY<Z`>ukg9wO5UnZtL\ V@vm2K`!_cCZs*~lgg'nwxJi;`A,:O[uY;hhSGw[.}>yb??kca]=jEq9}t:?tz6=N^=z~;z'h@FOS1g5H#Nu.%iFo2y^:c}kt@Z}nIG/\4t=%nFc%9xR`YA[zWfJFyM/h.%eZFvMb8F>n><+f"2.T.>L>M@WxDcQXN\blI1hw1yXZ.f%._5bn `kGqiUs;7$Os@XPKgJ7Dg r]@7>e#76YVP}+Le0 nv'&`M+?r]$D9t,pU1XJ$Fnrx1'a
Jan 7, 2021 07:33:20.152302027 CET	2099	OUT	GET /forum/faq.php?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.5.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:20.231729031 CET	2100	IN	HTTP/1.1 301 Moved Permanently Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:20 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 344 Connection: keep-alive Location: http://ovd.ru/forum?s=8848772e8198313ee133bfa7158b7b6c Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 6f 76 64 2e 72 75 2f 66 6f 72 75 6d 3f 73 3d 38 38 34 38 37 37 32 65 38 31 39 38 33 31 33 65 65 31 33 33 62 66 61 37 31 35 38 62 37 62 36 63 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 50 48 50 2f 34 2e 34 2e 39 20 53 65 72 76 65 72 20 61 74 20 6f 76 64 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://ovd.ru/forum?s=8848772e8198313ee133bfa7158b7b6c">here</a>.</p><hr><address>Apache/2.4.41 (Ubuntu) PHP/4.4.9 Server at ovd.ru Port 80</address></body></html>
Jan 7, 2021 07:33:20.273559093 CET	2105	OUT	GET /forum?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.5.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:20.351953983 CET	2106	IN	HTTP/1.1 301 Moved Permanently Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:20 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 345 Connection: keep-alive Location: http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6c Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 6f 76 64 2e 72 75 2f 66 6f 72 75 6d 2f 3f 73 3d 38 38 34 38 37 37 32 65 38 31 39 38 33 31 33 65 65 31 33 33 62 66 61 37 31 35 38 62 37 62 36 63 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 50 48 50 2f 34 2e 34 2e 39 20 53 65 72 76 65 72 20 61 74 20 6f 76 64 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://ovd.ru/forum/?s=8848772e8198313ee133bfa7158b7b6c">here</a>.</p><hr><address>Apache/2.4.41 (Ubuntu) PHP/4.4.9 Server at ovd.ru Port 80</address></body></html>
Jan 7, 2021 07:33:20.393249035 CET	2107	OUT	GET /forum/?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.5.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:20.543955088 CET	2111	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:20 GMT Content-Type: text/html; charset=windows-1251 Content-Length: 12631 Connection: keep-alive X-Powered-By: PHP/4.4.9 Set-Cookie: bblastactivity=0; expires=Fri, 07 Jan 2022 06:33:20 GMT; path=/ Cache-Control: private Pragma: private Content-Encoding: gzip Data Raw: 1f 8b 08 00 00 00 00 00 00 ff ed 7d 6b 73 1b d7 99 e6 67 b9 ca ff e1 04 a9 18 a4 45 dc 79 05 09 ba 2c 99 f2 28 65 3b 59 4b de d9 2d af 8b d5 00 9a 40 9b 00 1a e9 6e 90 a2 ed fc af 7c 9c d1 7a 2a 53 aa c4 8a bc 99 9a fd 32 55 20 45 58 20 48 34 41 30 b2 ec 92 62 ce f3 9e 4b 77 e3 46 81 14 65 71 56 2b 27 44 5f 4e 9f eb fb 3e e7 bd 9d 73 96 7e f1 de 6f ae df fe 9f bf 5d 61 45 a7 5c 62 bf fd e4 da 07 37 af b3 50 24 16 fb c7 d4 f5 58 ec bd db ef b1 ff f1 0f b7 3f fc 80 25 a2 71 76 db d2 2a b6 e1 18 66 45 2b c5 62 2b 1f 85 58 a8 e8 38 d5 74 2c b6 b9 b9 19 dd 4c 45 4d ab 10 bb fd 71 ec 0e e5 95 a0 8f e5 65 c4 09 7c 19 cd 3b f9 d0 f2 9b 6f 2c f1 12 ef 94 4b 15 3b 33 24 9f c4 c2 c2 82 f8 3c c4 f2 86 95 09 95 1c 2b c4 4a 5a a5 90 09 59 35 91 81 ae e5 91 d1 95 a5 5f 44 22 ac 62 b2 9c 96 2b ea ac 88 a7 ba 65 b3 48 84 bf 2b eb 8e 86 c6 39 d5 88 fe bb 9a b1 91 09 fd d6 d2 0a 65 2d c4 72 66 c5 d1 2b 4e 26 54 31 23 fc cb 10 8b 0d ff 62 e5 4e d5 b0 74 3b f0 49 24 31 32 f1 75 aa 44 e4 3a 32 b7 cc 52 e0 93 fe 52 a8 ce 7a 25 3f 7e bd 29 4b d4 37 72 7b ab aa 07 f2 75 f4 3b 4e 8c ba 72 91 e5 8a 9a 65 eb 4e 66 d3 a8 e4 cd 4d 3b 92 48 ce c8 7a 2e f1 5e a8 68 65 3d 13 2a e8 15 dd d2 1c 13 bd e9 75 c1 c6 b5 5a a9 a4 3b 46 85 a5 a2 73 18 e9 6b d4 69 d3 a2 8d 18 a9 c0 d7 eb fa d6 a6 69 e5 83 9d 71 bf d1 69 1c ee d7 db cd 8e bb d3 aa 4f b1 4e e3 c0 6d 77 59 6b a7 de e9 36 3b 53 6c b7 f9 a8 be d7 66 cd 76 b7 d1 79 d6 40 a2 29 e6 76 77 1b fb 94 f6 d0 3d 68 fc d8 68 37 f7 a6 d8 9f 1a db 8d fd 67 53 ec 87 56 fd 6f 4f 59 eb f8 b0 81 4f 77 1a 9d 26 92 b7 da 48 bb db e8 1e b5 9a 78 da 3a 7e dc c6 d3 96 bb d3 79 4a 3f ed dd e6 f7 4d b7 dd a0 bb a3 c3 fa fe 33 7a fb 43 d7 a5 fb 43 77 9f ff ed ba fb 2d 3c 3d aa a3 16 f8 9a ca fe 9b db 39 3e 10 6d 0c b6 30 af db 39 cb a8 12 99 07 7a a8 b7 91 ac f9 fc 56 22 8d 6c a6 df ca e8 cf dd ca 68 34 1a 6c e7 9b 6f 60 34 89 f2 ae df ba c5 6e 39 5b 25 dd 2e ea ba 23 78 65 c9 a6 07 cc 01 7d 65 42 9c ac 72 36 c6 d9 c8 67 42 1b 59 49 1f ab f4 88 98 17 99 bc f9 46 ec 6d 16 a0 1c 9e e9 0d d3 12 19 b3 f0 7b fa 9a 56 2b 39 e2 36 cc 26 78 f6 46 3e cd 12 93 ec ed d8 9b 6f 64 cd fc d6 9b 6f 7c 09 06 ce 6a b9 f5 82 65 d6 2a 78 f9 cb 95 04 fe 4b 2e e2 71 ce 2c 99 16 9e c4 f9 3f 7a b2 06 1e c0 f7 f1 aa c3 36 74 2b af 55 b4 29 46 f4 bc 81 df 52 2d 67 e4 f1 1b 16 17 ac 00 cc c9 eb e1 29 a6 59 86 56 9a 02 2e 94 36 40 e2 39 24 b1 81 63 11 5b b7 8c 35 ca b4 ac 59 05 a3 92 66 33 d5 3b 94 75 e0 0f bd ad 6a f9 bc 51 29 a4 19 de e0 fe f7 6f be a1 a5 4b 46 65 7d 8a 51 fd 57 35 ba 16 ad 50 d5 4d e2 df c2 75 95 76 c3 00 64 ea 79 95 5c de 9e f6 45 d1 44 db 50 ed b4 96 73 8c 0d 5d 7d c9 1f f7 7e 77 e3 c6 f4 74 3c 2e 4a 8a 56 b5 82 3e a4 3b 6f f0 7f d4 12 55 3f af 3b d1 16 07 15 73 8a 53 ac 8a fe 33 c4 d7 2f a3 8f 51 52 d4 c9 02 37 74 6b 48 15 df 4b bc 87 31 1f 5a c5 2b e2 23 8c 39 c6 c5 36 4b 46 1e e4 70 2d b1 30 2f fb 37 ea e4 34 67 48 96 f3 b3 0b d7 ae dd 60 35 ab 34 61 94 d1 31 76 0c e4 90 37 80 9f fe d5 2a 7d 1b 2d 18 6b 93 cc d2 ab ba e6 44 ee 30 c7 Data Ascii: }ksgEy,(e;YK-@n\|zS2U EX H4A0bKwFeqV+'D_N>s~o]aE\b7P$X?%qvfE+b+X8t,LEMqe\|;o,K;3$<+JZY5_D"b+eH+9e-rf+N&T1#bNt;I$12uD:2RRz%?~)K7r{u;NreNfM;Hz.^he=uZ;FskiiqiONmwYk6;Slfvy@)vw=hh7gSVoOYOw&Hx:~yJ?M3zCCw-<=9>m09zV"lh4lo`4n9[%.#xe}eBr6gBYIFm{V+96&xF>odo\|jexK.q,?z6t+U)FR-g)YV.6@9$c[5Yf3;ujQ)oKFe}QW5PMuvdy\EDPs]}~wt<.JV>;oU?;sS3/QR7tkHK1Z+#96KFp-0/74gH`54a1v7*}-kD0
Jan 7, 2021 07:33:22.217659950 CET	2133	OUT	GET /forum/memberlist.php?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.6.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:22.337260962 CET	2135	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:22 GMT Content-Type: text/html; charset=windows-1251 Content-Length: 8270 Connection: keep-alive X-Powered-By: PHP/4.4.9 Set-Cookie: bblastactivity=0; expires=Fri, 07 Jan 2022 06:33:22 GMT; path=/ Cache-Control: private Pragma: private Content-Encoding: gzip Data Raw: 1f 8b 08 00 00 00 00 00 00 ff d5 5c eb 73 1b d7 75 ff 2c cd e8 7f b8 d9 4c 0c d0 24 00 82 a4 44 09 24 a8 b1 28 32 55 c6 8f d4 92 9b 76 5c 0f 66 01 2c 80 35 17 58 78 77 41 8a b2 fd 7f e5 63 a3 7a 26 9d 34 2f b5 9d 49 bf 64 06 a2 84 08 22 09 88 8f 38 4e 46 aa d5 df b9 af dd 05 96 20 a4 58 9d 94 8e 02 60 f7 de 73 cf bd e7 71 cf eb de d5 ef dd fc 60 fd ce 3f fd 78 83 35 82 a6 c3 7e fc d1 8d 77 6f ad 33 23 93 cb fd 64 71 3d 97 bb 79 e7 26 fb c7 bf bb f3 de bb 2c 9f 9d 67 77 3c b3 e5 db 81 ed b6 4c 27 97 db 78 df 60 46 23 08 da 85 5c 6e 67 67 27 bb b3 98 75 bd 7a ee ce 87 b9 bb 04 2b 4f 9d e5 d7 4c 10 e9 99 ad 06 55 63 ed d2 c5 55 3e e2 dd a6 d3 f2 8b 09 70 f2 d7 ae 5d 13 dd 0d 56 b5 bd a2 e1 04 9e c1 1c b3 55 2f 1a 5e 47 00 b0 cc 2a 01 6a 5a 81 c9 5a 66 d3 c2 1b b7 ec 06 be c1 2a 6e 2b b0 5a 41 d1 68 b9 76 ab 6a dd 9d ab b9 8e e3 ee 18 2c a7 3b 10 ea 19 eb b3 8e bd 5d 34 d6 45 f3 cc 9d dd b6 15 e9 1c 58 77 83 1c a1 b9 c2 2a 0d d3 f3 ad a0 b8 03 70 ee 8e 9f c9 2f 5c ce 47 a1 89 e1 eb 56 cb f2 cc c0 05 a6 1a 83 ed 1b 1d c7 b1 02 bb c5 16 b3 cb 58 c5 1b 84 ed 92 e8 1b 47 7e cb da dd 71 bd 6a 14 fd df f4 8e 7a cf 0e ba 83 fe d1 70 6f bf 3b c7 8e 7a 87 c3 c1 09 db df eb 1e 9d f4 8f e6 d8 e3 fe 93 ee d3 01 eb 0f 4e 7a 47 2f 7a 68 34 c7 86 27 8f 7b 07 d4 f6 d9 f0 b0 f7 97 de a0 ff 74 8e fd b2 f7 b0 77 f0 62 8e fd 79 bf fb c7 e7 6c ff f4 59 0f 5d f7 7a 47 7d 34 df 1f a0 ed e3 de c9 f1 7e 1f 4f f7 4f bf 1e e0 e9 fe 70 ef e8 39 7d 0c 1e f7 ff d4 1f 0e 7a f4 eb f8 59 f7 e0 05 bd fd f3 c9 90 7e 3f 1b 1e f0 ff 3f 19 1e ec e3 e9 71 17 58 a0 37 8d fd c7 e1 d1 e9 e1 f8 fa 54 2d bf e2 d9 6d 62 a1 c8 0a c5 27 c9 fa e7 cf 12 6d e4 34 c3 59 66 ff af 67 99 cd 66 a3 f3 bc 74 11 d4 fc 5e 26 c3 d6 6f df 66 b7 83 5d c7 f2 1b 96 15 b0 4c 86 58 ce a7 07 2c 00 7f 15 0d ce 56 15 1f 74 b6 ab 45 63 bb 2c f9 a3 44 8f a8 2d 80 5c ba 98 7b 9b 45 38 87 03 dd 74 3d 01 98 a5 6e 5a 35 b3 e3 04 e2 67 8a a5 39 78 bb 5a 60 f9 19 f6 76 ee d2 c5 b2 5b dd bd 74 f1 f3 4b 17 2f 94 cd ca 56 dd 73 3b 2d bc fc fe 46 1e ff 2d ac e0 71 c5 75 5c 0f 4f e6 f9 1f 3d a9 41 06 d0 7f be 1d b0 6d cb ab 9a 2d 73 8e 11 3f 6f e3 d3 e9 54 ec 2a 3e 53 e2 0b ab 43 9e ab 56 6a 8e 99 9e 6d 3a 73 ac 61 39 db 60 f1 0a 9a f8 d0 11 19 df f2 ec 1a 01 6d 9a 5e dd 6e 15 d8 e5 f6 5d 02 1d f9 3f 7a db 36 ab 55 bb 55 2f 30 bc c1 ef 2f 2f 5d 34 0b 8e dd da 9a 63 84 7f c9 a4 ef 62 16 0a dd 05 fc 5d 5b 57 6d b7 6d a8 23 ab aa 9a cb 9f 93 7a 34 5c cc 0d 68 17 cc 4a 60 6f 5b aa 27 7f 1c ef b7 b9 b9 b4 34 3f 2f 46 ca b6 cd ba 95 b0 9c 9b fc 8f 66 a2 f0 d3 cb 89 b9 04 40 2c 68 cc b1 36 d6 cf 16 bd df c4 1a 63 a4 6c 50 86 de b0 bc 04 14 6f e6 6f 82 e6 89 28 5e 10 9d 40 73 d0 c5 77 1d bb 0a 76 b8 91 bf 76 55 ae 6f 36 a8 98 41 02 c8 ab 57 ae dd b8 b1 c9 3a 9e 93 b6 9b 58 18 3f 07 76 a8 da 50 b7 e1 b7 12 f5 cd d6 ed da 0c f3 ac b6 65 06 99 bb 2c 70 db cc b1 6a 41 14 99 70 05 c5 d2 94 5d a7 fa 1d f3 20 5f 1f 60 03 a2 0b de e2 f3 4a 62 ae 1a ff 23 f4 48 42 33 55 ab e2 42 99 43 57 15 58 cb 6d 59 78 11 81 a5 79 4f 82 4b 64 Data Ascii: \su,L$D$(2Uv\f,5XxwAcz&4/Id"8NF X`sq`?x5~wo3#dq=y&,gw<L'x`F#\ngg'uz+OLUcU>p]VU/^GjZZfn+ZAhvj,;]4EXwp/\GVXG~qjzpo;zNzG/zh4'{twbylY]zG}4~OOp9}zY~??qX7T-mb'm4Yfgft^&of]LX,VtEc,D-\{E8t=nZ5g9xZ`v[tK/Vs;-F-qu\O=Am-s?oT>SCVjm:sa9`m^n]?z6UU/0//]4cb][Wmm#z4\hJ`o['4?/Ff@,h6clPoo(^@swvvUo6AW:X?vPe,pjAp] _`Jb#HB3UBCWXmYxyOKd
Jan 7, 2021 07:33:23.365972042 CET	2155	OUT	GET /forum/calendar.php?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.7.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:23.491036892 CET	2156	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:23 GMT Content-Type: text/html; charset=windows-1251 Content-Length: 8273 Connection: keep-alive X-Powered-By: PHP/4.4.9 Set-Cookie: bblastactivity=0; expires=Fri, 07 Jan 2022 06:33:23 GMT; path=/ Cache-Control: private Pragma: private Content-Encoding: gzip Data Raw: 1f 8b 08 00 00 00 00 00 00 ff d5 5c eb 73 1b d7 75 ff 2c cd e8 7f b8 d9 4c 0c d0 24 00 82 a4 44 09 24 a8 b1 24 32 55 c6 af 5a 72 d3 8e eb c1 2c 80 05 b0 e6 02 0b ef 2e 48 51 b6 ff af 7c 6c 54 cf a4 93 26 71 d4 76 26 fd 92 19 88 12 22 88 24 20 3e e2 28 19 a9 56 7f e7 be 76 17 58 82 90 62 75 52 3a 0a 80 dd 7b cf 3d f7 9e c7 3d af 7b 57 7f 70 e3 83 eb b7 ff e9 c3 75 d6 08 9a 0e fb f0 e3 6b ef de bc ce 8c 4c 2e f7 d3 c5 eb b9 dc 8d db 37 d8 3f fe dd ed f7 de 65 f9 ec 3c bb ed 99 2d df 0e 6c b7 65 3a b9 dc fa fb 06 33 1a 41 d0 2e e4 72 db db db d9 ed c5 ac eb d5 73 b7 3f ca dd 21 58 79 ea 2c bf 66 82 48 cf 6c 35 a8 1a 6b 17 ce af f2 11 ef 34 9d 96 5f 4c 80 93 bf 72 e5 8a e8 6e b0 aa ed 15 0d 27 f0 0c e6 98 ad 7a d1 f0 3a 02 80 65 56 09 50 d3 0a 4c d6 32 9b 16 de b8 65 37 f0 0d 56 71 5b 81 d5 0a 8a 46 cb b5 5b 55 eb ce 5c cd 75 1c 77 db 60 39 dd 81 50 cf 58 9f 77 ec ad a2 71 5d 34 cf dc de 69 5b 91 ce 81 75 27 c8 11 9a 2b ac d2 30 3d df 0a 8a db 00 e7 6e fb 99 fc c2 c5 7c 14 9a 18 be 6e b5 2c cf 0c 5c 60 aa 31 d8 ba d6 71 1c 2b b0 5b 6c 31 bb 8c 55 bc 46 d8 2e 89 be 71 e4 37 ad 9d 6d d7 ab 46 d1 ff a6 77 d8 7b ba df 1d f4 0f 87 bb 7b dd 39 76 d8 3b 18 0e 8e d9 de 6e f7 f0 b8 7f 38 c7 1e f5 1f 77 9f 0c 58 7f 70 dc 3b 7c d1 43 a3 39 36 3c 7e d4 db a7 b6 4f 87 07 bd bf f4 06 fd 27 73 ec 57 bd 07 bd fd 17 73 ec cf 7b dd 3f 3e 67 7b 27 4f 7b e8 ba db 3b ec a3 f9 de 00 6d 1f f5 8e 8f f6 fa 78 ba 77 f2 ed 00 4f f7 86 bb 87 cf e9 63 f0 a8 ff a7 fe 70 d0 a3 5f 47 4f bb fb 2f e8 ed 9f 8f 87 f4 fb e9 70 9f ff ff f1 70 7f 0f 4f 8f ba c0 02 bd 69 ec 3f 0e 0f 4f 0e c6 d7 a7 6a f9 15 cf 6e 13 0b 45 56 28 3e 49 d6 3f 7b 96 68 23 a7 19 ce 32 fb 7f 3d cb 6c 36 1b 9d e7 85 f3 a0 e6 0f 32 19 76 fd d6 2d 76 2b d8 71 2c bf 61 59 01 cb 64 88 e5 7c 7a c0 02 f0 57 d1 e0 6c 55 f1 41 67 bb 5a 34 b6 ca 92 3f 4a f4 88 da 02 c8 85 f3 b9 b7 59 84 73 38 d0 0d d7 13 80 59 ea 86 55 33 3b 4e 20 7e a6 58 9a 83 b7 ab 05 96 9f 61 6f e7 2e 9c 2f bb d5 9d 0b e7 bf b8 70 fe 5c d9 ac 6c d6 3d b7 d3 c2 cb 1f ae e7 f1 df c2 0a 1e 57 5c c7 f5 f0 64 9e ff d1 93 1a 64 00 fd e7 db 01 db b2 bc aa d9 32 e7 18 f1 f3 16 3e 9d 4e c5 ae e2 33 25 be b0 3a e4 b9 6a a5 e6 98 e9 d9 a6 33 c7 1a 96 b3 05 16 af a0 89 0f 1d 91 f1 2d cf ae 11 d0 a6 e9 d5 ed 56 81 5d 6c df 21 d0 91 ff a3 b7 6d b3 5a b5 5b f5 02 c3 1b fc fe ea c2 79 b3 e0 d8 ad cd 39 46 f8 97 4c fa 2e 66 a1 d0 5d c0 df 95 eb aa ed 96 0d 75 64 55 55 73 f9 73 52 8f 86 8b b9 01 ed 82 59 09 ec 2d 4b f5 e4 8f e3 fd 36 36 96 96 e6 e7 c5 48 d9 b6 59 b7 12 96 73 83 ff d1 4c 14 7e 7a 39 31 97 00 88 05 8d 39 d6 c6 fa d9 a2 f7 9b 58 63 8c 94 0d ca d0 1b 96 97 80 e2 8d fc 0d d0 3c 11 c5 73 a2 13 68 0e ba f8 ae 63 57 c1 0e d7 f2 57 2e cb f5 cd 06 15 33 48 00 79 f9 d2 95 6b d7 36 58 c7 73 d2 76 13 0b e3 e7 c0 0e 55 1b ea 36 fc 56 a2 be d9 ba 5d 9b 61 9e d5 b6 cc 20 73 87 05 6e 9b 39 56 2d 88 22 13 ae a0 58 9a b2 eb 54 bf 67 1e e4 eb 03 6c 40 74 c1 5b 7c 5e 49 cc 55 e3 7f 84 1e 49 68 a6 6a 55 5c 28 73 e8 aa 02 6b b9 2d 0b 2f 22 b0 34 ef 49 70 89 Data Ascii: \su,L$D$$2UZr,.HQ\|lT&qv&"$ >(VvXbuR:{=={WpukL.7?e<-le:3A.rs?!Xy,fHl5k4_Lrn'z:eVPL2e7Vq[F[U\uw`9PXwq]4i[u'+0=n\|n,\`1q+[l1UF.q7mFw{{9v;n8wXp;\|C96<~O'sWs{?>g{'O{;mxwOcp_GO/ppOi?OjnEV(>I?{h#2=l62v-v+q,aYd\|zWlUAgZ4?JYs8YU3;N ~Xao./p\l=W\dd2>N3%:j3-V]l!mZ[y9FL.f]udUUssRY-K66HYsL~z919Xc<shcWW.3Hyk6XsvU6V]a sn9V-"XTgl@t[\|^IUIhjU\(sk-/"4Ip
Jan 7, 2021 07:33:25.206010103 CET	2172	OUT	GET /forum/forumdisplay.php?s=8848772e8198313ee133bfa7158b7b6c&do=markread HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.8.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:25.332191944 CET	2174	IN	HTTP/1.1 302 Found Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:25 GMT Content-Type: text/html; charset=windows-1251 Content-Length: 0 Connection: keep-alive X-Powered-By: PHP/4.4.9 Set-Cookie: bblastactivity=0; expires=Fri, 07 Jan 2022 06:33:25 GMT; path=/ Cache-Control: private Pragma: private Set-Cookie: bblastvisit=1610001205; expires=Fri, 07 Jan 2022 06:33:25 GMT; path=/ Location: http://ovd.ru/forum/index.php
