Play interactive tour

Edit tour

Analysis Report https://l.info6.accountonline.com/rts/go2.aspx?h=1006873&tp=i-1NHD-Q4L-FWM-6pIROB-2M-11iUTE-1c-2U96D-6kgs2T-l5Zh59mRxl-2Gp8op&x=%2FRSnextgen%2Fsvc%2Flaunch%2Findex.action%3FsiteId%3DPLCN_BESTBUY%26desc%3dEUZP1BCM0043%26cmp%3dESVC_EUZP1BCM0043%23signon

Overview

General Information

Sample URL:	https://l.info6.accountonline.com/rts/go2.aspx?h=1006873&tp=i-1NHD-Q4L-FWM-6pIROB-2M-11iUTE-1c-2U96D-6kgs2T-l5Zh59mRxl-2Gp8op&x=%2FRSnextgen%2Fsvc%2Flaunch%2Findex.action%3FsiteId%3DPLCN_BESTBUY%26desc%3dEUZP1BCM0043%26cmp%3dESVC_EUZP1BCM0043%23signon
Analysis ID:	338622
Most interesting Screenshot:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Found iframes

HTML title does not match URL

Invalid T&C link found

Classification

Startup

System is w10x64

iexplore.exe (PID: 5728 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)

iexplore.exe (PID: 3280 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5728 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#signon	HTTP Parser: Iframe src: https://content22.citibankonline.com/fp/ls_fp.html;CIS3SID=477462E746B88A1BAA88E20AE8D354DA?org_id=530q7tul&session_id=879cbaa51b402b71bb766c2f49988dc2eb9f65b335f6ab816e713cc9e55f007f&nonce=67b9806a42a06d88&pageid=1
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#signon	HTTP Parser: Iframe src: https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=477462E746B88A1BAA88E20AE8D354DA?org_id=530q7tul&session_id=879cbaa51b402b71bb766c2f49988dc2eb9f65b335f6ab816e713cc9e55f007f&nonce=67b9806a42a06d88&pageid=1
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#signon	HTTP Parser: Iframe src: https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=477462E746B88A1BAA88E20AE8D354DA?org_id=530q7tul&session_id=879cbaa51b402b71bb766c2f49988dc2eb9f65b335f6ab816e713cc9e55f007f&nonce=67b9806a42a06d88&pageid=1
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#sign_off_confirmation	HTTP Parser: Iframe src: https://tpc.googlesyndication.com/sodar/sodar2/220/runner.html
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#signon	HTTP Parser: Iframe src: https://content22.citibankonline.com/fp/ls_fp.html;CIS3SID=477462E746B88A1BAA88E20AE8D354DA?org_id=530q7tul&session_id=879cbaa51b402b71bb766c2f49988dc2eb9f65b335f6ab816e713cc9e55f007f&nonce=67b9806a42a06d88&pageid=1
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#signon	HTTP Parser: Iframe src: https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=477462E746B88A1BAA88E20AE8D354DA?org_id=530q7tul&session_id=879cbaa51b402b71bb766c2f49988dc2eb9f65b335f6ab816e713cc9e55f007f&nonce=67b9806a42a06d88&pageid=1
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#signon	HTTP Parser: Iframe src: https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=477462E746B88A1BAA88E20AE8D354DA?org_id=530q7tul&session_id=879cbaa51b402b71bb766c2f49988dc2eb9f65b335f6ab816e713cc9e55f007f&nonce=67b9806a42a06d88&pageid=1
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#sign_off_confirmation	HTTP Parser: Iframe src: https://tpc.googlesyndication.com/sodar/sodar2/220/runner.html

Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#helpcontact	HTTP Parser: Title: My Best Buy Credit Card: Log In or Apply does not match URL
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#signon	HTTP Parser: Title: My Best Buy Credit Card: Log In or Apply does not match URL
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#sign_off_confirmation	HTTP Parser: Title: My Best Buy Credit Card: Log In or Apply does not match URL
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#helpcontact	HTTP Parser: Title: My Best Buy Credit Card: Log In or Apply does not match URL
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#signon	HTTP Parser: Title: My Best Buy Credit Card: Log In or Apply does not match URL
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#sign_off_confirmation	HTTP Parser: Title: My Best Buy Credit Card: Log In or Apply does not match URL

Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#helpcontact	HTTP Parser: Invalid link: Important Information About Your Best Buy American Express Card Upgrade, Department Stores National Bank Credit Card Disclosures for the Best Buy American Express Card, American Express Credit Card Agreement, and Privacy Notice.
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#helpcontact	HTTP Parser: Invalid link: Important Information About Your Best Buy American Express Card Upgrade, Department Stores National Bank Credit Card Disclosures for the Best Buy American Express Card, American Express Credit Card Agreement, and Privacy Notice.
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#signon	HTTP Parser: Invalid link: Important Information About Your Best Buy American Express Card Upgrade, Department Stores National Bank Credit Card Disclosures for the Best Buy American Express Card, American Express Credit Card Agreement, and Privacy Notice.
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#signon	HTTP Parser: Invalid link: Important Information About Your Best Buy American Express Card Upgrade, Department Stores National Bank Credit Card Disclosures for the Best Buy American Express Card, American Express Credit Card Agreement, and Privacy Notice.
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#sign_off_confirmation	HTTP Parser: Invalid link: Important Information About Your Best Buy American Express Card Upgrade, Department Stores National Bank Credit Card Disclosures for the Best Buy American Express Card, American Express Credit Card Agreement, and Privacy Notice.
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#sign_off_confirmation	HTTP Parser: Invalid link: Important Information About Your Best Buy American Express Card Upgrade, Department Stores National Bank Credit Card Disclosures for the Best Buy American Express Card, American Express Credit Card Agreement, and Privacy Notice.
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#helpcontact	HTTP Parser: Invalid link: Important Information About Your Best Buy American Express Card Upgrade, Department Stores National Bank Credit Card Disclosures for the Best Buy American Express Card, American Express Credit Card Agreement, and Privacy Notice.
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#helpcontact	HTTP Parser: Invalid link: Important Information About Your Best Buy American Express Card Upgrade, Department Stores National Bank Credit Card Disclosures for the Best Buy American Express Card, American Express Credit Card Agreement, and Privacy Notice.
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#signon	HTTP Parser: Invalid link: Important Information About Your Best Buy American Express Card Upgrade, Department Stores National Bank Credit Card Disclosures for the Best Buy American Express Card, American Express Credit Card Agreement, and Privacy Notice.
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#signon	HTTP Parser: Invalid link: Important Information About Your Best Buy American Express Card Upgrade, Department Stores National Bank Credit Card Disclosures for the Best Buy American Express Card, American Express Credit Card Agreement, and Privacy Notice.
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#sign_off_confirmation	HTTP Parser: Invalid link: Important Information About Your Best Buy American Express Card Upgrade, Department Stores National Bank Credit Card Disclosures for the Best Buy American Express Card, American Express Credit Card Agreement, and Privacy Notice.
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#sign_off_confirmation	HTTP Parser: Invalid link: Important Information About Your Best Buy American Express Card Upgrade, Department Stores National Bank Credit Card Disclosures for the Best Buy American Express Card, American Express Credit Card Agreement, and Privacy Notice.

Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#helpcontact	HTTP Parser: No <meta name="author".. found
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#signon	HTTP Parser: No <meta name="author".. found
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#sign_off_confirmation	HTTP Parser: No <meta name="author".. found
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#helpcontact	HTTP Parser: No <meta name="author".. found
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#signon	HTTP Parser: No <meta name="author".. found
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#sign_off_confirmation	HTTP Parser: No <meta name="author".. found

Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#helpcontact	HTTP Parser: No <meta name="copyright".. found
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#signon	HTTP Parser: No <meta name="copyright".. found
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#sign_off_confirmation	HTTP Parser: No <meta name="copyright".. found
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#helpcontact	HTTP Parser: No <meta name="copyright".. found
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#signon	HTTP Parser: No <meta name="copyright".. found
Source: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#sign_off_confirmation	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 63.148.46.109:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.148.46.109:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.147.58:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.147.58:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.133:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.133:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.218.154:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.218.154:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.42.228:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.42.228:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.127.154:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.127.154:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.133.67:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.133.67:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.107.138.236:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.107.138.236:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.132.130:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.132.130:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.241.45.82:443 -> 192.168.2.4:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.241.45.82:443 -> 192.168.2.4:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.132.129:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.132.129:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.212.164.82:443 -> 192.168.2.4:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.212.164.82:443 -> 192.168.2.4:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.181.18.61:443 -> 192.168.2.4:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.181.18.61:443 -> 192.168.2.4:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.194.79.155:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.194.79.155:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.119.157:443 -> 192.168.2.4:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.119.157:443 -> 192.168.2.4:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.127.157:443 -> 192.168.2.4:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.127.157:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.89.12.87:443 -> 192.168.2.4:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.89.12.87:443 -> 192.168.2.4:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.75.9.158:443 -> 192.168.2.4:49901 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.75.9.158:443 -> 192.168.2.4:49902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49925 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49939 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49940 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49961 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49960 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.89.12.87:443 -> 192.168.2.4:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.89.12.87:443 -> 192.168.2.4:49978 version: TLS 1.2

Source: msapplication.xml0.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0x8cb995bf,0x01d6e8fb</date><accdate>0x8cb995bf,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml0.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0x8cb995bf,0x01d6e8fb</date><accdate>0x8cba3214,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Facebook.url"/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml5.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0x8cbe77d7,0x01d6e8fb</date><accdate>0x8cbe77d7,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: msapplication.xml5.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0x8cbe77d7,0x01d6e8fb</date><accdate>0x8cbe77d7,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Twitter.url"/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: msapplication.xml7.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0x8cc04c9c,0x01d6e8fb</date><accdate>0x8cc04c9c,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.youtube.com (Youtube)
Source: msapplication.xml7.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0x8cc04c9c,0x01d6e8fb</date><accdate>0x8cc04c9c,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Youtube.url"/></tile></msapplication></browserconfig> equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: l.info6.accountonline.com

Source: vendor[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: vendor[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: vendor[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: vendor[1].js.2.dr	String found in binary or memory: http://benalman.com/about/license/
Source: vendor[1].js.2.dr	String found in binary or memory: http://benalman.com/projects/jquery-hashchange-plugin/
Source: HumanBBY-75Bold-Web[1].eot.2.dr, HumanBBYCondensed-47Light-Web[1].eot.2.dr, HumanBBY-65Medium-Web[1].eot.2.dr, HumanBBY-45Light-Web[1].eot.2.dr, HumanBBYCondensed-77Bold-Web[1].eot.2.dr, HumanBBY-55Regular-Web[1].eot.2.dr	String found in binary or memory: http://commercialtype.com/license
Source: HumanBBY-45Light-Web[1].eot.2.dr	String found in binary or memory: http://commercialtype.com/license45
Source: HumanBBYCondensed-47Light-Web[1].eot.2.dr	String found in binary or memory: http://commercialtype.com/license47
Source: HumanBBY-55Regular-Web[1].eot.2.dr	String found in binary or memory: http://commercialtype.com/license55
Source: HumanBBY-65Medium-Web[1].eot.2.dr	String found in binary or memory: http://commercialtype.com/license65
Source: HumanBBY-75Bold-Web[1].eot.2.dr	String found in binary or memory: http://commercialtype.com/license75
Source: HumanBBYCondensed-77Bold-Web[1].eot.2.dr	String found in binary or memory: http://commercialtype.com/license77
Source: HumanBBY-75Bold-Web[1].eot.2.dr, HumanBBYCondensed-47Light-Web[1].eot.2.dr, HumanBBY-65Medium-Web[1].eot.2.dr, HumanBBY-45Light-Web[1].eot.2.dr, HumanBBYCondensed-77Bold-Web[1].eot.2.dr, HumanBBY-55Regular-Web[1].eot.2.dr	String found in binary or memory: http://commercialtype.com/licenseCopyright
Source: HumanBBY-55Regular-Web[1].eot.2.dr	String found in binary or memory: http://commercialtype.comhttp://www.christianschwartz.comNot
Source: vendor[1].js.2.dr	String found in binary or memory: http://dev.jtsage.com/jQM-DateBox/
Source: jsrsasign-all-min[1].js.2.dr	String found in binary or memory: http://developer.yahoo.com/yui/license.html
Source: vendor[1].js.2.dr	String found in binary or memory: http://jquery.com/
Source: vendor[1].js.2.dr	String found in binary or memory: http://jquery.org/license
Source: vendor[1].js.2.dr	String found in binary or memory: http://jquerymobile.com
Source: vendor[1].js.2.dr	String found in binary or memory: http://jqueryui.com
Source: vendor[1].js.2.dr	String found in binary or memory: http://jsviews.com/jsviews)
Source: picturefill.min[1].js.2.dr	String found in binary or memory: http://scottjehl.github.io/picturefill
Source: vendor[1].js.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: jsrsasign-all-min[1].js.2.dr	String found in binary or memory: http://www-cs-students.stanford.edu/~tjw/jsbn/
Source: msapplication.xml.1.dr	String found in binary or memory: http://www.amazon.com/
Source: index[1].htm.2.dr, {A7F97BB7-54EE-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: http://www.bestbuy.com
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: http://www.bestbuy.com/
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: http://www.bestbuy.com/es.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&d
Source: pubads_impl_2021010903[1].js.2.dr	String found in binary or memory: http://www.broofa.com
Source: index[1].htm.2.dr	String found in binary or memory: http://www.citigroup.com/citi/accessibility.html
Source: msapplication.xml1.1.dr	String found in binary or memory: http://www.google.com/
Source: msapplication.xml2.1.dr	String found in binary or memory: http://www.live.com/
Source: crossdomain[2].xml.2.dr	String found in binary or memory: http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd
Source: msapplication.xml3.1.dr	String found in binary or memory: http://www.nytimes.com/
Source: msapplication.xml4.1.dr	String found in binary or memory: http://www.reddit.com/
Source: msapplication.xml5.1.dr	String found in binary or memory: http://www.twitter.com/
Source: msapplication.xml6.1.dr	String found in binary or memory: http://www.wikipedia.com/
Source: msapplication.xml7.1.dr	String found in binary or memory: http://www.youtube.com/
Source: dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	String found in binary or memory: https://3518820.fls.doubleclick.net/activityi;src
Source: b5aad0fcfa88df623d73d778783501af[1].js.2.dr	String found in binary or memory: https://3860008.fls.doubleclick.net/activityi;src
Source: dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	String found in binary or memory: https://4448269.fls.doubleclick.net/activityi;src
Source: dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	String found in binary or memory: https://4877208.fls.doubleclick.net/activityi;src
Source: dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	String found in binary or memory: https://5370278.fls.doubleclick.net/activityi;src
Source: dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	String found in binary or memory: https://6276029.fls.doubleclick.net/activityi;src
Source: dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	String found in binary or memory: https://6397642.fls.doubleclick.net/activityi;src
Source: dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	String found in binary or memory: https://6399653.fls.doubleclick.net/activityi;src
Source: dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	String found in binary or memory: https://6953527.fls.doubleclick.net/activityi;src
Source: dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	String found in binary or memory: https://8375412.fls.doubleclick.net/activityi;src
Source: dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	String found in binary or memory: https://8984433.fls.doubleclick.net/activityi;src
Source: b5aad0fcfa88df623d73d778783501af[1].js.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/activity/;src
Source: js[1].js.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity
Source: js[1].js.2.dr	String found in binary or memory: https://adservice.google.com/ddm/regclk
Source: {A7F97BB7-54EE-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://citiretailservices.citibankonline.com/RSnextgen/
Source: {A7F97BB7-54EE-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://citiretailservices.citibankonline.com/RSnextgen//es.citibankonline.com/RSnextgen/svc/launch/
Source: {A7F97BB7-54EE-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://citiretailservices.citibankonline.com/RSnextgen/ices.citibankonline.com/RSnextgen/svc/launch
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/http_sso_shopNow
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/http_sso_shopNowId=PLCN_BESTBUY&d
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/ind
Source: {A7F97BB7-54EE-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?sRoot
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY#
Source: {A7F97BB7-54EE-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUYd
Source: jsrsasign-all-min[1].js.2.dr	String found in binary or memory: https://code.google.com/p/crypto-js/issues/detail?id=84
Source: generic1602688721974[1].js.2.dr	String found in binary or memory: https://console.sessioncam.com/Console/Recordings/PlaybackSession?sessionId=
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://content22.citibankonline.com/fp/ls_fp.html;CIS3SID=477462E746B88A1BAA88E20AE8D354DA?org_id=5
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://content22.citibankonline.com/fp/ls_fp.html;CIS3SID=5CA4FA6DB0F72CF6AFB9DDCEE33B7FE9?org_id=5
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://content22.citibankonline.com/fp/ls_fp.html;CIS3SID=9504B1BC8D3AF7023D0290737170228C?org_id=5
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://content22.citibankonline.com/fp/ls_fp.html;CIS3SID=98B87A8F34D01236BB6F7C55DA819932?org_id=5
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://content22.citibankonline.com/fp/ls_fp.html;CIS3SID=A051B52F93EFFB6AB89D10D9A2E41EDB?org_id=5
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://content22.citibankonline.com/fp/ls_fp.html;CIS3SID=A394EFB0C5A4E35AA9F21A9AF3B5EAEC?org_id=5
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://content22.citibankonline.com/fp/ls_fp.html;CIS3SID=A7AB5E3C13E6291B410B1742D3B64935?org_id=5
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://content22.citibankonline.com/fp/ls_fp.html;CIS3SID=A948CE44526491D09540FDBA60F9064C?org_id=5
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://content22.citibankonline.com/fp/ls_fp.html;CIS3SID=BB6B3243D7974D09AAEA19D1CA2D23F9?org_id=5
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://content22.citibankonline.com/fp/ls_fp.html;CIS3SID=C4D96570896BF9ADED3CC52B8254BF85?org_id=5
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=477462E746B88A1BAA88E20AE8D354DA?org_id=
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=5CA4FA6DB0F72CF6AFB9DDCEE33B7FE9?org_id=
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=9504B1BC8D3AF7023D0290737170228C?org_id=
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=98B87A8F34D01236BB6F7C55DA819932?org_id=
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=A051B52F93EFFB6AB89D10D9A2E41EDB?org_id=
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=A394EFB0C5A4E35AA9F21A9AF3B5EAEC?org_id=
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=A7AB5E3C13E6291B410B1742D3B64935?org_id=
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=A948CE44526491D09540FDBA60F9064C?org_id=
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=BB6B3243D7974D09AAEA19D1CA2D23F9?org_id=
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=C4D96570896BF9ADED3CC52B8254BF85?org_id=
Source: tmx.min[1].js.2.dr	String found in binary or memory: https://content22.citibankonline.com/tags.js?org_id=
Source: jsrsasign-all-min[1].js.2.dr	String found in binary or memory: https://crypto-js.googlecode.com/svn-history/r667/branches/3.x/src/core.js
Source: jsrsasign-all-min[1].js.2.dr	String found in binary or memory: https://github.com/bitcoinjs/bitcoinjs-lib
Source: vendor[1].js.2.dr	String found in binary or memory: https://github.com/jtsage/jquery-mobile-datebox
Source: vendor[1].js.2.dr	String found in binary or memory: https://github.com/jtsage/jquery-mobile-datebox/blob/master/LICENSE.txt
Source: js[1].js.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: pf.mutation.min[1].js.2.dr, picturefill.min[1].js.2.dr	String found in binary or memory: https://github.com/scottjehl/picturefill/blob/master/Authors.txt;
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=477462E746B88A1BAA88E20AE8D354DA?org_id=530q7tul&
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=5CA4FA6DB0F72CF6AFB9DDCEE33B7FE9?org_id=530q7tul&
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=9504B1BC8D3AF7023D0290737170228C?org_id=530q7tul&
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=98B87A8F34D01236BB6F7C55DA819932?org_id=530q7tul&
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=A051B52F93EFFB6AB89D10D9A2E41EDB?org_id=530q7tul&
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=A394EFB0C5A4E35AA9F21A9AF3B5EAEC?org_id=530q7tul&
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=A7AB5E3C13E6291B410B1742D3B64935?org_id=530q7tul&
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=A948CE44526491D09540FDBA60F9064C?org_id=530q7tul&
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=BB6B3243D7974D09AAEA19D1CA2D23F9?org_id=530q7tul&
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=C4D96570896BF9ADED3CC52B8254BF85?org_id=530q7tul&
Source: dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	String found in binary or memory: https://login.dotomi.com/ucm/UCMController?dtm_com
Source: ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://lpcdn.lpsnmedia.net/le_secure_storage/3.12.0.0-release_5037/storage.secure.min.html?loc=http
Source: index[1].htm.2.dr	String found in binary or memory: https://online.citi.com/JRS/portal/template.do?ID=Privacy#notice-at-collection
Source: index[1].htm.2.dr	String found in binary or memory: https://online.citi.com/US/JPS/portal/Index.do?userType=tyLogin&ErrorCode=
Source: index[1].htm.2.dr	String found in binary or memory: https://online.citi.com/US/JRS/portal/template.do?locale=en_US&ID=Privacy
Source: index[1].htm.2.dr	String found in binary or memory: https://online.citi.com/dataprivacyhub
Source: index[1].htm.2.dr	String found in binary or memory: https://online.citibank.com/US/JRS/portal/template.do?locale=en_US&ID=TermsDisclaimer
Source: js[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: js[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: sodar2[1].js.2.dr, runner[1].htm.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/%
Source: runner[1].htm.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=219
Source: sodar2[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=220
Source: index[1].htm.2.dr	String found in binary or memory: https://resources.digital-cloud-citi.medallia.com/wdcusciti/2290/onsite/embed.js
Source: pf.mutation.min[1].js.2.dr	String found in binary or memory: https://scottjehl.github.io/picturefill/
Source: sodar2[1].js.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: sodar2[1].js.2.dr, ~DF4B9D5CBE966F349A.TMP.1.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/220/runner.html
Source: js[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: js[1].js.2.dr	String found in binary or memory: https://www.google.com
Source: sodar2[1].js.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: js[1].js.2.dr	String found in binary or memory: https://www.google.com/travel/flights/click/conversion/
Source: b5aad0fcfa88df623d73d778783501af[1].js.2.dr, dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/
Source: js[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: b5aad0fcfa88df623d73d778783501af[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id
Source: index[1].htm.2.dr	String found in binary or memory: https://www.googletagservices.com/tag/js/gpt.js
Source: js[1].js.2.dr	String found in binary or memory: https://www.googletraveladservices.com/travel/clk/pagead/conversion/
Source: dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	String found in binary or memory: https://www.officedepot.com/
Source: index[1].htm.2.dr	String found in binary or memory: https://www.promisejs.org/polyfills/promise-6.1.0.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 63.148.46.109:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.148.46.109:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.147.58:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.147.58:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.133:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.133:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.218.154:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.218.154:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.42.228:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.42.228:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.127.154:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.127.154:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.133.67:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.133.67:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.107.138.236:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.107.138.236:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.132.130:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.132.130:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.241.45.82:443 -> 192.168.2.4:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.241.45.82:443 -> 192.168.2.4:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.132.129:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.132.129:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.212.164.82:443 -> 192.168.2.4:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.212.164.82:443 -> 192.168.2.4:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.181.18.61:443 -> 192.168.2.4:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.181.18.61:443 -> 192.168.2.4:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.194.79.155:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.194.79.155:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.119.157:443 -> 192.168.2.4:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.119.157:443 -> 192.168.2.4:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.127.157:443 -> 192.168.2.4:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.127.157:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.89.12.87:443 -> 192.168.2.4:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.89.12.87:443 -> 192.168.2.4:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.75.9.158:443 -> 192.168.2.4:49901 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.75.9.158:443 -> 192.168.2.4:49902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49925 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49939 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49940 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49961 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.235.134.131:443 -> 192.168.2.4:49960 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.89.12.87:443 -> 192.168.2.4:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.89.12.87:443 -> 192.168.2.4:49978 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@3/160@40/21