Jan 7, 2021 07:33:25.335172892 CET	2175	OUT	GET /forum/index.php HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001205; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.8.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:25.484149933 CET	2176	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:25 GMT Content-Type: text/html; charset=windows-1251 Content-Length: 12631 Connection: keep-alive X-Powered-By: PHP/4.4.9 Set-Cookie: bblastactivity=0; expires=Fri, 07 Jan 2022 06:33:25 GMT; path=/ Cache-Control: private Pragma: private Content-Encoding: gzip Data Raw: 1f 8b 08 00 00 00 00 00 00 ff ed 7d 6b 73 1b d7 99 e6 67 b9 ca ff e1 04 a9 18 a4 45 dc 79 05 09 ba 2c 99 f2 28 65 3b 59 4b de d9 2d af 8b d5 00 9a 40 9b 00 1a e9 6e 90 a2 ed fc af 7c 9c d1 7a 2a 53 aa c4 8a bc 99 9a fd 32 55 20 45 58 20 48 34 41 30 b2 ec 92 62 ce f3 9e 4b 77 e3 46 81 14 65 71 56 2b 27 44 5f 4e 9f eb fb 3e e7 bd 9d 73 96 7e f1 de 6f ae df fe 9f bf 5d 61 45 a7 5c 62 bf fd e4 da 07 37 af b3 50 24 16 fb c7 d4 f5 58 ec bd db ef b1 ff f1 0f b7 3f fc 80 25 a2 71 76 db d2 2a b6 e1 18 66 45 2b c5 62 2b 1f 85 58 a8 e8 38 d5 74 2c b6 b9 b9 19 dd 4c 45 4d ab 10 bb fd 71 ec 0e e5 95 a0 8f e5 65 c4 09 7c 19 cd 3b f9 d0 f2 9b 6f 2c f1 12 ef 94 4b 15 3b 33 24 9f c4 c2 c2 82 f8 3c c4 f2 86 95 09 95 1c 2b c4 4a 5a a5 90 09 59 35 91 81 ae e5 91 d1 95 a5 5f 44 22 ac 62 b2 9c 96 2b ea ac 88 a7 ba 65 b3 48 84 bf 2b eb 8e 86 c6 39 d5 88 fe bb 9a b1 91 09 fd d6 d2 0a 65 2d c4 72 66 c5 d1 2b 4e 26 54 31 23 fc cb 10 8b 0d ff 62 e5 4e d5 b0 74 3b f0 49 24 31 32 f1 75 aa 44 e4 3a 32 b7 cc 52 e0 93 fe 52 a8 ce 7a 25 3f 7e bd 29 4b d4 37 72 7b ab aa 07 f2 75 f4 3b 4e 8c ba 72 91 e5 8a 9a 65 eb 4e 66 d3 a8 e4 cd 4d 3b 92 48 ce c8 7a 2e f1 5e a8 68 65 3d 13 2a e8 15 dd d2 1c 13 bd e9 75 c1 c6 b5 5a a9 a4 3b 46 85 a5 a2 73 18 e9 6b d4 69 d3 a2 8d 18 a9 c0 d7 eb fa d6 a6 69 e5 83 9d 71 bf d1 69 1c ee d7 db cd 8e bb d3 aa 4f b1 4e e3 c0 6d 77 59 6b a7 de e9 36 3b 53 6c b7 f9 a8 be d7 66 cd 76 b7 d1 79 d6 40 a2 29 e6 76 77 1b fb 94 f6 d0 3d 68 fc d8 68 37 f7 a6 d8 9f 1a db 8d fd 67 53 ec 87 56 fd 6f 4f 59 eb f8 b0 81 4f 77 1a 9d 26 92 b7 da 48 bb db e8 1e b5 9a 78 da 3a 7e dc c6 d3 96 bb d3 79 4a 3f ed dd e6 f7 4d b7 dd a0 bb a3 c3 fa fe 33 7a fb 43 d7 a5 fb 43 77 9f ff ed ba fb 2d 3c 3d aa a3 16 f8 9a ca fe 9b db 39 3e 10 6d 0c b6 30 af db 39 cb a8 12 99 07 7a a8 b7 91 ac f9 fc 56 22 8d 6c a6 df ca e8 cf dd ca 68 34 1a 6c e7 9b 6f 60 34 89 f2 ae df ba c5 6e 39 5b 25 dd 2e ea ba 23 78 65 c9 a6 07 cc 01 7d 65 42 9c ac 72 36 c6 d9 c8 67 42 1b 59 49 1f ab f4 88 98 17 99 bc f9 46 ec 6d 16 a0 1c 9e e9 0d d3 12 19 b3 f0 7b fa 9a 56 2b 39 e2 36 cc 26 78 f6 46 3e cd 12 93 ec ed d8 9b 6f 64 cd fc d6 9b 6f 7c 09 06 ce 6a b9 f5 82 65 d6 2a 78 f9 cb 95 04 fe 4b 2e e2 71 ce 2c 99 16 9e c4 f9 3f 7a b2 06 1e c0 f7 f1 aa c3 36 74 2b af 55 b4 29 46 f4 bc 81 df 52 2d 67 e4 f1 1b 16 17 ac 00 cc c9 eb e1 29 a6 59 86 56 9a 02 2e 94 36 40 e2 39 24 b1 81 63 11 5b b7 8c 35 ca b4 ac 59 05 a3 92 66 33 d5 3b 94 75 e0 0f bd ad 6a f9 bc 51 29 a4 19 de e0 fe f7 6f be a1 a5 4b 46 65 7d 8a 51 fd 57 35 ba 16 ad 50 d5 4d e2 df c2 75 95 76 c3 00 64 ea 79 95 5c de 9e f6 45 d1 44 db 50 ed b4 96 73 8c 0d 5d 7d c9 1f f7 7e 77 e3 c6 f4 74 3c 2e 4a 8a 56 b5 82 3e a4 3b 6f f0 7f d4 12 55 3f af 3b d1 16 07 15 73 8a 53 ac 8a fe 33 c4 d7 2f a3 8f 51 52 d4 c9 02 37 74 6b 48 15 df 4b bc 87 31 1f 5a c5 2b e2 23 8c 39 c6 c5 36 4b 46 1e e4 70 2d b1 30 2f fb 37 ea e4 34 67 48 96 f3 b3 0b d7 ae dd 60 35 ab 34 61 94 d1 31 76 0c e4 90 37 80 9f fe d5 2a 7d 1b 2d 18 6b 93 cc d2 ab ba e6 44 ee 30 c7 Data Ascii: }ksgEy,(e;YK-@n\|zS2U EX H4A0bKwFeqV+'D_N>s~o]aE\b7P$X?%qvfE+b+X8t,LEMqe\|;o,K;3$<+JZY5_D"b+eH+9e-rf+N&T1#bNt;I$12uD:2RRz%?~)K7r{u;NreNfM;Hz.^he=uZ;FskiiqiONmwYk6;Slfvy@)vw=hh7gSVoOYOw&Hx:~yJ?M3zCCw-<=9>m09zV"lh4lo`4n9[%.#xe}eBr6gBYIFm{V+96&xF>odo\|jexK.q,?z6t+U)FR-g)YV.6@9$c[5Yf3;ujQ)oKFe}QW5PMuvdy\EDPs]}~wt<.JV>;oU?;sS3/QR7tkHK1Z+#96KFp-0/74gH`54a1v7*}-kD0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.3	49863	91.189.114.9	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:33:13.610141039 CET	2033	OUT	GET /forum/images/buttons/lastpost.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:13.687930107 CET	2038	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:13 GMT Content-Type: image/gif Content-Length: 964 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: "3c4-558f3247ca900" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 0c 00 0c 00 f7 00 00 ff ff ff 50 59 89 4d 59 82 96 98 a2 50 58 8b b5 d8 db 4a 50 7b a5 c4 fe a6 c5 ff ac ce ff 8f 92 9e 8c 9e ea 51 59 8c ae cf ff 9c bb e2 96 b4 cc bc e3 ff 56 61 91 66 6a 87 ab cb e2 7e 89 d2 86 9b ea 7d 8c dd 9c b4 ff 86 9f ed 7b 88 de 58 62 92 96 b0 f0 7f 8c e5 7a 91 a7 88 9b f9 6e 79 cd 69 73 c3 b1 b3 cd 82 95 e8 a4 bf ff 84 91 ef c0 e7 ff 7e 90 e4 7c 8d d0 cb da e8 78 86 c9 78 84 c7 8a 97 b7 94 b7 e1 49 51 78 59 5b 75 80 83 94 60 71 92 9b a1 aa 8e a4 ac 96 a0 b0 b1 d2 e9 bb d8 e8 c8 c9 dd 9f b6 f3 b5 d1 e7 7c 8a e0 fb fc ff 81 8f e9 a0 bf e3 b4 d4 f8 80 8b b0 9c bb da b4 bf e4 46 4e 76 80 8d e4 a3 a8 bb 95 98 a2 4e 56 83 a7 c3 f8 7b 8d cd 80 8c e2 3a 42 71 b1 cf ff c3 c3 d8 7d 93 c8 64 68 8c be e5 ff a9 c4 ff fe ff ff a0 b9 ff 3e 46 80 c5 ed ff 94 98 aa c2 c4 da 4e 5b 7d 98 ad ff 83 96 e6 a7 bf de bd bd d3 77 86 c6 8d a5 d3 f5 f7 fc 84 8a 98 92 ae c8 a1 be f4 96 ad f8 95 b0 d5 c6 c8 dd 90 93 a3 9a bd d7 50 59 8a 58 64 95 ae c8 e2 99 ab ee 94 b1 cd 91 a3 ef 9a 9f c3 7a 87 d1 c2 e3 eb 69 7c 97 5f 68 be 90 a4 fd d1 d1 e3 99 ab ce ae d0 ff bf c1 d7 92 a1 c3 a8 c8 f3 9c b6 f6 94 9e aa 7c 89 dd 77 85 dc 6b 72 9c 72 7f d6 81 94 ec 9e bd e3 b5 d8 ff a1 c0 e2 a0 b5 d8 fa fb ff 8a 8f 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 0c 00 0c 00 40 08 a1 00 51 94 79 f0 45 cd 8f 40 3c fe 38 60 01 c4 ce 82 2d 11 5e 74 01 50 c5 82 1f 0f 1f d0 28 31 c2 05 06 11 00 00 42 6c 38 60 a2 c6 84 0e 31 40 6a b9 43 27 01 a0 0a 82 a2 5c 08 73 44 80 82 41 00 e4 a4 d9 e3 43 05 1f 17 12 9a 50 40 22 84 03 09 38 6e 0a c8 f0 92 67 06 8d 12 4e 20 4c c1 80 a3 87 98 37 84 40 2e 01 83 a0 01 96 2c 4f 46 e0 61 62 65 00 14 00 63 6e e4 98 73 65 cd 89 33 64 74 00 a8 23 22 4e 9f 15 29 34 50 01 69 a3 8d 9e 0c 3b 40 0c 49 d2 22 88 81 22 01 cc 10 60 20 85 4d 40 00 3b Data Ascii: GIF89aPYMYPXJP{QYVafj~}{Xbznyis~\|xxIQxY[u`q\|FNvNV{:Bq}dh>FN[}wPYXdzi\|_h\|wkrr!,@QyE@<8`-^tP(1Bl8`1@jC'\sDACP@"8ngN L7@.,OFabecnse3dt#"N)4Pi;@I""` M@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.3	49864	91.189.114.9	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:33:13.614723921 CET	2034	OUT	GET /forum/clientscript/vbulletin_read_marker.js?v=370b4 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:13.695555925 CET	2042	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:13 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: W/"19fd-558f3247ca900" Cache-Control: max-age=315360000 Expires: Sun, 05 Jan 2031 06:33:13 GMT Content-Encoding: gzip Data Raw: 38 32 63 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b5 59 6d 73 db 36 12 fe 4c fd 0a 5c cf 13 51 b6 44 c9 6e 72 e9 d9 e7 49 1d db 99 38 75 ad 8e a5 a4 ed d8 3e 0d 44 41 12 6a 8a e0 01 a0 1c b5 ce 0f ba 7f 79 bb 00 24 82 7a a9 9d 39 55 1f 6c 11 d8 5d 2c 76 f7 d9 17 aa b9 7b bc 95 cf ee 6d e5 f1 91 fc 7d 0b 1f f2 f8 68 44 91 e9 db 3c 49 98 e6 29 f9 36 7a 1d b5 c8 5b a6 29 79 69 f7 1a ff e7 87 14 c7 9c 8a 6c 26 f9 68 ac c9 7f 0f 5a ad 56 03 fe 7c 47 3e b0 44 89 a1 26 e7 a9 66 32 93 5c 31 45 2e f5 20 22 27 49 42 ae 91 5a 91 6b a6 98 9c 32 58 9c 8b ea 8e b9 22 43 9e 30 32 a1 33 92 0a 4d fa 8c 48 36 e0 4a 4b de cf 35 1b 10 b8 cd c3 58 00 85 90 44 f1 51 ca 87 3c a6 a9 26 19 95 3a f2 b4 5a 51 f8 d3 db 8f 97 97 e7 dd 8b 2b 72 d1 21 57 ed 2e 79 77 7d 7e 4e 3a ed 77 dd 9f 4f ae cf 57 e9 0b 51 63 ad b3 c3 66 f3 e1 e1 21 9a f6 9d 49 a3 58 4c c8 e3 c6 ad 66 c2 63 96 2a 16 8d f5 24 29 44 6d c9 bb b7 db 8a b9 66 a5 d2 dc dd ad ec 92 13 29 c1 e0 5a 10 a5 85 64 60 64 ae 39 4d f8 ef 60 f0 e9 db de c9 87 93 5f 7a d7 8c 0e 7e a4 f2 9e 49 22 fa bf b1 58 ab 0a 72 7e 3f a5 32 a0 c8 5e 01 71 f0 80 0c 1e ed 31 f9 a3 12 54 87 42 e6 93 9e d2 54 e7 8a c7 22 ed 65 92 0d f9 e7 2a 21 87 64 75 b3 5a 07 16 3d 96 20 65 1d 0f b0 ac 6e fa 3c 23 a1 45 ca 1e 8a 43 88 c7 33 df f4 19 34 d7 09 f3 c9 7d 06 bb 59 ad 7c 39 02 6b 35 b7 e2 c4 c5 07 05 ae 1a 78 fb c7 38 37 17 19 01 4f 24 c6 f0 04 2f 09 78 33 de 8a 13 aa ac 5f 01 a7 e2 41 11 6a 89 ea 84 03 60 e3 31 4f 06 76 01 76 d2 01 a1 00 66 30 be a6 3c 85 48 b1 f6 52 18 46 7d 66 25 02 89 32 07 d8 58 c9 68 7c 4f 47 2c 58 e8 61 02 88 49 c5 45 1a ec 5c b3 29 c7 6f 87 e4 e0 d5 cb ef 5e 92 1d dc 1d 50 cd 82 60 e7 0c fe c1 3a a4 96 46 6b bf b1 ff 9a ec ef 1f be 7a 7d 78 f0 9a 34 5a ff 68 b5 48 d8 1d e7 75 02 eb 1f 68 6a c8 6a 96 9d e6 7a 2c 64 f0 03 87 cb 9d 51 d9 9f d5 3d 23 9c b1 29 4b 44 36 61 90 3f ba 8c 4e e6 4a 4a 3a 09 38 24 ae 11 93 c1 3b 63 a3 8b b3 0d b7 6a 56 86 79 1a 6b d0 7a 8d 1f 43 63 2a 3e a8 55 00 03 1a 72 5b e4 16 00 15 ee db 91 0d 2b e3 9d 8b 05 ea c0 86 63 66 7d 24 d9 7f 72 a6 34 1e 8f 67 9b 0d eb 37 4f 87 d5 a3 a3 4c 42 9c eb 59 c6 22 64 eb 19 27 c3 a9 4e d9 d0 a8 f4 eb c9 fb 76 3b ca 35 4f a2 53 91 a6 80 e9 88 aa 59 1a 5f db 33 c3 6f 7e 6a 77 ba df d4 49 95 fe 46 3f 47 d9 38 7b 33 10 c7 28 0e a5 bd 18 1e 57 c9 1e f1 af 55 47 ac 07 2a 8f 63 a6 d4 a1 dd 1a 43 9c 00 7c 50 42 cf dd 05 80 17 0c 29 4f 72 c9 d6 10 31 29 85 44 12 cd 27 4c e4 fa 90 ec bf 82 b2 82 2b 2a 16 99 63 a9 04 5f ea a4 73 de e9 5c b4 af 3e 5e 5f 82 22 d5 92 6e 56 a1 15 0d 6b be bd df 9b 53 95 b5 f3 39 1e ab fc 08 b0 59 2e f8 f5 e3 85 a1 78 d2 ce 2b 97 f0 ed 8d ab c6 e6 cd 66 b7 7d d6 3e 24 1d 31 61 a0 59 3a 22 7d f0 cc 98 66 19 03 0c d5 89 96 33 42 47 00 a8 4a 81 12 7b a8 d1 b0 67 95 96 56 e0 ba db 60 80 fc f2 e3 25 c4 86 ca 04 94 20 32 94 50 aa bc 78 b2 cb e6 a6 3f 01 da 81 65 e8 62 5c 61 75 45 5e 08 36 7b 1b b9 b8 c1 d6 4c 33 0f e8 75 c6 c1 f2 61 ab 41 2a 06 a0 18 d0 Data Ascii: 82cYms6L\QDnrI8u>DAjy$z9Ul],v{m}hD<I)6z[)yil&hZV\|G>D&f2\1E. "'IBZk2X"C023MH6JK5XDQ<&:ZQ+r!W.yw}~N:wOWQcf!IXLfc$)Dmf)Zd`d9M`_z~I"Xr~?2^q1TBT"e!duZ= en<#EC34}Y\|9k5x87O$/x3_Aj`1Ovvf0<HRF}f%2Xh\|OG,XaIE\)o^P`:Fkz}x4ZhHuhjjz,dQ=#)KD6a?NJJ:8$;cjVykzCc>Ur[+cf}$r4g7OLBY"d'Nv;5OSY_3o~jwIF?G8{3(WUGcC\|PB)Or1)D'L+c_s\>^_"nVkS9Y.x+f}>$1aY:"}f3BGJ{gV`% 2Px?eb\auE^6{L3uaA
Jan 7, 2021 07:33:13.695596933 CET	2044	IN	Data Raw: 30 1d 8f 7b 9a 8e 94 a1 8a e6 ea 83 96 75 57 39 aa 60 86 00 be 91 10 d9 39 30 b5 8e e0 df bf 7c 49 51 c2 d2 91 1e c3 fa de 5e ad 12 60 98 2e ce 2a e0 68 69 6f f8 5d 34 e4 52 e9 53 4c 77 11 ae 7d a2 49 ce 8e 30 26 31 96 f2 0c 93 52 cf 2f 5b 61 11 Data Ascii: 0{uW9`90\|IQ^`.hio]4RSLw}I0&1R/[a_NM}H=kecX((BN!WFNAE}xC[%M,)>5GTP{Vfc7qW6 o.9})=KXRVlHDW\|"Saw JF(l'8)J;
Jan 7, 2021 07:33:13.695612907 CET	2044	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.3	49865	91.189.114.9	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:33:13.621944904 CET	2035	OUT	GET /forum/images/buttons/collapse_thead.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:13.699414968 CET	2045	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:13 GMT Content-Type: image/gif Content-Length: 580 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: "244-558f3247ca900" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 0d 00 0d 00 e6 00 00 4a 60 8e e0 e4 ec 5c 70 99 46 65 9c 37 50 82 3b 54 82 3f 5b 8c 49 69 a1 51 66 92 39 52 84 39 52 83 59 6e 97 ea ec f2 5a 6f 98 5b 6f 99 56 6b 95 6d 88 b7 36 4e 77 58 6d 97 a1 ad c4 c7 ce dc fb fc fd 37 50 83 38 51 7c b9 c6 dc 5a 78 ad 48 5f 8d 59 6d 97 a7 b2 c8 f2 f3 f7 5f 7b ac 98 a7 c0 68 7a a0 ab b5 ca db df e8 fd fd fe ad bb d2 3a 52 84 54 69 93 af bd d7 75 8f bb 53 68 93 42 5e 91 52 68 93 58 6c 90 5d 71 99 88 9e c4 65 7c a7 92 9f bb 9b a8 c1 94 a1 b9 e9 ea ec 62 75 9d 4b 61 8e 7e 96 bf 47 5d 8c 3e 56 87 5b 6f 98 9d ad ca d1 d7 e2 43 5b 8a 48 60 8d 66 7f ac d9 dd e7 5e 72 9a 53 68 94 54 69 94 e3 e4 e5 6d 7f a4 8e 9c b8 84 93 b2 ac bc d6 44 62 96 3e 56 86 4a 60 8f 43 5a 8a 9d a9 c2 38 51 83 37 51 83 49 60 8e 7a 92 bd 4a 68 9d b0 ba ce 64 77 9e 73 8d ba 47 5e 8c 50 65 92 de e2 eb b3 c1 d9 49 60 8d 4f 65 92 54 68 94 d5 da e5 33 4a 72 4a 61 8e 4d 64 90 4b 6c a6 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 0d 00 0d 00 00 07 a1 80 16 04 04 38 5a 12 02 12 56 49 82 4e 4d 09 00 39 31 3f 1d 22 13 2d 4f 0a 0a 09 5f 46 14 18 28 19 54 58 3b 45 5f 25 4b 02 14 2e 60 60 61 03 07 36 23 34 3c 08 4c 18 ac 61 b9 06 07 27 1c 08 1b 01 10 ad 61 5d ba 1e 0c 1b 0e 1d 19 60 03 05 c4 5d 05 51 15 0e 0b c1 60 07 b9 61 17 2a c7 0b 26 1c 47 c3 c5 61 06 3a 52 5b 5e 53 15 50 ce 11 17 11 2c 33 44 5e 37 41 30 5c 24 2f 48 3e 1f 43 32 42 aa f4 c8 92 02 c8 84 2b 61 02 84 00 b1 42 83 06 25 5e 00 7c 79 d0 40 40 83 07 5f 00 78 a9 11 08 00 3b Data Ascii: GIF89aJ`\pFe7P;T?[IiQf9R9RYnZo[oVkm6NwXm7P8Q\|ZxH_Ym_{hz:RTiuShB^RhXl]qe\|buKa~G]>V[oC[H`f^rShTimDb>VJ`CZ8Q7QI`zJhdwsG^PeI`OeTh3JrJaMdKl!,8ZVINM91?"-O_F(TX;E_%K.``a6#4<La'a]`]Q`a*&Ga:R[^SP,3D^7A0\$/H>C2B+aB%^\|y@@_x;
Jan 7, 2021 07:33:13.873688936 CET	2048	OUT	GET /forum/images/misc/stats.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:13.952322006 CET	2051	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:13 GMT Content-Type: image/gif Content-Length: 1461 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: "5b5-558f3247ca900" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 1e 00 1e 00 f7 ff 00 d6 69 98 94 c5 ff bb be cd ce a6 ba c9 5b 84 8f 35 2f 91 99 dc 85 d6 9a 32 31 3d 4a 56 8a ce d4 e8 7d b5 ff 82 97 f8 75 97 fe c8 59 74 74 a6 ed 8c de c4 a0 c1 fe 87 a2 d0 9e ff c0 a5 61 8a a8 bd f3 64 96 fd 95 b5 ff b7 2c 32 bb c6 e8 53 63 aa b5 bd e7 e0 e3 f2 59 66 79 92 3e 44 78 94 e8 8d aa f4 70 55 6b 8e ac ff 5d 75 a8 7c c8 8d 28 35 4a a6 b2 db 83 a2 ed 52 66 b7 93 e2 c6 6a 88 d8 9d a1 b6 8d a9 ff a6 b9 e8 69 88 83 66 90 e1 5d a5 9a c0 66 8b 58 97 e8 61 bc ff 98 b8 ff 68 8c c7 a8 43 51 96 ba ff 7b 83 aa fb 17 08 a5 cc aa 78 8c e6 8c a6 ff 5a 6f c4 ea 62 89 ce d2 e0 88 c4 ff de e1 ef 78 98 c8 5e 98 7d 72 77 8b b7 06 02 b7 4f 69 95 9a b8 6f a7 ff 76 32 24 c9 d4 f3 48 37 50 98 b3 f8 a0 fb d3 57 55 5b 79 ae ff 71 b3 7a 6b a8 89 91 ae ff 74 ad ff 0f 0b 0b a3 f4 c3 92 01 00 a1 f5 c9 66 22 24 ab cc ff 19 32 39 da d3 e3 e3 66 8f cd 02 00 83 a1 ff 68 a1 fd 92 b1 ff 9d bf ff 85 8d ab 79 c2 97 ff 26 29 e3 16 14 db 12 06 4f 8a c3 84 bd ff cd b3 c4 8c a3 f1 d8 62 8d 95 d6 ff fe 0a 05 91 b6 ff 6f 03 02 94 b1 ff da de ed 2b 14 11 89 d9 c0 88 d2 bb da dd eb de df ee 6a 75 aa c6 c9 d9 30 20 2f 99 b9 fa 82 c7 a5 7d bd ab cf c4 d0 bb 98 8b ee 67 95 ae fc ca f1 96 9d cc 54 6a a4 e0 ff 94 b3 fa fb 59 58 81 d0 b5 d3 8b aa c2 97 9f 84 ca 94 78 ac f0 e3 6b 9b 98 ae aa a1 f3 da ca 9e b0 90 e6 a9 76 aa b3 8a d5 c0 75 7b c0 c4 c7 d7 98 dc ae 4d 74 b9 3a 53 a7 cf d7 e2 ff 20 16 d2 d9 e6 89 ff c9 b7 c9 cf 6e a0 e7 8f 13 21 6a 90 c4 74 80 dd 98 e8 d1 df c1 cc c0 25 23 7e aa d1 65 c0 88 e4 5f 8d 67 ce 97 5b 8e 80 d4 5a 60 c8 49 66 5c 67 8a 3b 43 4f ff 84 bb db 5c 80 a3 ff e1 8a 4a 5a c5 ce ea e7 cb dd c0 d2 cd a9 ad c3 ad b1 c5 db df f1 81 8f 9b b4 9c a8 9e db d6 87 b7 9f 8d af f0 a4 c6 ff 82 8e e1 80 9c ea 61 82 e6 5d 88 c6 9f f0 bc 9a bb ff ac c8 c9 a2 d0 c9 ff 7b b5 bf c9 d0 e7 a4 ab 85 d7 bb ad 8b cb 89 d2 b4 54 10 15 5b 26 29 bb ff f2 7e 19 21 c6 0f 10 c2 14 11 b3 c7 f6 6f a7 9f 6f b5 96 42 7c 73 e9 78 95 5e 70 70 55 79 71 c8 d9 dd a8 d1 ff 8f be ff 62 88 bd 8a a7 ff c7 d4 d5 c3 d0 d9 b6 ce bf 80 d0 8f 98 aa f1 5b 89 f5 5b 84 bd 5e 9b ff 87 a6 f5 d8 da e9 41 50 6e 86 af ff dc da e9 dd dd eb ec 42 49 e0 5d 50 b1 d4 ff e0 67 93 ff 90 c9 ee 6a 9b 3e 8e 82 5d 90 d4 ff 3b 2d d5 60 7c ff 34 3a a0 fa de c8 9c a5 8f b1 ff 70 b5 8b 64 55 4e 71 af a5 7e c2 ab 5f ae ff 62 78 ce 67 7f d6 e1 e4 f3 21 f9 04 01 00 00 ff 00 2c 00 00 00 00 1e 00 1e 00 40 08 ff 00 ff 09 1c 48 b0 60 c1 20 3f 8a 31 ba 64 b0 61 41 21 9c d0 3c 59 c0 84 db b7 2b 73 f6 39 41 60 6b 00 3d 44 05 d1 79 70 b0 68 4d 8e 5b 05 b0 94 58 80 e4 0b 99 02 49 ba 90 b1 16 c7 a1 80 11 d8 d4 58 d1 15 20 db 85 9f 3f e1 c0 a1 11 26 42 30 10 1f fa a1 d0 20 06 8f 43 83 1c 14 64 30 b1 e1 5f 10 12 55 40 d1 99 b3 e9 29 87 91 ef b8 94 1a f0 ef d7 03 55 23 a6 28 d1 f1 28 45 1e 78 7e da f4 19 28 66 44 18 29 6e 78 15 58 f2 0c c3 1a 06 25 ce 84 28 82 29 c1 39 5d c9 20 8d 3a c1 c3 0b b8 a7 2b 46 7c e8 a1 e1 ce 91 49 4f 33 6b 36 98 08 10 b3 7a ae 86 6d 2e 28 41 d1 20 36 6c b2 65 ba 08 81 ce 31 86 0e 39 08 f2 d1 8a cb 9f 58 ff 3c 3d 58 f0 64 4a 05 6f 07 9a f0 c9 e3 e2 5f 21 51 41 0c 06 19 d9 0e 40 2b 4c 5b 64 20 28 61 c1 12 02 65 25 10 4c 93 87 ca 61 2d 25 26 3c 18 ff 59 65 a6 19 95 4a 6f 28 cc f8 92 23 04 a9 3d 30 60 e8 ab 6a b0 83 ae 60 f7 5e 89 2a e2 20 95 Data Ascii: GIF89ai[5/21=JV}uYttad,2ScYfy>DxpUk]u\|(5JRfjif]fXahCQ{xZobx^}rwOiov2$H7PWU[yqzktf"$29fhy&)Obo+ju0 /}gTjYXxkvu{Mt:S n!jt%#~e_g[Z`If\g;CO\JZa]{T[&)~!ooB\|sx^ppUyqb[[^APnBI]Pgj>];-`\|4:pdUNq~_bxg!,@H` ?1daA!<Y+s9A`k=DyphM[XIX ?&B0 Cd0_U@)U#((Ex~(fD)nxX%()9] :+F\|IO3k6zm.(A 6le19X<=XdJo_!QA@+L[d (ae%La-%&<YeJo(#=0`j`^*
Jan 7, 2021 07:33:13.952364922 CET	2052	IN	Data Raw: 9a 7b 0c 34 e0 cb 07 37 88 60 a0 08 2c 24 28 82 14 60 48 c1 01 41 1c 98 a3 47 18 34 10 b5 cb 85 7a 9c a0 02 65 38 cc f2 c3 68 20 fe 43 c9 18 43 44 21 cd 35 21 3e 45 02 30 8d cc 01 81 30 29 fe d3 c2 17 e1 58 60 01 34 57 55 91 82 6b dd c4 28 01 27 Data Ascii: {47`,$(`HAG4ze8h CCD!5!>E00)X`4WUk('@,\$1E@IDpd1HOdCp]Hu4dsAV<#ADD1Z=O-@stT?`bCx0O$V?1a&8AT 6\|A*T`

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.3	49861	91.189.114.9	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:33:13.622723103 CET	2036	OUT	GET /forum/images/misc/whos_online.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:13.707123995 CET	2046	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:13 GMT Content-Type: image/gif Content-Length: 1440 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: "5a0-558f3247ca900" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 1e 00 1e 00 f7 ff 00 b2 37 d8 95 a8 f9 4e 6d c9 ac 56 cd 9d 8a 70 e5 38 ff 3d 29 60 a8 c8 af 01 a8 01 c7 68 28 dc ab 0f df a4 fb 70 73 7b cb c5 c7 8c 5e 00 50 37 4c ff d7 ff b8 c1 e1 a9 9d 7b 05 cd 09 e1 76 32 de c5 de db dd ec 97 4f 28 a3 2d f2 8c 1a b8 f3 f3 ff d8 a3 e6 03 b4 03 fa ba fe 6b 96 ff 37 55 c9 c5 c4 d5 ff cd ff 68 4a 81 35 51 95 02 52 03 ca d5 d9 dd e0 ef 0c 1a 21 f4 b5 f4 4c 74 fe 5d 82 fe dc 3a ff a9 75 00 bb 8c c9 47 55 68 a8 9b 99 4c 6c e7 b4 24 ff 89 a4 fc e7 68 fe b9 87 bc d2 99 04 89 68 88 d0 e7 e5 b3 a2 a1 e5 40 ff df e2 f1 02 6e 03 ce 93 b3 dd 4d f9 e0 e2 f3 97 19 e9 ff c2 ff d6 27 ff 66 10 a1 db a3 dc f7 3b ff ac 82 ba ff fe ff dd de f1 7b 39 12 a4 7b bd ab b3 d0 ac 1b eb 27 51 2b c3 be c2 26 d3 2b 42 69 f4 88 99 f5 00 8f 00 4c 70 f5 a8 a6 b4 58 47 5c 52 74 f4 88 63 94 60 85 ff 59 7d fc c9 34 fe ff db 16 75 5a 76 6c 8f fe ca 94 ca 53 2e 0c 50 72 e4 26 29 3e 09 16 1a 65 8b fe 6a 58 69 ce d2 e5 c6 94 ce 2b 45 a9 5a 7c e5 fd b6 13 d4 3a ff 00 02 04 be 84 00 da d7 fc 65 3d 6b ae 81 a3 ff c4 13 b4 2e ff 04 0c 15 a7 7c b1 00 39 03 90 25 d5 a5 73 c4 e8 ad e6 77 0b c0 b6 c5 c5 91 7d 99 7e 49 a7 ca 2c ff de 31 ff dd 9b b6 cf 93 bf 32 d1 50 b4 af b6 9c b0 f6 5e 40 4a b9 b2 b7 bd ba b9 25 22 26 36 34 2e a2 75 b7 9d 5f b7 57 83 ff 9b 9e a6 df a7 ef e7 ab e0 71 9c ff c0 ba b1 7c cc 82 e4 a5 bb 41 5d b8 84 40 94 c4 a3 59 ae 7a 9e 61 6f 97 6f 7b b1 e2 9e b9 c4 a5 d8 c7 d9 ff 97 85 52 96 6b 47 e0 83 3e d2 b1 f4 c5 4e d6 b3 84 a6 83 16 c9 82 86 8e c3 6d fc 7e a4 ff ff d4 28 ff e0 23 f3 b9 ff 80 58 81 b2 7f c6 97 64 73 d4 b2 27 85 40 12 84 7f 93 90 68 9e 32 38 3d a2 c8 ff 43 78 49 4d ba 4b ef b2 dc c6 93 db 62 67 6e 67 85 f1 f3 a7 00 b9 b0 b9 a3 ae fa d5 d6 e2 d6 d8 e2 c7 e2 c9 c6 e0 d5 de e8 df ad a2 aa d5 db f4 b3 58 bd e1 59 fb c6 cf f6 a6 af d9 e0 db f4 a3 86 c2 43 e7 70 54 74 ea 61 55 57 51 79 ef 5c 7f ec 5e 3e 5f cc 91 a8 c9 cd e1 c9 40 ff d3 41 ec c9 90 00 ec b0 f2 f2 46 ff d3 37 ff ea ae ff a5 74 ad b2 98 5a 4c 51 59 d5 d2 d9 7d 89 aa 3d 4b 57 59 7d f4 bd 92 1d b1 b4 b8 b4 ac a1 29 1f 27 13 1e 26 bf ba b6 33 a6 34 bd 7e d4 c2 92 c6 37 53 aa bb c7 f2 ce 99 cd e6 de e7 39 24 23 9f b3 ad 38 2f 42 7c 58 60 43 e9 51 57 5c 52 3e 5e b1 6f 41 3d 98 6d 04 83 51 ad ad 4d 10 93 52 a8 d9 e2 ea 89 61 4c bd 8e e9 9d 74 57 5e 82 f9 49 98 4c be a8 d7 84 91 b4 f5 6b ff ae 87 ae e1 e4 f3 21 f9 04 01 00 00 ff 00 2c 00 00 00 00 1e 00 1e 00 40 08 ff 00 ff 09 1c 48 70 e0 2d 02 80 0a 2a 5c 28 d0 02 c1 03 24 a8 b4 79 40 42 dd 3f 02 f6 b8 d5 50 a0 0a 1a 34 16 de 04 4e 51 03 6e 88 9d 0d 8b 16 cd b2 a2 d0 44 86 20 c0 dc 01 20 92 63 05 9c 3b 0e b3 8d 10 70 e6 ca 15 15 58 a4 b0 91 21 05 06 0c 1d 0c 93 32 6c 72 81 c7 a5 3e 7e 8a 3c 68 30 50 57 38 42 26 0a 82 88 e3 02 dc 09 6d 2e e2 a8 61 c2 61 c2 ae 58 ed fe 44 21 01 cb 97 9b 73 65 68 c8 11 e1 05 db 40 25 c9 1a 79 e0 a2 c1 48 a6 14 30 cc 20 1d e8 63 43 16 3e 05 56 ac c8 12 e3 07 9d 23 4a 23 4b 66 88 63 1e 05 0a 09 90 34 99 9c d4 02 bc 2e 28 50 0c 69 35 46 e0 24 5b 6f de a0 a9 c1 c2 11 41 1d 61 e2 9c f0 1a 27 0e 09 04 08 d0 41 c0 bd 16 84 1f 20 21 42 74 58 70 6f 93 26 81 b4 64 ab 59 27 27 5a 08 20 e3 4c d4 ab c7 8b d7 8d 7a ff 06 04 91 64 a8 90 01 21 c5 0a 2a ff 52 93 4e d0 96 53 cb 0c 44 52 52 10 40 8c 60 79 7a e4 28 90 23 0d 1c 0c 42 40 fc e3 27 40 8c Data Ascii: GIF89a7NmVp8=)`h(ps{^P7L{v2O(-k7UhJ5QR!Lt]:uGUhLl$hh@nM'f;{9{'Q+&+BiLpXG\Rtc`Y}4uZvlS.Pr&)>ejXi+EZ\|:e=k.\|9%sw}~I,12P^@J%"&64.u_Wq\|A]@Yzaoo{RkG>Nm~(#Xds'@h28=CxIMKbgngXYCpTtaUWQy\^>_@AF7tZLQY}=KWY})'&34~7S9$#8/B\|X`CQW\R>^oA=mQMRaLtW^ILk!,@Hp-\($y@B?P4NQnD c;pX!2lr>~<h0PW8B&m.aaXD!seh@%yH0 cC>V#J#Kfc4.(Pi5F$[oAa'A !BtXpo&dY''Z Lzd!RNSDRR@`yz(#B@'@
Jan 7, 2021 07:33:13.707170010 CET	2046	IN	Data Raw: 18 2e af e4 c3 86 11 5c 48 f1 85 19 64 70 26 50 04 02 7c b1 0d 50 55 48 51 8b 30 90 29 c8 d9 0b 17 5c 80 c4 0b 16 2e 64 c2 2a 09 50 c0 49 02 ab 78 31 58 87 02 35 90 8a 29 10 08 d7 c2 03 b9 08 64 0d 34 35 ac 11 4f 48 93 dd 72 0a 0d e4 54 d3 46 8a Data Ascii: .\Hdp&P\|PUHQ0)\.d*PIx1X5)d45OHrTFkhE)@V@Klq\cB; P @t,0>,0+$F1r%AI#@qq$ 1QC`T0@58T&K<0d`}O-`!DCD
Jan 7, 2021 07:33:13.895725965 CET	2049	OUT	GET /forum/images/statusicon/forum_new.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:13.975387096 CET	2053	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:13 GMT Content-Type: image/gif Content-Length: 1623 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: "657-558f3247ca900" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 1d 00 1e 00 f7 ff 00 ca cb cc 8e 73 52 b3 b4 bc 55 7a e5 8f 8c 83 7f 52 21 d3 d2 d4 7b 88 b6 b9 c5 e7 e3 e2 d8 88 79 98 97 a0 ba c9 c9 d0 d5 86 39 c3 b8 98 f9 e3 90 d2 d1 d9 de 91 4e ea eb ed cf ab 5c e2 e3 e6 ff 99 2a 72 57 3a a4 af d5 e4 e6 e8 76 8b c7 1d 2c 6e a6 ae c5 6c 7b b5 78 84 a5 91 94 98 5c 81 eb ea da 98 3b 66 cf a3 a4 aa bd be c8 ff 8f 27 44 6a cc be c2 d5 b1 a5 75 cf d0 da af 9b 5b a6 a6 9c 69 7b a7 8c 93 a5 cd ce da a9 b3 d7 b4 b4 b6 ee db 93 fa fa fa cc d2 e8 26 27 2a b9 ba bd d3 c7 98 7b 7f 8b fe 93 33 d9 d9 de 67 68 68 bd bd c4 63 83 d8 cc cd d6 ac ad b3 c5 c6 ce 91 9d bc d9 dd ed 3d 5a bb c0 c1 c3 d6 c6 85 af b1 b6 5e 7a c9 4b 57 88 c6 c9 d3 65 89 f3 8b 99 c6 f8 f9 fc f8 a9 46 8d 9b bc 7a 7a 7b 8f 92 9a 52 76 dc d9 da e1 c7 ce e5 49 64 b7 6d 81 b6 9c a9 d8 f9 fd ff bf bf c6 2e 2e 32 ff a3 39 84 95 bd 64 7b cb d6 d9 da 96 92 7c ee 91 40 f8 f6 f2 c7 b8 7d d0 d1 dd d3 d6 e3 e2 d2 95 71 7f aa e6 e7 e9 9e a9 ce a2 a9 be fc 9c 40 51 6e ca ff 91 1b cd ce d1 8d a3 d7 f6 f8 f9 5c 73 bb d5 da ed de e2 f2 94 9a aa 9c a6 c1 fa 94 38 9d 9d a2 58 5b 5c b8 77 36 9e a3 a6 4c 71 d7 47 6f d6 df df e6 b8 b9 c3 5f 3e 19 92 9e cb 9a a4 cd 89 97 b9 c1 c2 cc c8 ca d6 f5 f3 f6 ab b2 c6 3c 52 94 7c 90 cd ee 8d 36 c3 c4 cd df e0 e4 fb fc fc d2 d4 d9 8b 85 a2 cb cb d2 c7 c6 cb 90 91 aa 8b 8f 99 da db db 41 5d be ff 8f 1d cb cc d4 87 89 93 c2 c4 c7 bc bc c3 48 49 4e f0 f1 f1 e0 e3 f2 db dc e0 e7 d7 98 bb bc c6 ff ff ff ff ff fe fe fd fd b1 b7 ca e8 d8 98 d4 d2 cc 60 72 a6 ee ef f0 ff 90 09 95 8e 63 96 90 6c 70 93 ed 81 8a a3 e9 e7 e9 eb ea e6 37 56 ad fd fc fe 3c 3e 40 fd fe ff b1 8d 8c d6 d5 d7 5e 60 66 e2 cf 86 e8 d7 8f b2 b1 a1 65 85 cd db dc d7 f8 f5 ec 92 a9 e4 71 8a d3 7d 94 d3 b1 b4 c0 f0 ef f4 87 58 2b ff fe f9 a7 9c 6d b1 a7 81 c7 8f 75 e9 d7 94 6c 6e 70 70 7d be 67 58 46 cb c0 9b 7c a5 fd c0 bf bd f4 91 36 f2 97 3f 93 a1 c1 95 a1 cd 8f 8e a8 c3 c4 cc d8 d8 de c4 c2 c9 b0 ba dc a2 a0 8a 5e 65 92 56 6c bb 95 96 9f a7 b8 e9 8a 7e 6d 4e 4e 53 74 6a 5b a2 65 2a 9b 6b 3b b6 6d 29 bb 71 2c e1 df e4 83 9c d9 f6 f6 f8 d4 cb 9f ac b0 ba 8f 81 6c 9c 90 5e 9b 8b 77 de de e0 87 98 be ec ab 4e e0 ad 57 29 41 aa f7 f8 f2 fe ff fe fe fe fd fe ff ff bb bb c4 9a 88 9e bc bb c3 d8 c3 75 c6 c7 d0 f7 f7 f0 f8 f7 f7 85 83 af 81 9b e4 8d 8a a5 c7 c7 bc 6e 8d e3 cf d1 cf 80 85 9f 89 7f 9d fc fb fe e1 e4 f3 21 f9 04 01 00 00 ff 00 2c 00 00 00 00 1d 00 1e 00 00 08 ff 00 ff 21 40 20 c3 0d 90 37 98 fe 29 34 e1 c7 84 c2 87 10 23 fe 8b 72 ea c3 80 01 1f f4 dd c3 65 cd 85 1f 29 2b c2 24 94 28 f1 00 92 0e 2a 44 c0 41 75 60 8c 28 23 2b 06 19 69 83 06 cd 0e 5d 6b 2e 44 23 68 70 64 16 24 04 38 09 1d 7a 6b 4d 2d 0d 2f 38 d9 e2 77 80 43 1b 6a 52 20 41 0a 12 44 4a 94 7f 59 3e 34 59 a7 a6 1a 11 22 22 bc 94 d9 a1 ce 4c 8c 04 f2 1e a8 85 21 4c 4c 0d 63 0e 72 1d f8 97 44 6b 02 32 73 7a e8 10 30 e7 85 13 47 aa 38 49 38 01 42 13 28 10 88 67 c9 7a f0 2d c9 bf 73 1f 6c e4 43 c4 c8 40 a6 43 06 cc 19 a0 20 54 09 61 4d 9a c4 0c f9 02 4c d4 17 42 8e b3 da a0 35 74 28 3b 44 6c 24 20 e2 f4 0b c4 e1 21 76 3a 4c 59 65 23 03 9f 7f 7e 3e 4c 92 c6 09 82 0e 67 89 36 59 d9 b4 68 84 04 4e 5c c2 85 ab 71 e2 58 11 0d 4d be 64 60 f6 8f c9 80 49 5c 38 31 ff 50 13 8f 81 15 32 3c 16 f9 78 4e 64 28 ac 29 41 8c 84 4a 40 e8 f7 b2 01 8e 4c 71 82 b5 88 01 Data Ascii: GIF89asRUzR!{y9N\rW:v,nl{x\;f'Dju[i{&'{3ghhc=Z^zKWeFzz{RvIdm..29d{\|@}q@Qn\s8X[\w6LqGo_><R\|6A]HIN`rclp7V<>@^`feq}X+mulnpp}gXF\|6?^eVl~mNNStj[ek;m)q,l^wNW)Aun!,!@ 7)4#re)+$(DAu`(#+i]k.D#hpd$8zkM-/8wCjR ADJY>4Y""L!LLcrDk2sz0G8I8B(gz-slC@C TaMLB5t(;Dl$ !v:LYe#~>Lg6YhN\qXMd`I\81P2<xNd()AJ@Lq
Jan 7, 2021 07:33:13.975455999 CET	2054	IN	Data Raw: 83 78 ce 50 d2 9a 13 34 24 95 0a 00 d3 50 52 0f 3d 19 f4 d1 dd 00 2c 94 c2 c9 33 3c 24 d2 1f 0f 02 3c 27 94 1d 22 d0 40 03 19 6a 00 10 03 27 be 4c 51 46 77 4f b0 40 0e 27 50 bc c3 40 22 18 48 10 48 6b 94 88 90 48 0f 8c 30 b0 c8 50 53 5c f0 cf 0f Data Ascii: xP4$PR=,3<$<'"@j'LQFwO@'P@"HHkH0PS\)PEk2\"#D"'+8d#)!0 !z8M;By#03p2q\-d!1',r"'4p2`AC%P,w4hXNkBd%N4O:PIk