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{A7F97BB5-54EE-11EB-90EB-ECF4BBEA1588}.dat

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DFD81F58F3F86AF88D.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: unknown	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5728 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5728 CREDAT:17410 /prefetch:2	Jump to behavior

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Windows\SysWOW64\Macromed\Flash\ss.cfg

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Drive-by Compromise1	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	File and Directory Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol2	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://l.info6.accountonline.com/rts/go2.aspx?h=1006873&tp=i-1NHD-Q4L-FWM-6pIROB-2M-11iUTE-1c-2U96D-6kgs2T-l5Zh59mRxl-2Gp8op&x=%2FRSnextgen%2Fsvc%2Flaunch%2Findex.action%3FsiteId%3DPLCN_BESTBUY%26desc%3dEUZP1BCM0043%26cmp%3dESVC_EUZP1BCM0043%23signon	0%	Avira URL Cloud	safe

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Link
mboxedge37.tt.omtrdc.net	0%	Virustotal	Browse
medallia.map.fastly.net	0%	Virustotal	Browse
citicorpcreditservic.tt.omtrdc.net	0%	Virustotal	Browse
citibankonline.com.ssl.sc.omtrdc.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
http://www.broofa.com	0%	URL Reputation	safe
http://www.broofa.com	0%	URL Reputation	safe
http://www.broofa.com	0%	URL Reputation	safe
http://commercialtype.comhttp://www.christianschwartz.comNot	0%	Avira URL Cloud	safe
http://dev.jtsage.com/jQM-DateBox/	0%	Avira URL Cloud	safe
http://scottjehl.github.io/picturefill	0%	Avira URL Cloud	safe
https://crypto-js.googlecode.com/svn-history/r667/branches/3.x/src/core.js	0%	Avira URL Cloud	safe
https://scottjehl.github.io/picturefill/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
pagead46.l.doubleclick.net	172.217.218.154	true	false		high
530q7tul7hqjtptrx4pdeztidymlzqwqsjbpeiyyddbada1c24c4b3b4am1.e.aa.online-metrix.net	91.235.134.131	true	false		high
530q7tulbgrmpc2zn2elpybtplympict4fjkql6n799c07a567a2684fam1.e.aa.online-metrix.net	91.235.134.131	true	false		high
530q7tulteoc536ivgylc2l3xxnh46bngnkb3uqf705048ba308e840eam1.e.aa.online-metrix.net	91.235.134.131	true	false		high
h-citibankonline.online-metrix.net	91.235.133.67	true	false		high
mboxedge37.tt.omtrdc.net	54.75.9.158	true	false	0%, Virustotal, Browse	unknown
530q7tulzku6wdtu3adkuko7yi3uw5v645fpbwat2d4d830982da375dam1.e.aa.online-metrix.net	91.235.134.131	true	false		high
530q7tul45nwl2gnwoxnwxppglz6x5doqbb3tpm267d05aaca2f79383am1.e.aa.online-metrix.net	91.235.134.131	true	false		high
va.v.liveperson.net	208.89.12.87	true	false		high
nexus.ensighten.com	18.195.42.228	true	false		high
530q7tul6fwyjard2qsg5hq5snx3q3dm6cm3getw67b9806a42a06d88am1.e.aa.online-metrix.net	91.235.134.131	true	false		high
partnerad.l.doubleclick.net	108.177.127.154	true	false		high
medallia.map.fastly.net	151.101.2.133	true	false	0%, Virustotal, Browse	unknown
citicorpcreditservic.tt.omtrdc.net	52.212.164.82	true	false	0%, Virustotal, Browse	unknown
www.promisejs.org	172.67.147.58	true	false		high
cdn.digitalmarketing.citibankonline.com	34.107.138.236	true	false		high
citibankonline.com.ssl.sc.omtrdc.net	35.181.18.61	true	false	0%, Virustotal, Browse	unknown
h.online-metrix.net	91.235.132.130	true	false		high
aa.online-metrix.net	91.235.132.129	true	false		high
530q7tul2oksten67a72qbpmvqmitj7yq5kac55k94166c0d8e41729dam1.e.aa.online-metrix.net	91.235.134.131	true	false		high
x.info6.accountonline.com	63.148.46.109	true	false		high
cooladata.kampyle.com	35.241.45.82	true	false		high
securepubads.g.doubleclick.net	unknown	unknown	false		high
lpcdn.lpsnmedia.net	unknown	unknown	false		high
www.googletagservices.com	unknown	unknown	false		high
fpdownload.macromedia.com	unknown	unknown	false		high
l.info6.accountonline.com	unknown	unknown	false		high
adservice.google.co.uk	unknown	unknown	false		unknown
udc-neb.kampyle.com	unknown	unknown	false		high
resources.digital-cloud-citi.medallia.com	unknown	unknown	false		high
content22.citibankonline.com	unknown	unknown	false		high
nebula-cdn.kampyle.com	unknown	unknown	false		high
accdn.lpsnmedia.net	unknown	unknown	false		high
metrics1.citibankonline.com	unknown	unknown	false		high
lptag.liveperson.net	unknown	unknown	false		high
citiretailservices.citibankonline.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Reputation
http://www.bestbuy.com/	false	high
https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#profile	false	high
https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#sign_off_confirmation	false	high
https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#quit_confirmation	false	high
https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY#signon	false	high
https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/http_sso_shopNow	false	high
https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#helpcontact	false	high
https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#signon	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://commercialtype.com/licenseCopyright	HumanBBY-75Bold-Web[1].eot.2.dr, HumanBBYCondensed-47Light-Web[1].eot.2.dr, HumanBBY-65Medium-Web[1].eot.2.dr, HumanBBY-45Light-Web[1].eot.2.dr, HumanBBYCondensed-77Bold-Web[1].eot.2.dr, HumanBBY-55Regular-Web[1].eot.2.dr	false		high
http://www.broofa.com	pubads_impl_2021010903[1].js.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=98B87A8F34D01236BB6F7C55DA819932?org_id=	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
http://commercialtype.com/license77	HumanBBYCondensed-77Bold-Web[1].eot.2.dr	false		high
http://jqueryui.com	vendor[1].js.2.dr	false		high
https://ad.doubleclick.net/ddm/activity/;src	b5aad0fcfa88df623d73d778783501af[1].js.2.dr	false		high
http://jquerymobile.com	vendor[1].js.2.dr	false		high
http://commercialtype.com/license75	HumanBBY-75Bold-Web[1].eot.2.dr	false		high
https://content22.citibankonline.com/fp/ls_fp.html;CIS3SID=9504B1BC8D3AF7023D0290737170228C?org_id=5	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://www.promisejs.org/polyfills/promise-6.1.0.js	index[1].htm.2.dr	false		high
http://api.jqueryui.com/jQuery.widget/	vendor[1].js.2.dr	false		high
https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=BB6B3243D7974D09AAEA19D1CA2D23F9?org_id=530q7tul&	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
http://benalman.com/about/license/	vendor[1].js.2.dr	false		high
https://citiretailservices.citibankonline.com/RSnextgen/ices.citibankonline.com/RSnextgen/svc/launch	{A7F97BB7-54EE-11EB-90EB-ECF4BBEA1588}.dat.1.dr	false		high
http://www.bestbuy.com/es.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&d	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://github.com/scottjehl/picturefill/blob/master/Authors.txt;	pf.mutation.min[1].js.2.dr, picturefill.min[1].js.2.dr	false		high
https://resources.digital-cloud-citi.medallia.com/wdcusciti/2290/onsite/embed.js	index[1].htm.2.dr	false		high
https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUYd	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://github.com/krux/postscribe/blob/master/LICENSE.	js[1].js.2.dr	false		high
http://commercialtype.com/license65	HumanBBY-65Medium-Web[1].eot.2.dr	false		high
https://lpcdn.lpsnmedia.net/le_secure_storage/3.12.0.0-release_5037/storage.secure.min.html?loc=http	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
http://commercialtype.comhttp://www.christianschwartz.comNot	HumanBBY-55Regular-Web[1].eot.2.dr	false	Avira URL Cloud: safe	unknown
http://dev.jtsage.com/jQM-DateBox/	vendor[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://citiretailservices.citibankonline.com/RSnextgen/	{A7F97BB7-54EE-11EB-90EB-ECF4BBEA1588}.dat.1.dr	false		high
https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=C4D96570896BF9ADED3CC52B8254BF85?org_id=530q7tul&	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://www.officedepot.com/	dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	false		high
https://6953527.fls.doubleclick.net/activityi;src	dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	false		high
http://www.reddit.com/	msapplication.xml4.1.dr	false		high
https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=A948CE44526491D09540FDBA60F9064C?org_id=530q7tul&	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=5CA4FA6DB0F72CF6AFB9DDCEE33B7FE9?org_id=530q7tul&	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=9504B1BC8D3AF7023D0290737170228C?org_id=	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
http://api.jqueryui.com/tabs/	vendor[1].js.2.dr	false		high
https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://8375412.fls.doubleclick.net/activityi;src	dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	false		high
https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=477462E746B88A1BAA88E20AE8D354DA?org_id=530q7tul&	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://4877208.fls.doubleclick.net/activityi;src	dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	false		high
http://benalman.com/projects/jquery-hashchange-plugin/	vendor[1].js.2.dr	false		high
http://api.jqueryui.com/category/ui-core/	vendor[1].js.2.dr	false		high
http://commercialtype.com/license55	HumanBBY-55Regular-Web[1].eot.2.dr	false		high
https://online.citi.com/JRS/portal/template.do?ID=Privacy#notice-at-collection	index[1].htm.2.dr	false		high
http://www-cs-students.stanford.edu/~tjw/jsbn/	jsrsasign-all-min[1].js.2.dr	false		high
https://content22.citibankonline.com/fp/ls_fp.html;CIS3SID=A394EFB0C5A4E35AA9F21A9AF3B5EAEC?org_id=5	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://console.sessioncam.com/Console/Recordings/PlaybackSession?sessionId=	generic1602688721974[1].js.2.dr	false		high
https://content22.citibankonline.com/fp/ls_fp.html;CIS3SID=5CA4FA6DB0F72CF6AFB9DDCEE33B7FE9?org_id=5	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://content22.citibankonline.com/tags.js?org_id=	tmx.min[1].js.2.dr	false		high
https://6276029.fls.doubleclick.net/activityi;src	dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	false		high
https://login.dotomi.com/ucm/UCMController?dtm_com	dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	false		high
https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY#	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://content22.citibankonline.com/fp/ls_fp.html;CIS3SID=A051B52F93EFFB6AB89D10D9A2E41EDB?org_id=5	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&	{A7F97BB7-54EE-11EB-90EB-ECF4BBEA1588}.dat.1.dr	false		high
http://www.youtube.com/	msapplication.xml7.1.dr	false		high
http://commercialtype.com/license47	HumanBBYCondensed-47Light-Web[1].eot.2.dr	false		high
https://content22.citibankonline.com/fp/ls_fp.html;CIS3SID=BB6B3243D7974D09AAEA19D1CA2D23F9?org_id=5	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=A948CE44526491D09540FDBA60F9064C?org_id=	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
http://commercialtype.com/license45	HumanBBY-45Light-Web[1].eot.2.dr	false		high
https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=A051B52F93EFFB6AB89D10D9A2E41EDB?org_id=	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=A394EFB0C5A4E35AA9F21A9AF3B5EAEC?org_id=530q7tul&	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://github.com/jtsage/jquery-mobile-datebox/blob/master/LICENSE.txt	vendor[1].js.2.dr	false		high
https://citiretailservices.citibankonline.com/RSnextgen//es.citibankonline.com/RSnextgen/svc/launch/	{A7F97BB7-54EE-11EB-90EB-ECF4BBEA1588}.dat.1.dr	false		high
https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=A7AB5E3C13E6291B410B1742D3B64935?org_id=	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=A394EFB0C5A4E35AA9F21A9AF3B5EAEC?org_id=	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
http://jquery.org/license	vendor[1].js.2.dr	false		high
http://scottjehl.github.io/picturefill	picturefill.min[1].js.2.dr	false	Avira URL Cloud: safe	unknown
http://sizzlejs.com/	vendor[1].js.2.dr	false		high
https://3518820.fls.doubleclick.net/activityi;src	dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	false		high
http://www.amazon.com/	msapplication.xml.1.dr	false		high
https://5370278.fls.doubleclick.net/activityi;src	dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	false		high
http://www.twitter.com/	msapplication.xml5.1.dr	false		high
https://online.citi.com/US/JPS/portal/Index.do?userType=tyLogin&ErrorCode=	index[1].htm.2.dr	false		high
http://www.bestbuy.com/	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=BB6B3243D7974D09AAEA19D1CA2D23F9?org_id=	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=C4D96570896BF9ADED3CC52B8254BF85?org_id=	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://crypto-js.googlecode.com/svn-history/r667/branches/3.x/src/core.js	jsrsasign-all-min[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://8984433.fls.doubleclick.net/activityi;src	dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	false		high
https://4448269.fls.doubleclick.net/activityi;src	dfb038475322ee8409beb6dce83d96b8[1].js.2.dr	false		high
https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/http_sso_shopNow	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=5CA4FA6DB0F72CF6AFB9DDCEE33B7FE9?org_id=	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://content22.citibankonline.com/fp/top_fp.html;CIS3SID=477462E746B88A1BAA88E20AE8D354DA?org_id=	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=9504B1BC8D3AF7023D0290737170228C?org_id=530q7tul&	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=A7AB5E3C13E6291B410B1742D3B64935?org_id=530q7tul&	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://content22.citibankonline.com/fp/ls_fp.html;CIS3SID=98B87A8F34D01236BB6F7C55DA819932?org_id=5	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://github.com/jtsage/jquery-mobile-datebox	vendor[1].js.2.dr	false		high
https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/ind	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://content22.citibankonline.com/fp/ls_fp.html;CIS3SID=A7AB5E3C13E6291B410B1742D3B64935?org_id=5	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://github.com/bitcoinjs/bitcoinjs-lib	jsrsasign-all-min[1].js.2.dr	false		high
http://www.citigroup.com/citi/accessibility.html	index[1].htm.2.dr	false		high
http://www.bestbuy.com	index[1].htm.2.dr, {A7F97BB7-54EE-11EB-90EB-ECF4BBEA1588}.dat.1.dr	false		high
http://www.nytimes.com/	msapplication.xml3.1.dr	false		high
https://h.online-metrix.net/fp/sid_fp.html;CIS3SID=98B87A8F34D01236BB6F7C55DA819932?org_id=530q7tul&	~DF4B9D5CBE966F349A.TMP.1.dr	false		high
https://scottjehl.github.io/picturefill/	pf.mutation.min[1].js.2.dr	false	Avira URL Cloud: safe	unknown
http://commercialtype.com/license	HumanBBY-75Bold-Web[1].eot.2.dr, HumanBBYCondensed-47Light-Web[1].eot.2.dr, HumanBBY-65Medium-Web[1].eot.2.dr, HumanBBY-45Light-Web[1].eot.2.dr, HumanBBYCondensed-77Bold-Web[1].eot.2.dr, HumanBBY-55Regular-Web[1].eot.2.dr	false		high
https://www.googletraveladservices.com/travel/clk/pagead/conversion/	js[1].js.2.dr	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
63.148.46.109	unknown	United States	53316	ASN-CHEETA-MAILUS	false
172.217.218.154	unknown	United States	15169	GOOGLEUS	false
34.107.138.236	unknown	United States	15169	GOOGLEUS	false
208.89.12.87	unknown	United States	11054	LIVEPERSONUS	false
18.195.42.228	unknown	United States	16509	AMAZON-02US	false
91.235.132.129	unknown	Netherlands	30286	THMUS	false
172.67.147.58	unknown	United States	13335	CLOUDFLARENETUS	false
91.235.134.131	unknown	Netherlands	30286	THMUS	false
52.212.164.82	unknown	United States	16509	AMAZON-02US	false
108.177.127.154	unknown	United States	15169	GOOGLEUS	false
108.177.119.157	unknown	United States	15169	GOOGLEUS	false
108.177.127.157	unknown	United States	15169	GOOGLEUS	false
54.75.9.158	unknown	United States	16509	AMAZON-02US	false
91.235.133.67	unknown	Netherlands	30286	THMUS	false
35.241.45.82	unknown	United States	15169	GOOGLEUS	false
151.101.2.133	unknown	United States	54113	FASTLYUS	false
35.181.18.61	unknown	United States	16509	AMAZON-02US	false
173.194.79.155	unknown	United States	15169	GOOGLEUS	false
91.235.132.130	unknown	Netherlands	30286	THMUS	false