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.3	49715	91.189.114.9	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:32:21.071135044 CET	40	OUT	GET /forum/rek1.js HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Jan 7, 2021 07:32:21.149168968 CET	48	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: application/javascript Content-Length: 364 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: "16c-558f3247ca900" Accept-Ranges: bytes Cache-Control: max-age=315360000 Expires: Sun, 05 Jan 2031 06:32:21 GMT Data Raw: 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 6e 6f 69 6e 64 65 78 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 6c 6f 67 69 6e 7a 61 2e 72 75 2f 6a 73 2f 77 69 64 67 65 74 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 7a 61 2e 72 75 2f 61 70 69 2f 77 69 64 67 65 74 3f 74 6f 6b 65 6e 5f 75 72 6c 3d 68 74 74 70 3a 2f 2f 6f 76 64 2e 72 75 2f 66 6f 72 75 6d 2f 76 62 5f 6c 6f 67 69 6e 7a 61 2e 70 68 70 22 20 63 6c 61 73 73 3d 22 6c 6f 67 69 6e 7a 61 22 3e 3c 69 6d 67 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 6f 76 64 2e 72 75 2f 66 6f 72 75 6d 2f 6f 70 65 6e 69 64 6c 6f 67 69 6e 2e 70 6e 67 22 20 61 6c 74 3d 22 c2 ee e9 f2 e8 20 ed e0 20 f4 ee f0 f3 ec 20 e1 e5 e7 20 f0 e5 e3 e8 f1 f2 f0 e0 f6 e8 e8 21 20 c8 f1 ef ee eb fc e7 f3 ff 20 f1 e2 ee e9 20 eb fe e1 e8 ec fb e9 20 f1 e5 f0 e2 e8 f1 21 22 20 62 6f 72 64 65 72 3d 22 30 22 3e 3c 2f 61 3e 3c 2f 6e 6f 69 6e 64 65 78 3e 27 29 3b 0d 0a Data Ascii: document.write('<noindex><script src="http://loginza.ru/js/widget.js" type="text/javascript"></script><a href="https://loginza.ru/api/widget?token_url=http://ovd.ru/forum/vb_loginza.php" class="loginza"><img align="center" src="http://ovd.ru/forum/openidlogin.png" alt=" ! !" border="0"></a></noindex>');
Jan 7, 2021 07:32:21.160192013 CET	67	OUT	GET /forum/images/misc/navbits_start.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Jan 7, 2021 07:32:21.240662098 CET	71	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: image/gif Content-Length: 1004 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: "3ec-558f3247ca900" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 0f 00 0f 00 f7 96 00 d2 ed ff 85 99 eb 81 95 e6 87 9a ed 7e 92 e2 d4 ee ff 7d 91 e0 87 8d a4 c7 e3 ff d3 d5 e4 8a 9c ee 85 98 eb 8a 9f f1 d7 f2 ff cb ce dc 80 93 e3 c8 e3 ff 6b 80 da 8e 97 bc 6b 7f d7 62 78 cb ce e7 ff 96 a7 ff 95 a6 fd cd e6 ff ee ef fb 75 8d e5 81 92 e3 58 69 b7 77 8d e2 79 8d dc cb d0 e7 87 99 eb 7a 8d dc c7 e0 ff d2 ee ff c2 dd ff b6 b9 c9 72 86 d2 c5 de ff e1 e2 ee d3 ea ff 62 79 c7 bd c0 cf 6f 83 d1 f1 f2 fe f1 f1 fc 90 a3 f7 78 8d dd 84 97 e9 da f8 ff 6c 81 d8 b2 bb df 66 78 cd 60 71 c2 8c 94 b9 da f3 ff bc bd c7 88 9b f4 ce e8 ff a8 b0 d0 7a 8b e0 76 8a da 81 95 e4 7e 92 e1 8d 9d d4 8d 96 c0 cd e6 f6 d6 d7 e3 ec ec f7 c5 c8 dc cf eb ff 9b a1 b9 7b 90 e1 d0 e9 ff d9 f4 ff 83 96 e7 76 89 d6 76 89 d7 e0 fa ff 6c 80 d1 80 95 e6 d7 f3 ff 89 9c ef 8e a0 f3 ce e6 ff 79 8d db 87 90 b5 b9 c4 ed 88 9b ee b8 bd d6 76 8a d7 8e a1 f4 d8 f2 ff a6 bb df 6d 7f d6 f2 f3 fe 7d 93 ea 71 86 d4 74 88 d4 d6 da ef 7d 90 e0 83 8c b1 67 7d c5 88 98 c8 9d af d9 7e 92 e4 91 99 be ad b3 cd 57 68 b2 8c 96 bc 40 4d 89 60 71 b9 ed ee fa 81 93 f0 c0 cb e8 dd f7 ff 6c 81 d1 8b 9f f2 c9 e2 ff 66 77 c5 84 99 f1 7a 8e dc 92 a8 d8 c6 c9 d9 a3 b9 de 8c 9f f9 96 9f bc 74 87 d2 cc e8 ff 6f 7f c8 78 8c d9 82 96 e7 90 9b b6 90 a3 fc 5e 73 c2 de f9 ff 9b b0 da 8b 94 bb d1 ed ff 98 aa d3 d2 d5 e3 c5 ca e0 62 78 c8 b4 bd da f4 f4 fe d3 d5 e5 b0 b5 c9 56 63 99 9e b0 d9 f5 f5 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 96 00 2c 00 00 00 00 0f 00 0f 00 40 08 c9 00 2d 09 1c 48 b0 a0 a5 20 75 06 19 10 10 60 8a 9d 0b 78 38 d8 88 80 82 20 98 45 00 00 14 28 80 a1 8a 92 25 3c 04 c6 39 24 c6 07 8c 24 6a a2 2c 18 f0 86 92 c1 39 52 10 ed 29 b1 a2 51 02 07 44 b0 68 e8 10 26 8f 0e 3f 86 2c f4 18 d2 05 47 20 23 02 cf b0 d8 a2 87 80 80 18 20 a8 c0 f9 02 25 92 c1 ab 57 5d fc 29 c4 07 ab c0 16 27 ee 88 d8 31 e2 08 04 04 32 d0 4c 42 f2 c1 11 a4 44 69 2a 31 f2 d2 a0 42 0a 00 5a 32 a8 18 63 05 08 93 01 0c 5e c8 e9 f3 84 0e 09 49 96 c8 50 68 e2 81 00 a1 00 59 b8 6c 68 53 63 46 11 81 34 1e 99 70 12 a2 cc 83 1f 0a 04 4d 00 44 90 8d 99 2b 37 d6 48 70 a3 48 c8 81 1c 96 02 02 00 3b Data Ascii: GIF89a~}kkbxuXiwyzrbyoxlfx`qzv~{vvlyvm}qt}g}~Wh@M`qlfwztox^sbxVc!,@-H u`x8 E(%<9$$j,9R)QDh&?,G # %W])'12LBDi*1BZ2c^IPhYlhScF4pMD+7HpH;
Jan 7, 2021 07:32:21.256268978 CET	73	OUT	GET /images/banners/sozday_shkaf_kupe.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Jan 7, 2021 07:32:21.336553097 CET	98	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: image/jpeg Content-Length: 36279 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:57 GMT ETag: "8db7-558f3248beb40" Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 0a 7c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1c 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 8e 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 33 20 57 69 6e 64 6f 77 73 00 32 30 31 32 3a 30 35 3a 32 32 20 31 34 3a 32 36 3a 32 32 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 01 f6 a0 03 00 04 00 00 00 01 00 00 00 66 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 00 01 26 01 28 00 03 00 00 00 01 00 02 00 00 02 01 00 04 00 00 00 01 00 00 01 2e 02 02 00 04 00 00 00 01 00 00 09 46 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 48 00 48 00 00 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 21 00 a0 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f5 54 92 49 25 29 24 92 49 4a 49 24 92 52 92 59 1f 59 68 b2 ec 4a 01 a2 ec ac 46 db bb 37 1b 1d c5 b6 59 57 a7 6b 5a d6 ed b2 87 58 d6 e4 3a 87 be ad fe f5 83 9d d3 f3 9d 45 60 e0 75 0b 3f 57 2c e9 6c 6e 44 bf 1b 27 7e 43 99 6e 55 a2 fa f6 fe 89 f8 9b 2d 7f ad f6 7a eb f4 3f e3 19 29 90 4e 96 d8 c5 cb c6 71 89 39 04 6c d5 7a 7f ee a7 0f fd 11 ed 52 5c 2f 54 af a9 e2 e5 e5 e4 fd 97 20 5a ec 4b 31 af c8 6b dc 59 76 45 c1 98 d8 56 d1 fa 6b 5a f6 3b 21 fb 6a c2 66 3e 3f d8 fd 4f 5b d5 ff 00 04 83 87 87 99 6d 79 9d 1b 07 13 26 8a b2 6c c6 7d b5 e4 39 d4 b8 50 2b 7f ad 67 af bb 33 d1 fb 5e 5e 23 eb ff 00 09 f4 d3 7d dd 6b 85 Data Ascii: JFIFHH\|ExifMM*bj(1r2i''Adobe Photoshop CS3 Windows2012:05:22 14:26:22f&(.FHHJFIFHHAdobe_CMAdobed!"?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?TI%)$IJI$RYYhJF7YWkZX:E`u?W,lnD'~CnU-z?)Nq9lzR\/T ZK1kYvEVkZ;!jf>?O[my&l}9P+g3^^#}k
Jan 7, 2021 07:32:21.336590052 CET	100	IN	Data Raw: 98 72 20 c3 8f dd 15 a1 fd 1a de 3c 7a f1 fe 8f 17 14 7f ee 1e ee dc ac 6a 6c aa ab 6d 65 76 5e 48 a5 8e 20 39 e4 7d 21 5b 7f 3f 6c a2 ae 23 a8 d1 f5 9b 37 1a c6 9a 2e 65 87 07 1d b9 4e 6e d0 eb 72 31 ae ca ac d1 54 16 fe 8f 25 f6 7d b5 d6 d3 ff Data Ascii: r <zjlmev^H 9}![?l#7.eNnr1T%}ikei}f>IfnqnMV{=,c~?GxOE0<\Tc/Jc[e5q5q+\|h_}ocBP>d(}]?1T1NMKu/
Jan 7, 2021 07:32:21.336637020 CET	101	IN	Data Raw: a7 f4 7e b1 47 53 a3 1d 99 b8 f6 e2 d9 68 ce be 9c 7b 6d b3 25 b5 b6 1f e9 64 3e f6 ee a3 ed 3b f6 5f b3 e9 ff 00 da 84 09 a1 d0 f7 32 40 3a fe ef 60 1c df ac 59 74 87 e4 b2 cc 2f 5b 20 d2 2a ba f6 fa ad 75 4f 0d 8f d2 d9 53 ce 3b fd 1b 1c ef 6e Data Ascii: ~GSh{m%d>;_2@:`Yt/[ *uOS;nE_]z?X7fcFK%~+!+ky:2^XkQIT$$$$$$$=2?M$s)_{_
Jan 7, 2021 07:32:21.336677074 CET	102	IN	Data Raw: 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 61 6c 74 54 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 Data Ascii: urlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolcellTextTEXThorzAlignenumESliceHorzAligndefaultvertAlignenumESliceVertAligndefaultbgColorTypeenumESliceBGColo
Jan 7, 2021 07:32:21.336714983 CET	104	IN	Data Raw: 1b 3c 5c 54 63 2f 93 87 fb 9f bd fb cf 4a a3 63 d9 5b 1d 65 84 35 8c 05 ce 71 d0 00 35 71 2b 8a fd 9f d6 87 d6 7c 8b b1 68 b2 bb 5f 7d c5 99 6f 63 85 42 a7 50 ea aa dd 7f ae ea ad ad 99 3e 9d bf 64 fb 0f fe 84 28 d3 85 d5 a8 c5 7d 98 5d 3f 31 97 Data Ascii: <\Tc/Jc[e5q5q+\|h_}ocBP>d(}]?1T1NMKu/.VO?^zO?sokET{m7.w_YV3q+5>u7WFde3t?(8{?:iHvX
Jan 7, 2021 07:32:21.336751938 CET	105	IN	Data Raw: 51 be e9 b2 49 bf a3 ff d1 f5 54 97 ca a9 24 a7 ea a4 97 ca a9 24 a7 ea a4 97 ca a9 24 a7 ea a4 97 ca a9 24 a7 ea a4 97 ca a9 24 a7 ea a4 97 ca a9 24 a7 ea a4 97 ca a9 24 a7 ea a5 c0 e6 ff 00 3d 99 ff 00 87 32 3f ea 9a bc 4d 24 cc 9d 13 17 d9 73 Data Ascii: QIT$$$$$$$=2?M$s)_{_$;.~7Q3QxzI8BIM!UAdobe PhotoshopAdobe Photoshop CS38BIM
Jan 7, 2021 07:32:21.336790085 CET	107	IN	Data Raw: 37 2c 32 38 34 2c 35 33 30 2c 35 33 31 2c 32 38 32 2c 32 38 33 2c 32 39 36 2c 33 30 31 2c 33 31 38 2c 33 31 39 2c 35 32 39 2c 35 33 32 2c 33 30 36 2c 32 37 30 2c 32 37 31 2c 32 37 32 2c 33 30 35 2c 33 31 35 2c 33 33 34 33 32 3b 33 36 36 36 34 32 Data Ascii: 7,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;366642A9046C0C538F864686F87B35CD" exif:PixelXDimension="502" exif:PixelYDimension="102" exif:ColorSpace="-1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,409
Jan 7, 2021 07:32:21.336826086 CET	108	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Jan 7, 2021 07:32:21.337517977 CET	117	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <?xpacket end="w"?>!Adobed@
Jan 7, 2021 07:32:21.337554932 CET	118	IN	Data Raw: 4b 44 7d a9 9d 10 79 35 df 91 1d f3 87 1e 73 eb ee 07 7e a6 80 00 00 00 00 00 00 00 00 01 ad 30 ac fb 2f 36 b1 ac f0 ac fb 33 36 b0 00 00 00 00 00 01 a0 20 32 31 88 5c ea 6c d2 7b cf 6b ed 7d 61 f8 a6 ea 7c f2 c3 c9 73 d3 56 d8 12 0f 02 62 50 62 Data Ascii: KD}y5s~0/636 21\l{k}a\|sVbPbr(E-\|'\W"xO=6-9k{]fw{Ak<FU^&uJ/`6uWnSyX,7[#2_4Z:j`WHx?1R_Tz
Jan 7, 2021 07:32:21.413095951 CET	155	IN	Data Raw: ad 51 30 14 44 ac 6c 55 e6 49 43 a9 9f 74 ab b5 b1 fe df aa 5a 61 48 c1 cc 5c 34 64 15 24 77 13 46 36 b8 03 0f 68 d0 b1 e2 8f 16 22 9a a9 04 96 c5 a4 92 63 86 a1 84 72 23 81 60 b6 1c 88 94 4a 8e c5 8d 3e 18 33 aa 38 57 34 ae 24 50 bc 6e e3 ec c2 Data Ascii: Q0DlUICtZaH\4d$wF6h"cr#`J>38W4$PnF).<]A=h}^,qO/+)p.AJ^"uD8h_M,cdVOP:f3}vbQXTO&9&RI<P(D*3;MMW>9dw:K
Jan 7, 2021 07:32:21.519290924 CET	207	OUT	GET /forum/openidlogin.png HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Jan 7, 2021 07:32:21.599503994 CET	210	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: image/png Content-Length: 29137 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: "71d1-558f3247ca900" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 84 00 00 00 40 08 06 00 00 00 83 51 66 c4 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b 08 80 14 00 40 7a 8e 42 a6 00 40 46 01 80 9d 98 26 53 00 a0 04 00 60 cb 63 62 e3 00 50 2d 00 60 27 7f e6 d3 00 80 9d f8 99 7b 01 00 5b 94 21 15 01 a0 91 00 20 13 65 88 44 00 68 3b 00 ac cf 56 8a 45 00 58 30 00 14 66 4b c4 39 00 d8 2d 00 30 49 57 66 48 00 b0 b7 00 c0 ce 10 0b b2 00 08 0c 00 30 51 88 85 29 00 04 7b 00 60 c8 23 23 78 00 84 99 00 14 46 f2 57 3c f1 2b ae 10 e7 2a 00 00 78 99 b2 3c b9 24 39 45 81 5b 08 2d 71 07 57 57 2e 1e 28 ce 49 17 2b 14 36 61 02 61 9a 40 2e c2 79 99 19 32 81 34 0f e0 f3 cc 00 00 a0 91 15 11 e0 83 f3 fd 78 ce 0e ae ce ce 36 8e b6 0e 5f 2d ea bf 06 ff 22 62 62 e3 fe e5 cf ab 70 40 00 00 e1 74 7e d1 fe 2c 2f b3 1a 80 3b 06 80 6d fe a2 25 ee 04 68 5e 0b a0 75 f7 8b 66 b2 0f 40 b5 00 a0 e9 da 57 f3 70 f8 7e 3c 3c 45 a1 90 b9 d9 d9 e5 e4 e4 d8 4a c4 42 5b 61 ca 57 7d fe 67 c2 5f c0 57 fd 6c f9 7e 3c fc f7 f5 e0 be e2 24 81 32 5d 81 47 04 f8 e0 c2 cc f4 4c a5 1c cf 92 09 84 62 dc e6 8f 47 fc b7 0b ff fc 1d d3 22 c4 49 62 b9 58 2a 14 e3 51 12 71 8e 44 9a 8c f3 32 a5 22 89 42 92 29 c5 25 d2 ff 64 e2 df 2c fb 03 3e df 35 00 b0 6a 3e 01 7b 91 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c 30 2e c6 c3 42 b1 38 2c 09 93 63 cb b1 22 ac 0c ab c6 1a b0 56 ac 03 bb 89 f5 63 cf b1 77 04 12 81 45 c0 09 36 04 77 42 20 61 1e 41 48 58 4c 58 4e d8 48 a8 20 1c 24 34 11 da 09 37 09 03 84 51 c2 27 22 93 a8 4b b4 26 ba 11 f9 c4 18 62 32 31 87 58 48 2c 23 d6 12 8f 13 2f 10 7b 88 43 c4 37 24 12 89 43 32 27 b9 90 02 49 b1 a4 54 d2 12 d2 46 d2 6e 52 23 e9 2c a9 9b 34 48 1a 23 93 c9 da 64 6b b2 07 39 94 2c 20 2b c8 85 e4 9d e4 c3 e4 33 e4 1b e4 21 f2 5b 0a 9d 62 40 71 a4 f8 53 e2 28 52 ca 6a 4a 19 e5 10 e5 34 e5 06 65 98 32 41 55 a3 9a 52 dd a8 a1 54 11 35 8f 5a 42 ad a1 b6 52 af 51 87 a8 13 34 75 9a 39 cd 83 16 49 4b a5 ad a2 95 d3 1a 68 17 68 f7 69 af e8 74 Data Ascii: PNGIHDR@QfpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K@zB@F&S`cbP-`'{[! eDh;VEX0fK9-0IWfH0Q){`##xFW<+x<$9E[-qWW.(I+6aa@.y24x6_-"bbp@t~,/;m%h^uf@Wp~<<EJB[aW}g_Wl~<$2]GLbG"IbXQqD2"B)%d,>5j>{-]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(*`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0.B8,c"VcwE6wB aAHXLXNH $47Q'"K&b21XH,#/{C7$C2'ITFnR#,4H#dk9, +3![b@qS(RjJ4e2AURT5ZBRQ4u9IKhhit
Jan 7, 2021 07:32:21.630904913 CET	253	OUT	GET /forum/images/gradients/gradient_tcat.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Jan 7, 2021 07:32:21.708024979 CET	266	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: image/gif Content-Length: 3728 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: "e90-558f3247ca900" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 64 00 64 00 f7 00 00 4b 6c a6 7f 95 bc 60 7d af 7a 91 ba 52 72 a9 78 90 b9 59 77 ac 57 76 ab 71 8a b6 57 75 ab 70 8a b6 55 74 aa 4f 6f a8 4c 6d a6 5c 7a ad 83 99 be 85 9a bf 4d 6e a7 64 80 b1 54 73 aa 6d 87 b4 7c 93 bb 4e 6e a7 84 9a be 7d 94 bb 83 98 be 84 99 be 62 7f b0 82 98 bd 75 8d b8 66 82 b2 82 97 bd 61 7d af 4c 6d a7 7a 92 ba 4d 6d a7 52 71 a9 67 82 b2 6b 85 b3 6a 85 b3 6f 88 b5 4e 6f a7 76 8f b8 6c 87 b4 6e 88 b5 63 7f b0 79 90 b9 73 8b b7 5e 7b ae 7f 96 bc 4f 70 a8 7d 94 bc 55 74 ab 73 8c b7 54 73 a9 80 96 bd 58 77 ac 5b 79 ad 85 9a be 5d 7a ad 5e 7c ae 74 8d b8 62 7e b0 7c 93 ba 85 9b bf 80 97 bd 51 70 a8 75 8d b7 65 80 b1 6f 89 b5 59 77 ab 5a 78 ad 4e 6e a8 69 83 b3 77 8f b8 5f 7c ae 5f 7b ae 50 70 a8 6b 85 b4 5b 78 ad 4c 6c a6 51 71 a8 7e 94 bb 53 73 aa 6e 89 b5 5d 7a ae 80 97 bc 76 8e b8 81 97 bd 68 84 b2 80 96 bc 66 82 b1 7b 93 bb 4f 6f a7 72 8c b7 50 70 a9 74 8d b7 78 90 ba 5c 7a ae 83 99 bd 68 83 b2 69 83 b2 72 8b b7 69 84 b3 5b 78 ac 51 71 a9 81 98 bd 63 7e b0 83 98 bd 4e 6f a8 53 72 a9 6a 85 b4 64 80 b0 56 74 aa 7e 95 bc 77 8e b8 69 84 b2 4d 6d a6 53 73 a9 85 9b be 7a 91 b9 7c 92 bb 73 8b b6 64 81 b1 6d 87 b5 50 71 a8 81 96 bc 5a 78 ac 51 70 a9 84 99 bf 5a 79 ad 7d 95 bb 50 6f a8 68 84 b3 67 82 b1 76 8f b9 68 83 b3 56 74 ab 6d 86 b4 6c 86 b4 81 96 bd 7b 93 ba 82 98 be 84 9a bf 77 8e b9 77 8f b9 55 75 aa 66 81 b2 4b 6d a6 50 71 a9 60 7d b0 74 8e b8 7b 92 ba 86 9a bf 7e 94 bc 85 99 be 67 81 b2 76 8e b9 72 8c b6 53 71 a9 5f 7c af 6c 87 b5 5b 79 ac 7a 92 b9 4d 6e a6 58 77 ab 4c 6c a7 82 97 be 6e 88 b6 73 8c b6 5a 79 ac 65 81 b1 65 80 b0 5e 7b af 4b 6d a7 64 81 b0 5e 7c af 56 75 ab 71 89 b6 7c 92 ba 6a 86 b4 5d 79 ad 79 90 ba 4f 70 a7 6a 86 b3 70 8a b5 78 91 ba 70 89 b6 85 99 bf 50 70 a7 6e 89 b6 62 7f af 50 6f a7 4c 6e a7 57 76 ac 75 8e b8 5f 7b af 55 75 ab 62 7e af 6b 86 b3 7e 95 bb 57 75 ac 81 97 bc 61 7d b0 72 8b b6 53 72 aa 60 7e af 65 81 b0 63 7e af 54 72 a9 63 7f af 78 91 b9 7b 92 bb 74 8e b7 5c 79 ad 59 76 ac 54 72 aa 6d 86 b5 66 81 b1 86 9a be 7e 96 bc 75 8e b7 5d 79 ae 67 81 b1 71 8a b5 6b 86 b4 6f 89 b6 7f 96 bb 52 72 aa 56 76 ab 5c 79 ae 4c 6e a6 59 76 ab 82 99 bd 7d 95 bc 6c 86 b5 81 97 be 56 75 aa 4b 6c a7 6f 88 b6 86 9b bf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 64 00 64 00 00 08 ff 00 01 08 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 61 42 4a 21 1a 48 6c 40 09 4a 03 28 ae 26 42 31 15 b1 41 88 10 50 42 4a 0c e1 8a 52 03 53 21 3b 86 e0 08 11 4a c4 10 15 2b 66 34 29 d1 55 48 00 1e 55 7a 6c e0 ce e5 c4 8b 2f 7d 4e 34 95 f1 e3 ca 8b 23 73 46 58 1a 61 44 84 60 4d 9b 3a 1d 51 87 54 88 11 a4 96 86 88 40 8a ea 47 a6 23 b0 d6 71 da a0 8e 54 a7 4b d1 a6 35 cb 16 6b da ae 11 c6 c6 0d 1b 77 ec d5 b0 50 c3 3a cd 8b b6 41 d4 08 e7 22 6c 4d 81 04 49 0a 0b 16 0e 5b 68 63 b8 0b 12 c4 8b 0f 77 49 91 a2 8d 85 c9 8a 2d 30 48 0c 79 71 62 cb 16 1e 3f 66 7c 98 f2 e3 2e 8e 09 53 a6 1c fa f3 63 c4 87 1f 13 6e 93 19 09 63 ce 86 69 cf b6 dc a4 cb ad 26 0c 82 33 90 21 83 01 21 e0 32 08 a1 4e 0e 7c 38 b0 e2 c4 65 00 23 24 a3 0b 72 e1 c3 ad 1b 2f 4e 28 78 17 ec c4 83 f7 ff 62 5e 1c fc 2d 60 0c 6e 55 4f 8e 7d 78 f2 2e e5 83 57 57 cf a0 57 af 26 5f 9a 08 f9 12 45 48 Data Ascii: GIF89addKl`}zRrxYwWvqWupUtOoLm\zMndTsm\|Nn}bufa}LmzMmRqgkjoNovlncys^{Op}UtsTsXw[y]z^\|tb~\|QpueoYwZxNniw_\|_{Ppk[xLlQq~Ssn]zvhf{OorPptx\zhiri[xQqc~NoSrjdVt~wiMmSsz\|sdmPqZxQpZy}PohgvhVtml{wwUufKmPq`}t{~gvrSq_\|l[yzMnXwLlnsZyee^{Kmd^\|Vuq\|j]yyOpjpxpPpnbPoLnWvu_{Uub~k~Wua}rSr`~ec~Trcx{t\yYvTrmf~u]ygqkoRrVv\yLnYv}lVuKlo!,ddH*\aBJ!Hl@J(&B1APBJRS!;J+f4)UHUzl/}N4#sFXaD`M:QT@G#qTK5kwP:A"lMI[hcwI-0Hyqb?f\|.Scnci&3!!2N\|8e#$r/N(xb^-`nUO}x.WWW&_EH
Jan 7, 2021 07:32:23.055710077 CET	338	OUT	GET /favicon.ico HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1
Jan 7, 2021 07:32:23.133831978 CET	339	IN	HTTP/1.1 302 Found Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:23 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 336 Connection: keep-alive Location: http://ovd.ru/index.php?searchword=&option=com_search&Itemid=0 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 6f 76 64 2e 72 75 2f 69 6e 64 65 78 2e 70 68 70 3f 73 65 61 72 63 68 77 6f 72 64 3d 26 61 6d 70 3b 6f 70 74 69 6f 6e 3d 63 6f 6d 5f 73 65 61 72 63 68 26 61 6d 70 3b 49 74 65 6d 69 64 3d 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 50 48 50 2f 34 2e 34 2e 39 20 53 65 72 76 65 72 20 61 74 20 6f 76 64 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="http://ovd.ru/index.php?searchword=&option=com_search&Itemid=0">here</a>.</p><hr><address>Apache/2.4.41 (Ubuntu) PHP/4.4.9 Server at ovd.ru Port 80</address></body></html>
Jan 7, 2021 07:32:23.137027979 CET	339	OUT	GET /index.php?searchword=&option=com_search&Itemid=0 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1
Jan 7, 2021 07:32:23.285480022 CET	340	IN	HTTP/1.1 301 Moved Permanently Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:23 GMT Content-Type: text/html; charset=windows-1251 Content-Length: 0 Connection: keep-alive X-Powered-By: PHP/4.4.9 Set-Cookie: d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; path=/ P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM" Location: http://ovd.ru/search.html?searchword=
Jan 7, 2021 07:32:23.288362026 CET	341	OUT	GET /search.html?searchword= HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Jan 7, 2021 07:32:23.478132010 CET	342	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:23 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/4.4.9 P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM" Expires: Mon, 1 Jan 2001 00:00:00 GMT Last-Modified: Thu, 07 Jan 2021 06:32:23 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache ETag: W/"71f668f9cfccce61efe8bc41551eaeda" Content-Encoding: gzip Data Raw: 64 30 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b5 5a 5b 6f e3 c6 15 7e 5e 01 fe 0f d3 29 76 2d c3 16 a9 8b d7 96 6d 49 8b a6 49 90 16 4d 10 b4 e9 43 11 04 c2 90 1c 49 5c 53 1c 96 a4 24 2b 17 60 2f 2d b6 41 82 2c 90 f6 a1 68 d1 4b 8a be f4 cd d9 64 1b 6f bc 71 80 fe 02 ea 1f f5 9c 99 21 45 ea b6 9b 9b 17 91 c8 99 39 67 ce 7d be 33 0a 21 ad 41 3c f4 3a 5b a5 d6 80 33 07 be 09 69 59 2c e2 64 10 f2 5e 9b 0e e2 38 38 36 4d 31 76 8c 70 64 52 62 76 70 c1 90 c7 8c e0 54 85 ff 76 e4 8e db d4 16 7e cc fd b8 12 4f 03 4e 89 7e 6b d3 98 9f c5 26 f2 3f 21 f6 80 85 11 8f db a3 b8 57 69 16 f8 f8 6c c8 db 34 14 96 88 a3 1c ad eb 3b fc 6c 8f f4 84 e7 89 c9 0a 82 53 3e 9d 88 d0 c9 93 ac 58 e5 f0 c8 0e dd 20 76 85 bf bc 10 d7 c6 6e ec f1 4e f2 8f e4 2a b9 98 dd 4d be 6c 99 6a 04 e7 3c d7 3f d5 76 30 63 3e 0c 3c 16 f3 c8 b4 dc b7 bb 96 37 e2 5d d7 35 7b 6c ec 02 57 03 3e 28 09 b9 d7 a6 d1 40 84 b1 3d 8a 09 8e 53 82 06 01 5d 86 ac cf cd b3 8a 1a 83 bd c1 dc 92 b9 22 89 a7 1e 8f 06 9c c7 74 79 b7 6e 34 8d e0 cd b4 a3 c8 ec 73 9f 87 cc 33 e0 39 e5 2c 2d 2c df cd ce f3 33 cd ab 80 8c d3 99 f5 9c f1 5f cb d4 21 02 8f 96 70 a6 c4 75 da 14 1f ba 56 1f e3 86 a0 39 99 e5 71 32 71 9d 78 d0 a6 b5 6a f5 3a 25 c4 02 37 f1 b0 4d ab 94 30 cf ed fb 10 2e e0 05 1e 82 43 b8 e7 05 cc 71 5c bf 2f a7 f1 3d 0a 98 ad df 3b 9a ab e2 1c e6 5f d3 41 27 db eb e0 08 b6 d2 fc 3d de 03 b5 c9 58 bf 0e 5d c7 f1 38 b2 bb 06 7f f8 49 16 ff 96 58 6f 18 45 26 4b 1c 24 ef 55 eb d1 5c 8b 63 10 64 da 8e f0 9d be 2d 51 a2 76 45 53 2e 9a cf 63 51 04 9e 12 81 cf c6 34 53 17 12 29 16 43 da 59 b5 f3 fa bf 96 e3 8e 57 49 a1 24 59 76 6b ce ab 1b dd 58 a3 1d f4 1d 2a e3 8b 49 c8 82 36 55 df 30 ce d2 d0 0c c4 50 44 03 53 e6 bc 81 05 23 53 6e c8 5c df e3 63 ee 55 a4 8e 2a 53 9f 26 57 b3 f7 67 1f b6 4c 96 e3 61 8b 61 20 7c 30 8d 29 64 be ef c1 40 f7 6c c8 02 f3 67 10 df ae b3 d7 ac 99 91 0b 8f 2c d8 ab 99 eb 37 f8 4b 72 3e bb 33 bb 97 9c 13 a8 07 e7 c9 13 7c 2c ec 54 ac 89 3d 11 8e 86 eb b9 fd 1b 44 bd 33 bb 9f 3c 2d 0a bb 8e 00 53 8a d9 b1 3b e6 dd 21 f7 47 72 b0 93 fc 0d 84 49 3e 4b 2e 41 9c 47 c9 57 b3 fb b3 8f 24 37 8c 1b f8 08 f1 03 1d 84 ee 5b ed c1 96 b9 c1 bb ab 68 16 63 72 fe 28 37 94 c7 84 de 54 4d fe 60 99 bf 32 f1 75 72 ac ce 07 4f f4 05 56 2a 18 ea 60 a6 aa b4 5f 93 66 1b 14 c3 67 4c d1 ef 53 31 82 55 5a ee 83 0a cc 13 b8 a6 66 c0 4b e9 60 30 41 2b b4 80 d6 4f 87 ac 10 b4 b2 21 dc ac 88 04 2c 1e 4c d8 94 76 4a c9 1f d3 c0 80 c0 7d d8 32 Data Ascii: d03Z[o~^)v-mIIMCI\S$+`/-A,hKdoq!E9g}3!A<:[3iY,d^886M1vpdRbvpTv~ON~k&?!Wil4;lS>X vnNMlj<?v0c><7]5{lW>(@=S]"tyn4s39,-,3_!puV9q2qxj:%7M0.Cq\/=;_A'=X]8IXoE&K$U\cd-QvES.cQ4S)CYWI$YvkXI6U0PDS#Sn\cUS&WgLaa \|0)d@lg,7Kr>3\|,T=D3<-S;!GrI>K.AGW$7[hcr(7TM`2urOV`_fgLS1UZfK`0A+O!,LvJ}2
Jan 7, 2021 07:32:40.086679935 CET	402	OUT	GET /index.php?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Jan 7, 2021 07:32:41.110435963 CET	461	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/4.4.9 P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM" Expires: Mon, 1 Jan 2001 00:00:00 GMT Last-Modified: Thu, 07 Jan 2021 06:32:41 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache ETag: W/"11a5284520ae358694cd835505087a97" Content-Encoding: gzip Data Raw: 32 31 38 30 0d 0a 1f 8b 08 00 00 00 00 00 00 03 e5 5d 7b 6f 1b d7 95 ff db 02 fc 1d a6 b3 a8 2d c3 e2 5b ef 07 8d be 16 dd 45 5b 14 6d f7 8f 45 51 08 43 72 44 4e 34 e4 b0 33 43 c9 54 5b 40 b6 e3 d8 5d 25 76 93 76 b1 45 9a c6 4d 77 81 76 b1 28 40 4b a2 4d eb 09 e4 13 90 df 68 cf eb ce 83 1c 4a b4 ea d4 dd ac 83 48 e4 cc dc d7 b9 e7 9c df 79 cd 95 a6 ad d6 fc ba 5d bc 3e b5 5a 33 8d 0a fc d6 b4 d5 92 e1 99 5a cd 35 37 d6 f4 9a ef 37 97 33 19 67 ab 92 76 5b 19 5d cb 14 f1 81 ba e9 1b 1a de 4a 99 3f 6d 59 5b 6b 7a d9 69 f8 66 c3 4f f9 ed a6 a9 6b f2 6d 4d f7 cd bb 7e 06 fb 5f d1 ca 35 c3 f5 4c 7f ad e5 6f a4 16 63 fd 34 8c ba b9 a6 bb 4e c9 f1 bd 48 5b ab 51 31 ef ce 68 1b 8e 6d 3b db 09 0d 36 cd f6 b6 e3 56 a2 4d 12 9e aa 98 5e d9 b5 9a be e5 34 46 1f c4 67 7d cb b7 cd 62 ff f7 fd 8e d6 3f e8 1f f7 3b fd fd fe e9 e0 c1 e0 c9 6a 86 6f e1 43 b6 d5 d8 14 82 64 36 4c b3 92 71 3d 2f 8d eb d2 35 d7 b4 d7 74 c3 f6 4d b7 61 f8 b0 76 a4 00 5c 68 36 6d ab 6c e0 b0 f8 ec ed bb f8 28 f5 b7 a6 ff e0 87 3f d4 f2 e9 ac 9a ec 48 df 86 ef d4 27 ee 1c 1f 8e f5 fe 35 b8 a0 e5 92 bb f7 cd 7a d3 86 8e bc 4c c9 da 59 2f d9 2d 73 dd b2 32 1b c6 96 05 94 49 c3 0f 19 d1 ab 39 ae 5f 6e f9 1a 5e 57 a3 5a 75 a3 6a 66 ee a6 f8 9a a2 df 14 30 0e 0d c1 0d fd b6 6d 7a 35 d3 f4 f5 d1 31 d7 bd b6 07 df 32 65 cf cb 54 cd 86 e9 1a 76 1a 3e ab fe 89 57 e8 7b a6 38 79 a7 d1 85 60 c7 ea ce f8 9e f1 bf 51 06 fe 86 30 f0 77 8c 46 b5 05 0b 8d 30 8b 49 cb 5d cd 88 7c 40 eb 92 53 69 6b 56 65 4d c7 0f eb a5 2a 0a 8d 86 bc 64 94 6c 53 db b6 2a 7e 6d 4d cf 65 b3 5f d5 35 ad 04 3c 6a ba 6b 3a 6c 88 61 5b d5 06 c8 0a f4 6a ba 30 80 69 db 4d a3 52 b1 1a 55 ba 8d df bd a6 51 96 ef 45 e9 95 7b 76 a3 5f d5 c5 4a 30 d6 fc 12 0c 25 fd db e6 06 50 4a db 92 af 75 ab 52 b1 4d ec ee 1a fc c3 9f da f0 bf 91 ae 2f b8 8a 9d 8c f4 40 7d 27 3d 8f e4 1a be 06 82 25 74 84 df ea db 48 4b 5c 5d 9c 94 c3 e4 b3 0d cf 83 cd 75 9a 0d 63 4b 0f 96 0b 5a 04 24 40 2f 26 8d 3c fe df 6a c5 da 4a 9a 05 cf 64 74 5b 23 bb 7a e1 36 e6 f4 22 ee 1d 2e a6 e1 6c bb 46 73 4d e7 df 70 dd 50 dc dc 74 ea 8e 57 cb 90 c2 13 c1 97 c5 d5 0d ab 61 9b 5b a6 9d a2 35 16 fb cf fa 67 fd 93 fe d9 e0 97 83 f7 57 33 46 a4 8f b2 53 6f 3a 0d 20 4d c6 21 65 37 03 17 d6 ef d6 8d 66 e6 9f 40 24 ac ca cc 62 2e e3 59 f0 d1 68 ce e4 32 e3 07 f8 b8 df 19 ec 0e ee 83 36 1c dc 03 5d f8 0a 3f c6 46 8a 03 c2 86 e3 b6 ea e3 7b fb 2f 98 ea ee e0 41 ff 24 3e d9 71 0d 50 a4 8c b2 6f 6d 99 eb 75 b3 Data Ascii: 2180]{o-[E[mEQCrDN43CT[@]%vvEMwv(@KMhJHy]>Z3Z5773gv[]J?mY[kzifOkmM~_5Loc4NH[Q1hm;6VM^4Fg}b?;joCd6Lq=/5tMav\h6ml(?H'5zLY/-s2I9_n^WZujf0mz512eTv>W{8y`Q0wF0I]\|@SikVeMdlS~mMe_5<jk:la[j0iMRUQE{v_J0%PJuRM/@}'=%tHK\]ucKZ$@/&<jJdt[#z6".lFsMpPtWa[5gW3FSo: M!e7f@$b.Yh26]?F{/A$>qPomu
Jan 7, 2021 07:32:41.118223906 CET	470	OUT	GET /templates/_system/css/general.css HTTP/1.1 Accept: text/css, / Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Jan 7, 2021 07:32:41.196193933 CET	476	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Tue, 12 Sep 2017 00:30:04 GMT ETag: W/"ad9-558f324f6bb00" Cache-Control: max-age=315360000 Expires: Sun, 05 Jan 2031 06:32:41 GMT Content-Encoding: gzip Data Raw: 32 66 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 a5 56 db 6e a3 30 10 7d 4e be c2 ab a8 d2 b6 5a 08 a4 49 a4 90 a7 5e b4 5f b0 ef 95 c1 0e f1 c6 d8 96 71 5a b6 d5 fe fb fa 02 14 30 6d 51 b6 4f f5 30 73 ce dc 27 cb 1b f0 93 cb 02 3c 43 4a 10 54 84 33 70 b3 9c 87 84 59 01 78 03 29 97 08 cb 20 e3 94 cb 04 2c 0e 87 48 ff ed c1 df 39 85 29 a6 1d 45 5f 63 be bc 01 f7 67 a5 38 2b 0d e8 02 23 a2 b8 0c 2a 85 82 b4 16 bf cd 67 02 22 44 58 9e 80 8d a8 f6 73 6d 15 ba 8f ab 80 e2 83 fa f1 fe 94 24 3f 76 df e6 33 40 e4 79 a8 62 64 06 f8 40 39 54 09 30 6a 3e 2e 80 9e 19 1c 62 97 02 32 4f cb 08 0d 3a 22 a5 a0 f0 4f 02 52 ca b3 d3 7e 3e 3b 62 f3 3d 01 ab 95 89 a3 cf 3e a3 84 e1 60 a8 c1 99 0a 4a f2 8a 13 10 c7 56 d2 a4 70 bb dd 9a d7 59 96 e6 29 38 61 0a cb 91 18 3e 75 b0 31 47 f8 00 cf 54 75 e0 77 bb dd 08 58 28 60 8e 47 d2 e2 cb 3b ea a3 1e bc 7f ea d5 37 02 db a6 c2 3d 85 c6 2d d3 35 75 56 5e ea 4c a5 9c a2 b1 da 25 47 fe 8c a5 5f 41 27 37 a0 0a 57 2a 40 38 e3 d2 36 75 02 18 67 b8 93 83 e8 7e b3 79 58 7f d1 17 6d 92 07 71 ac d6 a2 ea 86 f3 71 1f f5 4b d2 4f 45 0d 34 e2 83 56 4d 61 76 ca 25 3f 33 94 80 b3 a4 df c3 70 49 0a 9d b5 72 f9 fb a9 d6 7d 32 ba a1 60 f9 b5 0e 2e 90 58 60 a8 bc c6 2b a0 cc 09 b3 b0 23 13 e6 dc 9b 48 67 95 1d 5f 1c 45 57 da fd 4b 69 5d 03 59 82 a9 e4 56 f0 11 b9 8f 2d 31 44 05 97 93 e1 1b fd e9 0c a6 85 53 6d 76 9a 4a d1 1a 4c e7 48 29 64 93 f1 ad f2 27 d8 7a 19 ff e2 9c 2a 22 ec 36 d6 4b 32 54 ee ed 2d cb 1e 9f 5e e8 99 11 d9 3b a0 57 95 6e dc 92 9b 95 bf 78 5c 3f 6e ee ee f6 c3 15 ae 8b 5f 05 2f 04 a9 a3 5e 75 51 64 45 af 01 61 08 57 49 7c 6b a7 5c bb d3 e5 3f ae fb d3 d1 36 90 fb bf b3 28 77 9b ab f1 1d d1 74 9c e2 22 01 41 ec 1c a9 11 9d 70 20 4b b9 4e 5b d1 b8 fc 71 82 4b 4c 71 66 ce 16 94 92 bf 78 e3 36 88 c4 e5 b2 e3 6f 74 d5 0f c6 15 e2 01 0a 7b 6a 0f a4 c2 a5 3b b8 45 fe 94 39 69 d8 ec 80 d1 91 92 2e ea 18 17 ae 63 ba 86 ed 38 d7 96 f6 3d 9c c6 51 4b 4b 69 9d cf 28 86 b2 25 b5 6b 54 1f f8 5c 7b 9f e1 f7 33 e4 b3 76 8d 1b de 09 d6 40 9b f9 6a df 48 21 b8 54 90 29 9f ce 2c 72 c3 d5 0d 0a 9e 15 1f a6 c8 c9 8c f5 45 79 bd 2c a7 97 e6 f3 f2 5c fe 77 5a 40 7b 2e 3f 2b 81 6d 5a 8a 19 82 d2 f4 2b 04 ba 24 1a a1 96 68 84 7a e0 63 7b 14 db 1f 43 f5 b3 97 ac db 2f 26 ae 41 f5 4f 9b f7 8b 68 a6 af bd 22 da a0 f1 bd 20 08 51 6c 3c fe 07 48 6f 97 a9 d9 0a 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 2faVn0}NZI^_qZ0mQO0s'<CJT3pYx) ,H9)E_cg8+#g"DXsm$?v3@ybd@9T0j>.b2O:"OR~>;b=>`JVpY)8a>u1GTuwX(`G;7=-5uV^L%G_A'7W@86ug~yXmqqKOE4VMav%?3pIr}2`.X`+#Hg_EWKi]YV-1DSmvJLH)d'z*"6K2T-^;Wnx\?n_/^uQdEaWI\|k\?6(wt"Ap KN[qKLqfx6ot{j;E9i.c8=QKKi(%kT\{3v@jH!T),rEy,\wZ@{.?+mZ+$hzc{C/&AOh" Ql<Ho0
Jan 7, 2021 07:32:41.199291945 CET	477	OUT	GET /cache/wo/07b4b16172.js HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Jan 7, 2021 07:32:41.279203892 CET	524	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT ETag: W/"12672-0" Cache-Control: max-age=315360000 Expires: Sun, 05 Jan 2031 06:32:41 GMT Content-Encoding: gzip Data Raw: 34 33 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cd 7d 6b 77 1b 37 92 e8 77 ff 0a 49 a3 55 b3 c5 26 45 d9 49 76 86 74 5b eb 38 ce 24 77 e3 38 6b 7b ef 64 2e 45 cf 69 91 2d a9 63 8a cd b0 29 4b 0a c5 fb db 6f bd 00 14 d0 4d 3d 92 99 7b f6 9c c4 6a e2 51 28 14 80 42 55 a1 50 78 f2 39 5b 6c bd 29 cb 0f 65 39 ad d2 d5 e7 7c 51 15 e5 ac 1f 1d 76 0f 9f 46 eb c1 e9 e5 6c bc 84 84 ad dd 49 7e 5a cc f2 49 ab 3c f9 25 5e 2d f2 e5 e5 62 86 df db e9 e5 4c b2 e2 81 2e bf bc 99 e7 5c b8 38 6d 6d 7b d5 63 ae be 75 9a 4d ab 7c 00 d9 90 d8 3d 5f 5e 4c 5f 4f f3 8b 7c b6 94 fc 28 e7 9f d1 00 71 44 78 29 fe 53 9e 6e 41 79 ac 46 49 69 04 bf f2 f1 32 da db 43 30 b3 72 92 ff 98 5d e4 f1 aa ba 2a 96 e3 f3 96 49 fc 00 85 e3 d5 38 ab f2 ad c3 7e d8 00 25 3f 93 e4 d6 c1 f1 fb 83 b8 bb cc ab a5 ad fd bf b3 e9 65 1e 1f 45 cb fc 7a 89 bf a3 7e 74 75 5e 40 91 79 36 ce a3 c1 7a fd a4 86 cf ed ad fc 36 34 89 3c 9c c6 e5 ac 5a 2e 2e c7 cb 72 21 68 bd 5c 2c b2 1b 83 5a 86 3f 04 b1 77 f9 d9 eb eb b9 c9 59 e4 67 f9 f5 5c b2 5e 4d b3 aa 32 39 63 fc 01 c8 18 5c 98 52 dd 69 3e 3b 5b 9e 03 22 b3 cb 8b 93 7c 11 d1 88 60 06 e0 7f 61 68 3d 2e a7 d3 9c d1 34 23 32 ce 20 29 8f 2d 42 67 97 48 ac 8a 7a 2b 23 88 ad 78 a3 7e 91 2f ce f2 56 bc c2 11 bb 28 ae d3 15 64 96 8b 16 fe 2c d2 de a0 78 6e c1 08 5a 83 a2 dd 8e 57 a6 cc 7c 51 ce f3 c5 f2 66 ab 98 6d d9 92 c3 62 c4 00 b3 79 aa 13 87 a6 f4 88 26 c8 c5 3c 85 16 55 22 74 e3 62 be b7 c7 33 31 9b c7 7a aa 70 e2 85 4e 8c bd da a9 74 e5 62 9e 40 d5 41 0e 33 75 cb 2f 90 cd 15 21 20 0b e8 80 68 ec c2 0c c9 67 93 d4 d0 44 88 01 88 57 0e 7b c4 6d 1b 93 86 87 a3 98 b2 86 cb f3 a2 4a 28 a9 37 1a 0d 36 10 c4 96 87 42 1a 15 ce 51 7d 17 b4 a4 a8 41 6d 96 2d 8b cf b9 46 4d 0d 4e 32 4d eb 83 f3 7c ca 03 a4 e9 de 0d 7b 88 cd 56 fe 20 22 be 92 8c 5d c5 ce 75 e1 f7 b2 44 ba 13 9e a3 b8 29 31 a5 4a fc 3d 30 35 55 79 29 25 3d e9 9e e5 b3 7c 51 8c 09 03 60 3f 6b fc 2f c8 f3 d1 34 ac 6b cb a6 9e 14 b3 89 4d 6d 42 a9 9b cd e7 d3 1b 2a 97 d0 12 75 05 ba d5 b4 18 e7 b4 50 5a 96 42 c9 61 8c 9c d0 22 d2 fa 56 9a e2 da c9 fb e5 a2 98 9d 25 3f d2 62 8c d5 da 19 9f 7f d2 dc 75 7b 1b 7f dd de c2 3f 69 9a f6 7c ee 3a 2f c6 54 38 c1 8f dc 75 c0 e3 b3 47 f0 4f 9f 0b 78 95 17 d9 6c 52 5e b4 2e 8a 59 72 91 5d db ba 6f b2 e5 79 f7 74 5a c2 30 d2 a7 14 8b f7 5b 50 aa 03 a5 db 87 71 1b fe 04 7c be b8 c0 05 2f 30 66 f9 d5 d6 37 d9 12 52 80 fe cb 0f 94 e7 15 1f 4f f3 6c d1 c2 4a c8 f6 f0 07 16 2a 2f 97 92 36 a0 b4 ef 67 cb 7c f1 39 9b 9a 44 03 fd 72 3a 95 b9 fc f2 04 b8 67 36 5e ba e1 25 d2 21 b1 88 6a c0 78 90 87 c9 54 95 45 69 e0 e0 fe c1 60 fe 06 a3 5a 5e a5 88 b6 81 d8 ba a2 b4 98 f2 bf 29 c7 34 aa 7e 89 89 a4 c6 03 f3 d5 3d cf b3 49 6a 7f 41 df 65 2f ab be be f9 90 9d e1 8e d4 8a b0 4c 14 e3 7a e4 26 ba d7 73 a0 73 0a 03 6d 2b e6 d0 e9 4b a0 5f 8c 93 5f 4a bd 1c e3 34 fa f9 2d b1 a9 58 12 8b 3c e5 af a1 24 fc fc e6 87 ef 96 cb f9 bb fc d7 4b d8 b8 8e a2 22 ff 77 d8 a4 8a fc ab 68 94 c2 3e 93 33 0b 03 a8 b6 ad f1 79 31 Data Ascii: 437}kw7wIU&EIvt[8$w8k{d.Ei-c)KoM={jQ(BUPx9[l)e9\|QvFlI~ZI<%^-bL.\8mm{cuM\|=_^L_O\|(qDx)SnAyFIi2C0r]I8~%?eEz~tu^@y6z64<Z..r!h\,Z?wYg\^M29c\Ri>;["\|`ah=.4#2 )-BgHz+#x~/V(d,xnZW\|Qfmby&<U"tb31zpNtb@A3u/! hgDW{mJ(76BQ}Am-FMN2M\|{V "]uD)1J=05Uy)%=\|Q`?k/4kMmBuPZBa"V%?bu{?i\|:/T8uGOxlR^.Yr]oytZ0[Pq\|/0f7ROlJ*/6g\|9Dr:g6^%!jxTEi`Z^)4~=IjAe/Lz&ssm+K__J4-X<$K"wh>3y1
Jan 7, 2021 07:32:41.357778072 CET	648	OUT	GET /templates/biz_blue_ii/images/s.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Jan 7, 2021 07:32:41.436326981 CET	762	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: image/gif Content-Length: 44 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:30:04 GMT ETag: "2c-558f324f6bb00" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 07 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 00 00 00 00 00 2c 00 00 00 00 07 00 01 00 00 02 03 8c 61 51 00 3b Data Ascii: GIF89a!,aQ;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.3	49712	91.189.114.9	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:32:21.071573019 CET	41	OUT	GET /forum/clientscript/vbulletin_md5.js?v=370b4 HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Jan 7, 2021 07:32:21.150641918 CET	59	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: W/"25bd-558f3247ca900" Cache-Control: max-age=315360000 Expires: Sun, 05 Jan 2031 06:32:21 GMT Content-Encoding: gzip Data Raw: 64 31 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 a5 5a 69 73 db 46 12 fd 2c fd 8a 5e 6d d9 26 2d 92 9a c1 0d d3 d2 96 2c af 13 3b f1 26 6b 25 d9 cd a6 62 17 08 0c 49 58 20 c0 e0 d0 91 58 f9 ed db 3d 18 1c 04 61 91 e5 c8 87 88 c1 74 4f bf d7 c7 0c 1a 3c 79 7a 08 4f e1 1c de 78 d7 de a5 9f 86 eb 1c c2 d5 3a 12 2b 11 e7 5e 1e 26 31 24 73 c8 97 02 de 5d 9e c3 4b 2f f7 e0 52 f8 45 1a e6 77 23 78 1d fb 13 78 fb d2 84 b7 22 cb bc 85 20 4d 2f c3 85 c8 72 38 8f 16 09 4e 5a ae 46 e0 65 10 88 79 18 8b 00 c2 18 de bd ba 00 ae 6b 7c 42 93 7f 12 69 46 4b 68 13 0e 17 c9 fa 2e 0d 17 cb 1c 06 17 43 f8 de 2b 22 78 93 2c e3 2c c7 fb dc 75 5d 18 83 c6 98 26 e5 be 43 83 52 f0 93 38 4f c3 59 91 27 69 f6 0c be 4a c5 02 be 4e a2 7c 04 e7 71 90 8a 1b f8 46 ac 45 8a 97 3f 07 b1 97 8e e0 db 24 cb d1 8a bc b4 32 2b 45 d1 a8 22 0e 50 19 41 7c 71 f9 12 be 0d 7d 11 67 12 ca a5 10 b0 cc f3 f5 b3 93 93 b5 f7 71 99 ac c4 24 49 17 93 e2 ea c4 4f ef d6 f9 c9 2a 30 61 9e a4 b0 4a 52 81 d0 e6 c9 e4 90 c4 ae 5f 14 51 24 70 29 f8 91 48 79 06 38 6f e9 65 cb 41 18 af 8b 7c 94 14 39 fe 1a d2 cc 77 c2 4f 56 48 74 f0 0c e4 3d 38 85 b5 97 65 37 49 1a a8 81 79 28 a2 60 0a a5 0c de 5e 86 41 20 e2 72 98 16 3b 39 3c 3c 91 0e bc 48 e2 79 b8 28 52 6f 16 09 b8 f6 d2 90 3e 64 13 f8 39 29 60 e5 dd 41 2c 10 69 9e 40 7e 23 bc 2b 02 9b 09 ba 9c 09 64 71 b5 46 47 93 dc 0d 3a 8c 94 11 17 99 48 af 45 3a ce c2 40 8c 00 89 92 83 e8 47 f4 4b 9e 01 9a 78 45 de 5c 21 a7 e0 7b 19 2e 25 ad c1 95 61 29 6e 69 04 ad 65 53 80 93 a7 34 50 21 40 ba 56 5e 3e 01 86 de 8c 92 1b 91 d2 cc 29 70 bc 2c d6 eb f2 12 d4 8f 52 37 b3 8c b5 17 00 aa 3b 3a 9a 92 ba 19 ce 19 5b 06 d0 a8 bf f4 52 cf cf 45 3a 81 a3 d3 23 e9 0d 72 ac 9f cb 38 23 68 51 e8 c5 be 68 d4 f9 cb 34 fb 1d 48 9d 53 5a 37 0b 11 0f 2e ad 18 6f 69 74 d0 aa f3 cb 8b d7 af d1 40 0b 3f ff 18 87 7e 12 88 da 3a 45 fd 0f 92 4c 0f 63 80 28 9a 17 b1 4f 69 93 c1 5d 52 3c 89 22 28 b2 c2 8b a2 3b b8 f1 e2 9c 28 f7 f1 4a 89 dd 41 ee 5d 09 69 71 bc 40 0d 8b 82 b2 2e 03 2f 0e 20 15 79 91 c6 20 42 19 ea 92 c2 b4 86 2e 62 32 24 50 92 99 a4 be 5a 98 e6 7e c0 90 1b 64 c3 3f 2a 2d b3 30 8e 34 1c 1f f8 18 aa e5 cd 3c d5 68 14 67 8d 20 9b 44 22 5e e4 4b b4 4a d2 33 1c 4e ef 1b 7d e8 80 5e 7d 38 fe 45 fa 70 6a af 3e 1c ff 22 7d 84 77 b9 f2 7c 29 77 25 b0 2e 05 58 a6 86 f0 19 f4 3d 53 87 53 e8 e0 dd ad af 46 bf 53 1f e1 dd ad af 46 ff 39 7d 55 a2 7b 91 5f 44 5e 5e 46 1b 15 5f ac cf 5e 8c d1 93 62 9a e3 e7 28 cc f3 48 8c b1 aa 60 e4 53 a2 06 d9 48 46 94 47 a1 0e 25 93 9b 11 53 b3 7e 3b a2 fb c3 c3 3f 0e 65 6a 78 98 92 28 88 89 16 50 80 a2 08 c0 ed 2f 38 03 ce ce c0 fc 15 3e 61 8a df 3a 0c 9e 3f 87 c1 80 04 e1 11 e8 da 70 2a a7 0d e4 10 1c 83 65 0c 71 fe 19 b8 43 9a 88 17 c7 c0 8d 5f 31 01 f1 f6 14 8b 18 95 2b 34 ee 14 80 db ba 66 3a 06 77 f5 a9 1a 9e e1 f0 58 b3 f1 86 ee d8 6e 35 ea d3 68 3d d9 a8 86 03 d2 51 4d 76 a4 6a 2c 08 03 ba 15 96 d5 28 84 e7 70 ab 82 89 ae 8e 4f 31 b3 b1 14 03 01 2e 95 Data Ascii: d11ZisF,^m&-,;&k%bIX X=atO<yzOx:+^&1$s]K/REw#xx" M/r8NZFeyk\|BiFKh.C+"x,,u]&CR8OY'iJN\|qFE?$2+E"PA\|q}gq$IO0aJR_Q$p)Hy8oeA\|9wOVHt=8e7Iy(`^A r;9<<Hy(Ro>d9)`A,i@~#+dqFG:HE:@GKxE\!{.%a)nieS4P!@V^>)p,R7;:[RE:#r8#hQh4HSZ7.oit@?~:ELc(Oi]R<"(;(JA]iq@./ y B.b2$PZ~d?-04<hg D"^KJ3N}^}8Epj>"}w\|)w%.X=SSFSF9}U{_D^^F_^b(H`SHFG%S~;?ejx(P/8>a:?p*eqC_1+4f:wXn5h=QMvj,(pO1.
Jan 7, 2021 07:32:21.150682926 CET	61	IN	Data Raw: 24 51 40 b6 78 d3 f6 08 99 31 db 18 21 13 fc 8d 11 5a 3d 90 8b 82 44 83 7c 7e 98 cf 07 1e 56 cf 11 f8 e8 c9 11 92 12 1e 03 fb 75 04 36 8c 60 6c 39 cc b1 2d 57 b7 86 a5 9e a0 11 c2 b9 b5 9c 14 e2 28 c4 35 14 d2 1d d7 b4 0c d3 a9 84 fc 46 a8 5c a3 Data Ascii: $Q@x1!Z=D\|~Vu6`l9-W(5F\B#YwmBaLI=@q2Lc9Ae)Tcn`\7at}Pq[8P8`hjHHtvCz`6g\|@F&Ms
Jan 7, 2021 07:32:21.150717974 CET	62	IN	Data Raw: 9c c1 2d 26 13 bb 7d 85 3f d4 7d 1b dc 35 97 55 ef 6c 55 4d 3c 2b 23 44 ce 6a 3e 93 9e f2 aa 45 d4 80 84 9e 3f 97 73 3e 95 73 5a 7a 6b 7a 5e 84 f9 4d 88 c5 32 4d 72 8a 7d 0f 74 4d b2 10 17 ab 19 bd 78 49 64 3a 44 62 9e 77 30 55 05 0e 27 62 1e c6 Data Ascii: -&}?}5UlUM<+#Dj>E?s>sZzkz^M2Mr}tMxId:Dbw0U'bG8tI]Xn^_4UW4%s(iw-9P;D\yt"X[y_)FeT/"pV+I7m,%-3.Y1!PI A'*k;gG
Jan 7, 2021 07:32:21.151460886 CET	65	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Jan 7, 2021 07:32:41.126620054 CET	474	OUT	GET /pictures/minimalizm.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Jan 7, 2021 07:32:41.204521894 CET	496	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: image/jpeg Content-Length: 8687 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:30:02 GMT ETag: "21ef-558f324d83680" Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 5c 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f9 fb fe 09 53 61 6b a8 fe d1 5a a2 5e 5b c5 3a c5 e1 ab 99 51 64 40 c0 30 b8 b7 c3 0c f4 23 d6 b6 8e cc e6 92 bd 58 df cf f4 3f 58 25 f0 17 83 2e 2f 8e a5 3f 84 f4 69 6f 1b 19 b8 7d 3e 16 94 e0 00 3e 62 33 c0 00 0f a0 a9 76 2b d8 d3 6e ee 2a fe 86 57 c4 0d 0f 46 b2 f0 bd ee a1 6d a3 d9 c5 73 e7 db bf 9c b6 e8 1f 73 4e a0 b6 e1 ce 48 77 e7 fd a6 f5 34 45 6b 74 2a d0 4a 0d a4 78 bf ec ce d2 0f 1e c9 e5 bb 03 f6 3b 8e 87 1f f2 d2 b9 29 fc 47 41 f4 a6 bb e1 7d 27 c5 11 47 0e bd a7 2d d7 93 9f 2a 42 c5 65 8b 25 4b 04 91 48 65 0d b5 43 00 40 60 30 72 38 ae 84 da d8 99 45 4b 73 cd bc 49 f0 5f 51 46 37 5a 54 8f a8 e0 e4 48 59 61 bc 56 fe f1 23 11 c8 4b 33 31 61 b1 82 aa aa 83 53 25 19 79 32 39 25 1d b5 47 31 65 75 ae 78 79 da da ee 36 b9 b6 80 85 75 74 31 c9 07 1c 07 42 33 19 c1 5e 08 e0 74 04 9c d2 bb 8e e2 3a ad 3e fe c3 54 8b 7d ac a0 9e e8 78 61 d3 b7 e2 29 dd 14 89 cd ba 83 91 50 cb 42 79 1e d5 2c 63 4c 55 25 a1 04 6b 41 43 4c 7d ea 5e 85 a2 26 8b af 15 9b 2c 67 92 7d 2a 1b ea 1d 00 40 73 80 2a 5b 1a 57 25 4b 42 47 20 d6 4e 46 aa 20 f6 2c 47 dd 35 37 63 e5 21 6d 3c ff 00 74 d1 70 e5 2b 4d a7 31 e4 29 a5 70 71 33 6f 2c dd 14 8d a6 9d c8 71 33 7e ce cc d8 da 68 bb 26 c3 9b 4f 76 19 d8 68 e6 1f 29 5d f4 d9 07 45 35 4a 64 38 91 ad 83 86 00 03 cf 6a d1 4a e4 b8 9f 9a 7f b0 67 85 bc 63 e2 9f 8b 3a 9d bf 81 a2 92 4d 4e d3 45 96 e9 44 53 ac 2e 15 67 87 25 59 99 46 72 47 7c d7 Data Ascii: JFIFCC\}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?SakZ^[:Qd@0#X?X%./?io}>>b3v+nWFmssNHw4EktJx;)GA}'G-Be%KHeC@`0r8EKsI_QF7ZTHYaV#K31aS%y29%G1euxy6ut1B3^t:>T}xa)PBy,cLU%kACL}^&,g}@s*[W%KBG NF ,G57c!m<tp+M1)pq3o,q3~h&Ovh)]E5Jd8jJgc:MNEDS.g%YFrG\|
Jan 7, 2021 07:32:41.204572916 CET	497	IN	Data Raw: ae ef ca ec 79 b2 d6 ac 57 a9 f7 9e 9f f1 57 e3 bf c3 8f 13 c5 3f 8b fe df 25 ab c6 23 7b 0d 5e d5 d4 3e dc e5 a2 93 2b 92 72 09 63 bc e5 57 04 2e 54 e2 e6 d6 e8 d9 46 49 de e7 a9 5e 7e d0 3e 15 f1 a7 85 ae 34 9b db 1b ad 2a fe 49 20 60 ac 7c e8 Data Ascii: yWW?%#{^>+rcW.TFI^~>4*I `\|HIb;TP:(4kg#$uO5>^+rP4-#\UW1SXdGCh(o{9"RzF=~`SZ-jeZ;A{0kQjq@
Jan 7, 2021 07:32:41.204624891 CET	499	IN	Data Raw: c9 57 57 05 78 c8 52 46 7a 53 e5 b4 5c e5 a2 4d 7e 3f f0 6c 87 2a ce 36 b7 5b fc bb 7d ea ef fe dd 67 94 7c 59 f8 83 ae 7c 7f f8 63 6f a5 fc 40 f0 0e 85 6d 05 c6 bd 35 86 9d 25 ac b2 25 cc 0d 03 4e b2 dd 46 ce e4 28 dd 6e b1 05 28 c5 8d c2 af cb Data Ascii: WWxRFzS\M~?l*6[}g\|Y\|co@m5%%NF(n(MF<u((oo<{o8<KxV^.c}Ku.(Z}X03ejvsDBIW}m'm,isogz0yTrI?6zXU)A}{eYZZ-K2Q:d01
Jan 7, 2021 07:32:41.204685926 CET	500	IN	Data Raw: ef 18 38 0c c4 64 0c 9e 15 89 27 d0 d1 cb 0a 71 ec 66 ea 4a ac b9 9e ac e5 f5 fd 37 e1 a7 89 61 be 7d 56 fc 4d 1c 68 1a e2 49 22 68 cb 2f 38 c3 6d 05 fa 1c 01 9e 01 ed 45 48 53 7f 1f 4d 4a a5 5a b4 2e a9 3f 89 59 f9 ab ad 3e f4 8a 76 56 7f 0e 75 Data Ascii: 8d'qfJ7a}VMhI"h/8mEHSMJZ.?Y>vVuE}nP"m3c#8bDhZ3I\|<<Wq/r+<xt$2-n9!Q)u[5#?k\|QB*x TI1B5%QCKH
Jan 7, 2021 07:32:41.204796076 CET	501	IN	Data Raw: 79 cf b0 1d 98 e7 f3 3e f4 8d e1 1e 49 24 fa 9f 75 fe c8 ff 00 19 75 ab 5f ec ff 00 86 7e 32 9d a5 b0 f9 61 d1 6f 67 6c 34 0c 31 b6 d0 b1 e1 90 f4 8f 27 2a 7e 41 90 51 53 d1 c0 e3 35 f6 33 f9 7f 97 f9 1f 29 c5 7c 3c a3 07 98 61 96 df 1a ff 00 db Data Ascii: y>I$uu_~2aogl41'*~AQS53)\|<a~.ltxZX,$~=\52##)q+'t~uBjW.xS\\|U}RS[9mkBpcId#;Rox_(N^mL^`7K0Cel^>;5M&
Jan 7, 2021 07:32:41.204844952 CET	503	IN	Data Raw: e7 3b 7e b5 35 2b 72 55 70 5d 0c a3 49 ce 0a 4d b3 23 c4 fa 5c de 1e bb d2 f5 9b 7f 12 df e6 69 85 ad cd c9 28 b2 47 19 e7 2a 02 e1 be 50 fc 10 79 db f5 0a 55 b5 4d 03 a4 d2 dc f2 cf 1a 7e d5 3f 02 bc 2f 71 71 68 9f 19 3c 63 af dc c1 33 c1 3c 3a Data Ascii: ;~5+rUp]IM#\i(G*PyUM~?/qqh<c3<:]NlI28(#FGLEz9A_Z<9{u #y=y`Kj=Nxu/.,5bn$#y'C@<yeD cvA)
Jan 7, 2021 07:32:41.205360889 CET	504	IN	Data Raw: da 29 65 86 e3 4f b5 93 19 93 71 e3 d8 e3 3b 4f fb d8 aa f6 10 5f 13 30 78 a9 d5 f8 21 fa 9f 48 7c 3f fd 82 b4 0f 0f dc c7 a8 f8 b9 2c b5 6b 8f 2c ab 0b f6 92 4f 2d f3 c3 aa c6 e0 12 07 40 5c 8f 50 7a 50 dc 63 b0 e3 46 b4 be 37 a7 f5 d1 1e f3 a0 Data Ascii: )eOq;O_0x!H\|?,k,O-@\PzPcF7\|}MF{KXPId0=+F41avf8sQ&aX7G?J:+MtL+Z`$$Riv[]ae&koQ3Y