Private

IP
192.168.2.1
127.0.0.1

General Information

Joe Sandbox Version:	31.0.0 Red Diamond
Analysis ID:	338622
Start date:	12.01.2021
Start time:	16:55:06
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://l.info6.accountonline.com/rts/go2.aspx?h=1006873&tp=i-1NHD-Q4L-FWM-6pIROB-2M-11iUTE-1c-2U96D-6kgs2T-l5Zh59mRxl-2Gp8op&x=%2FRSnextgen%2Fsvc%2Flaunch%2Findex.action%3FsiteId%3DPLCN_BESTBUY%26desc%3dEUZP1BCM0043%26cmp%3dESVC_EUZP1BCM0043%23signon
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@3/160@40/21
Cookbook Comments:	Adjust boot time Enable AMSI Browsing link: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/http_sso_shopNow Browsing link: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#maincontent Browsing link: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#helpcontact Browsing link: http://www.bestbuy.com/ Browsing link: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#profile Browsing link: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY Browsing link: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#quit_confirmation Browsing link: https://citiretailservices.citibankonline.com/RSnextgen/svc/launch/index.action?siteId=PLCN_BESTBUY&desc=EUZP1BCM0043&cmp=ESVC_EUZP1BCM0043#sign_off_confirmation
Warnings:	Show All Exclude process from analysis (whitelisted): dllhost.exe, BackgroundTransferHost.exe, ielowutil.exe, backgroundTaskHost.exe, svchost.exe Excluded IPs from analysis (whitelisted): 168.61.161.212, 13.64.90.137, 88.221.62.148, 104.83.118.27, 108.177.119.100, 108.177.119.101, 108.177.119.138, 108.177.119.102, 108.177.119.113, 108.177.119.139, 172.217.16.200, 151.101.1.175, 151.101.65.175, 151.101.129.175, 151.101.193.175, 104.79.88.64, 178.249.101.23, 173.194.79.132, 93.184.220.29, 178.249.97.99, 178.249.97.98, 51.104.139.180, 104.76.201.166, 152.199.19.161, 92.122.213.247, 92.122.213.194, 108.177.127.132, 52.155.217.156 Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, f1cdcaabc54da9584cd2a76361681095.safeframe.googlesyndication.com, j.shared.global.fastly.net, cs9.wac.phicdn.net, arc.msn.com.nsatc.net, adservice.google.com, a1449.dscg2.akamai.net, arc.msn.com, e11290.dspg.akamaiedge.net, iecvlist.microsoft.com, db5eap.displaycatalog.md.mp.microsoft.com.akadns.net, go.microsoft.com, ocsp.digicert.com, www.googletagmanager.com, ssl-delivery.adobe.com.edgekey.net, e15150.x.akamaiedge.net, displaycatalog.mp.microsoft.com, watson.telemetry.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, fpdownload.macromedia.com.edgekey.net, displaycatalog-europeeap.md.mp.microsoft.com.akadns.net, skypedataprdcolwus17.cloudapp.net, pagead-googlehosted.l.google.com, plus.l.google.com, ie9comview.vo.msecnd.net, www-googletagmanager.l.google.com, displaycatalog.md.mp.microsoft.com.akadns.net, accdn.lpsnmedia.livepersonk.akadns.net, skypedataprdcolcus17.cloudapp.net, pagead2.googlesyndication.com, lptag.liveperson.cotcdb.net.livepersonk.akadns.net, san.citiretailservices.citibankonline.com.edgekey.net, tpc.googlesyndication.com, blobcollector.events.data.trafficmanager.net, go.microsoft.com.edgekey.net, lpcdn.lpsnmedia.livepersonk.akadns.net, e13914.dscd.akamaiedge.net, geo2.adobe.com, apis.google.com, cs9.wpc.v0cdn.net Report size exceeded maximum capacity and may have missing behavior information. Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtOpenFile calls found. Report size getting too big, too many NtQueryAttributesFile calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\BACZYXTY\lpcdn.lpsnmedia[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	126
Entropy (8bit):	4.4854663088447895
Encrypted:	false
SSDEEP:	3:D90aK1ryRtFwsjTyVqJFkI9OdTTXROqSRrLK1r0aK1r0aKb:JFK1rUFf4qJdyfXRidu1rFK1rFKb
MD5:	58BE876045F2B001090DD36648A22B9B
SHA1:	EA6BE7EA7BC3DFE3B9002CEC090ECA2536827711
SHA-256:	BCB45C90FDFEF1B36953C8A4A117A5DEABA4540EE73E051794351E9E1F017651
SHA-512:	D730CCF9C555DFED568F63A6C0414B0D0BDB54054C39210C81C02A66E1961A07DEF25522437E29576BDC00EC5E9BA82C4168F396702494D050B872B195910B49
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="lpTestCase" value="abc" ltime="2029866352" htime="30861563" /></root><root></root><root></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\E5F0NRSV\citiretailservices.citibankonline[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	46852
Entropy (8bit):	5.236673682420119
Encrypted:	false
SSDEEP:	96:p3UfUfUf7NUf7N6Uf7N6WUf7N6WEUf7N6WEKIUf7N6WEKImUf7N6WEPmUf7N6WEh:/
MD5:	6CD53AED079AF6A6A2946A151BFEDA22
SHA1:	8272A219DEB56EC791377DE53347D83C0EDC7D35
SHA-256:	1D40B04C565DBA1768A18FB3DFF3C1024D7C445DBAAA9F397745863B5B44B38C
SHA-512:	8831D42EFE890804648AFE8C09476BF2C44E8D98E30C416BB634E3293A2543E8C6B2CF335469970AF82904EACC7DE1AFFD5C02740E15F94247E6154117AA8020
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="v" value="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000" ltime="1833886352" htime="30861563" /></root><root><item name="f" value="A3CpT_d2AQAAQRqGkEt4n2CXLJDSpIKdpZeMEp-wA-POTtv6bzgg0Py7yZb-AVQRNEq0zduywH8AAEB3AAAAAA==" ltime="1834046352" htime="30861563" /></root><root><item name="f" value="A3CpT_d2AQAAQRqGkEt4n2CXLJDSpIKdpZeMEp-wA-POTtv6bzgg0Py7yZb-AVQRNEq0zduywH8AAEB3AAAAAA==" ltime="1834046352" htime="30861563" /></root><root><item name="f" value="A3CpT_d2AQAAQRqGkEt4n2CXLJDSpIKdpZeMEp-wA-POTtv6bzgg0Py7yZb-AVQRNEq0zduywH8AAEB3AAAAAA==" ltime="1834046352" htime="30861563" /><item name="btnReedemRewardsClicked" value="false" ltime="1847466352" htime="30861563" /><item name="btnContinueSpeedbumpClicked" value="false" ltime="1847466352" htime="30861563" /></root><root><item name="f" value="A3CpT_d2AQAAQRqGkEt4n2CXLJDSpIKdpZeMEp-wA-POTtv6bzgg0Py7yZb-AVQRNEq0zduywH8AAEB3AAAAAA==" ltime="1834046352" htime="30861563"