Jan 7, 2021 07:32:41.211042881 CET	520	OUT	GET /pictures/otdelka_komnaty.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Jan 7, 2021 07:32:41.288845062 CET	599	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: image/jpeg Content-Length: 10308 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:30:02 GMT ETag: "2844-558f324d83680" Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 70 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f0 24 e3 34 9a 02 55 3c e2 a4 b2 55 26 81 13 c4 a7 ad 00 4e a3 38 a6 32 74 15 0c 09 d1 28 02 64 8c d3 b0 16 52 32 4e 05 16 b0 8b 31 c7 d2 a4 92 74 84 d0 3f 42 cc 50 9c 8a 7d 07 b1 72 38 78 e9 40 cb d0 5b 64 e4 0a 96 c4 5f b7 b7 3c 67 9a 40 d1 a7 6f 6f d3 da 80 b1 a9 6f 10 07 bd 31 d8 d5 b7 5d a0 52 1d b4 2f c4 e4 77 a2 e3 48 b2 b2 1c f7 a5 7b 15 62 51 27 5f 53 4b 98 2c 38 4b c7 2d 52 e4 ca b1 13 c8 7d 73 53 cc 55 88 1e 4c e7 07 ad 43 63 4a c5 69 01 7c f5 a9 19 f2 3a 42 c4 57 a6 71 93 2c 2c 3f 86 a5 a1 a2 45 85 97 ef 0a 43 2c c7 19 f4 a6 80 99 23 23 19 14 9b 02 74 8f da a4 0b 31 c6 7d 29 d8 0b 31 c2 7d 29 81 62 38 49 e8 28 62 65 a8 61 38 e5 6a 6e 24 5a 48 b3 da 9e c5 16 e1 83 9e 94 bc 86 cb d0 5b 67 b5 21 1a 16 f6 d8 e4 8a 96 22 fc 56 e7 19 03 34 5d 0c d0 b7 81 b0 01 1c d2 b8 1a 30 5b b7 71 49 b1 97 e1 88 8e d4 ee 8a b1 61 23 39 1c 51 71 a2 68 e3 3c 54 39 0e c4 a2 26 1d 38 a8 73 2d 21 7c b3 8a 97 52 e5 24 31 a2 62 38 cd 43 98 ec 42 f1 3e 7a 73 50 ea 22 94 6e 24 76 ee cc 14 29 e6 a3 da 87 29 f2 04 69 9e 09 23 af 46 35 eb 9c 45 b4 07 69 0a e4 1e c4 9c e2 98 16 13 21 40 f3 18 fa e4 0e 7a 7f f5 ff 00 cf 59 b3 19 61 15 b6 f5 52 7e 98 f4 fa fb fe 43 d7 81 8e c8 b1 1e ee 01 8d 79 c7 21 ba 7e 74 82 c5 a8 d0 12 73 13 60 1c 64 60 f6 fa e7 b5 02 b1 6e 18 e3 62 00 57 04 9c 0c a1 19 3f 95 01 62 c4 50 c2 ff 00 76 64 3d 71 f3 0e d4 ee 2b 32 dc 76 bb 46 40 24 7b 52 13 27 8e 21 d2 Data Ascii: JFIFCCp}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?$4U<U&N82t(dR2N1t?BP}r8x@[d_<g@ooo1]R/wH{bQ'_SK,8K-R}sSULCcJi\|:BWq,,?EC,##t1})1})b8I(bea8jn$ZH[g!"V4]0[qIa#9Qqh<T9&8s-!\|R$1b8CB>zsP"n$v))i#F5Ei!@zYaR~Cy!~ts`d`nbW?bPvd=q+2vF@${R'!
Jan 7, 2021 07:32:41.288882971 CET	601	IN	Data Raw: 9d ae 49 66 38 87 a5 50 d1 7a de dc 1a 99 68 ca b9 a5 6d 6c 0f 3f d2 b3 93 b0 1a 76 f6 79 ed 53 70 46 9d b6 9f bb 04 0c 9a 45 58 d5 b7 d3 ba 7c b4 58 76 34 21 d3 09 e8 9f a5 0c 76 1d 7b 1d b6 95 6b 25 ee a1 73 0d b5 bc 43 73 c9 33 84 55 1e a4 9a Data Ascii: If8Pzhml?vySpFEX\|Xv4!v{k%sCs3U2H~)ql5vC)*91i'PNce ~ V+q{Xp9JIh~MM98JJ(hx3n23ojo]I6meY_a{jW8lwvH
Jan 7, 2021 07:32:41.300355911 CET	626	OUT	GET /templates/biz_blue_ii/images/header.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Jan 7, 2021 07:32:41.382627010 CET	706	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: image/jpeg Content-Length: 48923 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:30:04 GMT ETag: "bf1b-558f324f6bb00" Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 05 70 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1b 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 8d 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 20 57 69 6e 64 6f 77 73 00 32 30 30 37 3a 31 30 3a 33 31 20 31 36 3a 31 31 3a 32 34 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 02 ee a0 03 00 04 00 00 00 01 00 00 00 40 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 00 01 26 01 28 00 03 00 00 00 01 00 02 00 00 02 01 00 04 00 00 00 01 00 00 01 2e 02 02 00 04 00 00 00 01 00 00 04 3a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 0e 00 a0 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 05 ac a5 a4 d8 f6 56 1e d2 cf 4d c6 26 03 0d 87 f3 1d f9 de 97 fd fe da 3f 4a 9a c7 61 59 6b 83 2b a2 f7 d4 0e f8 00 12 1f fc d6 d2 d6 3d de ef f0 4d dd b3 fa e8 b4 3c 8b 76 ec 74 97 b6 1c 03 49 00 39 db b6 0f 56 bf a4 ef a5 fe 0f fd 27 e6 22 b4 34 87 0c a2 07 b1 f0 e1 e6 75 f6 b7 f4 9e df d2 7f e8 8f f0 ca 63 bf d5 84 6c d5 60 a0 39 f4 b1 81 b6 b4 02 c6 96 82 d8 96 d2 ed cc 6b 36 6f 7d bf c8 b3 fe b4 a7 69 c5 b1 ac 1f ab d8 ca 8e da 6b 71 6c 0a e5 ce 77 d1 1f cd 5b fa 27 7f 21 9e 9f e9 7f 4a 8d 73 1d eb 92 6c 97 00 43 85 81 e1 85 b2 fd ce f7 b5 df db db fe 0f fa 3f e8 91 6a 65 1b e4 d8 d8 6b 9d 01 cd 25 ae 10 ed 9e a6 Data Ascii: JFIFHHpExifMM*bj(1r2iHHAdobe Photoshop CS Windows2007:10:31 16:11:24@&(.:HHJFIFHHAdobe_CMAdobed"?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?VM&?JaYk+=M<vtI9V'"4ucl`9k6o}ikqlw['!JslC?jek%
Jan 7, 2021 07:32:57.803250074 CET	1719	OUT	GET /banners/click12.html HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:32:57.973603964 CET	1725	IN	HTTP/1.1 303 See other Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:57 GMT Content-Type: text/html; charset=windows-1251 Content-Length: 0 Connection: keep-alive X-Powered-By: PHP/4.4.9 P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM" Location: http://perviyshkaf.ru/garderobnye-komnaty.html
Jan 7, 2021 07:32:59.348146915 CET	1733	OUT	GET /banners/click17.html HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:32:59.498155117 CET	1737	IN	HTTP/1.1 303 See other Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:59 GMT Content-Type: text/html; charset=windows-1251 Content-Length: 0 Connection: keep-alive X-Powered-By: PHP/4.4.9 P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM" Location: http://perviyshkaf.ru/3d-konstruktor-shkafov-kupe.html
Jan 7, 2021 07:33:13.361663103 CET	2013	OUT	GET /forum/index.php?s=8848772e8198313ee133bfa7158b7b6c HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:13.495953083 CET	2015	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:13 GMT Content-Type: text/html; charset=windows-1251 Content-Length: 12631 Connection: keep-alive X-Powered-By: PHP/4.4.9 Set-Cookie: bblastactivity=0; expires=Fri, 07 Jan 2022 06:33:13 GMT; path=/ Cache-Control: private Pragma: private Content-Encoding: gzip Data Raw: 1f 8b 08 00 00 00 00 00 00 ff ed 7d 6b 73 1b d7 99 e6 67 b9 ca ff e1 04 a9 18 a4 45 dc 79 05 09 ba 2c 99 f2 28 65 3b 59 4b de d9 2d af 8b d5 00 9a 40 9b 00 1a e9 6e 90 a2 ed fc af 7c 9c d1 7a 2a 53 aa c4 8a bc 99 9a fd 32 55 20 45 58 20 48 34 41 30 b2 ec 92 62 ce f3 9e 4b 77 e3 46 81 14 65 71 56 2b 27 44 5f 4e 9f eb fb 3e e7 bd 9d 73 96 7e f1 de 6f ae df fe 9f bf 5d 61 45 a7 5c 62 bf fd e4 da 07 37 af b3 50 24 16 fb c7 d4 f5 58 ec bd db ef b1 ff f1 0f b7 3f fc 80 25 a2 71 76 db d2 2a b6 e1 18 66 45 2b c5 62 2b 1f 85 58 a8 e8 38 d5 74 2c b6 b9 b9 19 dd 4c 45 4d ab 10 bb fd 71 ec 0e e5 95 a0 8f e5 65 c4 09 7c 19 cd 3b f9 d0 f2 9b 6f 2c f1 12 ef 94 4b 15 3b 33 24 9f c4 c2 c2 82 f8 3c c4 f2 86 95 09 95 1c 2b c4 4a 5a a5 90 09 59 35 91 81 ae e5 91 d1 95 a5 5f 44 22 ac 62 b2 9c 96 2b ea ac 88 a7 ba 65 b3 48 84 bf 2b eb 8e 86 c6 39 d5 88 fe bb 9a b1 91 09 fd d6 d2 0a 65 2d c4 72 66 c5 d1 2b 4e 26 54 31 23 fc cb 10 8b 0d ff 62 e5 4e d5 b0 74 3b f0 49 24 31 32 f1 75 aa 44 e4 3a 32 b7 cc 52 e0 93 fe 52 a8 ce 7a 25 3f 7e bd 29 4b d4 37 72 7b ab aa 07 f2 75 f4 3b 4e 8c ba 72 91 e5 8a 9a 65 eb 4e 66 d3 a8 e4 cd 4d 3b 92 48 ce c8 7a 2e f1 5e a8 68 65 3d 13 2a e8 15 dd d2 1c 13 bd e9 75 c1 c6 b5 5a a9 a4 3b 46 85 a5 a2 73 18 e9 6b d4 69 d3 a2 8d 18 a9 c0 d7 eb fa d6 a6 69 e5 83 9d 71 bf d1 69 1c ee d7 db cd 8e bb d3 aa 4f b1 4e e3 c0 6d 77 59 6b a7 de e9 36 3b 53 6c b7 f9 a8 be d7 66 cd 76 b7 d1 79 d6 40 a2 29 e6 76 77 1b fb 94 f6 d0 3d 68 fc d8 68 37 f7 a6 d8 9f 1a db 8d fd 67 53 ec 87 56 fd 6f 4f 59 eb f8 b0 81 4f 77 1a 9d 26 92 b7 da 48 bb db e8 1e b5 9a 78 da 3a 7e dc c6 d3 96 bb d3 79 4a 3f ed dd e6 f7 4d b7 dd a0 bb a3 c3 fa fe 33 7a fb 43 d7 a5 fb 43 77 9f ff ed ba fb 2d 3c 3d aa a3 16 f8 9a ca fe 9b db 39 3e 10 6d 0c b6 30 af db 39 cb a8 12 99 07 7a a8 b7 91 ac f9 fc 56 22 8d 6c a6 df ca e8 cf dd ca 68 34 1a 6c e7 9b 6f 60 34 89 f2 ae df ba c5 6e 39 5b 25 dd 2e ea ba 23 78 65 c9 a6 07 cc 01 7d 65 42 9c ac 72 36 c6 d9 c8 67 42 1b 59 49 1f ab f4 88 98 17 99 bc f9 46 ec 6d 16 a0 1c 9e e9 0d d3 12 19 b3 f0 7b fa 9a 56 2b 39 e2 36 cc 26 78 f6 46 3e cd 12 93 ec ed d8 9b 6f 64 cd fc d6 9b 6f 7c 09 06 ce 6a b9 f5 82 65 d6 2a 78 f9 cb 95 04 fe 4b 2e e2 71 ce 2c 99 16 9e c4 f9 3f 7a b2 06 1e c0 f7 f1 aa c3 36 74 2b af 55 b4 29 46 f4 bc 81 df 52 2d 67 e4 f1 1b 16 17 ac 00 cc c9 eb e1 29 a6 59 86 56 9a 02 2e 94 36 40 e2 39 24 b1 81 63 11 5b b7 8c 35 ca b4 ac 59 05 a3 92 66 33 d5 3b 94 75 e0 0f bd ad 6a f9 bc 51 29 a4 19 de e0 fe f7 6f be a1 a5 4b 46 65 7d 8a 51 fd 57 35 ba 16 ad 50 d5 4d e2 df c2 75 95 76 c3 00 64 ea 79 95 5c de 9e f6 45 d1 44 db 50 ed b4 96 73 8c 0d 5d 7d c9 1f f7 7e 77 e3 c6 f4 74 3c 2e 4a 8a 56 b5 82 3e a4 3b 6f f0 7f d4 12 55 3f af 3b d1 16 07 15 73 8a 53 ac 8a fe 33 c4 d7 2f a3 8f 51 52 d4 c9 02 37 74 6b 48 15 df 4b bc 87 31 1f 5a c5 2b e2 23 8c 39 c6 c5 36 4b 46 1e e4 70 2d b1 30 2f fb 37 ea e4 34 67 48 96 f3 b3 0b d7 ae dd 60 35 ab 34 61 94 d1 31 76 0c e4 90 37 80 9f fe d5 2a 7d 1b 2d 18 6b 93 cc d2 ab ba e6 44 ee 30 c7 Data Ascii: }ksgEy,(e;YK-@n\|zS2U EX H4A0bKwFeqV+'D_N>s~o]aE\b7P$X?%qvfE+b+X8t,LEMqe\|;o,K;3$<+JZY5_D"b+eH+9e-rf+N&T1#bNt;I$12uD:2RRz%?~)K7r{u;NreNfM;Hz.^he=uZ;FskiiqiONmwYk6;Slfvy@)vw=hh7gSVoOYOw&Hx:~yJ?M3zCCw-<=9>m09zV"lh4lo`4n9[%.#xe}eBr6gBYIFm{V+96&xF>odo\|jexK.q,?z6t+U)FR-g)YV.6@9$c[5Yf3;ujQ)oKFe}QW5PMuvdy\EDPs]}~wt<.JV>;oU?;sS3/QR7tkHK1Z+#96KFp-0/74gH`54a1v7*}-kD0
Jan 7, 2021 07:33:13.520590067 CET	2028	OUT	GET /forum/images/buttons/collapse_tcat.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:13.599045038 CET	2030	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:13 GMT Content-Type: image/gif Content-Length: 642 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: "282-558f3247ca900" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 0f 00 0f 00 e6 00 00 7b 92 ba 62 81 b5 75 8d b8 4e 6e a5 73 8c b7 49 67 9e 66 85 b9 3f 5b 8d 63 7f b0 50 6f a7 85 9a bf 36 4e 77 64 81 b1 5f 7d af 55 74 ab 53 71 a9 33 49 71 c7 d1 e2 f2 f4 f8 33 4a 72 cf d7 e5 9b ad ca 4f 70 a8 66 82 b1 66 82 b2 7c 93 bb cd d6 e5 9d ae cb 82 98 bd 83 98 be 84 99 be 68 83 b2 69 84 b2 7d 9a c9 9a ab ca 49 6a a4 78 90 b9 fc fd fd f1 f3 f7 c6 d0 e1 81 97 bd 3d 58 87 69 83 b3 7d 94 bb 69 83 b2 51 70 a8 cc d5 e4 f4 f6 f9 86 9b bf 6f 89 b6 51 71 a9 3d 55 89 28 3e 68 51 71 a8 8f a0 c2 7e 8d b1 55 73 a9 38 51 7c 57 76 ab 32 4d 83 ce d0 d8 34 4d 79 5a 7a b1 59 78 ac 31 4a 81 74 93 c3 86 a2 cd 39 50 87 6e 87 b4 48 61 95 53 71 a7 b4 bd cd 68 85 b7 53 72 a9 a7 b9 d7 d0 d9 e8 dc df e7 bb c4 d4 4f 6f a8 92 ab d3 21 33 5d 99 9e ab c9 d2 e2 dd e3 ed 49 69 a1 70 8f c0 31 49 77 7f 96 bc b0 c1 dd 23 3c 77 78 87 aa 72 82 a2 ec f0 f6 ef f3 f9 42 5e 91 21 37 6a 27 3c 6d 7c 97 c5 51 72 aa 2f 49 7a 2b 46 80 7f 93 b8 e7 eb f2 e9 ed f4 5e 7e b4 95 a8 ca f1 f4 f9 b8 c9 e3 35 4f 81 8a a6 d0 68 83 b3 5f 7c ac 46 62 91 43 62 98 6a 84 b2 60 7f b1 3b 54 82 72 91 c2 34 48 7a 85 a1 cb 29 3f 6e 2f 49 81 38 53 84 68 84 b3 69 84 b3 6e 88 b5 3a 53 89 ff ff ff 21 f9 04 00 00 00 00 00 2c 00 00 00 00 0f 00 0f 00 00 07 df 80 4e 16 09 16 0d 31 00 0a 00 31 0d 09 84 4e 35 2d 0e 02 15 1a 26 7f 26 14 1b 02 0e 2d 32 0f 3f 28 11 6a 6b 4f 21 77 4a 5c 11 28 3a 0f 38 19 27 53 6d 21 55 7f 6f 73 01 4b 27 02 49 17 22 5d 42 41 01 7f c3 70 03 46 67 22 18 24 2e 58 75 68 c3 13 c3 07 71 36 2e 24 1c 12 61 06 d0 13 39 c3 7a 45 12 1c 30 25 06 3e 05 74 0b 7f 5e 29 0b 56 40 25 0a 1d 12 48 62 54 71 c3 7f 29 07 3b 33 e2 00 1a d2 8c 18 01 6d 18 1b 32 37 34 00 e8 53 c1 4c 81 61 10 20 f4 18 06 86 49 05 22 08 ae 44 90 e2 07 0f 8d 31 79 be 40 89 d2 04 00 02 06 7c 3a 44 60 b2 c5 4e 96 21 5a 78 1c 29 f3 81 01 06 0c 20 32 6c a0 f0 e2 cf 8b 4c 19 e4 5c b8 c0 42 85 0a 37 04 56 78 80 e1 61 05 81 3d 20 3e b0 08 04 00 3b Data Ascii: GIF89a{buNnsIgf?[cPo6Nwd_}UtSq3Iq3JrOpff\|hi}Ijx=Xi}iQpoQq=U(>hQq~Us8Q\|Wv2M4MyZzYx1Jt9PnHaSqhSrOo!3]Iip1Iw#<wxrB^!7j'<m\|Qr/Iz+F^~5Oh_\|FbCbj`;Tr4Hz)?n/I8Shin:S!,N11N5-&&-2?(jkO!wJ\(:8'Sm!UosK'I"]BApFg"$.Xuhq6.$a9zE0%>t^)V@%HbTq);3m274SLa I"D1y@\|:D`N!Zx) 2lL\B7Vxa= >;
Jan 7, 2021 07:33:13.609754086 CET	2031	OUT	GET /forum/images/statusicon/forum_old.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/forum/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.2.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b; hotlog=1; fid=6123ba1a-1144-4046-8498-22475292c4e5; _ym_uid=1610033562904336694; _ym_d=1610033562; __gads=ID=2f73a3bf8c30b1b8-2203e9497fb9009e:T=1610001162:RT=1610001162:S=ALNI_MbMvnvb1c7kM3ISxXhpfMDojwawjA; _ym_isad=2
Jan 7, 2021 07:33:13.688694954 CET	2039	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:33:13 GMT Content-Type: image/gif Content-Length: 1628 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: "65c-558f3247ca900" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 1d 00 1e 00 f7 ff 00 cd d2 e7 ea eb eb 3d 59 b4 d9 da e1 c6 c6 e3 b2 b2 bb d1 d1 ef 62 86 e9 b0 b0 ca 9b a6 c3 ae ae c8 73 76 84 b5 b5 cd b6 c4 e8 bd be d6 d5 d3 d1 95 97 a6 e3 e1 f5 95 9e c7 93 95 98 5f 70 b9 cb cc c9 85 95 bd d2 d2 f1 c4 cb e3 ff ff ff a3 a3 ad d5 d1 e3 1e 2e 6f da db dd b2 b2 cc a4 ac d3 62 74 b9 c1 c2 c4 cf d0 d9 aa aa c6 cd cd d6 e1 de f1 52 72 cb ac ac c6 4d 6b c2 76 95 e9 91 9d bc b8 b8 d0 b1 b3 c2 ca c9 e8 bd be db ac ac b4 a5 ad c5 c4 c2 d4 f0 f1 f1 a7 b1 d5 68 6a 6e c9 c9 d1 5f 82 e2 f9 f9 f9 63 74 b6 cd ce d9 6a 85 cd ab b2 c6 c0 bf c7 5a 7c dc 8c 9a c3 cc cc ea b6 b6 d1 70 7e ba a1 aa ce 2f 30 33 c9 ca d4 c5 c4 d9 8d 9a bb 9b a4 ca d2 cf e3 87 89 96 e6 e4 fb d4 da ed 7d 89 c1 d5 d5 f2 76 81 bc aa ae ad b2 bc db e2 e3 e6 ca c8 d7 c2 c2 c9 c6 c6 cd f7 f6 f3 c9 c9 e5 dd dd f6 ae b1 b8 6c 79 ba 56 6c bf 67 86 db 69 7b a9 59 76 cb 6d 81 b4 72 83 ac 7d 81 89 84 90 c5 c9 c6 db cf cf ee 64 7a be d8 db ec df e2 f2 4e 67 bc b9 b5 c8 44 62 c2 41 5c b3 ca ca de d7 d9 dc 4a 6a c9 bd be c7 ba ba d2 ba bd c9 c5 c4 c8 c0 c0 d9 d5 d6 d8 b7 b6 ca 4d 64 b4 da da f5 ab ab c5 d3 d3 ea d2 d4 da e6 e7 e9 ce ca df c6 c3 db d2 d2 d9 47 64 bb 54 74 d0 cc cd cf b0 b0 c8 fc fc fc 61 7d c9 b5 b2 c8 9d a7 bf 96 a1 bb d2 d3 de bb bb d5 56 5a 5d 83 8a be dc d9 ed 44 45 4a cf cf f1 ca c8 db be bf c8 bd be c3 58 7a d7 b1 b1 cb 5f 6e b3 68 77 b9 ad ad c8 af af c9 cd cd eb ce ce ec df e0 e3 b9 b9 d1 e9 e7 e9 bc bb d3 a7 b8 e3 ef ee f1 a8 af bb d7 d7 f4 5e 65 93 c4 c3 ca 78 84 b2 b9 bb cc 6b 87 da da de ee c6 c9 dc e8 e9 eb fe fd fd ff ff f9 86 9f e0 b3 b3 cd 81 97 d1 b3 b3 cf d3 ce df c6 cf e8 cb cc d3 d2 d2 cd a2 a4 c8 92 a4 d4 6d 91 f1 ab ab c8 a8 af c7 ad ad cd f7 f8 f7 fe fc ff 93 a0 c2 a6 a5 c6 90 a0 ca 85 89 8c b6 b7 be 5b 7a cd 45 65 c8 4a 64 c1 7e a6 f7 c8 cc d8 8d 91 bf 5f 7e c4 41 51 8c e4 e7 e7 af ad c9 c4 c4 e0 c3 c3 cc c3 c4 c8 c4 c4 cd 87 93 aa fa fa fb c8 c9 cf 96 ac e2 b2 b0 ca c2 c2 dd da d9 f1 de df f9 d9 dd f0 b1 af c9 b1 b7 ca bb bb be f7 f8 f9 57 7b db 79 90 cb a2 aa c0 f8 f1 fe 5a 6d a5 85 99 cb bc c2 dc c7 c7 e2 ce cb e0 cf cc e1 b6 b9 c9 d3 d5 df 77 8b ba 74 92 df 7c 8a bc bb bd cd b8 b3 c2 bd c0 bf d8 d7 de b1 b0 ce ba ba c1 bb bc c2 5e 60 66 bb bc c6 99 a0 b9 65 83 d2 d6 d4 ea 6a 86 d6 6e 8a d8 56 68 b7 e3 e2 e0 bf bf cf dc df f0 da dd eb c5 c3 cc cd cd ee e1 e4 f3 21 f9 04 01 00 00 ff 00 2c 00 00 00 00 1d 00 1e 00 00 08 ff 00 ff 35 68 00 60 89 35 33 66 fe 29 5c c8 b0 a1 43 58 b5 6c 6c b3 b1 05 dd aa 68 9d 1a 60 28 b8 2f a1 43 87 e7 6a 4d 52 14 84 12 05 2d 67 84 a5 49 13 ac 4d 1b 13 5d 74 b4 a2 35 03 ca c6 25 a6 3c 5a 38 10 c6 db 86 0d af f6 38 e2 24 8d 97 84 62 8a 9c 64 a1 80 af 8e 1a 35 02 a2 aa a9 83 e1 df 4e 26 25 38 39 d8 2a 47 4e 91 22 62 1c 39 92 22 e5 55 89 45 f5 8a b0 c2 35 eb c8 96 74 ff 7c d8 c0 ca 49 ce 56 07 88 de bc d1 b4 a2 2f 03 71 d5 ae 28 c1 13 43 df ba 01 29 7c 58 9d bb 08 c8 5e be 9a f8 ae 88 cc 17 cf 15 3b d4 08 69 80 f0 ad c0 3d c5 16 6c 38 89 60 c5 8a 38 65 d3 ba e2 5d 01 04 08 27 3b 76 ae 14 31 f2 c5 8b 00 2e 3a 24 2c 76 a2 04 54 93 df 4d 2e 18 30 e0 8f 85 3a 52 e5 00 ac 39 a5 61 98 31 0e 0b 5e d8 3b f2 cf 48 8f 20 11 84 8f 19 83 e9 52 77 02 01 32 88 ff 1f ff c0 f6 31 59 f9 4a e9 de 75 3d 42 f0 0b c2 bb ff 68 11 c2 93 06 66 21 b0 64 40 55 21 d4 Data Ascii: GIF89a=Ybsv_p.obtRrMkvhjn_ctjZ\|p~/03}vlyVlgi{Yvmr}dzNgDbA\JjMdGdTta}VZ]DEJXz_nhw^exkm[zEeJd~_~AQW{yZmwt\|^`fejnVh!,5h`53f)\CXllh`(/CjMR-gIM]t5%<Z88$bd5N&%89*GN"b9"UE5t\|IV/q(C)\|X^;i=l8`8e]';v1.:$,vTM.0:R9a1^;H Rw21YJu=Bhf!d@U!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.3	49714	91.189.114.9	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:32:21.072288036 CET	41	OUT	GET /podelis.js HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0
Jan 7, 2021 07:32:21.150526047 CET	58	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Mon, 08 Jul 2019 19:03:12 GMT ETag: W/"b06-58d30188547a3" Cache-Control: max-age=315360000 Expires: Sun, 05 Jan 2031 06:32:21 GMT Content-Encoding: gzip Data Raw: 34 62 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 9d 56 6d 8f a3 36 10 fe 5e a9 ff c1 e2 a4 90 34 59 02 9b d7 5d 96 8b 4e 57 5d d5 ea da 93 ee 5a f5 c3 69 15 39 60 88 17 b0 91 6d 42 f6 aa fd ef 1d 1b 48 c2 12 f5 a4 6a b3 d8 1e cf 3c 33 cf e0 19 13 97 2c 54 94 33 f4 07 a9 3e 45 0c a7 8c 17 29 9e 0d 47 e8 9f 1f 7f 50 7b 2a 9d 88 e7 98 b2 20 e3 21 d6 8a ce 5e 90 78 6c 4f 6d bf bb 7f 31 77 64 b9 93 4a 0c 2f 45 94 45 e4 f8 29 1e da f7 d3 a9 3d 1a cf 46 df 37 77 27 57 01 c0 fc 64 dc 06 15 c4 38 93 a4 95 4a 92 91 b0 16 37 ec 6a 3a 07 2c 10 ec 81 1a 8d d1 b0 02 44 5e 39 09 51 5f 5a fd 91 de 0e ae 6c 0c b5 47 02 2e 90 b6 8c 78 58 e6 84 a9 b3 a3 da b0 2f 77 42 41 b0 22 9f 31 4b c8 19 43 eb da 76 13 06 2c 1c 45 8e aa 86 68 57 b0 29 88 2a 05 43 84 85 3c 22 7f 7d fe f5 3d cf 0b ce 00 5e 9b 68 ac 97 86 6e 29 b2 33 51 f9 2c 15 c9 4f 74 15 55 19 09 ae 60 9c 62 35 1a 1a 4e ab 6b a8 2b ca 9d 77 af 75 65 45 55 b8 47 97 de 42 0c cc bc 7b d4 84 6d ef 95 2a e0 5d 1f 52 ce 14 4e 15 71 44 39 95 7b 2c 88 53 ec 8b 8d 76 64 8f e1 e9 37 96 b7 3d cb aa aa 9c 18 87 64 c7 79 ea 84 3c af ad 45 6d de 35 9e f5 8c 15 04 a8 40 59 db ed 79 4e 36 52 61 55 4a 30 33 7c c7 36 ea 00 cc 7b 00 b1 a0 84 45 31 21 91 c1 d8 d4 89 3c 99 0f 7a 04 16 3d 88 90 33 06 c7 c0 81 e3 9b 9d d8 6f cc 73 db 33 5f 5e e5 9f d1 03 79 e2 20 c5 99 09 a3 2c 22 38 4e ce 2e cf 36 e4 00 6f a6 c6 80 70 a0 64 9e c0 57 1b 60 8b ba ea a1 e6 24 e7 82 ea 70 32 ca d2 e9 46 e6 81 37 28 b7 00 8b bf 02 d4 e3 09 b1 91 31 9c 93 c7 d7 b0 eb 1e ec 8e ef 44 04 ff 1a 18 47 50 a9 ca d9 2b 88 f2 c4 13 10 3b 29 6c a1 ee ae f2 4e 38 4f 32 62 28 eb d7 9f 63 91 ca a9 7e 6e 78 11 00 fe 60 97 e6 e9 7f 03 7b 6e 0f f9 1b 4e 33 1c a5 d4 79 c6 ba 99 e8 58 4b 49 04 bc 0f 6c b2 21 75 e8 b1 e0 79 8c 0f 0e 96 c5 66 f7 2e 8a 3e c2 c6 f6 08 49 ca 2e b9 64 3a 2f 3d 97 fd e3 af c9 e4 14 8a 44 dc 54 9c 25 da a5 69 64 e6 14 e3 ba 49 81 53 00 1d ec f2 ed a5 07 58 46 44 86 82 16 46 e9 b5 ab 7e bd 44 d0 3a 68 48 b9 53 ca 69 c1 a5 da 1c 82 f9 80 f1 92 0e 9e ca bc 08 c2 8c 4b 32 f8 ee fb f0 fa b5 a4 39 f0 88 71 48 9e 94 8c a6 e6 f4 44 29 94 94 13 e6 91 0e ff 8b 3e d3 03 58 4b c8 13 0c 5b 79 79 be 4d a7 7a d1 63 d3 b0 12 7e ee 57 f4 7c d1 9c 9a 79 db d5 60 13 cc 9b 76 cc 0b c2 86 1d bd 89 15 16 a5 77 b7 5c 78 b3 f5 d6 f5 ac 89 55 d1 48 ed 83 b5 eb 4e f6 84 26 7b 15 2c 61 2a 88 a4 df f0 0e a8 3e 13 39 81 8c f2 2c db 61 21 eb 65 dd 16 60 6a 8d 4c a8 0d f7 f6 3e 79 39 05 4d 19 55 57 ee 13 93 3c 19 30 52 a1 77 42 e0 e7 a1 3d 78 e3 b9 f3 5b 1f e9 71 e1 fa 7a 58 2f eb 61 61 86 bb 5a b8 ba ad 85 b7 1d e1 ca b7 27 f6 87 a6 ed c1 f4 cf ba 91 69 a1 e9 48 1f a0 23 c1 c2 80 df 76 c0 bd c6 65 23 6d 3c af 35 de 47 68 23 bf d5 6d 04 56 bf 9b 16 d0 80 cc bd 4b 90 d5 ac b5 32 7b f3 eb 7b ad e9 ea 0a 8f f5 ec 52 b8 5a 76 f6 5c 1f fd 62 2a bb 41 58 79 97 79 69 94 57 ab 8e cd 9d ef fc 5f 67 9a ab a9 3d f4 37 d4 1e ac 7e 26 99 ae 90 52 b6 19 9c 77 0c 17 9d 7c 5e 73 01 d1 5c 0e 8b 4e aa cf Data Ascii: 4b1Vm6^4Y]NW]Zi9`mBHj<3,T3>E)GP{* !^xlOm1wdJ/EE)=F7w'Wd8J7j:,D^9Q_ZlG.xX/wBA"1KCv,EhW)C<"}=^hn)3Q,OtU`b5Nk+wueEUGB{m]RNqD9{,Svd7=dy<Em5@YyN6RaUJ03\|6{E1!<z=3os3_^y ,"8N.6opdW`$p2F7(1DGP+;)lN8O2b(c~nx`{nN3yXKIl!uyf.>I.d:/=DT%idISXFDF~D:hHSiK29qHD)>XK[yyMzc~W\|y`vw\xUHN&{,a>9,a!e`jL>y9MUW<0RwB=x[qzX/aaZ'iH#ve#m<5Gh#mVK2{{RZv\bAXyyiW_g=7~&Rw\|^s\N
Jan 7, 2021 07:32:21.150571108 CET	58	IN	Data Raw: 7e db eb 54 b7 c0 fa a6 d7 7f 31 17 68 48 03 d7 a7 0f de cc a7 e3 b1 39 44 5a 67 1c d8 0f 18 ca 2e 0b 2c c6 63 38 9f bc b2 90 be 6b 03 0b ca f3 54 0d 63 6f 34 b6 2d c4 59 08 34 d2 c0 6a ce 2a 3f 7f b6 41 69 0d ed 71 a3 39 f2 ad b7 0f 34 4f 90 14 Data Ascii: ~T1hH9DZg.,c8kTco4-Y4j?Aiq94Oa`5._9-T-a]3f37Va5]B~:tED(K`M:E\;%5n%# \|.!Lo4%(<}T2l>wS?kj
Jan 7, 2021 07:32:21.150595903 CET	58	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Jan 7, 2021 07:32:41.124939919 CET	473	OUT	GET /pictures/141.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Jan 7, 2021 07:32:41.207750082 CET	506	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: image/jpeg Content-Length: 92415 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:30:02 GMT ETag: "168ff-558f324d83680" Accept-Ranges: bytes Data Raw: ff d8 ff e1 00 e6 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 31 01 02 00 1c 00 00 00 4a 00 00 00 32 01 02 00 14 00 00 00 66 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 7a 00 00 00 00 00 00 00 41 43 44 20 53 79 73 74 65 6d 73 20 44 69 67 69 74 61 6c 20 49 6d 61 67 69 6e 67 00 32 30 30 36 3a 30 34 3a 31 35 20 31 36 3a 31 35 3a 32 31 00 05 00 00 90 07 00 04 00 00 00 30 32 32 30 90 92 02 00 04 00 00 00 33 37 35 00 02 a0 04 00 01 00 00 00 17 02 00 00 03 a0 04 00 01 00 00 00 91 01 00 00 05 a0 04 00 01 00 00 00 bc 00 00 00 00 00 00 00 02 00 01 00 02 00 04 00 00 00 52 39 38 00 02 00 07 00 04 00 00 00 30 31 30 30 00 00 00 00 d0 4d b1 01 ff c0 00 11 08 01 91 02 17 03 01 21 00 02 11 01 03 11 01 ff db 00 84 00 03 02 02 02 02 01 03 02 02 02 03 03 03 03 04 07 04 04 04 04 04 09 06 06 05 07 0a 09 0b 0b 0a 09 0a 0a 0c 0d 11 0e 0c 0c 10 0c 0a 0a 0f 14 0f 10 11 12 13 13 13 0b 0e 15 16 15 12 16 11 12 13 12 01 04 05 05 06 05 06 0d 07 07 0d 1b 12 0f 12 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b 1b ff c4 00 d4 00 00 00 07 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 00 09 0a 10 00 01 03 02 04 04 03 04 06 05 05 0b 07 08 04 0f 01 02 03 04 05 11 00 06 12 21 07 13 31 41 08 22 51 14 32 61 71 09 15 23 81 91 a1 42 52 b1 c1 d1 16 33 62 72 f0 17 24 34 35 53 73 82 92 a2 b2 e1 25 36 37 43 74 94 d2 0a 18 54 55 93 b3 c2 f1 26 44 63 75 83 b4 c3 d3 45 46 56 57 65 76 96 a3 a4 e3 f2 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 04 01 03 05 00 06 07 11 00 01 04 00 04 03 05 06 04 05 05 01 00 03 00 00 01 00 02 03 11 04 12 21 31 05 41 51 13 22 61 71 b1 14 32 81 91 c1 f0 23 a1 d1 e1 06 33 42 72 f1 15 24 34 52 62 43 25 82 92 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 e9 76 9b 29 58 2a 17 b7 70 70 e1 7a 41 d4 83 70 47 4f 8e 3d e9 dd 78 60 52 4f 3c 85 36 51 e9 b6 dd f1 1e f2 52 4e c7 f3 c1 34 52 ad c4 14 c9 69 4e a2 06 c7 08 3a 84 de d6 37 18 65 aa a4 82 93 65 1e c7 af cb 00 6f a0 13 7b e2 d5 5d ea 83 4a 4e d7 b1 3f 76 0a 50 6f 7b 5c 9c 4a 0b b4 16 1b ed 6f 97 51 8f 68 ba cd ba 0f 8e 39 75 de e8 12 d9 29 fd dd c6 07 4a 6d b6 fe b8 e5 c0 95 e0 93 ee 93 f8 60 7a de fd 8e 39 45 a1 b0 53 7b 7e 58 f6 9d c8 3f 2c 72 2b 40 01 be e3 02 94 9b 0b fc b1 ca 01 41 6b 9b 13 be 3d a7 a5 cf df 8e 5d 68 48 b2 ed b6 dd 30 3d 40 3b 6c 6e 3b e3 97 66 28 e1 29 d5 7e b6 c1 82 6e 09 b6 21 4d da 1d 36 de df 3c 7b 4a 75 6f b1 ed 88 5c 97 87 06 4c da 93 71 63 34 56 ea cd 92 07 f0 c4 94 e6 63 49 cc 47 27 37 a5 ea 5d 20 89 55 c5 85 79 5f 7c 0d 4d 44 3b 6e 94 9d 2a 5f 5d ca 53 63 db 2b 1d 26 d1 8d cf d8 5a 98 36 10 0c 87 61 fe 7f 6f 8a 61 50 90 f4 da aa e5 38 6f ac 95 74 b7 e5 84 82 15 a2 dd 3b df 1a 2c 68 63 43 47 25 9c e7 17 12 4a 51 00 68 d3 b7 c6 f8 5c 36 9b 75 bd fe 3b 63 8a e0 74 40 53 f9 f4 ef 8f 14 10 3a 6f 7d af 81 53 68 52 92 91 7e ff 00 0c 78 b7 ab ad be 5d b1 ca 2d 79 2d 00 0d fa e0 03 17 51 27 be 26 e9 75 9a 4a 86 46 92 05 ad 83 06 b4 8b db f2 c0 5a 30 bd cb df 7b 7a 63 d6 6c 27 cc 41 be 39 75 a0 2e 21 0a b2 53 b7 4b e1 35 bc 75 5f 57 53 89 01 01 72 49 4b 37 36 ef 82 95 9b fe 58 b2 90 e6 43 b9 17 d5 f0 f9 e0 ba 41 1e 63 bf e7 89 d9 75 af 04 10 9d c7 ce c3 02 10 47 Data Ascii: ExifII1J2fizACD Systems Digital Imaging2006:04:15 16:15:210220375R980100M!!1A"Q2aq#BR3br$45Ss%67CtTU&DcuEFVWev!1AQ"aq2#3Br$4RbC%?v)XppzApGO=x`RO<6QRN4RiN:7eeo{]JN?vPo{\JoQh9u)Jm`z9ES{~X?,r+@Ak=]hH0=@;ln;f()~n!M6<{Juo\Lqc4VcIG'7] Uy_\|MD;n*_]Sc+&Z6aoaP8ot;,hcCG%JQh\6u;ct@S:o}ShR~x]-y-Q'&uJFZ0{zcl'A9u.!SK5u_WSrIK76XCAcuG
Jan 7, 2021 07:32:41.207803011 CET	507	IN	Data Raw: 6f ec 71 ca 2c 84 21 a1 aa da b0 aa 5a 4f 42 7e ec 09 28 ad 28 96 41 1b 1f 2e 15 44 74 da c4 7d f8 ac 94 56 96 44 61 6b 5a c4 ed 7b e0 e9 8e 90 46 e3 ef 38 02 51 da 38 2c 35 6e aa 20 d8 60 ab 93 6d 9b 01 27 d6 fd b1 15 7b ae cd 5b 24 16 e2 d4 af Data Ascii: oq,!ZOB~((A.Dt}VDakZ{F8Q8,5n `m'{[$9`@~T.4_s]v>?%R$\|(}A6=M#5lmn0-)(+?\VZ{iAj)Et6J^]{-\|rX^<@E)
Jan 7, 2021 07:32:41.207856894 CET	509	IN	Data Raw: a0 8a b4 7d a5 c8 17 eb d3 01 a6 f7 17 16 e8 71 ca 08 a4 52 ca 48 04 0b 5f ae f8 10 c8 e9 89 51 48 c1 86 cf 6d c6 05 4c 8b dc 11 6f 9f 4c 45 a2 1b 22 96 c0 dc 58 5b f3 c2 4a 40 07 4a 7e ec 4a ee 49 35 12 96 ba fc 70 4e 67 c7 f3 c4 a8 49 10 b1 e6 Data Ascii: }qRH_QHmLoLE"X[J@J~JI5pNgI"$/\|PIV<+t.;)6Bs[gV=q)op\|\|Zn{pA}Q/EqrF-H`E;T/%>8GlJ*h?F1h-9u Jw(
Jan 7, 2021 07:32:41.207904100 CET	510	IN	Data Raw: 19 71 f3 06 33 6e 67 a0 58 97 10 78 ad 52 af 65 a6 d3 59 9c 69 cc b8 bb b1 4f 8a a5 20 be a0 3c cd 29 b4 95 29 ed f6 bd ec 3a d8 75 c6 7b 26 b3 99 a4 53 39 99 5a 97 4f a5 c6 8a 79 ac b7 39 92 e1 77 b1 0b 4b 6a 01 03 e4 54 7a 5c 8e 98 f0 b2 62 64 Data Ascii: q3ngXxReYiO <)):u{&S9ZOy9wKjTz\bda_KfVbs5e),I%+k+kcCJN8;}x#}(QdFpcK0XuK_M^.tt ;uJv8]t
Jan 7, 2021 07:32:41.207956076 CET	512	IN	Data Raw: 65 2e 8c 07 e5 be 14 4a 6e 00 24 db 10 a7 64 74 a4 24 dc 12 70 70 05 c5 d4 6d d3 7c 09 45 a5 23 05 9d c7 51 d6 f8 11 72 91 e8 76 c0 ae 47 42 6d 7f 5e f8 55 29 16 df 10 a6 91 55 74 9d 88 1f 7e 12 5a 54 a5 7a 6f be 39 11 0b cd a0 ea d3 b9 df d7 0e Data Ascii: e.Jn$dt$ppm\|E#QrvGBm^U)Ut~ZTzo9J5K!GE`H,VUSl-rMQ#nQbpa$V60Unqk&786MEwFaeiHQ}_Wouz\1ddM.;-(_H"XQp4Ja
Jan 7, 2021 07:32:41.208008051 CET	513	IN	Data Raw: c5 68 42 08 06 ff 00 0c 57 ba 3d 93 59 0e 36 12 a5 1b 00 01 51 24 d8 01 df ee c5 2f 30 71 26 85 4c 84 55 01 e6 2a 6e 05 a5 2a 29 7f 43 0d 0d 5a 4a 94 ed 88 36 df ca 9b 93 f0 c5 58 8c 4b 30 91 67 7f f9 4f 60 30 32 f1 09 b2 33 6e 67 a2 c8 f3 7f 14 Data Ascii: hBW=Y6Q$/0q&LUn)CZJ6XK0gO`023ngVi-Bh@9di6'5gz,h6*je;`]k@JIrqDc/vza"kQ/Ttb8e2jHQ 'wMF-k)e-RW
Jan 7, 2021 07:32:41.208281994 CET	515	IN	Data Raw: 60 98 d0 7b ad d0 04 9c b2 e5 ef 3b 52 56 1b 9d b8 a7 9b 78 84 1c 8c ed 71 ba 7d 3d 67 68 11 89 42 14 3f a6 b3 ba fe fb 0f 86 29 c8 8d 58 61 b3 bb 2f 36 93 a3 75 0b 6d f3 db 0d fb a3 4d 96 6e af 36 77 40 f1 64 b6 05 42 94 a4 7f 49 23 6c 47 c9 62 Data Ascii: `{;RVxq}=ghB?)Xa/6umMn6w@dBI#lGbxl]5o/x%Yt:DR$x+4[.RT\t6%I\|$f{?d09Ww?%"p,niVel,}-{c@js
Jan 7, 2021 07:32:41.208333969 CET	516	IN	Data Raw: e2 3e f5 47 11 22 41 d5 56 78 eb 43 34 0e 2f 16 b2 fd 12 33 71 9c 8e d3 ab 65 86 d2 84 82 53 6b 81 b0 dc a4 de d8 c7 aa 6a 6d d3 a5 f8 46 33 9d 94 a6 f4 ff 00 f3 c4 c0 eb 89 b7 d1 14 83 be 4a fa 17 f4 3f 35 93 23 78 a3 cd ad a2 bb 50 55 75 cc b8 Data Ascii: >G"AVxC4/3qeSkjmF3J?5#xPUum9k}F@=ULqV*o(MBT 9s-v.gWem^TQa"50%+f_ZHS.<MB1XqcZFf.f3\|G}T
Jan 7, 2021 07:32:41.208389044 CET	517	IN	Data Raw: 36 a8 2c c7 3d cf 36 e4 f5 8a 1c e4 8d 70 aa 4d b8 7a 80 93 d7 f0 df f2 c3 c4 9c c9 0c e9 76 32 5e 03 b2 ac 4f fb 56 38 30 5e cf 24 00 35 db 15 e5 54 e9 ca 50 6e af 44 4a 0f 42 4a 0a 4f e6 31 73 e1 df 12 e4 f0 f1 52 9b ca 2e 40 54 59 eb 4b 8f 31 Data Ascii: 6,=6pMzv2^OV80^$5TPnDJBJO1sR.@TYK197#Mii9z\|Lu4ot^WC}#"g@]C1eT.JIXi.Uk'E\|l\|.*7_I#'TJZmfJk\nhK6s~X\|M'G8
Jan 7, 2021 07:32:41.369637966 CET	704	OUT	GET /templates/biz_blue_ii/images/readon.gif HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: ovd.ru Connection: Keep-Alive Cookie: bbsessionhash=8848772e8198313ee133bfa7158b7b6c; bblastvisit=1610001140; bblastactivity=0; __utma=6288621.793673561.1610033541.1610033541.1610033541.1; __utmb=6288621.1.10.1610033541; __utmc=6288621; __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; d6f3f3b7ab2832d7757345f664e197c0=0da33e8e2b5fbf22af922a4e7ca5761b
Jan 7, 2021 07:32:41.449074030 CET	769	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: image/gif Content-Length: 138 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:30:04 GMT ETag: "8a-558f324f6bb00" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 0d 00 0e 00 b3 0d 00 d9 d8 d8 8b 8a 8a 9c 9c 9c d8 d7 d7 98 97 97 94 93 93 43 43 43 f0 f0 f0 e6 e4 e4 2a 2a 2a 00 00 00 33 33 66 e9 e7 e7 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 0d 00 2c 00 00 00 00 0d 00 0e 00 00 04 37 b0 c9 49 67 ba b8 ca c4 3a 0b 8a c6 79 c5 11 52 63 47 04 c6 b9 79 1d 02 84 cb 0b 33 08 5d a7 cc e2 ff 3e 5e 4c d7 10 22 06 34 5b 0c 20 70 15 31 17 85 54 43 ad 5a 23 00 3b Data Ascii: GIF89aCCC***33f!,7Ig:yRcGy3]>^L"4[ p1TCZ#;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.3	49718	213.180.204.205	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:32:21.434237957 CET	197	OUT	GET /js/widget.js HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989 Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: loginza.ru Connection: Keep-Alive
Jan 7, 2021 07:32:21.509743929 CET	199	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 07 Jan 2021 06:32:21 GMT Content-Type: application/javascript Content-Length: 8653 Last-Modified: Thu, 28 Sep 2017 10:54:40 GMT Connection: keep-alive ETag: "59ccd4f0-21cd" Expires: Sat, 06 Feb 2021 06:32:21 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 2f 2a 2a 0d 0a 20 2a 20 4c 6f 67 69 6e 7a 61 20 77 69 64 67 65 74 0d 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 31 2e 32 2e 30 0d 0a 20 2a 20 40 75 70 64 61 74 65 64 20 30 33 2e 30 38 2e 32 30 31 31 0d 0a 20 2a 2f 0d 0a 69 66 20 28 28 74 79 70 65 6f 66 20 4c 4f 47 49 4e 5a 41 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7c 7c 20 21 4c 4f 47 49 4e 5a 41 29 20 7b 0d 0a 09 2f 2f 20 d0 b8 d0 bd d0 b8 d1 86 d0 b8 d0 b0 d0 bb d0 b8 d0 b7 d0 b0 d1 86 d0 b8 d1 8f 20 d0 be d0 b1 d1 8a d0 b5 d0 ba d1 82 d0 b0 20 4c 4f 47 49 4e 5a 41 0d 0a 20 20 20 20 76 61 72 20 4c 4f 47 49 4e 5a 41 20 3d 20 7b 0d 0a 20 20 20 20 09 27 6c 6f 61 64 65 64 27 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 20 20 20 20 27 74 6f 6b 65 6e 5f 75 72 6c 27 3a 20 6e 75 6c 6c 2c 0d 0a 20 20 20 20 20 20 20 20 27 73 65 6c 65 63 74 65 64 5f 70 72 6f 76 69 64 65 72 27 3a 20 6e 75 6c 6c 2c 0d 0a 20 20 20 20 20 20 20 20 27 70 72 6f 76 69 64 65 72 73 5f 73 65 74 27 3a 20 6e 75 6c 6c 2c 0d 0a 20 20 20 20 20 20 20 20 27 73 65 72 76 69 63 65 5f 68 6f 73 74 27 3a 20 27 2f 2f 6c 6f 67 69 6e 7a 61 2e 72 75 27 2c 0d 0a 20 20 20 20 20 20 20 20 27 6c 61 6e 67 27 3a 20 6e 75 6c 6c 2c 0d 0a 20 20 20 20 20 20 20 20 27 61 6a 61 78 27 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 20 20 20 20 27 6d 6f 62 69 6c 65 27 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 20 20 20 20 27 63 61 6c 6c 62 61 63 6b 27 3a 20 6e 75 6c 6c 2c 0d 0a 20 20 20 20 20 20 20 20 27 68 61 73 68 27 3a 20 27 27 0d 0a 20 20 20 20 7d 3b 0d 0a 7d 0d 0a 2f 2f 20 d0 bf d0 be d0 ba d0 b0 d0 b7 d0 b0 d1 82 d1 8c 20 d1 84 d0 be d1 80 d0 bc d1 83 0d 0a 4c 4f 47 49 4e 5a 41 2e 73 68 6f 77 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 2f 2f 20 d0 bf d1 80 d0 b5 d0 b4 20 d0 b2 d1 8b d0 b1 d0 be d1 80 20 d0 bf d1 80 d0 be d0 b2 d0 b0 d0 b9 d0 b4 d0 b5 d1 80 d0 b0 0d 0a 09 4c 4f 47 49 4e 5a 41 2e 73 65 6c 65 63 74 65 64 5f 70 72 6f 76 69 64 65 72 20 3d 20 4c 4f 47 49 4e 5a 41 2e 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 56 61 6c 75 65 28 74 68 69 73 2c 20 27 70 72 6f 76 69 64 65 72 27 29 3b 0d 0a 09 2f 2f 20 d0 bd d0 b0 d0 b1 d0 be d1 80 20 d0 bf d1 80 d0 be d0 b2 d0 b0 d0 b9 d0 b4 d0 b5 d1 80 d0 be d0 b2 20 d0 b2 20 d0 b2 d0 b8 d0 b4 d0 b6 d0 b5 d1 82 d0 b5 0d 0a 09 4c 4f 47 49 4e 5a 41 2e 70 72 6f 76 69 64 65 72 73 5f 73 65 74 20 3d 20 4c 4f 47 49 4e 5a 41 2e 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 56 61 6c 75 65 28 74 68 69 73 2c 20 27 70 72 6f 76 69 64 65 72 73 5f 73 65 74 27 29 3b 0d 0a 09 2f 2f 20 d0 bf d0 be d0 bb d1 83 d1 87 d0 b5 d0 bd d0 b8 d0 b5 20 74 6f 6b 65 6e 0d 0a 09 4c 4f 47 49 4e 5a 41 2e 74 6f 6b 65 6e 5f 75 72 6c 20 3d 20 4c 4f 47 49 4e 5a 41 2e 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 56 61 6c 75 65 28 74 68 69 73 2c 20 27 74 6f 6b 65 6e 5f 75 72 6c 27 29 3b 0d 0a 09 2f 2f 20 d1 83 d1 81 d1 82 d0 b0 d0 bd d0 be d0 b2 d0 ba d0 b0 20 d1 8f d0 b7 d1 8b d0 ba d0 b0 20 d0 b8 d0 bd d1 82 d0 b5 d1 80 d1 84 d0 b5 d0 b9 d1 81 d0 b0 0d 0a 09 4c 4f 47 49 4e 5a 41 2e 6c 61 6e 67 20 3d 20 4c 4f 47 49 4e 5a 41 2e 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 56 61 6c 75 65 28 74 68 69 73 2c 20 27 6c 61 Data Ascii: /** * Loginza widget * @version 1.2.0 * @updated 03.08.2011 */if ((typeof LOGINZA == "undefined") \|\| !LOGINZA) {// LOGINZA var LOGINZA = { 'loaded': false, 'token_url': null, 'selected_provider': null, 'providers_set': null, 'service_host': '//loginza.ru', 'lang': null, 'ajax': false, 'mobile': false, 'callback': null, 'hash': '' };}// LOGINZA.show = function () {// LOGINZA.selected_provider = LOGINZA.getQueryStringValue(this, 'provider');// LOGINZA.providers_set = LOGINZA.getQueryStringValue(this, 'providers_set');// tokenLOGINZA.token_url = LOGINZA.getQueryStringValue(this, 'token_url');// LOGINZA.lang = LOGINZA.getQueryStringValue(this, 'la
Jan 7, 2021 07:32:21.509793043 CET	200	IN	Data Raw: 6e 67 27 29 3b 0d 0a 09 2f 2f 20 d0 bc d0 be d0 b1 d0 b8 d0 bb d1 8c d0 bd d0 b0 d1 8f 20 d0 b2 d0 b5 d1 80 d1 81 d0 b8 d1 8f 0d 0a 09 4c 4f 47 49 4e 5a 41 2e 6d 6f 62 69 6c 65 20 3d 20 4c 4f 47 49 4e 5a 41 2e 67 65 74 51 75 65 72 79 53 74 72 69 Data Ascii: ng');// LOGINZA.mobile = LOGINZA.getQueryStringValue(this, 'mobile');// if (LOGINZA.mobile == 'auto') {var nav = window.navigator.userAgent;var mobua
Jan 7, 2021 07:32:21.509834051 CET	201	IN	Data Raw: 27 3b 0d 0a 09 09 0d 0a 09 09 76 61 72 20 69 6d 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 3b 0d 0a 09 09 69 6d 67 2e 6f 6e 63 6c 69 63 6b 20 3d 20 4c 4f 47 49 4e 5a 41 2e 63 6c 6f 73 65 3b Data Ascii: ';var img = document.createElement("img");img.onclick = LOGINZA.close;img.style.position = 'relative';img.style.left = '348px';img.style.top = '-332px';img.style.cursor = 'hand';img.style.width = '7px';img.s
Jan 7, 2021 07:32:21.509871960 CET	203	IN	Data Raw: 20 d0 b2 d0 ba d0 bb d1 8e d1 87 d0 b5 d0 bd d0 b0 20 41 4a 41 58 20 d0 b0 d0 b2 d1 82 d0 be d1 80 d0 b8 d0 b7 d0 b0 d1 86 d0 b8 d1 8f 0d 0a 09 09 69 66 20 28 4c 4f 47 49 4e 5a 41 2e 61 6a 61 78 29 20 7b 0d 0a 09 09 09 73 65 74 49 6e 74 65 72 76 Data Ascii: AJAX if (LOGINZA.ajax) {setInterval(LOGINZA.hashParser, 500);}}if (!LOGINZA.token_url) {alert('Error token_url value!');} else {var loginza_url = LOGINZA.service_host+'/a
Jan 7, 2021 07:32:21.509910107 CET	204	IN	Data Raw: 70 61 64 64 69 6e 67 54 6f 70 20 3d 20 28 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 2d 33 35 30 29 2f 32 20 2b 20 27 70 78 27 3b 0d 0a 09 09 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0d 0a 09 09 09 66 72 6d 2e 73 74 79 6c 65 2e 70 61 64 Data Ascii: paddingTop = (window.innerHeight-350)/2 + 'px';} catch (e) {frm.style.paddingTop = '100px';}}}// LOGINZA.getQueryStringValue = function (link, key) {var url_str =
Jan 7, 2021 07:32:21.509948015 CET	206	IN	Data Raw: 20 66 6e 20 29 3b 0d 0a 09 7d 20 65 6c 73 65 20 7b 0d 0a 09 20 20 20 20 20 20 6f 62 6a 5b 22 6f 6e 22 2b 74 79 70 65 5d 20 3d 20 66 6e 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 4c 4f 47 49 4e 5a 41 2e 69 6e 69 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 Data Ascii: fn );} else { obj["on"+type] = fn;}}LOGINZA.init = function () {// if (document.getElementById('loginza') && document.getElementById('loginza').href != undefined) {
Jan 7, 2021 07:32:21.509982109 CET	207	IN	Data Raw: bb d0 b8 20 d1 85 d0 b5 d1 88 20 d0 bd d0 be d0 b2 d1 8b d0 b9 0d 0a 09 09 69 66 20 28 68 61 73 68 20 21 3d 20 4c 4f 47 49 4e 5a 41 2e 68 61 73 68 29 20 7b 0d 0a 09 09 09 66 6f 72 20 28 76 61 72 20 6b 3d 30 3b 20 6b 3c 63 6f 6d 6d 61 6e 64 73 2e Data Ascii: if (hash != LOGINZA.hash) {for (var k=0; k<commands.length; k++) {// callback for (var i=0; i<callbacks.length;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.3	49731	91.189.114.9	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:32:37.756839037 CET	384	OUT	GET /forum/favicon.ico HTTP/1.1 User-Agent: AutoIt Host: ovd.ru Cookie: __utmz=6288621.1610033541.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utma=6288621.793673561.1610033541.1610033541.1610033541.1; bblastactivity=0; __utmb=6288621.1.10.1610033541; bblastvisit=1610001140; __utmt=1
Jan 7, 2021 07:32:37.835692883 CET	385	IN	HTTP/1.1 200 OK Server: openresty/1.13.6.2 Date: Thu, 07 Jan 2021 06:32:37 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 10134 Connection: keep-alive Last-Modified: Tue, 12 Sep 2017 00:29:56 GMT ETag: "2796-558f3247ca900" Accept-Ranges: bytes Data Raw: 00 00 01 00 06 00 10 10 10 00 00 00 00 00 28 01 00 00 66 00 00 00 10 10 00 00 01 00 08 00 68 05 00 00 8e 01 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 f6 06 00 00 20 20 00 00 01 00 08 00 a8 08 00 00 de 09 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 12 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 ee 16 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 80 00 00 00 80 80 00 80 00 00 00 80 00 80 00 80 80 00 00 80 80 80 00 c0 c0 c0 00 00 00 ff 00 00 ff 00 00 00 ff ff 00 ff 00 00 00 ff 00 ff 00 ff ff 00 00 ff ff ff 00 00 87 80 00 00 00 00 00 00 86 77 76 77 77 88 00 00 87 c7 77 c7 76 76 00 00 77 87 88 f8 8c 75 00 00 87 87 80 00 77 76 00 00 78 78 80 00 78 78 00 00 78 88 80 00 78 78 00 00 78 88 00 70 78 88 00 00 78 8f 00 70 88 80 00 00 78 8f 00 80 88 80 00 00 78 f0 08 f0 88 80 00 00 00 00 07 f0 8f 80 00 00 00 00 87 f0 08 f0 00 00 67 88 ff f0 08 80 00 00 78 88 f8 f0 00 00 00 00 78 00 00 00 00 00 00 c7 ff 00 00 c0 03 00 00 c0 03 00 00 c0 03 00 00 c1 c3 00 00 c1 c3 00 00 c1 c3 00 00 c3 43 00 00 c3 47 00 00 c3 47 00 00 c6 47 00 00 fe 47 00 00 fc 67 00 00 c0 67 00 00 c0 7f 00 00 cf ff 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 5e 3e 35 00 8a 5f 4d 00 8a 60 4e 00 8f 6a 5c 00 91 63 53 00 91 64 53 00 91 65 54 00 90 68 5a 00 96 69 59 00 94 6c 5c 00 9a 6c 5b 00 99 6d 5c 00 9c 6f 5f 00 9b 73 66 00 9c 77 6b 00 97 7c 72 00 9e 7b 71 00 9f 7d 72 00 90 7f 7a 00 a1 73 61 00 a7 79 68 00 a8 7a 69 00 ad 7e 6d 00 91 82 7d 00 99 84 7b 00 a2 82 78 00 a4 82 78 00 b4 84 72 00 b6 89 76 00 ba 8c 7a 00 bf 90 7e 00 95 88 83 00 9e 93 90 00 a7 8f 87 00 ac 8d 83 00 b3 8f 81 00 af 90 85 00 ae 94 8c 00 b5 95 87 00 b0 94 8c 00 a7 97 92 00 a3 97 94 00 a4 99 94 00 aa 9f 9a 00 b5 9b 94 00 bf a1 90 00 ba a0 97 00 b0 a6 a3 00 bf a9 a2 00 be ab a5 00 bb b3 b0 00 c2 92 81 00 c7 96 83 00 cc 9e 8c 00 c1 a4 9e 00 d3 a3 91 00 d4 a6 94 00 dc a9 95 00 da aa 98 00 df b0 9e 00 c1 a6 a0 00 cd b0 a5 00 c9 b4 af 00 d8 bd af 00 c9 b8 b1 00 cb bb b4 00 e2 b5 a2 00 e6 b6 a4 00 ea b8 a6 00 ee b9 a5 00 da c3 ba 00 df c4 ba 00 e8 ca bc 00 f3 c2 b0 00 f6 c6 b3 00 f5 c7 b4 00 f5 c8 b6 00 fa c8 b4 00 f2 cb bc 00 fb cc ba 00 fe d1 be 00 e5 cd c2 00 e1 cd c4 00 e7 d7 c8 00 e7 d8 c8 00 fd d4 c1 00 fe d9 c5 00 f4 df cf 00 ff dd ca 00 ea d9 d3 00 eb dc d2 00 ed df d6 00 fe e1 ce 00 ef e3 d3 00 ee e4 de 00 fd e2 d0 00 fa e6 d2 00 fb e9 d6 00 f0 e4 d8 00 f8 e3 d9 00 f7 e8 d8 00 ff eb d8 00 fe f0 de 00 f9 f0 e0 00 f6 f0 ec 00 fd f8 f2 00 ff ff fb 00 fe fe fe 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: (fh h ( wvwwwvvwuwvxxxxxxxxpxxpxxgxxCGGGGgg( @^>5_M`Nj\cSdSeThZiYl\l[m\o_sfwk\|r{q}rzsayhzi~m}{xxrvz~
Jan 7, 2021 07:32:37.835746050 CET	387	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jan 7, 2021 07:32:37.835783005 CET	388	IN	Data Raw: ff f8 00 00 07 f8 00 00 07 f8 00 00 07 f8 00 00 0f f8 01 f0 0f f0 03 f0 0f f0 03 f0 0f f0 03 f0 0f f0 03 f0 0f f0 03 f0 0f f0 07 f8 1f f0 07 38 1f f0 07 38 1f f0 07 38 1f f0 0f 38 1f f0 0e 38 1f f0 0e 38 1f f0 0e 38 3f f0 7e 38 3f ff fc 38 3f ff Data Ascii: 8888888?~8?8?8?8?8?8???( @;!N)M/%Z3'^7*L<7V>9h?3PA<\C;eG=wI;uJ?yK={M>\JD]LH^PNoKBaMHbR
Jan 7, 2021 07:32:37.835823059 CET	389	IN	Data Raw: 00 00 00 00 00 00 00 00 22 3b 57 57 57 60 60 60 60 60 57 5b 57 53 53 49 3e 3b 32 2b 2a 2b 3b da 00 00 00 00 00 00 00 00 0e 53 5b 64 65 65 65 6a 65 a7 c9 b2 af 9d 99 8e 69 4f 3d 32 2b 2b 25 00 00 00 00 00 00 00 00 00 0c 57 65 69 6a 8a 8a 90 8a dd Data Ascii: ";WWW`````W[WSSI>;2++;S[deeejeiO=2++%WeijzwWO=1++dmNeWS>+;mLaWO=U"pDeaWO~"\|AgaO
Jan 7, 2021 07:32:37.835860014 CET	391	IN	Data Raw: ff a1 73 61 ff 96 6a 59 f9 b3 8d 7f 07 00 00 00 00 00 00 00 00 00 00 00 00 98 71 65 cc d4 a6 94 ff df b0 9e ff ea b8 a6 ff f1 c7 b6 ea d5 b1 a3 02 00 00 00 00 00 00 00 00 77 65 5f ce cc 9f 8c ff b4 84 72 ff a7 7d 6c da 00 00 00 00 00 00 00 00 00 Data Ascii: sajYqewe_r}li]>sb\fZss]XvfagZ4-z
Jan 7, 2021 07:32:37.835910082 CET	392	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c7 a8 a2 5c 8b 5c 50 f9 8e 62 52 ff a3 76 65 ff a5 76 66 ff a5 77 66 ff a9 7a 6a ff aa 7c 6b ff a8 7a 69 ff aa 7c 6a ff a7 7a 68 ff a8 7a 68 ff a4 76 65 ff a2 74 63 ff 9f 71 60 ff 9d 6f 5e ff 9a 6c 5a Data Ascii: \\PbRvevfwfzj\|kzi\|jzhzhvetcq`o^lZgVcRaOaP`OkZwgeREjY{j{k~mpsqsrn~l{jxfudq`m\hWdR`O\KcSl[
Jan 7, 2021 07:32:37.836575985 CET	394	IN	Data Raw: 00 00 00 00 00 72 63 61 c2 76 5d 58 b3 00 00 00 00 00 00 00 00 81 73 70 6f 6b 57 51 fe fa d4 c2 ff e9 b5 a1 ff dd aa 97 ff d1 9f 8c ff c2 91 7e f1 c9 9d 8c 49 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: rcav]XspokWQ~I_Wm]TECnd\|ybdRL9yVMxh
Jan 7, 2021 07:32:37.836616039 CET	395	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 98 8e 04 bd a4 9e 16 a7 8f 88 3a 8c 73 6d 5e 72 5a 55 86 5f 4a 46 a7 49 33 2f c2 42 29 23 d4 4d 30 28 e8 61 42 38 f8 a2 80 73 ff f2 e8 e4 ff ff ff ff ff ff fe fd Data Ascii: :sm^rZU_JFI3/B)#M0(aB8sjI:6B'!6=!M/%tREte\|J<8