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\URW0GA4Q\content22.citibankonline[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	148
Entropy (8bit):	4.812112999780575
Encrypted:	false
SSDEEP:	3:D90aK1ryRtFwsCVA7HyQAqQ/UUanAnArOLTQs0SVd3kjGWwOqSRrLKb:JFK1rUFqQDAqDAAaASP3kjaidub
MD5:	E26CC7F82B37A22525DC906FE54E2713
SHA1:	91965AC222CAB8F2B4D220D6BB3ACB96506D4DF7
SHA-256:	746772BF6B38AAD9E01F5664DB76715AB1B3BB127FD28F7FDD02BCD53BF1072A
SHA-512:	E71755DC4BA6E14B0D886545D68EFBC1489A01A0C71EFFC39A4180FFAFD435A382FE45EEC5A1284D82AC4F219FD4E13F715D99CFE03E4939A7FD0AF7BDE7EA33
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="ed73f20edbf2b73" value="5b1c11d6e563404a93edaa21aa7620f2_1765986966870" ltime="1899456352" htime="30861563" /></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{A7F97BB5-54EE-11EB-90EB-ECF4BBEA1588}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	39000
Entropy (8bit):	1.9223686069825807
Encrypted:	false
SSDEEP:	192:r+ZHZn2+9WhpthRifhjgqzM4ESBwsDHsfSgzjrjg7fksgYzruY5Wg:rK52+UB8sUTyDCkwuQ
MD5:	E9F616F9EA8778F45B0D02C8A3CF5C5B
SHA1:	5CBDD65D86820E1F6A285AAAC592C9832A144986
SHA-256:	019F345C25DC19CE8920E56E8715CE7ECBEEBEAFA8CCCB47CCB5D829E9BBAD9D
SHA-512:	37BBBF2EFDF2D92D90C5261BDE540844E0C7599408B7B5FB8A7BE189126B3D0A500BA230A313A3BAD823204A062F35E6F1149340012E04110E159A02346BBF57
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{A7F97BB7-54EE-11EB-90EB-ECF4BBEA1588}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	357674
Entropy (8bit):	3.382216244023787
Encrypted:	false
SSDEEP:	1536:TWJzsysIRbiJzlys/RbFpnQKg0xnOpnQKg0xnR:TWJzsysIRbiJzlys/RbO
MD5:	6DA496FA77871A16D937647C8B0A140E
SHA1:	C2145F120CD5ADAA5A510C3DC96C620262E2E657
SHA-256:	FDC67877BE87C1BCBB5F6B9894E0C8838C9A2A36B4E3B11F5ED78A25FA1F669B
SHA-512:	890B68EAC4338250F9B8CB143549D99C0D4C0F8840AA990855CF70DE14A1F88086A1D724B6C707AD2B08BA1BAC35D01967D65DE001F9497E3516CDCF9E72BFC6
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{B1F50D80-54EE-11EB-90EB-ECF4BBEA1588}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	19032
Entropy (8bit):	1.5844370764334323
Encrypted:	false
SSDEEP:	48:IwkGcprlbjGwpaCG4pQWGrapbSnrGQpKQG7HpR6tsTGIpX25llQGApm:r4ZlpQy6YBSnFArT6t4Foeg
MD5:	28F5913753215B4D1FF73DE91130C076
SHA1:	A0C9F92743EEAF743554580EB2E80CB4CF4AFC27
SHA-256:	B4A8A037C7D2FA044F10FB538C4DD1800D30FC5482BF548DAB3F7886D8CA48E0
SHA-512:	F3A245F90DD02509228CFC9DD30301D716E80419A9BA76FD2CA4D26211AF91C3FC008CFE546854FC4F99D774BA104B54182AA0E50B2D679AD7BD0F1D7D2C4EF9
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	656
Entropy (8bit):	5.05905951664687
Encrypted:	false
SSDEEP:	12:TMHdNMNxOE7o+nWimI002EtM3MHdNMNxOE7o+nWimI00OYGVbkEtMb:2d6NxOwo+SZHKd6NxOwo+SZ7YLb
MD5:	FFC46E70AAFED953B86868E10DA43BDF
SHA1:	88214C6E54F2B2CC49DB3A2605A1ACCC0DF3DEFB
SHA-256:	F8819621A251996684C0CF5B6E0B59D09EE96D5FF784159482D610AA30B79494
SHA-512:	BA9FB3C3D3990CB0247B8B03DFCEF71E64EA108834A951F7E533B78A9B1383E0BFF8D09BF62822798DAE482606F240200F707E7A96A0E6A6B3EE1DFC8B8BBB05
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0x8cbe77d7,0x01d6e8fb</date><accdate>0x8cbe77d7,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0x8cbe77d7,0x01d6e8fb</date><accdate>0x8cbe77d7,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Twitter.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	653
Entropy (8bit):	5.07940719860843
Encrypted:	false
SSDEEP:	12:TMHdNMNxe2kKbrb+nWimI002EtM3MHdNMNxe2kKbrb+nWimI00OYGkak6EtMb:2d6NxrvH+SZHKd6NxrvH+SZ7Yza7b
MD5:	F0C56AA7FA3C3848375DBCD4238643ED
SHA1:	D562FC31C86319A4498583DDB1175507B40F2F7D
SHA-256:	E4ED6E08AB3F3855BFE93723449777165F3E9CC77C77F36C1AD78A141E163BD3
SHA-512:	6B490138EACD33B8AC3AE67A0C372496D0F35E22BC2DA58AECFB69230DAB06C892AA01C2ADB87FDABF1403884E01AB59591D69DC8085DCD06DFB9E2F98548CCA
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.amazon.com/"/><date>0x8cb7c111,0x01d6e8fb</date><accdate>0x8cb7c111,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.amazon.com/"/><date>0x8cb7c111,0x01d6e8fb</date><accdate>0x8cb7c111,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Amazon.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	662
Entropy (8bit):	5.0935846115793595
Encrypted:	false
SSDEEP:	12:TMHdNMNxvLjLkL+nWimI002EtM3MHdNMNxvLjL9LYc+nWimI00OYGmZEtMb:2d6Nxvro+SZHKd6Nxvr9J+SZ7Yjb
MD5:	D785BE092978B27CC3C72B01AAEA78C4
SHA1:	5775EDCAA5903D30F6006685DDED40AB1B6F308C
SHA-256:	AB667772FBFC9BEFBE4061F0BBEBE60BD3CF90F8FBD3274ABA04510F76C42B30
SHA-512:	65B822AE2FC9772B9B4D820E1728FF29842089170315B852205F37E5199B6201FF002E5CAA5FF0EE092F5382C97F4345BAE41DEE9DC10EA048CB4CE5715B2B2C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.wikipedia.com/"/><date>0x8cbf1401,0x01d6e8fb</date><accdate>0x8cbf1401,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.wikipedia.com/"/><date>0x8cbf1401,0x01d6e8fb</date><accdate>0x8cbfb056,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Wikipedia.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	647
Entropy (8bit):	5.065434983236103
Encrypted:	false
SSDEEP:	12:TMHdNMNxi0chc+nWimI002EtM3MHdNMNxi0cF3+nWimI00OYGd5EtMb:2d6NxU2+SZHKd6NxUJ+SZ7YEjb
MD5:	4139B7BA63179998AC6EF41D59403CDF
SHA1:	6DC33D6B7FC4FC2EDD0F94CC034730FD3524739F
SHA-256:	0C3EB6EBB5D97CABFED2E7748D551253F6EBF320F1A347E11988611D06A6012E
SHA-512:	25C16684A6759F52441176C4FEAEDD9769453FEFB8764BC9CDEE8C71CB5CE965E86E15B35D49578B6CAB0DA8D3052288D82308D09A92F733D1014C8340E4FBCD
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.live.com/"/><date>0x8cbc06c6,0x01d6e8fb</date><accdate>0x8cbc06c6,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.live.com/"/><date>0x8cbc06c6,0x01d6e8fb</date><accdate>0x8cbca308,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Live.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	656
Entropy (8bit):	5.095662741831821
Encrypted:	false
SSDEEP:	12:TMHdNMNxhGwOGxG+nWimI002EtM3MHdNMNxhGwOGxG+nWimI00OYG8K075EtMb:2d6NxQ8o+SZHKd6NxQ8o+SZ7YrKajb
MD5:	DB0D946982EF2F29D0E3FE4DFB803234
SHA1:	F09C2C91572BBE3D331383136F3D37E5B54D5917
SHA-256:	BF29A8A6A440734427EC01EB784CE18513B3B1CF042A1271155911F16909E8FB
SHA-512:	5E996633B999360EDD166139E3CFF4332D0817F0CA2407047D92A54206722F2C2F0ED8CBD82003E46C4C2D90BCD0C2962D2EE02EA2D5DA5DAF736DE572973815
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0x8cc04c9c,0x01d6e8fb</date><accdate>0x8cc04c9c,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0x8cc04c9c,0x01d6e8fb</date><accdate>0x8cc04c9c,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Youtube.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	653
Entropy (8bit):	5.049435427377934
Encrypted:	false
SSDEEP:	12:TMHdNMNx0n/0M0+nWimI002EtM3MHdNMNx0n/0M0+nWimI00OYGxEtMb:2d6Nx0cT+SZHKd6Nx0cT+SZ7Ygb
MD5:	B8156EABF057A58D8511641F6F2554B2
SHA1:	8E34A995DD9336817BB72C10EAF462EEE752864C
SHA-256:	2202B4A941724BDBF2F75804045993CD31C1A864C6BB3728F3F4C269104DB837
SHA-512:	8D90E1F7E03F3785853E1115EA1DFC51D47E9206A6E06B4A808E9089B41AC75FCC89FB1611AAD76A5F8F975AA077EEA487C793C96A9A2540296691CA9673666D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.reddit.com/"/><date>0x8cbddbb1,0x01d6e8fb</date><accdate>0x8cbddbb1,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.reddit.com/"/><date>0x8cbddbb1,0x01d6e8fb</date><accdate>0x8cbddbb1,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Reddit.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	656
Entropy (8bit):	5.094270187032932
Encrypted:	false
SSDEEP:	12:TMHdNMNxxG3F3+nWimI002EtM3MHdNMNxxG3fc+nWimI00OYG6Kq5EtMb:2d6NxkJ+SZHKd6Nxkfc+SZ7Yhb
MD5:	0198C75B83E7F4B7B711A3F2A85965DB
SHA1:	125F2CDEDA9EC933A0C0655DAC783DF2497628B9
SHA-256:	AB8F00C63506E953D7852A29BD430D50D94390CFEC6C4B7908A4F9C640D2BE5D
SHA-512:	D5241B88635B59A3AC27E0C0C7F228F31FB39D1DA03CC3F69F6FB948E61C9E68601A2BA3174F1EAD5718F52452B479B00A26D9CB681B1DA22F8D991A19A4FE62
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.nytimes.com/"/><date>0x8cbca308,0x01d6e8fb</date><accdate>0x8cbca308,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.nytimes.com/"/><date>0x8cbca308,0x01d6e8fb</date><accdate>0x8cbd3f5d,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\NYTimes.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	659
Entropy (8bit):	5.119934004374913
Encrypted:	false
SSDEEP:	12:TMHdNMNxc1wEcGwEc+nWimI002EtM3MHdNMNxc1wEcuUvlYc+nWimI00OYGVEtMb:2d6NxDJDJ+SZHKd6NxDJb2c+SZ7Ykb
MD5:	1D2244FAF5C9E2E065E1DB8CF203D940
SHA1:	0568130E6DE843A4260A55353056074EA2E4D1C9
SHA-256:	552AF3D2BDE375CE4604E6CF4E42152D8C56016D8148A201BE20FB312FA48F0B
SHA-512:	BCF339065B0264728CEADC6B524893E3A0B151D21ECB389888D9234DD1646CEC331A813B1618A4A515E441373CA2A138350FCE388334A997DD4771CF007668F6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0x8cb995bf,0x01d6e8fb</date><accdate>0x8cb995bf,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0x8cb995bf,0x01d6e8fb</date><accdate>0x8cba3214,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Facebook.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	653
Entropy (8bit):	5.054604944182978
Encrypted:	false
SSDEEP:	12:TMHdNMNxfnxu+nWimI002EtM3MHdNMNxfnxsgL+nWimI00OYGe5EtMb:2d6NxJu+SZHKd6NxJsgL+SZ7YLjb
MD5:	C0C3D469266633D7D62BAA9A33662DFB
SHA1:	EF6932EFFADE33C0B584B17489F21F66371D9EDB
SHA-256:	D4130409308DB53D01929F0D1DBA6C5D20205982905F976E0DE878BE2C4FBA32
SHA-512:	C0482F44E67EF768AC8AE6CB0098B9A92FF27CC22C435C2EEE12B3FC51DCAFFED2530EAAF50F4734EB17F6E781460CE4EDB86AC510F22EEA4E7C2B6111B785C8
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.google.com/"/><date>0x8cbace4c,0x01d6e8fb</date><accdate>0x8cbace4c,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.google.com/"/><date>0x8cbace4c,0x01d6e8fb</date><accdate>0x8cbb6a80,0x01d6e8fb</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Google.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.DTD Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	498
Entropy (8bit):	5.103913616294899
Encrypted:	false
SSDEEP:	12:TMbhJpIO1mcROtW/yF0T8YA+it/0zsFE/TYEGs/4w:qhJ+CTRSnF1wlwFUY6
MD5:	90BE2701C8112BEBC6BD58A7DE19846E
SHA1:	A95BE407036982392E2E684FB9FF6602ECAD6F1E
SHA-256:	644FBCDC20086E16D57F31C5BAD98BE68D02B1C061938D2F5F91CBE88C871FBF
SHA-512:	D618B473B68B48D746C912AC5FC06C73B047BD35A44A6EFC7A859FE1162D68015CF69DA41A5DB504DCBC4928E360C095B32A3B7792FCC6A38072E1EBD12E7CBE
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" standalone="yes"?>..<!DOCTYPE document [..<!ELEMENT document (node)>.. <!ATTLIST document WMSNameSpaceVersion CDATA "2.0">....<!ELEMENT node (node)>.. <!ATTLIST node name CDATA #REQUIRED>.. <!ATTLIST node opcode ( create \| remove \| setval \| clearval \| rename \| movebefore ) #REQUIRED>.. <!ATTLIST node secure ( true \| false ) #IMPLIED>.. <!ATTLIST node type ( string \| boolean \| int32 \| binary \| int64 ) #IMPLIED>.. <!ATTLIST node value CDATA #IMPLIED>..]>..

C:\Users\user\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	exported SGML document, UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	30570
Entropy (8bit):	4.791796165556784
Encrypted:	false
SSDEEP:	192:BFV0bBPCfUd/FV0bBPCfUd/FV0bBPCfUdY:gYfXYfXYfx
MD5:	84A68822A47B6C799A5C1385F12F8A38
SHA1:	3DB8FA2ABFC30EAF965E7F49418390955D192F1E
SHA-256:	C807CF28091892886A1ABE7374C03B2480A81FDCA428EC2FD11EB1BB9DFD8758
SHA-512:	21095D759380FA2D3D79F98CD793DA82E1DB704D1556D15BA6DA7547B586B17AC441A6AAC89D0F5BD5026658677A5858A108007B10268C37A97EA6BD355C5668
Malicious:	false
Reputation:	low
Preview:	<document WMSNameSpaceVersion="2.0">.... <node name="Control Protocol" opcode="create" >.. <node name="Object Store" opcode="create" >.. <node name="RTSP" opcode="create" >.. <node name="CLSID" opcode="create" type="string" value="{308786f0-8b15-11d2-b25f-006097d2e41e}" />.. <node name="Enabled" opcode="create" type="int32" value="0x1" />.. <node name="Properties" opcode="create" >.. <node name="Protocol" opcode="create" type="string" value="RTSP,RTSPA,RTSPT,RTSPU,RTSPM" />.. </node> Properties -->.... </node> RTSP -->.... <node name="Sessionless Multicast" opcode="create" >.. <node name="CLSID" opcode="create" type="string" value="{f9377800-f38d-11d2-b26c-006097d2e41e}" />.. <node name="Enabled" opcode="create" type="int32" value="0x1" />.. <node name="Properties" opcode="create" >.. <node name="Protocol" opcode="create" type="string" value="MCAST,RTP" />.. </node> Properties --

C:\Users\user\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML.bak Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	exported SGML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	20382
Entropy (8bit):	4.792342140217129
Encrypted:	false
SSDEEP:	96:/YkZRAF6zyHUhm77yB1pZYCEnfHrHH7B6xTGH+YCLV3zwULJEYCJWyHBt3zwFRhd:/2FV0bBPCfUd/FV0bBPCfUdY
MD5:	20BB36C2C12D38E01BE65900BA1C2B34
SHA1:	20DDB44D6DAE1A886F41E12A4CEA83DA71E15712
SHA-256:	ED1F88C63000E59165B17DF9B08AAB4859293BDFC9108003B1FB378A7DEC859A
SHA-512:	EA34C046BBC820B5C3B63132A7D437777EB186DEFA663A5350EEECE6FA77A84C64B9934A7762783AA3F36D781E0F21A2E5A7746B1566718BAFB8FBAFF49A54A6
Malicious:	false
Reputation:	low
Preview:	.<document WMSNameSpaceVersion="2.0">.... <node name="Control Protocol" opcode="create" >.. <node name="Object Store" opcode="create" >.. <node name="RTSP" opcode="create" >.. <node name="CLSID" opcode="create" type="string" value="{308786f0-8b15-11d2-b25f-006097d2e41e}" />.. <node name="Enabled" opcode="create" type="int32" value="0x1" />.. <node name="Properties" opcode="create" >.. <node name="Protocol" opcode="create" type="string" value="RTSP,RTSPA,RTSPT,RTSPU,RTSPM" />.. </node> Properties -->.... </node> RTSP -->.... <node name="Sessionless Multicast" opcode="create" >.. <node name="CLSID" opcode="create" type="string" value="{f9377800-f38d-11d2-b26c-006097d2e41e}" />.. <node name="Enabled" opcode="create" type="int32" value="0x1" />.. <node name="Properties" opcode="create" >.. <node name="Protocol" opcode="create" type="string" value="MCAST,RTP" />.. </node> Properties

C:\Users\user\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNSD.XML Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	53
Entropy (8bit):	4.66869469064966
Encrypted:	false
SSDEEP:	3:sLRaE92JWyhHX9ovy4dduRun:sLzTyRXKvndI0
MD5:	A9B5DA9AEC61657B32393D96217165F0
SHA1:	80B5C577155ACD269B450D70F6B2CBED693EDF49
SHA-256:	9F4611369CF65B33D886489B2486FCA7B1E83E0DC998D35B15B3AA4C8478A28D
SHA-512:	0B73B232C03FFD5CE526A1EDE481A57C753D15D9EE39D4247ABFA52819B59FA676C63E30825DAF233E3139038C353DF84D652C4CE2CB71A706DDDBDFE0C70335
Malicious:	false
Reputation:	low
Preview:	<document WMSNameSpaceVersion="2.0">....</document>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\6c8322c7341eac98645c10e3d1d3c7ae[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	383666
Entropy (8bit):	6.0771394177526386
Encrypted:	false
SSDEEP:	6144:nMmfNkIDlfdIxVSEiC6p/ZNvayi2IMmfNkIDlfdIxVSEiC6p/ZNvayi2i:nFTDlfdCVSdphAVFTDlfdCVSdphA5
MD5:	7B400C475172DE9CFE50A65010D3E9AC
SHA1:	94204703C5DBA4AB4332536285D0320673E03943
SHA-256:	DB92B996479DBD32B46386C50FE8320049FCDCD4B445D1F2602330A1B47667B1
SHA-512:	CB1FD41BDCA5099F843D4FBE1A095DECE347ACF74BF6E9C4B120464CD5165443BF7A0D2605A42A178869889CE45668B4B51F06B66B08EA4791686DC0A00FDD02
Malicious:	false
Reputation:	low
Preview:	(function e(S){var O={},c={};var f=ReferenceError,B=TypeError,Y=Object,p=RegExp,D=Number,j=String,G=Array,d=Y.bind,Q=Y.call,X=Q.bind(d,Q),N=Y.apply,A=X(N),x=[].push,u=[].pop,y=[].slice,n=[].splice,E=[].join,C=[].map,r=X(x),J=X(y),s=X(E),o=X(C),w={}.hasOwnProperty,m=X(w),b=JSON.stringify,P=Y.getOwnPropertyDescriptor,M=Y.defineProperty,Z=j.fromCharCode,V=Math.min,K=Math.floor,z=Y.create,R="".indexOf,l="".charAt,U=X(R),T=X(l),L=typeof Uint8Array==="function"?Uint8Array:G;var F=[f,B,Y,p,D,j,G,d,Q,N,x,u,y,n,E,C,w,b,P,M,Z,V,K,z,R,l,L];var q=["dok6XRLqDA","idQcCTn6Sa6R19lqXA","FLQjVhvuIu797tARcURDObs","documentBody","VOMwehn6Cfjp-JpuIw","3oMk","eWM","yEeozJR853kqPA","lF6S-41Y-iM","mqM4AQTvHZ8","UCaW9pBUkFRiJw","LUXvhfozqiMaHyLZ5g","match","Nyaet-BR","set","HkY","sVrtmNMt","INIPfiXUS8GUzLdhLUVVIKPO59A","L-NKEkimOq3sx_B8cgwDFKrglMG3AG88TTVBZzxE0j9b9FI","aADB3PRJ3Q","IdEaczvQPtmTjbNjKWsQE5-1l47LKWpiHEseZC8j0Qwru35IVKuDQ_OpYV5yff9gAoGT98dBPTBwQ7bune_jUrXavnYeF6I4T1wJTZ_1DqEm6pn4Z24lwMA0IOkn9I35TS

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\FoundationSans-Roman-webfont[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), Foundation Sans family
Category:	downloaded
Size (bytes):	24216
Entropy (8bit):	7.964163258058921
Encrypted:	false
SSDEEP:	384:gXZ7fOxJ72yR0Z/NZyOSMpUkWBMnkn/oITDjYGdFi/quK6Oib1r0bE1Lsm6CuU4c:gXAb7220ZzyNMp7Xk/oUPYeFprBer0bc
MD5:	F6A618576774564D92C712CFB6107A7B
SHA1:	D61371F2CD91B78B33A0260984CC0EFB5277BB2A
SHA-256:	F1A604ED60F96364FFCC6DAF0BEFFD7E6DB29A604DE4C4E5B90371165CCB7A89
SHA-512:	56BDA8A2920630B1A9BB25195A42554FA7EAB4A2C6DEE6DD01F004DACCA6527C3EB1FF3E4082D187E33109D6E28347638F23125BF77A4768CA0DA44A118F442D
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/fonts/foundation_sans/roman/FoundationSans-Roman-webfont.eot?
Preview:	.^...]............................LP....[ .P........... .....9......................F.o.u.n.d.a.t.i.o.n. .S.a.n.s.....R.e.g.u.l.a.r.....V.e.r.s.i.o.n. .1...0.7.1.....F.o.u.n.d.a.t.i.o.n. .S.a.n.s. .R.e.g.u.l.a.r.....BSGP...................$.Et.R..F.....xZg.icyR..&c..4o4F..w....[.uM...R._.GNv.1.V.'....-a..Y..b*.NZ.R........4.K.0...-.&..'.#......d....f.W....B...=R.R..].9T^.8....$.-..v....HP<...9..b.d.H..U.B.%}Lq+..$Z..o3b....&}e..=......V.....3Z.OnB..ZF...c .......p..r#...A.K.T... ....z.....@).`L.......K.u...j.w....c..h#(.H.z9d..=..5C......(....Y.3!=..N28....~..v.'.....[..Q#/Ox.2S.JG. .\|.#..:B.W.......).]....G\|^...n..7..N.....9......vL`...\Yy.......Aq....4.:wP.{..(...'.e......z.f`I....!...h.....I.Ue'..uE...-SE3Z:.`....L.Q^.P.W.I......../..%....(BN8.%pa,.3:a.FmXA..p..}.A=.Y.X..CxdhQe..F.m........3J.?b.,.v.L@[..A..9.....ql.D..jn[R..........q.B...w..#)<1R&...8. ....7..{f.".W".\..de....`!.S...+y....`...3.W.....6...6~.<N..y....&.@....3..(..4.......FEa..d...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\HumanBBY-45Light-Web[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), Human BBY Web family
Category:	downloaded
Size (bytes):	91798
Entropy (8bit):	5.50345969454433
Encrypted:	false
SSDEEP:	1536:EWN3z45efNTQx2MbTkpx85DWmGJ2dn8/HGGUgzL:D3iMZ5g8zL
MD5:	C8F5AA760C353E747DECAF7DBDF9C56C
SHA1:	7A432CD9DD4A0B1AA27FFE5CF2A704F935228413
SHA-256:	0890A1A7E69455A2AC4AA3AA96F718747C777EB23760134F1DEE158E20CA3757
SHA-512:	04B31669283E4D1418D086F5FA3146B155E02119FCD9B5D45585C189DCE97FAA6A47C2897AA774E84B355690273CC1443833D323E1A028F2F044E2BBC64D8E0B
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/fonts/bestbuy_human/light/HumanBBY-45Light-Web.eot?
Preview:	.f...e......................,.....LP/...z.............. ......v.....................H.u.m.a.n. .B.B.Y. .W.e.b.....R.e.g.u.l.a.r...$.V.e.r.s.i.o.n. .1...0.0.1. .2.0.1.8....H.u.m.a.n. .B.B.Y. .W.e.b. .R.e.g.u.l.a.r.................GPOSZ........^.GSUB.;K...P....(OS/2..i.......`cmap...........zcvt .:.V........fpgm.Y.7.......sgasp...........glyf.g..........head.B.2.......6hhea.-.....D...$hmtx...O.......4loca...j........maxp.'.....h... namew..Z.......post...........prep".0>...............B.v.._.<............;.......^.%.,.3.E...................>...`.%.%.3.........................d...e.........................,.....................2................./...z........COMM.@.......>...... .............. .........b.=.@...%...0.......6...@.6.<.6.....3......M.X.C...M.......>.{.!.$.!.B..^.1.<.,.c.A...".R.9.b.8..._...^...A...-...C...+...3.f.a...:...a.@.a.'.a...:...a...f....b.a...a.^.a...a.,.:.B.a.,.:.i.a.i.3.:.#...W..."...&...3.M...U.&._.b...7._./...3.......a...2.o.W.6.0.o.0.4.0.W...o.0.R.W...N..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\HumanBBY-65Medium-Web[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), Human BBY Web family
Category:	downloaded
Size (bytes):	91254
Entropy (8bit):	5.502900723945279
Encrypted:	false
SSDEEP:	768:k2jpOHmAuvLPkAZ6Ta8sV8YRPsuY8huEQZ+wNie3VokV/CgABzkXwP/XE7HZxsS7:k2NOHmAy45TWVV2JnpjAulqxHiTwkzL
MD5:	8C7B064EE87910563DDA4BFABD0D8C74
SHA1:	933016D394E69DF81568E97C4AA65B52F58612AD
SHA-256:	4B0D2AB01E3EA0ACF56F246221E7EB731F1CB901BAFE6E4BA92E70A66D8B0D89
SHA-512:	23BA77F4CC2E0C29E62061F154529BA9119CFC70BA763661065087AB2EA8000E120E6B0377F5D40FE3E22B1287677C4ABEF13478A426EBF0403F97EE144DEF00
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/fonts/bestbuy_human/medium/HumanBBY-65Medium-Web.eot?
Preview:	vd...c............................LP/...z.............. ....0......................H.u.m.a.n. .B.B.Y. .W.e.b.....R.e.g.u.l.a.r...$.V.e.r.s.i.o.n. .1...0.0.1. .2.0.1.8...*.H.u.m.a.n. .B.B.Y. .W.e.b. .R.e.g.u.l.a.r.................GPOS..z......`.GSUB.;K...Nt...(OS/2.y.........`cmap...........zcvt ...'........fpgm.a.7.......sgasp...........glyf.......x....head.w._.......6hhea.b.....D...$hmtxM.c........4loca.(.:...\....maxp.'.....h... name..1/.......post...........prep..fn...............B...0_.<............E.......n.....{.f...................>.........{.........................d...^...............................................2................./...z........COMM.@.......>...... .............. .......5.D...1.&...&.$.$.....'...1.Q.,.Q....."...#. .;.e.6. .;.............G...s. ...'._.!.....%...w.)...).(.M.(.M...6...&...8.......#...M...,...M.K.M.1.M...,...M.:.R..."...M.).M...M...M.3.,.j.M.3.,...M...(.L.....H.............}...a.#.}.K.....}.(...........5.0.!.\|.B.F.%.{.%.M.%.r...\|.&.a.B...:..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\HumanBBY-75Bold-Web[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), Human BBY Web family
Category:	downloaded
Size (bytes):	91462
Entropy (8bit):	5.489350453231167
Encrypted:	false
SSDEEP:	1536:85qsDl3WfpACXR5/FMNKg2y6gy1JKloajYMzL:88sDgZXR5h1pMzL
MD5:	FE65502144E5E7F673E30DBDEF7E6A63
SHA1:	830ECD20201F4E96B8D83C8299B49273BE4CDE7E
SHA-256:	5237FA39D3BC7055C2ADF68910F7D4497196CA080A43F880F99EDFC2DEB3DC34
SHA-512:	8CA10FC2358C032AA3E73E5D4C8C55677136EA74011C080C82875A17654AFD11042C682893F72D349171F9FA337A68171F9D67E730AFB8A88882C6F73B70A702
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/fonts/bestbuy_human/bold/HumanBBY-75Bold-Web.eot?
Preview:	Fe..ld............................LP/...z.............. .....Q......................H.u.m.a.n. .B.B.Y. .W.e.b.....R.e.g.u.l.a.r...$.V.e.r.s.i.o.n. .1...0.0.1. .2.0.1.8....H.u.m.a.n. .B.B.Y. .W.e.b. .R.e.g.u.l.a.r.................GPOSx.s7.....`.GSUB.;K...OD...(OS/2.A.........`cmap...........zcvt ...@.......vfpgm.a.7.......sgasp...........glyfeG.....P...Thead...V.......6hhea.......D...$hmtxh.Y .......4loca.......4....maxp.'.t...h... name..]........post...........prepbn.................B..Q._.<............I.......Z.......n...................>...................................d...`.......................(.......................2................./...z........COMM.@.......>...... .............. .......E.>...+.9.!.6. .3.....!...+.].'.].......1.$.&.1.u.3.&.1.......&.....\......... .o.....&.7.....!...!.-.C.-.C...-.!.&...2.!.........G...&...G.[.G.<.G...&...G.T.K...!...G.7.G...G...G.:.&...G.:.&...G...".`.....B.................l.$...D.......'............=.....8.P.!...".].!.......".j.8...3..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\HumanBBYCondensed-47Light-Web[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), Human BBY Condensed Web family
Category:	downloaded
Size (bytes):	92294
Entropy (8bit):	5.437274006660523
Encrypted:	false
SSDEEP:	1536:oLnyCo4Fb0Sct/ACQPAr4Lhq5R54V6CdDDrD6UDD4QEQkoVQ1:obyCBb0SZC94L454fdDDrD6UDD9m1
MD5:	EAAF0FEA8781E952C4E59BF63A9C2305
SHA1:	D64CB8449740541EA86F035CDE66AB5744C41B9E
SHA-256:	E633AF86D28C044E8380B31796E0E69D4E63C409420FB19825F675501A1611FA
SHA-512:	3A669CBA44F76F23D57C736CB7B3F3BFC51AEF92B18E40F39BF80662E4FCF71A9FD1C88998277C131DE56E2A8B4038DCB6ACA3BDD3D6AB25588E1A58CB401D9F
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/fonts/bestbuy_human/light-condensed/HumanBBYCondensed-47Light-Web.eot?
Preview:	.h...g......................,.....LP/...z..@........... ............................H.u.m.a.n. .B.B.Y. .C.o.n.d.e.n.s.e.d. .W.e.b.....R.e.g.u.l.a.r...$.V.e.r.s.i.o.n. .1...0.0.1. .2.0.1.8...>.H.u.m.a.n. .B.B.Y. .C.o.n.d.e.n.s.e.d. .W.e.b. .R.e.g.u.l.a.r.................GPOS..y.....e.GSUB..M...R\...(OS/2..H!.......`cmap.......H...zcvt .J..........fpgm.Y.7.......sgasp...........glyf.r..........head.V.........6hhea.A.....D...$hmtx.i........`loca...^...t...2maxp.2.t...h... name`.F........post`.....,....prep...E...8...........B...._.<............L.......A.b.M.......................>...Z.b.b...........................d...h.......................].,.....l.R...I.l.R.....2................./@..z........COMM.@.......>...... .............. .........8...).~...[.#...&...(...).........8.(.\.!.......+.................m...v.$.....r.%.../.U.....+...'...>...>.Y.$.c.#.Y.-.L...Z.+...9.......9.h.9.T.9.......9...=.......9.O.:...9...9.../.t.9.../...9.x.#.[.....6.....>.......q...c.....;.......!.D. ......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\account_home.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	289790
Entropy (8bit):	5.4437360833806965
Encrypted:	false
SSDEEP:	6144:ZrN98mOFwruwHPqSghx95PzfhEqt1PqGQVwkPO4m4:hwk9
MD5:	0FDA5BD6FF39CE43753CA5FCD3C3649F
SHA1:	4B538F0F054C3887DDEAC96518E8FB4B1C64032F
SHA-256:	3E7EB68AA55261ACE00997A5A485F72D53C3C48BBA5002A5B72E2C46904FDD70
SHA-512:	ACDC903FB477296AFBEBEE4F22AE0D36F4947A9A0988D164576D1894B9C4D4B9ED27BCBFBF632BBF14BEFF499AA6D5C06B84837A11C4575CCCCC5F45F2DD1DEE
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/BestBuy/css/modules/account_home.min.css
Preview:	div[data-dfp-slotname="MAIN_TOP"],div[data-dfp-slotname="MAIN_MIDDLE_1"],div[data-dfp-slotname="MAIN_MIDDLE_2"],div[data-dfp-slotname="MAIN_MIDDLE_3"],div[data-dfp-slotname="MAIN_MIDDLE_4"],div[data-dfp-slotname="MAIN_MIDDLE_5"],div[data-dfp-slotname="MAIN_BOTTOM"],div[data-dfp-slotname="UTILITY_TOP"],div[data-dfp-slotname="UTILITY_MIDDLE_1"],div[data-dfp-slotname="UTILITY_MIDDLE_2"],div[data-dfp-slotname="UTILITY_MIDDLE_3"],div[data-dfp-slotname="UTILITY_MIDDLE_4"],div[data-dfp-slotname="UTILITY_MIDDLE_5"],div[data-dfp-slotname="UTILITY_BOTTOM"]{margin-bottom:10px}.is-ie div[data-dfp-slotname="MAIN_TOP"],.is-ie div[data-dfp-slotname="MAIN_MIDDLE_1"],.is-ie div[data-dfp-slotname="MAIN_MIDDLE_2"],.is-ie div[data-dfp-slotname="MAIN_MIDDLE_3"],.is-ie div[data-dfp-slotname="MAIN_MIDDLE_4"],.is-ie div[data-dfp-slotname="MAIN_MIDDLE_5"],.is-ie div[data-dfp-slotname="MAIN_BOTTOM"],.is-ie div[data-dfp-slotname="UTILITY_TOP"],.is-ie div[data-dfp-slotname="UTILITY_MIDDLE_1"],.is-ie div[data-dfp-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\accountproperties[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	4124
Entropy (8bit):	4.876984652457648
Encrypted:	false
SSDEEP:	48:sdSYux+JjRNyJqaRBRvg0BdZZzDunV7EogCDajg6a7tQfDEWURJgPuyaHuB:HCZYqaRQkjZzolfe86aBXcaA
MD5:	81FEE0FBC2A8988A83BC41A40AE8487B
SHA1:	5BAFB774C8E9229CA3C38AAB87E2D482472988E7
SHA-256:	4DA6C1801FB7941246F5A8AA3C16AB2FB044857F1FACCCA3B3CCCD5F32058E94
SHA-512:	3480494A4CA4912EC6EF9C56019D6FFB896D7520B546E84F4FBD0C228C3BE05597C4DA71B1CFD2C5E37C150CCAD66D3E5F704ADED1597D5BC8EFEA60FFCFDC5F
Malicious:	false
Reputation:	low
IE Cache URL:	https://accdn.lpsnmedia.net/api/account/58975020/configuration/setting/accountproperties/?cb=lpCb69152x78700
Preview:	lpCb69152x78700([{"id":"messaging.ios.sdk.min.version","createdDate":"2017-01-10 04:11:41","type":2,"propertyValue":{"value":"1.1.36"},"deleted":false},{"id":"messaging.audio.sharing.enabled","createdDate":"2018-05-13 02:02:09","modifiedDate":"2018-11-14 08:32:03","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"messaging.ios.logs.settings","createdDate":"2017-01-10 04:11:41","type":4,"propertyValue":{"value":{"level":"WARNING","minLogLevel":"INFO","randomFactor":1000.0,"maxEvents":50.0,"maxPendingEventsRequests":10.0}},"deleted":false},{"id":"unified.window.fallback.to.first.party.cookies","createdDate":"2019-11-20 03:10:29","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"le.agent.widgetSdk.allowMicrophoneCamera","createdDate":"2019-08-19 04:03:07","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"le.site.automotive.conversation.topics","createdDate":"2019-10-11 09:13:33","type":3,"propertyValue":{"value":[]},"deleted":false},{"id"

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\cool-2.1.15.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	C source, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	13891
Entropy (8bit):	5.389843607112603
Encrypted:	false
SSDEEP:	192:q02elXSJoD1B7ahzSIBewvVqhXGdBi4ZH1ffagn5mjVcojdjWbaw0q61rVmNUfrt:q02eoCnmkpKrmjVcQdjWx0q61rVmNUjt
MD5:	80DD5E3BE5152C5C72D552C6A26EF6FF
SHA1:	A019565CE06F5B1C129AF9AC0E9CFA82F52DCDEA
SHA-256:	3E72DE5DE67D6D80B65A114AF684EAF880C53C250155A663CB17D677FF064BC1
SHA-512:	A2C7201BA01AB775E62E7E297FC886993029DD4A6CEABE712995484A906FFB6597ED3379588F16ECD9D37FC6177B33C1A852B483AC279E81FE9C39583FEB57AA
Malicious:	false
Reputation:	low
IE Cache URL:	https://nebula-cdn.kampyle.com/resources/onsite/js/cool-2.1.15.min.js
Preview:	(function(f){function p(){p.done\|\|(B=p.done=!0,C=!1,b.each(q,function(a){a._dom_loaded()}))}var w=[],D=Array.prototype,r=Object.prototype,E=D.slice,x=r.toString,y=r.hasOwnProperty,m=window.console,z=window.navigator,k=window.document,t=z.userAgent,F="http:"==k.location.protocol?"http://":"https://",r=f&&f.__SV\|\|0,A=window.XMLHttpRequest&&"withCredentials"in new XMLHttpRequest,C=!A&&-1==t.indexOf("MSIE")&&-1==t.indexOf("Mozilla"),b={},H={api_host:F+"api.cooladata.com",loaded:function(){},img:!1,http_post:!1,.track_pageload:!1,cookie_expiration:365,disable_cookie:!1,cookie_name:"cd_user_id"},B=!1;(function(){var a=D.forEach,g=Array.isArray,e={},d=b.each=function(d,g,b){if(null!=d)if(a&&d.forEach===a)d.forEach(g,b);else if(d.length===+d.length)for(var c=0,f=d.length;c<f&&!(c in d&&g.call(b,d[c],c,d)===e);c++);else for(c in d)if(y.call(d,c)&&g.call(b,d[c],c,d)===e)break};b.extend=function(a){d(E.call(arguments,1),function(e){for(var d in e)void 0!==e[d]&&(a[d]=e[d])});return a};b.isArray=g

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\core.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	221099
Entropy (8bit):	5.2787354097946135
Encrypted:	false
SSDEEP:	768:4heYP0fkPYExit4BiIt4B+W5SYP0fkPYUp/fNWUmKpqOfeitqaxL9ilcU5RDa9av:mbYnZ8OJ+kY/rz7BVZUx6b2AifI
MD5:	18D705EA77106D3DE373A3E4BFFD636A
SHA1:	ADDD995FD23F608A75A4877D8F9FD3F966D380C6
SHA-256:	78918F116C3E957941DE9DB1D7E26EC244FAD49EB1C02C08B27C8E180F054521
SHA-512:	838D4C104BFBAF5B38BDE9C5F21AD2F10092323CCD9E0F2CFBB4A53BC15660536CBE7B53301405277F89C9710EC91E8A234DB23779FD0C67B82532EFF3508F36
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/BestBuy/css/modules/core.min.css
Preview:	div[data-dfp-slotname="MAIN_TOP"],div[data-dfp-slotname="MAIN_MIDDLE_1"],div[data-dfp-slotname="MAIN_MIDDLE_2"],div[data-dfp-slotname="MAIN_MIDDLE_3"],div[data-dfp-slotname="MAIN_MIDDLE_4"],div[data-dfp-slotname="MAIN_MIDDLE_5"],div[data-dfp-slotname="MAIN_BOTTOM"],div[data-dfp-slotname="UTILITY_TOP"],div[data-dfp-slotname="UTILITY_MIDDLE_1"],div[data-dfp-slotname="UTILITY_MIDDLE_2"],div[data-dfp-slotname="UTILITY_MIDDLE_3"],div[data-dfp-slotname="UTILITY_MIDDLE_4"],div[data-dfp-slotname="UTILITY_MIDDLE_5"],div[data-dfp-slotname="UTILITY_BOTTOM"]{margin-bottom:10px}.is-ie div[data-dfp-slotname="MAIN_TOP"],.is-ie div[data-dfp-slotname="MAIN_MIDDLE_1"],.is-ie div[data-dfp-slotname="MAIN_MIDDLE_2"],.is-ie div[data-dfp-slotname="MAIN_MIDDLE_3"],.is-ie div[data-dfp-slotname="MAIN_MIDDLE_4"],.is-ie div[data-dfp-slotname="MAIN_MIDDLE_5"],.is-ie div[data-dfp-slotname="MAIN_BOTTOM"],.is-ie div[data-dfp-slotname="UTILITY_TOP"],.is-ie div[data-dfp-slotname="UTILITY_MIDDLE_1"],.is-ie div[data-dfp-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\crsFlowState.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	807056
Entropy (8bit):	4.725240290415354
Encrypted:	false
SSDEEP:	6144:o4gexgDxgGxgAxjlr9cn4xgdPx2gNxgQxgL14gZ2gaFx8xV0ygEbgobg0xgKxgWe:ia
MD5:	8C66CF4417529DE4207DC2F798F13209
SHA1:	F7725978BE31DC3ED4D9379141F6BA46A47F37EE
SHA-256:	B9A6F49F78B8D598696E912CF3FFA59A5055B61D3DDDC06BCE4ADAAF1AA3F3C1
SHA-512:	56F5E0CDC050ED21FCE76A7BD7FD32B246CC37EA4656F014A833DDDE36DE5A70F9618DD4A769DA3026C620E4C95CC58E31881226270031119D04A7576A81B8EE
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/js/crsFlowState.min.js
Preview:	var flowState={csflow_errpg:"",csflow_id:"uscrs",csflow_pages:[{_comment:"This is for Request sales receipt page",form_id:"",model_url:"/RSnextgen/svc/requestsalesreceipt/flow.action",page_name:"requestSalesReceipt",controller_policy:"3",transitions:[{name:"success",is_default:"false",action_query:"",changeURL:false,template_url:"",view:"module",templates:[{template_id:"notification-template",render_target:""}]},{name:"failure",is_default:"false",action_query:"",changeURL:false,template_url:"",view:"module",templates:[{template_id:"notification-template",render_target:""}]},{name:"genericException",is_default:"false",action_query:"",changeURL:false,template_url:"",view:"module",templates:[{template_id:"notification-template",render_target:""}]}]},{_comment:"This is the to put the PII data in Gemfire for Chat",form_id:"",model_url:"/RSnextgen/svc/liveengage/flow.action",page_name:"liveEngageReactive",controller_policy:"3",transitions:[{name:"success",is_default:"true",action_query:"",ch