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.3	49737	81.19.89.16	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:32:41.328211069 CET	628	OUT	GET /top100.cnt?438738 HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: counter.rambler.ru Connection: Keep-Alive
Jan 7, 2021 07:32:41.411887884 CET	740	IN	HTTP/1.1 307 Temporary Redirect Server: nginx/1.17.9 Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: text/html Content-Length: 171 Connection: keep-alive Location: https://counter.rambler.ru/top100.cnt?438738 Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: content-type Access-Control-Allow-Credentials: true Set-Cookie: proto_uid=1CIAAAmr9l+aX30NATtnqAB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/ P3P: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 37 2e 39 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>307 Temporary Redirect</title></head><body><center><h1>307 Temporary Redirect</h1></center><hr><center>nginx/1.17.9</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.3	49741	46.4.114.109	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Jan 7, 2021 07:32:41.351403952 CET	629	OUT	GET /aci.js HTTP/1.1 Accept: application/javascript, /;q=0.8 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.acint.net Connection: Keep-Alive
Jan 7, 2021 07:32:41.421284914 CET	750	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: text/html Content-Length: 142 Connection: keep-alive Location: https://www.acint.net/aci.js Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>
Jan 7, 2021 07:32:41.667362928 CET	857	OUT	GET /hit/?v=0.3.0&uid=5574be45-a7ff-46d8-a54c-9f941462aa89&dp=10&tz=-08%3A00&nc=78865322&u=http%3A%2F%2Fovd.ru%2Findex.php%3Fs%3D8848772e8198313ee133bfa7158b7b6c&r=&rs=1280x1024&t=%D0%9D%D0%B0%20%D0%B3%D0%BB%D0%B0%D0%B2%D0%BD%D1%83%D1%8E&oE=1&oP=1&dT=2021-01-07T07%3A32%3A40.946&fu=6123ba1a-1144-4046-8498-22475292c4e5 HTTP/1.1 Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5 Referer: http://ovd.ru/index.php?s=8848772e8198313ee133bfa7158b7b6c Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.acint.net Connection: Keep-Alive
Jan 7, 2021 07:32:41.737426996 CET	866	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Thu, 07 Jan 2021 06:32:41 GMT Content-Type: text/html Content-Length: 142 Connection: keep-alive Location: https://www.acint.net/hit/?v=0.3.0&uid=5574be45-a7ff-46d8-a54c-9f941462aa89&dp=10&tz=-08%3A00&nc=78865322&u=http%3A%2F%2Fovd.ru%2Findex.php%3Fs%3D8848772e8198313ee133bfa7158b7b6c&r=&rs=1280x1024&t=%D0%9D%D0%B0%20%D0%B3%D0%BB%D0%B0%D0%B2%D0%BD%D1%83%D1%8E&oE=1&oP=1&dT=2021-01-07T07%3A32%3A40.946&fu=6123ba1a-1144-4046-8498-22475292c4e5 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Jan 7, 2021 07:32:21.844234943 CET	208.100.17.188	443	192.168.2.3	49720	CN=*.tynt.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Mon Jun 01 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019	Fri Oct 01 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
Jan 7, 2021 07:32:21.847641945 CET	208.100.17.188	443	192.168.2.3	49721	CN=*.tynt.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Mon Jun 01 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019	Fri Oct 01 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
Jan 7, 2021 07:32:22.177087069 CET	208.100.17.188	443	192.168.2.3	49726	CN=*.tynt.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Mon Jun 01 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019	Fri Oct 01 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
Jan 7, 2021 07:32:22.184616089 CET	208.100.17.188	443	192.168.2.3	49727	CN=*.tynt.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Mon Jun 01 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019	Fri Oct 01 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
Jan 7, 2021 07:32:41.410836935 CET	95.163.114.204	443	192.168.2.3	49740	CN=uptolike.com CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 28 23:10:46 CET 2020 Thu Mar 17 17:40:46 CET 2016	Tue Jan 26 23:10:46 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:41.410836935 CET	95.163.114.204	443	192.168.2.3	49740	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:41.411825895 CET	95.163.114.204	443	192.168.2.3	49739	CN=uptolike.com CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 28 23:10:46 CET 2020 Thu Mar 17 17:40:46 CET 2016	Tue Jan 26 23:10:46 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:41.411825895 CET	95.163.114.204	443	192.168.2.3	49739	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:41.573350906 CET	46.4.114.109	443	192.168.2.3	49747	CN=*.acint.net CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Mon Nov 30 00:33:58 CET 2020 Thu Mar 17 17:40:46 CET 2016	Sun Feb 28 00:33:58 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:41.573350906 CET	46.4.114.109	443	192.168.2.3	49747	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:41.746212959 CET	216.58.209.34	443	192.168.2.3	49750	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Dec 15 15:42:47 CET 2020 Thu Jun 15 02:00:42 CEST 2017	Tue Mar 09 15:42:46 CET 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:41.746212959 CET	216.58.209.34	443	192.168.2.3	49750	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:41.747639894 CET	216.58.209.34	443	192.168.2.3	49751	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Dec 15 15:42:47 CET 2020 Thu Jun 15 02:00:42 CEST 2017	Tue Mar 09 15:42:46 CET 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:41.747639894 CET	216.58.209.34	443	192.168.2.3	49751	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:41.880388975 CET	185.15.175.130	443	192.168.2.3	49755	CN=dmg.digitaltarget.ru CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Tue Oct 20 21:54:14 CEST 2020 Thu Mar 17 17:40:46 CET 2016	Mon Jan 18 20:54:14 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:41.880388975 CET	185.15.175.130	443	192.168.2.3	49755	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:41.881273031 CET	185.15.175.130	443	192.168.2.3	49754	CN=dmg.digitaltarget.ru CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Tue Oct 20 21:54:14 CEST 2020 Thu Mar 17 17:40:46 CET 2016	Mon Jan 18 20:54:14 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:41.881273031 CET	185.15.175.130	443	192.168.2.3	49754	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.016700983 CET	77.88.21.119	443	192.168.2.3	49756	CN=mc.yandex.ru, O=Yandex LLC, OU=ITO, L=Moscow, C=RU CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL CN=Certum CA, O=Unizeto Sp. z o.o., C=PL	Tue Sep 29 23:57:59 CEST 2020 Wed Jan 21 13:00:00 CET 2015 Wed Oct 22 14:07:37 CEST 2008	Thu Mar 11 22:57:59 CET 2021 Sat Jan 18 13:00:00 CET 2025 Thu Jun 10 12:46:39 CEST 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU	CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	Wed Jan 21 13:00:00 CET 2015	Sat Jan 18 13:00:00 CET 2025
					CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	CN=Certum CA, O=Unizeto Sp. z o.o., C=PL	Wed Oct 22 14:07:37 CEST 2008	Thu Jun 10 12:46:39 CEST 2027
Jan 7, 2021 07:32:42.338732958 CET	216.58.206.66	443	192.168.2.3	49764	CN=*.googleadservices.com, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Nov 10 15:38:40 CET 2020 Thu Jun 15 02:00:42 CEST 2017	Tue Feb 02 15:38:39 CET 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.338732958 CET	216.58.206.66	443	192.168.2.3	49764	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.338895082 CET	216.58.206.66	443	192.168.2.3	49765	CN=*.googleadservices.com, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Nov 10 15:38:40 CET 2020 Thu Jun 15 02:00:42 CEST 2017	Tue Feb 02 15:38:39 CET 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.338895082 CET	216.58.206.66	443	192.168.2.3	49765	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.342690945 CET	159.69.74.8	443	192.168.2.3	49760	CN=*.sape.ru CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Dec 17 10:58:07 CET 2020 Wed Oct 07 21:21:40 CEST 2020	Wed Mar 17 10:58:07 CET 2021 Wed Sep 29 21:21:40 CEST 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.342690945 CET	159.69.74.8	443	192.168.2.3	49760	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.346781969 CET	88.212.252.2	443	192.168.2.3	49757	CN=ads.betweendigital.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Aug 06 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019	Thu Feb 17 00:59:59 CET 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
Jan 7, 2021 07:32:42.348740101 CET	88.212.252.2	443	192.168.2.3	49758	CN=ads.betweendigital.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Aug 06 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019	Thu Feb 17 00:59:59 CET 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
Jan 7, 2021 07:32:42.354067087 CET	159.69.74.8	443	192.168.2.3	49759	CN=*.sape.ru CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Dec 17 10:58:07 CET 2020 Wed Oct 07 21:21:40 CEST 2020	Wed Mar 17 10:58:07 CET 2021 Wed Sep 29 21:21:40 CEST 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.354067087 CET	159.69.74.8	443	192.168.2.3	49759	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.357549906 CET	193.232.148.156	443	192.168.2.3	49762	CN=*.adhigh.net CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Fri Jun 19 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019	Tue Apr 20 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
Jan 7, 2021 07:32:42.385895967 CET	216.58.198.34	443	192.168.2.3	49769	CN=*.google.co.uk, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Nov 10 15:42:41 CET 2020 Thu Jun 15 02:00:42 CEST 2017	Tue Feb 02 15:42:40 CET 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.385895967 CET	216.58.198.34	443	192.168.2.3	49769	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.385971069 CET	216.58.198.34	443	192.168.2.3	49768	CN=*.google.co.uk, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Nov 10 15:42:41 CET 2020 Thu Jun 15 02:00:42 CEST 2017	Tue Feb 02 15:42:40 CET 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.385971069 CET	216.58.198.34	443	192.168.2.3	49768	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.389709949 CET	193.232.148.156	443	192.168.2.3	49763	CN=*.adhigh.net CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Fri Jun 19 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019	Tue Apr 20 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
Jan 7, 2021 07:32:42.398659945 CET	89.208.236.251	443	192.168.2.3	49761	CN=*.hotlog.ru CN=RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020 Thu Jul 16 14:25:27 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Mon Oct 25 14:00:00 CEST 2021 Thu Jun 01 01:59:59 CEST 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Jul 16 14:25:27 CEST 2020	Thu Jun 01 01:59:59 CEST 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jan 7, 2021 07:32:42.405072927 CET	94.100.180.197	443	192.168.2.3	49767	CN=*.mail.ru, O=LLC Mail.Ru, L=, C=RU CN=GeoTrust ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=GeoTrust ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 13 01:00:00 CET 2020 Mon Nov 06 13:24:09 CET 2017	Thu Nov 18 00:59:59 CET 2021 Sat Nov 06 13:24:09 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.405072927 CET	94.100.180.197	443	192.168.2.3	49767	CN=GeoTrust ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:24:09 CET 2017	Sat Nov 06 13:24:09 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.406907082 CET	94.100.180.197	443	192.168.2.3	49766	CN=*.mail.ru, O=LLC Mail.Ru, L=, C=RU CN=GeoTrust ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=GeoTrust ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 13 01:00:00 CET 2020 Mon Nov 06 13:24:09 CET 2017	Thu Nov 18 00:59:59 CET 2021 Sat Nov 06 13:24:09 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.406907082 CET	94.100.180.197	443	192.168.2.3	49766	CN=GeoTrust ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:24:09 CET 2017	Sat Nov 06 13:24:09 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.521080971 CET	216.58.206.34	443	192.168.2.3	49773	CN=*.google.com, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Nov 10 15:34:43 CET 2020 Thu Jun 15 02:00:42 CEST 2017	Tue Feb 02 15:34:42 CET 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.521080971 CET	216.58.206.34	443	192.168.2.3	49773	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.530275106 CET	195.209.108.46	443	192.168.2.3	49770	CN=*.adriver.ru CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Apr 03 02:00:00 CEST 2020 Mon Nov 06 13:23:33 CET 2017	Sun Apr 24 14:00:00 CEST 2022 Sat Nov 06 13:23:33 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.530275106 CET	195.209.108.46	443	192.168.2.3	49770	CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:33 CET 2017	Sat Nov 06 13:23:33 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.536938906 CET	216.58.206.34	443	192.168.2.3	49771	CN=*.google.com, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Nov 10 15:34:43 CET 2020 Thu Jun 15 02:00:42 CEST 2017	Tue Feb 02 15:34:42 CET 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.536938906 CET	216.58.206.34	443	192.168.2.3	49771	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.539966106 CET	195.209.108.46	443	192.168.2.3	49772	CN=*.adriver.ru CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Apr 03 02:00:00 CEST 2020 Mon Nov 06 13:23:33 CET 2017	Sun Apr 24 14:00:00 CEST 2022 Sat Nov 06 13:23:33 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.539966106 CET	195.209.108.46	443	192.168.2.3	49772	CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:33 CET 2017	Sat Nov 06 13:23:33 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.937314987 CET	194.190.117.93	443	192.168.2.3	49776	CN=sync.republer.com CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Sat Dec 05 04:32:15 CET 2020 Wed Oct 07 21:21:40 CEST 2020	Fri Mar 05 04:32:15 CET 2021 Wed Sep 29 21:21:40 CEST 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.937314987 CET	194.190.117.93	443	192.168.2.3	49776	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.941795111 CET	37.18.16.16	443	192.168.2.3	49775	CN=*.hybrid.ai CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Jul 07 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019 Thu Jan 01 01:00:00 CET 2004	Thu Oct 06 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
					CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Jan 7, 2021 07:32:42.964956999 CET	37.18.16.16	443	192.168.2.3	49774	CN=*.hybrid.ai CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Jul 07 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019 Thu Jan 01 01:00:00 CET 2004	Thu Oct 06 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
					CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Jan 7, 2021 07:32:42.987505913 CET	194.190.117.93	443	192.168.2.3	49777	CN=sync.republer.com CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Sat Dec 05 04:32:15 CET 2020 Wed Oct 07 21:21:40 CEST 2020	Fri Mar 05 04:32:15 CET 2021 Wed Sep 29 21:21:40 CEST 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:42.987505913 CET	194.190.117.93	443	192.168.2.3	49777	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.053483963 CET	195.201.152.107	443	192.168.2.3	49781	CN=sync.dmp.otm-r.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Fri Aug 07 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019 Thu Jan 01 01:00:00 CET 2004	Sun Aug 08 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
					CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Jan 7, 2021 07:32:43.055593014 CET	195.201.152.107	443	192.168.2.3	49780	CN=sync.dmp.otm-r.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Fri Aug 07 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019 Thu Jan 01 01:00:00 CET 2004	Sun Aug 08 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
					CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Jan 7, 2021 07:32:43.098702908 CET	185.15.175.130	443	192.168.2.3	49783	CN=tag.digitaltarget.ru CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Mon Nov 23 16:57:23 CET 2020 Thu Mar 17 17:40:46 CET 2016	Sun Feb 21 16:57:23 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.098702908 CET	185.15.175.130	443	192.168.2.3	49783	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.107618093 CET	185.15.175.130	443	192.168.2.3	49782	CN=tag.digitaltarget.ru CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Mon Nov 23 16:57:23 CET 2020 Thu Mar 17 17:40:46 CET 2016	Sun Feb 21 16:57:23 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.107618093 CET	185.15.175.130	443	192.168.2.3	49782	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.117136002 CET	142.250.180.98	443	192.168.2.3	49785	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Nov 10 15:34:37 CET 2020 Thu Jun 15 02:00:42 CEST 2017	Tue Feb 02 15:34:36 CET 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.117136002 CET	142.250.180.98	443	192.168.2.3	49785	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.121918917 CET	142.250.180.98	443	192.168.2.3	49784	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Nov 10 15:34:37 CET 2020 Thu Jun 15 02:00:42 CEST 2017	Tue Feb 02 15:34:36 CET 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.121918917 CET	142.250.180.98	443	192.168.2.3	49784	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.284460068 CET	109.248.237.37	443	192.168.2.3	49787	CN=redclick.ru CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Nov 18 09:44:00 CET 2020 Thu Mar 17 17:40:46 CET 2016	Tue Feb 16 09:44:00 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.284460068 CET	109.248.237.37	443	192.168.2.3	49787	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.287755013 CET	109.248.237.37	443	192.168.2.3	49786	CN=redclick.ru CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Nov 18 09:44:00 CET 2020 Thu Mar 17 17:40:46 CET 2016	Tue Feb 16 09:44:00 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.287755013 CET	109.248.237.37	443	192.168.2.3	49786	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.636687040 CET	195.201.243.72	443	192.168.2.3	49788	CN=*.acint.net CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Dec 17 10:39:12 CET 2020 Wed Oct 07 21:21:40 CEST 2020	Wed Mar 17 10:39:12 CET 2021 Wed Sep 29 21:21:40 CEST 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.636687040 CET	195.201.243.72	443	192.168.2.3	49788	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.661993027 CET	31.172.81.158	443	192.168.2.3	49790	CN=*.bumlam.com CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Jan 06 17:11:53 CET 2021 Wed Oct 07 21:21:40 CEST 2020	Tue Apr 06 18:11:53 CEST 2021 Wed Sep 29 21:21:40 CEST 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.661993027 CET	31.172.81.158	443	192.168.2.3	49790	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.662169933 CET	31.172.81.158	443	192.168.2.3	49791	CN=*.bumlam.com CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Jan 06 17:11:53 CET 2021 Wed Oct 07 21:21:40 CEST 2020	Tue Apr 06 18:11:53 CEST 2021 Wed Sep 29 21:21:40 CEST 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.662169933 CET	31.172.81.158	443	192.168.2.3	49791	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.725090027 CET	195.201.243.72	443	192.168.2.3	49789	CN=*.acint.net CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Dec 17 10:39:12 CET 2020 Wed Oct 07 21:21:40 CEST 2020	Wed Mar 17 10:39:12 CET 2021 Wed Sep 29 21:21:40 CEST 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.725090027 CET	195.201.243.72	443	192.168.2.3	49789	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.738202095 CET	95.163.37.253	443	192.168.2.3	49792	CN=relap.io, O=LLC Mail.Ru, L=, C=RU CN=GeoTrust RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=GeoTrust RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Oct 01 02:00:00 CEST 2020 Mon Nov 06 13:23:45 CET 2017	Wed Oct 06 14:00:00 CEST 2021 Sat Nov 06 13:23:45 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.738202095 CET	95.163.37.253	443	192.168.2.3	49792	CN=GeoTrust RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:45 CET 2017	Sat Nov 06 13:23:45 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.746165037 CET	95.163.37.253	443	192.168.2.3	49794	CN=relap.io, O=LLC Mail.Ru, L=, C=RU CN=GeoTrust RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=GeoTrust RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Oct 01 02:00:00 CEST 2020 Mon Nov 06 13:23:45 CET 2017	Wed Oct 06 14:00:00 CEST 2021 Sat Nov 06 13:23:45 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.746165037 CET	95.163.37.253	443	192.168.2.3	49794	CN=GeoTrust RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:45 CET 2017	Sat Nov 06 13:23:45 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.752290010 CET	81.222.128.216	443	192.168.2.3	49793	CN=*.adriver.ru CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Apr 03 02:00:00 CEST 2020 Mon Nov 06 13:23:33 CET 2017	Sun Apr 24 14:00:00 CEST 2022 Sat Nov 06 13:23:33 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.752290010 CET	81.222.128.216	443	192.168.2.3	49793	CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:33 CET 2017	Sat Nov 06 13:23:33 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.753668070 CET	81.222.128.216	443	192.168.2.3	49795	CN=*.adriver.ru CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Apr 03 02:00:00 CEST 2020 Mon Nov 06 13:23:33 CET 2017	Sun Apr 24 14:00:00 CEST 2022 Sat Nov 06 13:23:33 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.753668070 CET	81.222.128.216	443	192.168.2.3	49795	CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:33 CET 2017	Sat Nov 06 13:23:33 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.880341053 CET	136.243.148.229	443	192.168.2.3	49797	CN=sync.1dmp.io CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Tue Nov 03 11:35:48 CET 2020 Thu Mar 17 17:40:46 CET 2016	Mon Feb 01 11:35:48 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.880341053 CET	136.243.148.229	443	192.168.2.3	49797	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.885727882 CET	136.243.148.229	443	192.168.2.3	49796	CN=sync.1dmp.io CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Tue Nov 03 11:35:48 CET 2020 Thu Mar 17 17:40:46 CET 2016	Mon Feb 01 11:35:48 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.885727882 CET	136.243.148.229	443	192.168.2.3	49796	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.992985964 CET	176.9.238.190	443	192.168.2.3	49800	CN=adx.com.ru, OU=PositiveSSL, OU=Domain Control Validated CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE	Mon May 20 02:00:00 CEST 2019 Fri Nov 02 01:00:00 CET 2018 Tue May 30 12:48:38 CEST 2000 Tue May 30 12:48:38 CEST 2000	Sun May 23 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2031 Sat May 30 12:48:38 CEST 2020 Sat May 30 12:48:38 CEST 2020	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE	Tue May 30 12:48:38 CEST 2000	Sat May 30 12:48:38 CEST 2020
					CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE	CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE	Tue May 30 12:48:38 CEST 2000	Sat May 30 12:48:38 CEST 2020
Jan 7, 2021 07:32:43.998702049 CET	80.64.106.147	443	192.168.2.3	49798	CN=*.rutarget.ru, O=Segmento LLC, L=, C=RU CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu May 07 02:00:00 CEST 2020 Mon Nov 06 13:23:52 CET 2017	Wed Jun 09 14:00:00 CEST 2021 Sat Nov 06 13:23:52 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.998702049 CET	80.64.106.147	443	192.168.2.3	49798	CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:52 CET 2017	Sat Nov 06 13:23:52 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.999012947 CET	95.211.66.35	443	192.168.2.3	49804	CN=adlmerge.com CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Sun Oct 25 19:42:28 CET 2020 Thu Mar 17 17:40:46 CET 2016	Sat Jan 23 19:42:28 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.999012947 CET	95.211.66.35	443	192.168.2.3	49804	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.999512911 CET	95.211.66.35	443	192.168.2.3	49805	CN=adlmerge.com CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Sun Oct 25 19:42:28 CET 2020 Thu Mar 17 17:40:46 CET 2016	Sat Jan 23 19:42:28 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:43.999512911 CET	95.211.66.35	443	192.168.2.3	49805	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:44.000828028 CET	176.9.238.190	443	192.168.2.3	49801	CN=adx.com.ru, OU=PositiveSSL, OU=Domain Control Validated CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE	Mon May 20 02:00:00 CEST 2019 Fri Nov 02 01:00:00 CET 2018 Tue May 30 12:48:38 CEST 2000 Tue May 30 12:48:38 CEST 2000	Sun May 23 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2031 Sat May 30 12:48:38 CEST 2020 Sat May 30 12:48:38 CEST 2020	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE	Tue May 30 12:48:38 CEST 2000	Sat May 30 12:48:38 CEST 2020
					CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE	CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE	Tue May 30 12:48:38 CEST 2000	Sat May 30 12:48:38 CEST 2020
Jan 7, 2021 07:32:44.016463041 CET	80.64.106.147	443	192.168.2.3	49799	CN=*.rutarget.ru, O=Segmento LLC, L=, C=RU CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu May 07 02:00:00 CEST 2020 Mon Nov 06 13:23:52 CET 2017	Wed Jun 09 14:00:00 CEST 2021 Sat Nov 06 13:23:52 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:44.016463041 CET	80.64.106.147	443	192.168.2.3	49799	CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:52 CET 2017	Sat Nov 06 13:23:52 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:44.022851944 CET	31.220.27.134	443	192.168.2.3	49806	CN=uuidksinc.net CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Sat Dec 19 17:45:58 CET 2020 Wed Oct 07 21:21:40 CEST 2020	Fri Mar 19 17:45:58 CET 2021 Wed Sep 29 21:21:40 CEST 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:44.022851944 CET	31.220.27.134	443	192.168.2.3	49806	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:44.023483992 CET	31.220.27.134	443	192.168.2.3	49807	CN=uuidksinc.net CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Sat Dec 19 17:45:58 CET 2020 Wed Oct 07 21:21:40 CEST 2020	Fri Mar 19 17:45:58 CET 2021 Wed Sep 29 21:21:40 CEST 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:44.023483992 CET	31.220.27.134	443	192.168.2.3	49807	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:44.051187992 CET	37.9.245.57	443	192.168.2.3	49803	CN=*.ops.beeline.ru CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Tue Jun 23 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Mon Feb 01 01:00:00 CET 2010	Sat Jun 25 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031 Tue Jan 19 00:59:59 CET 2038	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Mon Feb 01 01:00:00 CET 2010	Tue Jan 19 00:59:59 CET 2038
Jan 7, 2021 07:32:44.057241917 CET	37.9.245.57	443	192.168.2.3	49802	CN=*.ops.beeline.ru CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Tue Jun 23 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Mon Feb 01 01:00:00 CET 2010	Sat Jun 25 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031 Tue Jan 19 00:59:59 CET 2038	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Mon Feb 01 01:00:00 CET 2010	Tue Jan 19 00:59:59 CET 2038
Jan 7, 2021 07:32:44.162838936 CET	217.66.147.170	443	192.168.2.3	49814	CN=*.rtb.mts.ru, OU=MTS PJSC, O=Mobile TeleSystems Public Joint Stock Company, L=Moscow, ST=Moscow, C=RU CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Oct 19 02:00:00 CEST 2018 Fri Nov 10 01:00:00 CET 2006 Mon Nov 06 13:23:52 CET 2017	Sun Jan 17 13:00:00 CET 2021 Mon Nov 10 01:00:00 CET 2031 Sat Nov 06 13:23:52 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
					CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:52 CET 2017	Sat Nov 06 13:23:52 CET 2027
Jan 7, 2021 07:32:44.163603067 CET	116.202.236.171	443	192.168.2.3	49811	CN=*.buzzoola.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Jun 30 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019 Thu Jan 01 01:00:00 CET 2004	Thu Sep 29 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
					CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Jan 7, 2021 07:32:44.164612055 CET	217.66.147.170	443	192.168.2.3	49815	CN=*.rtb.mts.ru, OU=MTS PJSC, O=Mobile TeleSystems Public Joint Stock Company, L=Moscow, ST=Moscow, C=RU CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Oct 19 02:00:00 CEST 2018 Fri Nov 10 01:00:00 CET 2006 Mon Nov 06 13:23:52 CET 2017	Sun Jan 17 13:00:00 CET 2021 Mon Nov 10 01:00:00 CET 2031 Sat Nov 06 13:23:52 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
					CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:52 CET 2017	Sat Nov 06 13:23:52 CET 2027
Jan 7, 2021 07:32:44.193480968 CET	176.99.5.102	443	192.168.2.3	49809	CN=ut.rktch.com CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Tue Jan 05 12:27:50 CET 2021 Wed Oct 07 21:21:40 CEST 2020	Mon Apr 05 13:27:50 CEST 2021 Wed Sep 29 21:21:40 CEST 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:44.193480968 CET	176.99.5.102	443	192.168.2.3	49809	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:44.194729090 CET	217.65.2.150	443	192.168.2.3	49810	CN=new-programmatic.com CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Nov 26 07:50:16 CET 2020 Thu Mar 17 17:40:46 CET 2016	Wed Feb 24 07:50:16 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:44.194729090 CET	217.65.2.150	443	192.168.2.3	49810	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:44.199594975 CET	176.99.5.102	443	192.168.2.3	49812	CN=ut.rktch.com CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Tue Jan 05 12:27:50 CET 2021 Wed Oct 07 21:21:40 CEST 2020	Mon Apr 05 13:27:50 CEST 2021 Wed Sep 29 21:21:40 CEST 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:44.199594975 CET	176.99.5.102	443	192.168.2.3	49812	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:45.134037971 CET	116.202.236.171	443	192.168.2.3	49813	CN=*.buzzoola.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Jun 30 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019 Thu Jan 01 01:00:00 CET 2004	Thu Sep 29 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
					CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Jan 7, 2021 07:32:45.159147978 CET	217.65.2.150	443	192.168.2.3	49808	CN=new-programmatic.com CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Nov 26 07:50:16 CET 2020 Thu Mar 17 17:40:46 CET 2016	Wed Feb 24 07:50:16 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:45.159147978 CET	217.65.2.150	443	192.168.2.3	49808	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:45.169116020 CET	104.22.4.87	443	192.168.2.3	49819	CN=advarkads.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Sat Jul 04 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Sun Jul 04 14:00:00 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:45.169116020 CET	104.22.4.87	443	192.168.2.3	49819	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:45.170567989 CET	104.22.4.87	443	192.168.2.3	49818	CN=advarkads.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Sat Jul 04 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Sun Jul 04 14:00:00 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:45.170567989 CET	104.22.4.87	443	192.168.2.3	49818	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:45.171015978 CET	31.172.81.172	443	192.168.2.3	49817	CN=*.adsniper.ru CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Mon Oct 12 10:26:27 CEST 2020 Thu Mar 17 17:40:46 CET 2016	Sun Jan 10 09:26:27 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:45.171015978 CET	31.172.81.172	443	192.168.2.3	49817	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:45.189228058 CET	31.172.81.172	443	192.168.2.3	49816	CN=*.adsniper.ru CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Mon Oct 12 10:26:27 CEST 2020 Thu Mar 17 17:40:46 CET 2016	Sun Jan 10 09:26:27 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:45.189228058 CET	31.172.81.172	443	192.168.2.3	49816	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:45.310935020 CET	185.148.37.80	443	192.168.2.3	49821	CN=fcgi.2xclick.ru CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Tue Nov 10 01:23:15 CET 2020 Thu Mar 17 17:40:46 CET 2016	Mon Feb 08 01:23:15 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:45.310935020 CET	185.148.37.80	443	192.168.2.3	49821	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:45.312151909 CET	185.148.37.80	443	192.168.2.3	49820	CN=fcgi.2xclick.ru CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Tue Nov 10 01:23:15 CET 2020 Thu Mar 17 17:40:46 CET 2016	Mon Feb 08 01:23:15 CET 2021 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:45.312151909 CET	185.148.37.80	443	192.168.2.3	49820	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:45.430351973 CET	35.190.16.14	443	192.168.2.3	49822	CN=*.frontend.weborama.fr, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Wed Feb 20 11:48:16 CET 2019 Tue May 03 09:00:00 CEST 2011	Wed Apr 21 12:23:00 CEST 2021 Sat May 03 09:00:00 CEST 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:45.430351973 CET	35.190.16.14	443	192.168.2.3	49822	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:45.431705952 CET	35.190.16.14	443	192.168.2.3	49823	CN=*.frontend.weborama.fr, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Wed Feb 20 11:48:16 CET 2019 Tue May 03 09:00:00 CEST 2011	Wed Apr 21 12:23:00 CEST 2021 Sat May 03 09:00:00 CEST 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:45.431705952 CET	35.190.16.14	443	192.168.2.3	49823	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:45.506649971 CET	213.87.44.207	443	192.168.2.3	49824	CN=*.rtb.mts.ru, O=Mobile TeleSystems Public Joint Stock Company, L=Moscow, C=RU CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Dec 21 01:00:00 CET 2020 Mon Nov 06 13:23:52 CET 2017 Fri Nov 10 01:00:00 CET 2006	Thu Jan 20 00:59:59 CET 2022 Sat Nov 06 13:23:52 CET 2027 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:52 CET 2017	Sat Nov 06 13:23:52 CET 2027
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jan 7, 2021 07:32:45.507838011 CET	213.87.44.207	443	192.168.2.3	49825	CN=*.rtb.mts.ru, O=Mobile TeleSystems Public Joint Stock Company, L=Moscow, C=RU CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Dec 21 01:00:00 CET 2020 Mon Nov 06 13:23:52 CET 2017 Fri Nov 10 01:00:00 CET 2006	Thu Jan 20 00:59:59 CET 2022 Sat Nov 06 13:23:52 CET 2027 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:52 CET 2017	Sat Nov 06 13:23:52 CET 2027
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jan 7, 2021 07:32:45.982896090 CET	188.42.29.81	443	192.168.2.3	49826	CN=*.advarkads.com CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3 CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Thu Dec 03 13:08:18 CET 2020 Tue Jul 28 02:00:00 CEST 2020 Wed Mar 18 11:00:00 CET 2009	Tue Jan 04 13:08:18 CET 2022 Sun Mar 18 01:00:00 CET 2029 Sun Mar 18 11:00:00 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Tue Jul 28 02:00:00 CEST 2020	Sun Mar 18 01:00:00 CET 2029
					CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Wed Mar 18 11:00:00 CET 2009	Sun Mar 18 11:00:00 CET 2029
Jan 7, 2021 07:32:46.053581953 CET	188.42.29.81	443	192.168.2.3	49827	CN=*.advarkads.com CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3 CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Thu Dec 03 13:08:18 CET 2020 Tue Jul 28 02:00:00 CEST 2020 Wed Mar 18 11:00:00 CET 2009	Tue Jan 04 13:08:18 CET 2022 Sun Mar 18 01:00:00 CET 2029 Sun Mar 18 11:00:00 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Tue Jul 28 02:00:00 CEST 2020	Sun Mar 18 01:00:00 CET 2029
					CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Wed Mar 18 11:00:00 CET 2009	Sun Mar 18 11:00:00 CET 2029
Jan 7, 2021 07:32:47.746196032 CET	93.158.134.90	443	192.168.2.3	49828	CN=an.yandex.by, O=Yandex LLC, OU=ITO, L=Moscow, C=RU CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL CN=Certum CA, O=Unizeto Sp. z o.o., C=PL	Thu Oct 01 16:35:37 CEST 2020 Wed Jan 21 13:00:00 CET 2015 Wed Oct 22 14:07:37 CEST 2008	Thu Apr 01 16:35:37 CEST 2021 Sat Jan 18 13:00:00 CET 2025 Thu Jun 10 12:46:39 CEST 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU	CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	Wed Jan 21 13:00:00 CET 2015	Sat Jan 18 13:00:00 CET 2025
					CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	CN=Certum CA, O=Unizeto Sp. z o.o., C=PL	Wed Oct 22 14:07:37 CEST 2008	Thu Jun 10 12:46:39 CEST 2027
Jan 7, 2021 07:32:47.747679949 CET	93.158.134.90	443	192.168.2.3	49829	CN=an.yandex.by, O=Yandex LLC, OU=ITO, L=Moscow, C=RU CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL CN=Certum CA, O=Unizeto Sp. z o.o., C=PL	Thu Oct 01 16:35:37 CEST 2020 Wed Jan 21 13:00:00 CET 2015 Wed Oct 22 14:07:37 CEST 2008	Thu Apr 01 16:35:37 CEST 2021 Sat Jan 18 13:00:00 CET 2025 Thu Jun 10 12:46:39 CEST 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU	CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	Wed Jan 21 13:00:00 CET 2015	Sat Jan 18 13:00:00 CET 2025
					CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	CN=Certum CA, O=Unizeto Sp. z o.o., C=PL	Wed Oct 22 14:07:37 CEST 2008	Thu Jun 10 12:46:39 CEST 2027
Jan 7, 2021 07:32:47.859756947 CET	89.108.119.28	443	192.168.2.3	49831	CN=my.aidata.me CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Tue Feb 25 01:00:00 CET 2020 Fri Nov 02 01:00:00 CET 2018 Mon Feb 01 01:00:00 CET 2010	Sat Feb 26 00:59:59 CET 2022 Wed Jan 01 00:59:59 CET 2031 Tue Jan 19 00:59:59 CET 2038	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Mon Feb 01 01:00:00 CET 2010	Tue Jan 19 00:59:59 CET 2038
Jan 7, 2021 07:32:47.870537043 CET	89.108.119.28	443	192.168.2.3	49830	CN=my.aidata.me CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Tue Feb 25 01:00:00 CET 2020 Fri Nov 02 01:00:00 CET 2018 Mon Feb 01 01:00:00 CET 2010	Sat Feb 26 00:59:59 CET 2022 Wed Jan 01 00:59:59 CET 2031 Tue Jan 19 00:59:59 CET 2038	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Mon Feb 01 01:00:00 CET 2010	Tue Jan 19 00:59:59 CET 2038
Jan 7, 2021 07:32:57.108386040 CET	5.9.154.76	443	192.168.2.3	49832	CN=sonar.semantiqo.com, OU=PositiveSSL, OU=Domain Control Validated CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Tue Nov 12 01:00:00 CET 2019 Fri Nov 02 01:00:00 CET 2018	Fri Nov 12 00:59:59 CET 2021 Wed Jan 01 00:59:59 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:57.108386040 CET	5.9.154.76	443	192.168.2.3	49832	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:57.108953953 CET	5.9.154.76	443	192.168.2.3	49833	CN=sonar.semantiqo.com, OU=PositiveSSL, OU=Domain Control Validated CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Tue Nov 12 01:00:00 CET 2019 Fri Nov 02 01:00:00 CET 2018	Fri Nov 12 00:59:59 CET 2021 Wed Jan 01 00:59:59 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:32:57.108953953 CET	5.9.154.76	443	192.168.2.3	49833	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031		9e10692f1b7f78228b2d4e424db3a98c
Jan 7, 2021 07:33:03.180639982 CET	213.180.204.205	443	192.168.2.3	49847	CN=loginza.ru, O=Yandex LLC, OU=ITO, L=Moscow, C=RU CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL CN=Certum CA, O=Unizeto Sp. z o.o., C=PL	Tue Sep 29 18:20:51 CEST 2020 Wed Jan 21 13:00:00 CET 2015 Wed Oct 22 14:07:37 CEST 2008	Tue Mar 30 18:20:51 CEST 2021 Sat Jan 18 13:00:00 CET 2025 Thu Jun 10 12:46:39 CEST 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU	CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	Wed Jan 21 13:00:00 CET 2015	Sat Jan 18 13:00:00 CET 2025
					CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	CN=Certum CA, O=Unizeto Sp. z o.o., C=PL	Wed Oct 22 14:07:37 CEST 2008	Thu Jun 10 12:46:39 CEST 2027
Jan 7, 2021 07:33:03.183008909 CET	213.180.204.205	443	192.168.2.3	49848	CN=loginza.ru, O=Yandex LLC, OU=ITO, L=Moscow, C=RU CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL CN=Certum CA, O=Unizeto Sp. z o.o., C=PL	Tue Sep 29 18:20:51 CEST 2020 Wed Jan 21 13:00:00 CET 2015 Wed Oct 22 14:07:37 CEST 2008	Tue Mar 30 18:20:51 CEST 2021 Sat Jan 18 13:00:00 CET 2025 Thu Jun 10 12:46:39 CEST 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU	CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	Wed Jan 21 13:00:00 CET 2015	Sat Jan 18 13:00:00 CET 2025
					CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	CN=Certum CA, O=Unizeto Sp. z o.o., C=PL	Wed Oct 22 14:07:37 CEST 2008	Thu Jun 10 12:46:39 CEST 2027
Jan 7, 2021 07:33:06.912444115 CET	87.250.250.36	443	192.168.2.3	49854	CN=favicon.yandex.net, O=Yandex LLC, OU=ITO, L=Moscow, C=RU CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL CN=Certum CA, O=Unizeto Sp. z o.o., C=PL	Tue Sep 29 23:44:53 CEST 2020 Wed Jan 21 13:00:00 CET 2015 Wed Oct 22 14:07:37 CEST 2008	Sun Feb 28 22:44:53 CET 2021 Sat Jan 18 13:00:00 CET 2025 Thu Jun 10 12:46:39 CEST 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU	CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	Wed Jan 21 13:00:00 CET 2015	Sat Jan 18 13:00:00 CET 2025
					CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	CN=Certum CA, O=Unizeto Sp. z o.o., C=PL	Wed Oct 22 14:07:37 CEST 2008	Thu Jun 10 12:46:39 CEST 2027
Jan 7, 2021 07:33:06.915296078 CET	87.250.250.36	443	192.168.2.3	49853	CN=favicon.yandex.net, O=Yandex LLC, OU=ITO, L=Moscow, C=RU CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL CN=Certum CA, O=Unizeto Sp. z o.o., C=PL	Tue Sep 29 23:44:53 CEST 2020 Wed Jan 21 13:00:00 CET 2015 Wed Oct 22 14:07:37 CEST 2008	Sun Feb 28 22:44:53 CET 2021 Sat Jan 18 13:00:00 CET 2025 Thu Jun 10 12:46:39 CEST 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU	CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	Wed Jan 21 13:00:00 CET 2015	Sat Jan 18 13:00:00 CET 2025
					CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	CN=Certum CA, O=Unizeto Sp. z o.o., C=PL	Wed Oct 22 14:07:37 CEST 2008	Thu Jun 10 12:46:39 CEST 2027
Jan 7, 2021 07:33:06.938313961 CET	178.154.131.217	443	192.168.2.3	49855	CN=*.yastatic.net, O=Yandex LLC, OU=ITO, L=Moscow, C=RU CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL CN=Certum CA, O=Unizeto Sp. z o.o., C=PL	Tue Sep 29 13:07:13 CEST 2020 Wed Jan 21 13:00:00 CET 2015 Wed Oct 22 14:07:37 CEST 2008	Tue Mar 30 13:07:13 CEST 2021 Sat Jan 18 13:00:00 CET 2025 Thu Jun 10 12:46:39 CEST 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU	CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	Wed Jan 21 13:00:00 CET 2015	Sat Jan 18 13:00:00 CET 2025
					CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	CN=Certum CA, O=Unizeto Sp. z o.o., C=PL	Wed Oct 22 14:07:37 CEST 2008	Thu Jun 10 12:46:39 CEST 2027
Jan 7, 2021 07:33:06.940356970 CET	178.154.131.217	443	192.168.2.3	49856	CN=*.yastatic.net, O=Yandex LLC, OU=ITO, L=Moscow, C=RU CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL CN=Certum CA, O=Unizeto Sp. z o.o., C=PL	Tue Sep 29 13:07:13 CEST 2020 Wed Jan 21 13:00:00 CET 2015 Wed Oct 22 14:07:37 CEST 2008	Tue Mar 30 13:07:13 CEST 2021 Sat Jan 18 13:00:00 CET 2025 Thu Jun 10 12:46:39 CEST 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Yandex CA, OU=Yandex Certification Authority, O=Yandex LLC, C=RU	CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	Wed Jan 21 13:00:00 CET 2015	Sat Jan 18 13:00:00 CET 2025
					CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	CN=Certum CA, O=Unizeto Sp. z o.o., C=PL	Wed Oct 22 14:07:37 CEST 2008	Thu Jun 10 12:46:39 CEST 2027

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: iexplore.exe PID: 5588 Parent PID: 792

General

Start time:	07:32:18
Start date:	07/01/2021
Path:	C:\Program Files\internet explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x7ff6325a0000
File size:	823560 bytes
MD5 hash:	6465CB92B25A7BC1DF8E01D8AC5E7596
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Analysis Process: iexplore.exe PID: 4064 Parent PID: 5588

General

Start time:	07:32:18
Start date:	07/01/2021
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5588 CREDAT:17410 /prefetch:2
Imagebase:	0x350000
File size:	822536 bytes
MD5 hash:	071277CC2E3DF41EEEA8013E2AB58D5A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Disassembly

Reset < >

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Network device logs, Network intrusion detection system, Packet capture, Process use of network, SSL/TLS inspection, Web proxy
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report http://ovd.ru/forum/register.php?a=act&u=84666&i=25545989

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

Phishing:

Compliance:

Networking:

System Summary:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Packets

Code Manipulations

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: iexplore.exe PID: 5588 Parent PID: 792

General

Chronological Activities

Analysis Process: iexplore.exe PID: 4064 Parent PID: 5588

General

Chronological Activities

Disassembly