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\dmarInventoryManager.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	7432
Entropy (8bit):	5.180805476576344
Encrypted:	false
SSDEEP:	96:PetWKNUW8sI7Jwqbp80mCkS+2ufGTlhR1hppgN3mA0ODnmrgHDy8R0R:YxNUW8s3M8LrfGTlH1pS397mrey8q
MD5:	005B033DE9C9BC4337C8B3A90B2A720B
SHA1:	DE2F84DE555AE6B051ECA4CEF922A59CBABD057E
SHA-256:	90142554B41F33AFD373A6A29223F1DF319B01BFEB5CB158A0BF9AA2A3997138
SHA-512:	B94BA3298515DB3071D416063DB7F1B949479A42A9E6D847E1950F4AC5A484E57C5306B5908963072795AB4C5F05A70831BF3B0FD21DF37266FF9BF696F51905
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/js/dmarInventoryManager.min.js
Preview:	var googletag=googletag\|\|{};googletag.cmd=googletag.cmd\|\|[];function provision_gpt_tags(){try{googletag.destroySlots()}catch(b){console.warn("Fusion UI: DFP config destroySlots issue.")}if(!window.googletag\|\|!googletag.apiReady){console.warn("Fusion UI: DFP config incorrect (2).");return}if(typeof googletag.pubads=="undefined"\|\|!googletag.pubads){console.warn("Fusion UI: DFP config incorrect (3).");return}try{var c="SVC_DFP_RULE_CONFIG_"+dataLayer.siteId.toUpperCase();var a=JSON.parse(fusionLocalStorage.getItem(c));googletag.cmd.push(function(){try{if(typeof dataLayer!="undefined"&&dataLayer){googletag.pubads().setTargeting("pageName",dataLayer.pageName).setTargeting("siteId",dataLayer.siteId).setTargeting("paperlessLetter",dataLayer.isEnrolledInPaperlessLetter).setTargeting("paperlessStatement",dataLayer.isEnrolledInPaperlessStmt).setTargeting("internalstatus",dataLayer.internalStatusCode).setTargeting("externalstatus",dataLayer.externalStatusCode).setTargeting("reasoncode",dataLayer.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\errorPageStrings[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4720
Entropy (8bit):	5.164796203267696
Encrypted:	false
SSDEEP:	96:z9UUiqRxqH211CUIRgRLnRynjZbRXkRPRk6C87Apsat/5/+mhPcF+5g+mOQb7A9o:JsUOG1yNlX6ZzWpHOWLia16Cb7bk
MD5:	D65EC06F21C379C87040B83CC1ABAC6B
SHA1:	208D0A0BB775661758394BE7E4AFB18357E46C8B
SHA-256:	A1270E90CEA31B46432EC44731BF4400D22B38EB2855326BF934FE8F1B169A4F
SHA-512:	8A166D26B49A5D95AEA49BC649E5EA58786A2191F4D2ADAC6F5FBB7523940CE4482D6A2502AA870A931224F215CB2010A8C9B99A2C1820150E4D365CAB28299E
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/errorPageStrings.js
Preview:	.//Split out for localization...var L_GOBACK_TEXT = "Go back to the previous page.";..var L_REFRESH_TEXT = "Refresh the page.";..var L_MOREINFO_TEXT = "More information";..var L_OFFLINE_USERS_TEXT = "For offline users";..var L_RELOAD_TEXT = "Retype the address.";..var L_HIDE_HOTKEYS_TEXT = "Hide tab shortcuts";..var L_SHOW_HOTKEYS_TEXT = "Show more tab shortcuts";..var L_CONNECTION_OFF_TEXT = "You are not connected to the Internet. Check your Internet connection.";..var L_CONNECTION_ON_TEXT = "It appears you are connected to the Internet, but you might want to try to reconnect to the Internet.";....//used by invalidcert.js and hstscerterror.js..var L_CertUnknownCA_TEXT = "Your PC doesn\u2019t trust this website\u2019s security certificate.";..var L_CertExpired_TEXT = "The website\u2019s security certificate is not yet valid or has expired.";..var L_CertCNMismatch_TEXT = "The hostname in the website\u2019s security certificate differs from the website you are trying to visit.";..var L

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\fpc[1].swf Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Macromedia Flash data, version 7
Category:	dropped
Size (bytes):	2001
Entropy (8bit):	4.914589593413625
Encrypted:	false
SSDEEP:	48:sYkfJCBynePZiMsy24gKkBh0CMJcM8ZzIGc3c0QhCa1o+Jdl/ZMf:jkfJCByneBiljCkBjXKMfq8l/ZMf
MD5:	1AA138249449D29827E983101964A50F
SHA1:	156B6738C6F88E60760FB37B731161885D22A82A
SHA-256:	6608FB1F5A2560C8E9617D5157D394B63DDCC9C40523BE722E0109909B47A53A
SHA-512:	1C2307A32FAA1864C749494F916976F6CFA131AEA0C2B2930093876E30B683121D6B0847F3EE15350C33D5A42808E278B13A52A004A69012D815B02F2B269007
Malicious:	false
Reputation:	low
Preview:	FWS.....8........C....?......k.6.0123456789abcdef..length.charAt.parseInt.session_id.charCodeAt.String.fromCharCode.xx10.session.SharedObject.getLocal.xx11.LoadVars.xx12.fa.fb.w.fg.xx43.?.split.xx14.&.i.xx15.=.p.toLowerCase.unescape.org.org_id.fx.fy.fap.xx57.clear.url.substr.clear.png.nu.Math.random.round.data.sessionid.xx48.toString.79826d0a7f53437a9fb9b8095b572a39.flush.fc.GET.sendAndLoad....xx57....*..s..................................................................NH................G.......Ng................................R..........G............RG..........=..................R........`b................RG..........P...............NI.................................G...............>....................R<................@<.....A.....A.....A.....A.....A.....A...................".....R........N<....................R<..............<.................NH...........................N.....R<.............................N.....R<...........I....".................N..........=.................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\fusionapp.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	951104
Entropy (8bit):	5.15768390744113
Encrypted:	false
SSDEEP:	12288:WA42IplrwzPVtjhXMzHoicnKOym8jngwWChxLtxODXDT7N9dXG4Z06On1vQUAFOj:T8A319jDmg12K7HsNZyXO
MD5:	8FC40D7B95280EF43662B210B0EDDDA1
SHA1:	06AB0EC1E207DC1EF0BABAC78EF2B1B595BF8299
SHA-256:	D3E16C67489F296D05CC40B8B056175E1F361D8FF2650206F807D491946A360E
SHA-512:	7CD6D650FC2CD0A3E71FE7303490AE4BC9A2CC423597262A1CDE8B7ACE090A20CAEB5A2C05E183727D590A6B395FC1A51864E2E6AF5E0170BCF4251F670991F9
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/js/fusionapp.min.js
Preview:	var recent_offer_ids={};var recent_location_ids={};function set_recent_accepted_offer_id(a,b){recent_offer_ids[a]=b}function set_recent_accepted_location_id(a,b){recent_location_ids[a]=b}function get_recent_accepted_offer_id(a){return recent_offer_ids[a]}function get_recent_accepted_location_id(a){return recent_location_ids[a]}function delete_recent_accepted_offer_id(a){delete recent_offer_ids[a]}function delete_recent_accepted_location_id(a){delete recent_location_ids[a]}if(!window.console){window.console={}}if(!window.console.log){window.console.log=function(){}}if(!window.console.debug){window.console.debug=function(){}}if(!window.console.error){window.console.error=function(){}}if(!window.console.warn){window.console.warn=function(){}}function getLocalStorage(){var a;try{localStorage.setItem("storage","");localStorage.removeItem("storage");a=localStorage}catch(b){a=new LocalOrSessionStorageAlternative()}return a}function getSessionStorage(){var a;try{sessionStorage.setItem("storage

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\generic1602688721974[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	281422
Entropy (8bit):	5.6509955021690725
Encrypted:	false
SSDEEP:	3072:xmFIebNtSRnylg2J1Nw3PNL7zz5+5iVMGyp+lhexsDEjLL:y1J14PNL7zgf7Hj/
MD5:	122B69405BA7C3BFEBC1D898A39170F0
SHA1:	D8E4552558E6D5EE13FAE326B0D3AB41C67AD49C
SHA-256:	E15B394589918E0A85706115148071B1664B2ABF6375552C0186243B7ED0780F
SHA-512:	1F0B8E2A7C685722CEB8EBA9CBC6635EF66875F7BB595FD2953733BBCBF4D9662E4F20F9B7CC0FE899AB305BBC0E7646ED60CD5AF7447C490B98A94648ECEDCC
Malicious:	false
Reputation:	low
IE Cache URL:	https://resources.digital-cloud-citi.medallia.com/wdcusciti/2290/onsite/generic1602688721974.js
Preview:	.(function(window){window.MDIGITAL=window.MDIGITAL\|\|{};window.MDIGITAL.version='2.34.0';})(window);window.KAMPYLE_CONSTANT={SVGS:{NO_DATA_MODAL_IMG:'<svg role="" tabindex="0" aria-label="Image of an error indicator" class="{{WCAG_CLASS_PLACHOLDER}}" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="450" height="278.118" viewBox="0 0 450 278.118"> <defs> <radialGradient id="radial-gradient" cx="0.5" cy="0.5" r="0.5" gradientUnits="objectBoundingBox"> <stop offset="0" stop-color="#c7c7c8" stop-opacity="0.71"/> <stop offset="1" stop-color="#ddddde" stop-opacity="0"/> </radialGradient> <linearGradient id="linear-gradient" x1="0.747" y1="0.203" x2="0" y2="0.393" gradientUnits="objectBoundingBox"> <stop offset="0" stop-color="#dbe4f1" stop-opacity="0"/> <stop offset="1" stop-color="#c7c7c8" stop-opacity="0.518"/> </linearGradient> <linearGradient id="linear-gradient-2" x1="0.521" y1="0.272" x2="1" y2="0.393" gradientUnits="objectBoundingBox"> <stop offset="

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\gpt[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	55570
Entropy (8bit):	5.53539874804443
Encrypted:	false
SSDEEP:	768:PQWm4l8hxqPrwkEGh1eh+TksW2YzR/0viT4EG9tLUmR:YWm4lMxYNkD5zdFg9tLHR
MD5:	EC2B754DA409EE8871383296D97406EA
SHA1:	A596D13FDA41CB441BBF338D98B26554578CCE96
SHA-256:	F78A77EBA09E45EC07BE11CE05B8ECB0247056BF9FF1233F0A10285F24FC0AE3
SHA-512:	4BE7A233FFD9E44FCAA4D5B4E97BCA1CE3BC73E84EEAF4137CE9E849AFD25A6DDBBD19076027A79B5497B38FF11968570F748B69253FE349372893536ACA0BE5
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagservices.com/tag/js/gpt.js
Preview:	(function(E){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),fa="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),m={},ha={},n=function(a,b){var c=ha[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]},q=function(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in m

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\index[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ISO-8859 text, with very long lines, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	215637
Entropy (8bit):	5.182039638912459
Encrypted:	false
SSDEEP:	3072:oazekGRGjJ4VKazekGRGjJ4VKazekGRGjJ4V9:Th8h8h6
MD5:	BE56407053E40C22887893C1416E2908
SHA1:	CA80D193E3B9DC04A0DC06D107D360AB6931E9A7
SHA-256:	2A7B764B3B4A1EDCCDEF26DF96132E078EA41C9ADB3DD0DD6528D581D27BBC13
SHA-512:	51824653EB12BD96219AEC2491D4177CD143C2428E7F26AEB32C521D3D42C65455903ECF3083637A88ADA6960ACE02770020766552329F7613F250117543A81C
Malicious:	false
Reputation:	low
Preview:	.................................................................................................................................................................................................................... ........................................................................................................................................................................................................................................................................<!DOCTYPE html> ..<html lang="en" manifest="/USCRSF/appcache/PLCN_BESTBUY.en_US.appcache">..<head>..<script src="/assets/scripts/global/6c8322c7341eac98645c10e3d1d3c7ae.js"></script>..<script src="https://www.promisejs.org/polyfills/promise-6.1.0.js"></script>..<script>..var tmx_org_id = '530q7tul';..</script>..<script type="text/javascript" src="https://resources.digital-cloud-citi.medallia.com/wdcusciti/2290/onsite/embed.js" async></script>..<script src ="/USCRSF/USCRSGBL/js/injectChat.js"></script>..<script src= "/

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\injectChat[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	19954
Entropy (8bit):	5.25514157239173
Encrypted:	false
SSDEEP:	384:JQGS5vIDUAM9ZAig2Myw41yNyiy0ykif3DeMj7huLT34wp0mtv:e7rp0Mlrkio
MD5:	93B6789A59EFAAA6810A911B40C6F30B
SHA1:	BC496611FCB2233D80A7EB438E51E40ADFF09A64
SHA-256:	5CA41051CF5FE43478B7EF4C3B54FC18FC98FB11C7721A0BABEC3DC2DA1A3537
SHA-512:	A7D8FFDA4FDFC7F7225B21184899ADA9DD7A1FC71F08074C09163BECE82AA6388AC924531E2DADF28663F0D4D0694214F65BB3B63866BCBC817D2D71467A7AC7
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/js/injectChat.js
Preview:	var chatConsumer="default";var chatShowView=false;var agentAvailable=false;var chatSectionArr=[];var chatPayloadJson={};var userIdentifier="";var companyIdentifier="";var chatHeaderParams={};var chatLPVars={};if(typeof screenID=="undefined"){var screenID=""}var lpSectionArray=["copsuser","partnertype","pagename","unit","modulename","moduleviewpage","messagecentertopic","loggedout"];var generateChatUUID=function(){var a=new Date().getTime();if(typeof performance!=="undefined"&&typeof performance.now==="function"){a+=performance.now()}return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,function(d){var b=(a+Math.random()*16)%16\|0;a=Math.floor(a/16);return(d==="x"?b:(b&3\|8)).toString(16)})};function initChat(g,e,p){var n="";if(typeof g!="undefined"&&null!==g&&g!==""){n=g}else{if(typeof chatServiceUrl!="undefined"&&null!==chatServiceUrl&&chatServiceUrl!==""){n=chatServiceUrl}}setChatTokenUrl(n);var l="common_chat";if(typeof e=="undefined"\|\|e==null){if(typeof screenID!="undefined"&&

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\kore-ai-sdk.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	196925
Entropy (8bit):	5.711987165857473
Encrypted:	false
SSDEEP:	1536:P1+W+RayIZ+oHMWWMbAvoMVFa8edjyxRu6sCKVd/yQwSUI:QW+dhoJ+oM3uhCyy5I
MD5:	CFF2A73D95EDE6F0F1200492FE05ABAB
SHA1:	347126819EF78304417BCF5F60A16526E28B1000
SHA-256:	B799052357852594B71E95F34EECF71D9B2CE9D12F2411CB0B40D59DC1CF8ED8
SHA-512:	E9A3BA383D16161FDB96DE009D46891DFFCF275A870C09A58CD4FC6ACEC599C1FFF4CF3EC1726F32581A5ADF5244A8FEF6C0720644D81DF2DD257386F7E5B699
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/css/vendor/kore-ai-sdk.min.css
Preview:	.emojione{content:"";text-indent:-9999em;-webkit-backface-visibility:hidden;backface-visibility:hidden;image-rendering:optimizeQuality;font-size:inherit;height:64px;width:64px;top:0;position:relative;display:inline-block;margin:0 .15em;line-height:normal;vertical-align:middle;background-image:url(images/emojione.sprites.png);background-repeat:no-repeat}.emojione-0023-20e3{background-position:-65px 0}.emojione-002a-20e3{background-position:-1365px -1820px}.emojione-0030-20e3{background-position:0 -65px}.emojione-0031-20e3{background-position:-65px -65px}.emojione-0032-20e3{background-position:-130px 0}.emojione-0033-20e3{background-position:-130px -65px}.emojione-0034-20e3{background-position:0 -130px}.emojione-0035-20e3{background-position:-65px -130px}.emojione-0036-20e3{background-position:-130px -130px}.emojione-0037-20e3{background-position:-195px 0}.emojione-0038-20e3{background-position:-195px -65px}.emojione-0039-20e3{background-position:-195px -130px}.emojione-00a9{background-p

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\kore-ai-sdk.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	689965
Entropy (8bit):	5.776162680507733
Encrypted:	false
SSDEEP:	12288:UQDAKXvHpklrH4PDnobyWMROBZ6kR7GLBiMYwqrTmMj:UQDAKXvHpklrHdbyWMROBZ6kR7GhYwq7
MD5:	02D8E0549E1B019A2C31DCEEDB1B9AA6
SHA1:	76E113154EA9FC08E6CBF0E1E1529739ED869140
SHA-256:	977354650F9F68EA115CDFB864713170E80EF5A042955E76E00E1336A764CD6C
SHA-512:	79D5A35D9060CE5DD20AE88AB362B2AD6F4943879FCA4D5EBADEC6A8EE2EC1FA12B12FE1A7483478313BDB2AFDFC81AE744333C93E7CB8066BA5A570B814ECD0
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/js/vendor/kore-ai-sdk.min.js
Preview:	function koreAnonymousFn(a){function b(){console.info("generating UUID");var a=(new Date).getTime();return window.performance&&"function"==typeof window.performance.now&&(a+=performance.now()),"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,function(b){var c=(a+16*Math.random())%16\|0;return a=Math.floor(a/16),("x"==b?c:3&c\|8).toString(16)})}console.info("anonymous user login");var c=localStorage.getItem("korecom"),d=c\|\|b();if(localStorage.setItem("korecom",d),!a.clientId)return void console.log("clientId should be there for anonymous user");var e={};e.issuer=a.clientId,e.subject=d,a.assertion=e,this.options=a,this.claims=a.assertion,this.WebClient=new this.clients.KoreWebClient({},this.options),this.WebClient.claims=this.claims,this.WebClient.anonymouslogin.login({assertion:a.assertion,botInfo:this.options.botInfo},bind(this.onLogIn,this))}function koreBotChat(){function a(a){var b;return a&&(b=a.isNotAllowedHTMLTags()),b&&!b.isValid&&(a=a.escapeHTML()),a}function b(a){return 0=

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\ls_fp[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	49022
Entropy (8bit):	5.453696297276987
Encrypted:	false
SSDEEP:	768:9FvaN9XGPBjER+wYWxk/4QeFeefAEt8o9c3Pg:9JaNt0j5/dZ5C
MD5:	51571B956B0E544FA6BF22E3407DE46E
SHA1:	4C6D520816F2B96CB57A9504D93551F8FDCE4830
SHA-256:	888C3BEB971C77F2EB4B66B315950A9574CDB68F282804EB2CDE76CCE58535D3
SHA-512:	D9EC66A0CC599E22DF2EDB28E68F24A57F2BF66EE39270493F06C0086D111304E6BA7F4CBEFFE20BAF04BEA40EE3D2E6E9DDACEEACCBF1CDEF87AF46CDEF94D7
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_2F=td_2F\|\|{};td_2F.td_0f=function(td_N,td_v){var td_W=[""];var td_x=0;for(var td_U=0;td_U<td_v.length;++td_U){td_W.push(String.fromCharCode(td_N.charCodeAt(td_x)^td_v.charCodeAt(td_U)));td_x++;if(td_x>=td_N.length){td_x=0;.}}return td_W.join("");};td_2F.td_3e=function(td_p){this.td_c=td_p;this.td_d="";this.td_f=function(td_s,td_Y){if(0===this.td_d.length){var td_J=this.td_c.substr(0,32);var td_y="";for(var td_Z=32;td_Z<td_p.length;.td_Z+=2){td_y+=String.fromCharCode(parseInt(td_p.substr(td_Z,2),16));}this.td_d=td_2F.td_0f(td_J,td_y);}return this.td_d.substr(td_s,td_Y);};};td_2F.td_4T=function(td_x){if(td_x===null\|\|td_x.length===null){return null;.}var td_O=null;try{var td_n="";var td_g=[];var td_c=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_v=0;for(var td_l=0;td_l<td_x.length;++td_l){if(65+td_v>=126){td_v=0;}var td_G=(td_c+td_x.charCodeAt(td_v++)).slice(-3);.td_g.push(td_G);}var td_R=td_g.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\sid_fp[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	56116
Entropy (8bit):	5.476003128811323
Encrypted:	false
SSDEEP:	768:/DjdjO9UKKlZLQP/CsyWj6Fa5XE8q/lcljew4e5PTxQXawbetAEnX/aFy8+S92Sp:xOC5Ng9cDCULRlB
MD5:	ED8384B0D32611C0D5F8DFBC4119A595
SHA1:	1BB1B3CC656F3258DB7A4AC74F5FE95F9550277B
SHA-256:	E18DB0AE9FBC92A84081297A2903BC87C84607FADBBCC8A24944573F1B84FF90
SHA-512:	8F1A103435F5B7662D01BD8D3F368A44A8417CE1DBCD7990E9268C190723BEC694DFAFD080D8D92884095B05075C564B4695D6AD11E56C173A49E9AC2E8B7493
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_1G=td_1G\|\|{};td_1G.td_3p=function(td_U,td_P){var td_u=[""];var td_h=0;for(var td_L=0;td_L<td_P.length;++td_L){td_u.push(String.fromCharCode(td_U.charCodeAt(td_h)^td_P.charCodeAt(td_L)));td_h++;if(td_h>=td_U.length){td_h=0;.}}return td_u.join("");};td_1G.td_0S=function(td_m){this.td_c=td_m;this.td_d="";this.td_f=function(td_a,td_y){if(0===this.td_d.length){var td_x=this.td_c.substr(0,32);var td_s="";for(var td_M=32;td_M<td_m.length;.td_M+=2){td_s+=String.fromCharCode(parseInt(td_m.substr(td_M,2),16));}this.td_d=td_1G.td_3p(td_x,td_s);}return this.td_d.substr(td_a,td_y);};};td_1G.td_5L=function(td_L){if(td_L===null\|\|td_L.length===null){return null;.}var td_l=null;try{var td_o="";var td_g=[];var td_c=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_F=0;for(var td_e=0;td_e<td_L.length;++td_e){if(65+td_F>=126){td_F=0;}var td_S=(td_c+td_L.charCodeAt(td_F++)).slice(-3);.td_g.push(td_S);}var td_j=td_g.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\sodar2[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	16489
Entropy (8bit):	5.3278781656847745
Encrypted:	false
SSDEEP:	384:9b6PXmzlcwwR9JWy3dVy5SeTMEjijNazLciIEHSzv:CqlLG9JR3G5SV5ziIRv
MD5:	940F0371D0B05D33EECED0E78EC8A66B
SHA1:	41B2BD4450BE194C1C51AC0E78E73F9C308A935A
SHA-256:	BAF04FF369A96D4BB7228E99A65163DE20845BF23826295DD3471AFD3CEE9EE5
SHA-512:	668251F7E9B87152EC7C4D810AC94540306CDB413D1CC06CFD9C28BACE221D11ED66B48753A2A7ED7384ACF455FBA8164542AC7D0338A96777DFB6089F871845
Malicious:	false
Reputation:	low
IE Cache URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function ba(a){var b="undefined"!=typeof n.Symbol&&p(n.Symbol,"iterator")&&a[p(n.Symbol,"iterator")];return b?b.call(a):{next:aa(a)}}var ca="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},q="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var r=da(this),t="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),n={},v={};function p(a,b){var d=v[b];if(null==d)return a[b];d

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\storage.secure.min[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	39478
Entropy (8bit):	5.385381621587137
Encrypted:	false
SSDEEP:	768:xMHVWY/hGulkFNr/D9D14euRzYlaqTMV8rqBlfFvU6Cv74Kga:WHVWYvkFxx2H3nF+Jr
MD5:	E57F19D47B3B07B577D844AE827EA4B3
SHA1:	7FAB7227B3A1FB72D016A40685952C4483909EB8
SHA-256:	59F4843277D9ACA1200C779C52318AADB380021A0051A6644B75274ACB7FE158
SHA-512:	1DDEE249E339BF44B1419C5425D8D75B99A756EB76ABC2CB38CE8B5401644692A0FEE78CDE3C33B6ABB2712E631DB148C5212F1B9F291F4CD8E67796C704E10C
Malicious:	false
Reputation:	low
IE Cache URL:	https://lpcdn.lpsnmedia.net/le_secure_storage/3.12.0.0-release_5037/storage.secure.min.html?loc=https%3A%2F%2Fcitiretailservices.citibankonline.com&site=58975020&env=prod
Preview:	<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en"><head><title>LP Secure Storage</title><meta http-equiv="X-UA-Compatible" content="IE=100"><script type="text/javascript">window.lpTag=window.lpTag\|\|{},window.lpTag.lzString=window.lpTag.lzString\|\|function(){function e(e,t){if(!o[e]){o[e]={};for(var n=0;n<e.length;n++)o[e][e.charAt(n)]=n}return o[e][t]}var t=String.fromCharCode,n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",r="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",o={},a={compressToBase64:function(e){if(null==e)return"";var t=a._compress(e,6,function(e){return n.charAt(e)});switch(t.length%4){default:case 0:return t;case 1:return t+"===";case 2:return t+"==";case 3:return t+"="}},decompressFromBase64:function(t){return null==t?"":""==t?null:a._decompress(t.length,32,function(r){return e(n,t.charAt(r))})},compressToUTF16:function(e){return null==e?"":a._compress(e,15,function(e){return t(e+32)})+" "},decompressFromUTF16

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\top_fp[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	48821
Entropy (8bit):	5.448167621947398
Encrypted:	false
SSDEEP:	768:DrefAEt8o9c3PjN9X6Fvi/43PBjER+wYW3:v59Nt6Ji/Cji
MD5:	17A4B362FC6C274858AEDDBB1AF37E7E
SHA1:	0A22E31FEE3B148CC944D27BAA10C5E9E21DBE7F
SHA-256:	5670D4AF30344A50845A5A93BE8EF76C728E6FA75CCDE29752E07C35A602787E
SHA-512:	07DEF041876A1F04F6416066C4229AC0572B3268D1489BD65CFEC293831ABEDB59F66EEDD44EB6029FA46FFDA820A9D58A07A356C177CE94B7FB5E01E780E931
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_2F=td_2F\|\|{};td_2F.td_0f=function(td_N,td_v){var td_W=[""];var td_x=0;for(var td_U=0;td_U<td_v.length;++td_U){td_W.push(String.fromCharCode(td_N.charCodeAt(td_x)^td_v.charCodeAt(td_U)));td_x++;if(td_x>=td_N.length){td_x=0;.}}return td_W.join("");};td_2F.td_3e=function(td_p){this.td_c=td_p;this.td_d="";this.td_f=function(td_s,td_Y){if(0===this.td_d.length){var td_J=this.td_c.substr(0,32);var td_y="";for(var td_Z=32;td_Z<td_p.length;.td_Z+=2){td_y+=String.fromCharCode(parseInt(td_p.substr(td_Z,2),16));}this.td_d=td_2F.td_0f(td_J,td_y);}return this.td_d.substr(td_s,td_Y);};};td_2F.td_4T=function(td_x){if(td_x===null\|\|td_x.length===null){return null;.}var td_O=null;try{var td_n="";var td_g=[];var td_c=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_v=0;for(var td_l=0;td_l<td_x.length;++td_l){if(65+td_v>=126){td_v=0;}var td_G=(td_c+td_x.charCodeAt(td_v++)).slice(-3);.td_g.push(td_G);}var td_R=td_g.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\vendor[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	376923
Entropy (8bit):	5.278816053254363
Encrypted:	false
SSDEEP:	3072:mlVehN+it02p5izVuSgwhAJW32RXUKRVTmaoCapjhefhOMVbhMWRuj+7MPDfUpkx:mref+iBi5NhAJWmXdTepA9bhMWRZsxh
MD5:	6B64EA860E6C548924A16A29319EF36E
SHA1:	3BA5D59F90A6206A50B06DEBF9F0DCF732933EF0
SHA-256:	C04D17E1E5CAB835424941D3532F33BB14AE758657F64ACF19B3DF043A51E61D
SHA-512:	AC178C7105F87341CAF2FD6664B7C49869065FE8E6DC433089E1702CE3D76110CA97601B0DEEC606F015778F60B4CCB4993AB508F10CCF7B047AD6BEDE55E54D
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/js/vendor.js
Preview:	/!. jQuery JavaScript Library v2.1.4. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright 2005, 2014 jQuery Foundation, Inc. and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2015-04-28T16:01Z. */.!function(e,t){"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){function i(e){var t="length"in e&&e.length,i=Q.type(e);return"function"!==i&&!Q.isWindow(e)&&(!(1!==e.nodeType\|\|!t)\|\|("array"===i\|\|0===t\|\|"number"==typeof t&&t>0&&t-1 in e))}function n(e,t,i){if(Q.isFunction(t))return Q.grep(e,function(e,n){return!!t.call(e,n,e)!==i});if(t.nodeType)return Q.grep(e,function(e){return e===t!==i});if("string"==typeof t){if(ae.test(t))return Q.filter(t,e,i);t=Q.filter(t,e)}return Q.grep(e,function(e){return V.call(t,e)>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\6c8322c7341eac98645c10e3d1d3c7ae[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	191833
Entropy (8bit):	6.0771394177526386
Encrypted:	false
SSDEEP:	3072:SqkWOmGulx3LgIq/D8Dl3PGelgHxbJSkfbeC6LFj7T/VNr5Ltayi2JQ:nMmfNkIDlfdIxVSEiC6p/ZNvayi2i
MD5:	A4BB5B531277B710560A604B063363FC
SHA1:	9CE99C49A9B5BF9EF6A8E3B91461D67545133A08
SHA-256:	90A5F903186F702A7DE41E3BCFF3764AFA6C7F1A6047936DBCCE106FEAC85852
SHA-512:	0A6AEA07EF371CB00AAE7F232C8F60B2210189E5929B350FD8918F16EE65947530159E74D0D8A168A4936C57663CA77D67CB05CF23DF63293D4B85BAA7CF9CFA
Malicious:	false
Reputation:	low
Preview:	(function e(S){var O={},c={};var f=ReferenceError,B=TypeError,Y=Object,p=RegExp,D=Number,j=String,G=Array,d=Y.bind,Q=Y.call,X=Q.bind(d,Q),N=Y.apply,A=X(N),x=[].push,u=[].pop,y=[].slice,n=[].splice,E=[].join,C=[].map,r=X(x),J=X(y),s=X(E),o=X(C),w={}.hasOwnProperty,m=X(w),b=JSON.stringify,P=Y.getOwnPropertyDescriptor,M=Y.defineProperty,Z=j.fromCharCode,V=Math.min,K=Math.floor,z=Y.create,R="".indexOf,l="".charAt,U=X(R),T=X(l),L=typeof Uint8Array==="function"?Uint8Array:G;var F=[f,B,Y,p,D,j,G,d,Q,N,x,u,y,n,E,C,w,b,P,M,Z,V,K,z,R,l,L];var q=["dok6XRLqDA","idQcCTn6Sa6R19lqXA","FLQjVhvuIu797tARcURDObs","documentBody","VOMwehn6Cfjp-JpuIw","3oMk","eWM","yEeozJR853kqPA","lF6S-41Y-iM","mqM4AQTvHZ8","UCaW9pBUkFRiJw","LUXvhfozqiMaHyLZ5g","match","Nyaet-BR","set","HkY","sVrtmNMt","INIPfiXUS8GUzLdhLUVVIKPO59A","L-NKEkimOq3sx_B8cgwDFKrglMG3AG88TTVBZzxE0j9b9FI","aADB3PRJ3Q","IdEaczvQPtmTjbNjKWsQE5-1l47LKWpiHEseZC8j0Qwru35IVKuDQ_OpYV5yff9gAoGT98dBPTBwQ7bune_jUrXavnYeF6I4T1wJTZ_1DqEm6pn4Z24lwMA0IOkn9I35TS

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\clear[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	81
Entropy (8bit):	4.3493440438682995
Encrypted:	false
SSDEEP:	3:yionv//thPltXlfMLts0NyWn/NG8bp:6v/lhP/ZMRHNyWn/NG8bp
MD5:	1B6D2DE2867A3E11063BA25AA1CD4209
SHA1:	BD20B0E089F31F35CBA4D0FA7277E73AA74D944C
SHA-256:	95518CBEC0D55A574A9C8EF72A2A7D62AC0D40A4DE5DFE67A76A7D214DC8B743
SHA-512:	D30AC99B9140393CB2EA8EB09F0C69F6107CA5940DDF208B5EC1DD6D5ABDAB37FC60A892AA397579DA75B450965ADE6D37EE84C55550B42DD86F7AA26D99AB88
Malicious:	false
Reputation:	low
IE Cache URL:	https://content22.citibankonline.com/fp/clear.png
Preview:	.PNG........IHDR.............."......sRGB.........IDAT..c`.......c*......IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\container[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5810
Entropy (8bit):	5.546604696057645
Encrypted:	false
SSDEEP:	96:euWaCmmku4wh5Wjg4bfIX5jch828cInOhfYzVAexeZCp+xPvF1zj:NjS4i50TfIXeh8vef4VAe8a+FNJj
MD5:	94918A2321B72368FDFE5B171AA653CD
SHA1:	98B7880B6C2A5FED14B55458E175424D34FDCD69
SHA-256:	E86479D6E54449D1085C2149E190A615C6BEAD407B20BACBCF5852B5D65F1FEE
SHA-512:	9C9616CCBC9765F4E825F6B57FBA35E57B97B5EF5F51E88A5FE6D44BF22EDBEE1A52975F3311FE25D2CA65837B34DCB51CC2E00F02410C54A3AEEE6A2C17E255
Malicious:	false
Reputation:	low
IE Cache URL:	https://tpc.googlesyndication.com/safeframe/1-0-37/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){var n=this\|\|self;var w={};var y=function(a){y[" "](a);return a};y[" "]=function(){};var B=null,G=function(a){var b=a.length,c=3b/4;c%3?c=Math.floor(c):-1!="=.".indexOf(a[b-1])&&(c=-1!="=.".indexOf(a[b-2])?c-2:c-1);var d=new Uint8Array(c),f=0;C(a,function(g){d[f++]=g});return d.subarray(0,f)},C=function(a,b){function c(q){for(;d<a.length;){var e=a.charAt(d++),k=B[e];if(null!=k)return k;if(!/^[\s\xa0]$/.test(e))throw Error("Unknown base64 encoding at char: "+e);}return q}H();for(var d=0;;){var f=c(-1),g=c(0),h=c(64),p=c(64);if(64===p&&-1===f)break;b(f<<2\|g>>4);64!=h&&(b(g<<4&240\|h>>2),64!=p&&b(h<<6&192\|p))}},H=function(){if(!B){B={};for(var a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789".split(""),b=["+/=","+/","-_=","-_.","-_"],c=0;5>c;c++)for(var d=a.concat(b[c].split("")),f=0;f<d.length;f++){var g=d[f];void 0===B[g]&&(B[g]=f)}}};var I=function

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\copy_1578331703435_Feedback[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 39 x 108, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1993
Entropy (8bit):	7.857670162974066
Encrypted:	false
SSDEEP:	48:cz9dWGNchNy9RK+SSpcbkSDnhhOozLJ7ducj5JvP:cz9PChI9RK+SscbNhhOozfuGX
MD5:	8515C838C29A9151BEFA4F4350E41381
SHA1:	D215B7872943B519402C9A97171CB0E7EAFA781D
SHA-256:	506575B752D10714465811AEC4DD67A7BFB471FCBC2E9619C1FAAD68C110759E
SHA-512:	B9377ACCDA8C3F1148448E864C04323465C64A6D72CF4001CF551C53EE3ED8D663D16C3A0BA2FB9DA563B067682865A013652733E620B68A70BB127ADABB6CD6
Malicious:	false
Reputation:	low
IE Cache URL:	https://resources.digital-cloud-citi.medallia.com/wdcusciti/2290/resources/image/copy_1578331703435_Feedback.png
Preview:	.PNG........IHDR...'...l......<......sRGB.........IDATx..\IL.I.~..J...JP....Q..a..(..K.F...(....L<..E...x0sQ1z....c2..wP.....7...a..t.=]...N._.w._..._U..o...uk.j^....5...{......q.@e( ...<w{...........U.).-.%K..S@.QR..`..K..RF.0......b.......NeT..A]D%...D.@.EJ..#.H.j)..vib..I.V.....{n....B.q"..7..... ##....h.=>}&..'l2H?....i..>}..9C.....\|.?~.~DT........T\\LK...~.~..s......y...%..M.F.7o...{......S......<6~....p.6l...9......._......N...\|=\|.......o.1a..Yc..=..m..I........g\|Z._.NO.<..4T.......1..?.)).Q..C.=j.&..r.J......Tg..n.0a..fS....-.......].z.n.E.N...}..]...8~.8.'N.H...N.iE.N[.H.M.......xJJJrw......a=.766re.I.a.....r....../^.w.,8....{....;w..-ZD..,.K#.....9rD.Z."p....=z...3f.}............s+PzPT+a...-..K.Z\....x...q)..v.Z....]........m..p.@..wJ}B?\|..m.."p.f."..CP.uuu.....M..J\|90..................{.z.D.^.~...@......d..JKK..o..':....WP.p..c.q.._.....X\|...l...y...LZ.l..;.[[[.-p.....A.C.K....R......,.>}:!2...".....qx(..5.c...1c..../^L...".

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\crossdomain[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	212
Entropy (8bit):	4.927709756598364
Encrypted:	false
SSDEEP:	3:vFWWMNHU0KdejTlLyL92xgLJS4fvyToWK5slLyLbBHLZGaRIZlLyL2JEi0MKzvZO:TMVcUw4xSc4fKToWK5bpH0aJ5MKBab3
MD5:	1C8BC0B7588CDF0D84AFBDAB47095E4D
SHA1:	90625E09A76792CE45FBD1C70DA953BE7D8B5625
SHA-256:	7B587BF339E305F2BC4150C5E73E34D3D9777B2DB6F5D7F98842B39968FCF51D
SHA-512:	DBC05CC7AD0FBAE65E885086EEF4F1104B764FCC78109C7EA22860836233F8C231ABA45C285F92A54E69A3789188A1AC0D77D208B74693A9ABEC3ECC31721BD6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0"?>.<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">.<cross-domain-policy>.<allow-access-from domain="" to-ports="" />.</cross-domain-policy>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\crossdomain[2].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	212
Entropy (8bit):	4.927709756598364
Encrypted:	false
SSDEEP:	3:vFWWMNHU0KdejTlLyL92xgLJS4fvyToWK5slLyLbBHLZGaRIZlLyL2JEi0MKzvZO:TMVcUw4xSc4fKToWK5bpH0aJ5MKBab3
MD5:	1C8BC0B7588CDF0D84AFBDAB47095E4D
SHA1:	90625E09A76792CE45FBD1C70DA953BE7D8B5625
SHA-256:	7B587BF339E305F2BC4150C5E73E34D3D9777B2DB6F5D7F98842B39968FCF51D
SHA-512:	DBC05CC7AD0FBAE65E885086EEF4F1104B764FCC78109C7EA22860836233F8C231ABA45C285F92A54E69A3789188A1AC0D77D208B74693A9ABEC3ECC31721BD6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0"?>.<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">.<cross-domain-policy>.<allow-access-from domain="" to-ports="" />.</cross-domain-policy>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\dnserror[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2997
Entropy (8bit):	4.4885437940628465
Encrypted:	false
SSDEEP:	48:u7u5V4VyhhV2lFUW29vj0RkpNc7KpAP8Rra:vIlJ6G7Ao8Ra
MD5:	2DC61EB461DA1436F5D22BCE51425660
SHA1:	E1B79BCAB0F073868079D807FAEC669596DC46C1
SHA-256:	ACDEB4966289B6CE46ECC879531F85E9C6F94B718AAB521D38E2E00F7F7F7993
SHA-512:	A88BECB4FBDDC5AFC55E4DC0135AF714A3EEC4A63810AE5A989F2CECB824A686165D3CEDB8CBD8F35C7E5B9F4136C29DEA32736AABB451FE8088B978B493AC6D
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/dnserror.htm?ErrorStatus=0x800C0005&DNSError=1460
Preview:	.<!DOCTYPE HTML>..<html>.. <head>.. <link rel="stylesheet" type="text/css" href="NewErrorPageTemplate.css" >.. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.. <title>Can’t reach this page</title>.. <script src="errorPageStrings.js" language="javascript" type="text/javascript">.. </script>.. <script src="httpErrorPagesScripts.js" language="javascript" type="text/javascript">.. </script>.. </head>.... <body onLoad="getInfo(); initMoreInfo('infoBlockID');">.. <div id="contentContainer" class="mainContent">.. <div id="mainTitle" class="title">Can’t reach this page</div>.. <div class="taskSection" id="taskSection">.. <ul id="cantDisplayTasks" class="tasks">.. <li id="task1-1">Make sure the web address <span id="webpage" class="webpageURL"></span>is correct</li>.. <li id="task1-2">Search for this site on Bing</li>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\down[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 15 x 15, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	748
Entropy (8bit):	7.249606135668305
Encrypted:	false
SSDEEP:	12:6v/7/2QeZ7HVJ6o6yiq1p4tSQfAVFcm6R2HkZuU4fB4CsY4NJlrvMezoW2uONroc:GeZ6oLiqkbDuU4fqzTrvMeBBlE
MD5:	C4F558C4C8B56858F15C09037CD6625A
SHA1:	EE497CC061D6A7A59BB66DEFEA65F9A8145BA240
SHA-256:	39E7DE847C9F731EAA72338AD9053217B957859DE27B50B6474EC42971530781
SHA-512:	D60353D3FBEA2992D96795BA30B20727B022B9164B2094B922921D33CA7CE1634713693AC191F8F5708954544F7648F4840BCD5B62CB6A032EF292A8B0E52A44
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/down.png
Preview:	.PNG........IHDR...............ex....PLTE....W..W..W..W..W..W..W..W..W..W..W..W..W.U..............W..W.!Y.#Z.$\.'].<r.=s.P..Q..Q..U..o..p..r..x..z..~.............................................b.............................................................................................................................................................................................................$..s...7tRNS.a.o(,.s....e......q*...................................F.Z....IDATx^%.S..@.C..jm.mTk...m.?\|;.y..S....F.t...,.......D.>..LpX=f.M...H4........=...=..xy.[h..7....7.....<.q.kH....#+....I..z.....'.ksC...X<.+..J>....%3BmqaV...h..Z._.:<.Y_jG...vN^.<>.Nu.u@.....M....?...1D.m~)s8..&....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\eH3_Sy55amp11kNG_q9179xat6pfflBiqJg1RQ_xCqU[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	36766
Entropy (8bit):	5.639635614383879
Encrypted:	false
SSDEEP:	768:O/LI0huz4kLpqGydBfFggfR6ld07Mmf3mB1Aimi:l0RkLHK9ggfOd2MHf
MD5:	D7CAF1B0AD095F7893F36AFF522F2848
SHA1:	66CB43293490255BD4D011516A66A53CC993D923
SHA-256:	787DFF4B2E796A6A75D64346FEAF75EFDC5AB7AA5F7E5062A89835450FF10AA5
SHA-512:	ED5664663F23C8A98E5E5A2E5A1A5D8624CB07A0201C0389FCB3F05F1E93E618F2CDB9B6ED6596B580DD447434D83951FC7991A3790146E4EC824F5A07AA0D7D
Malicious:	false
Reputation:	low
IE Cache URL:	https://pagead2.googlesyndication.com/bg/eH3_Sy55amp11kNG_q9179xat6pfflBiqJg1RQ_xCqU.js
Preview:	(function(){var r=function(e,v,C,X,Q){if((Q=(X=g.trustedTypes,C),!X)\|\|!X.createPolicy)return Q;try{Q=X.createPolicy(v,{createHTML:Z,createScript:Z,createScriptURL:Z})}catch(b){if(g.console)g.console[e](b.message)}return Q},Z=function(e){return e},g=this\|\|self;(0,eval)(function(e){return(e=r("error","bg",null))&&1===eval(e.createScript("1"))?function(v){return e.createScript(v)}:function(v){return""+v}}()(Array(7824Math.random()\|0).join("\n")+'(function(){var f=function(e,X,v,Q,Z,C,g,b,r,N,F,p,y,t,R,A){if(20==(((e>>1)%140\|\|(C=this,Z={},g=C.$,Q=function(I,M){return(M=g.call(C,[e$]),v)[I%6165X%6165107(M\|0)%6165X%6165]},Q[C.M]=function(I){Z[1170X%6165]=I},Q[C.M](v),v=Z,A=Q),e)+6&127)&&Q.c.splice(X,X,v),9==(e>>1&127)){if(((r=(g=(p=(C=(v\|\|Q.B9++,0)<Q.LP&&Q.Qr&&Q.bQ&&1>=Q.fP&&!Q.Y&&!Q.H9&&(Q.zN\|\|!v)&&document.hidden==X,F=4==Q.B9)\|\|C?Q.U():Q.Ud,p)-Q.Ud,g)>>14,Q).F&&(Q.F=(N=Q.F,b=r*(g<<2),(N\|b)+~(N&b)+1)),Q.ho+=r,F)\|\|C)Q.B9=0,Q.Ud=p;!C\|\|p-Q.Ir<Q.LP-(Z?255:v?5:2)?A=X:(y=k(Q,v?78:91),a(Q,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\embed[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1575
Entropy (8bit):	5.272443572212444
Encrypted:	false
SSDEEP:	24:/OsIXvuPQa8VyIaoK8d7mQMJHvIq6myoC5iNxomRRzNOmDB+3mLUzdmlNmsrIm8g:DKgJTS7m9bZvCK/BOL3DS0Zm7R9s9p4J
MD5:	E679AB2390E2F68104AAD92891CB9FD1
SHA1:	A382DFBFE03E648A107867621A8434B457A5E42F
SHA-256:	48A93532C7072D29FF5B159A4AEB468806ED902BC2ED3035CB95D98C3D92749C
SHA-512:	941D2742A2754BFA8740A47EDBB8686D323A526ADF39919A04DD8CF3C859349AD3B9CA2621A440059371062B54DC7D02F06C7F9B8FD09B81164A508D6F357722
Malicious:	false
Reputation:	low
IE Cache URL:	https://resources.digital-cloud-citi.medallia.com/wdcusciti/2290/onsite/embed.js
Preview:	.(function(){if(!window.KAMPYLE_EMBED){window.KAMPYLE_EMBED={kampyleInit:function(){var t=document.createElement('script');t.type='text/javascript';t.async=true;t.src=KAMPYLE_EMBED.getGenericLocation();t.charset='UTF-8';document.body.appendChild(t);},kampyleLoadLogger:function(){},kampyleEventHandler:function(elem,eventType,handler){if(elem.addEventListener){elem.addEventListener(eventType,handler,false);}.else if(elem.attachEvent){elem.attachEvent('on'+eventType,handler);}},isSupported:function(){var result={isIE:false,trueVersion:0,actingVersion:0,compatibilityMode:false};var trident=window.KAMPYLE_EMBED.getUserAgent().match(/Trident\/(\d+)/);if(trident){result.isIE=true;result.trueVersion=parseInt(trident[1],10)+4;}.var msie=navigator.userAgent.match(/MSIE (\d+)/);if(msie){result.isIE=true;result.actingVersion=parseInt(msie[1]);}else{result.actingVersion=result.trueVersion;}.if(result.isIE&&result.trueVersion>0&&result.actingVersion>0){result.compatibilityMode=result.trueVersion!=re

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\en_US[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3516
Entropy (8bit):	5.033002766268291
Encrypted:	false
SSDEEP:	96:tGwV9Y7mo0UeWq88KcdSEaZUHx6yjSWFRU/Pjod:tZHY7j0ZV1wEjHx6yjSWF0jE
MD5:	0C8101BB2F8AE7AD83076E351B7246A1
SHA1:	E70A3AAA11673B5F7836FDC18E657F320F76DB80
SHA-256:	458E766E17C6DFA0EC1ECB7791FE471CBD82CE1531F9F4FCC443BF2868AE533A
SHA-512:	F27CCBEAC994D2B62CB853AB82E16A4E12B66F352A9A73594EE07F79AE7A1046E9B5B3A19B2F2026B7A932D755D9A916C422C49CAA5453E3A4FEFCDFBCBCE9FF
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/js/helpers/en_US.js
Preview:	$.translations={page_transitions:{page_ready:"loaded",page_loading:"Loading",view_ready:"Page Loaded"},months:{full:["January","February","March","April","May","June","July","August","September","October","November","December"],abbreviated:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"]},dates:{written:["first","second","third","fourth","fifth","sixth","seventh","eighth","ninth","tenth","eleventh","twelfth","thirteenth","fourteenth","fifteenth","sixteenth","seventeenth","eighteenth","nineteenth","twentieth","twenty-first","twenty-second","twenty-third","twenty-fourth","twenty-fifth","twenty-sixth","twenty-seventh","twenty-eighth","twenty-ninth","thirtieth","thirty-first"],contracted:["1st","2nd","3rd","4th","5th","6th","7th","8th","9th","10th","11th","12th","13th","14th","15th","16th","17th","18th","19th","20th","21st","22nd","23rd","24th","25th","26th","27th","28th","29th","30th","31st"]},days:{full:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday"

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\f[1].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	9903
Entropy (8bit):	6.015255013610108
Encrypted:	false
SSDEEP:	192:GpkUADDZAPTLp5F61C1FaakIWVcTODDNgUwY3T3Z3a:okJG/p5F6q1qJ9gXY3T3Z3a
MD5:	654B6415E1EB9AD012C1B69E61BF2BAC
SHA1:	AB780DBE9D37CAEDA87FA40A589911C3D393F40C
SHA-256:	7E2BEEDA6B129654AD56BA1F9813547403F68B9AC864A3A2A89FD1DC19A2D420
SHA-512:	6102DAFEC08ED989C21E62900022095EE61165DF4626F62105F659B2A30FD3A1D066151CF64A070538FFCA8FE0E17D77FE188946E0E3433E9DD416A251FE1B2C
Malicious:	false
Reputation:	low
IE Cache URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2021010903&st=env
Preview:	{"sodar_query_id":"osb9X5X8DqKprATU1qH4BA","injector_basename":"sodar2","bg_hash_basename":"eH3_Sy55amp11kNG_q9179xat6pfflBiqJg1RQ_xCqU","bg_binary":"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

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\fpc[1].swf Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Macromedia Flash data, version 7
Category:	dropped
Size (bytes):	2001
Entropy (8bit):	4.914589593413625
Encrypted:	false
SSDEEP:	48:sYkfJCBynePZiMsy24gKkBh0CMJcM8ZzIGc3c0QhCa1o+Jdl/ZMf:jkfJCByneBiljCkBjXKMfq8l/ZMf
MD5:	1AA138249449D29827E983101964A50F
SHA1:	156B6738C6F88E60760FB37B731161885D22A82A
SHA-256:	6608FB1F5A2560C8E9617D5157D394B63DDCC9C40523BE722E0109909B47A53A
SHA-512:	1C2307A32FAA1864C749494F916976F6CFA131AEA0C2B2930093876E30B683121D6B0847F3EE15350C33D5A42808E278B13A52A004A69012D815B02F2B269007
Malicious:	false
Reputation:	low
Preview:	FWS.....8........C....?......k.6.0123456789abcdef..length.charAt.parseInt.session_id.charCodeAt.String.fromCharCode.xx10.session.SharedObject.getLocal.xx11.LoadVars.xx12.fa.fb.w.fg.xx43.?.split.xx14.&.i.xx15.=.p.toLowerCase.unescape.org.org_id.fx.fy.fap.xx57.clear.url.substr.clear.png.nu.Math.random.round.data.sessionid.xx48.toString.79826d0a7f53437a9fb9b8095b572a39.flush.fc.GET.sendAndLoad....xx57....*..s..................................................................NH................G.......Ng................................R..........G............RG..........=..................R........`b................RG..........P...............NI.................................G...............>....................R<................@<.....A.....A.....A.....A.....A.....A...................".....R........N<....................R<..............<.................NH...........................N.....R<.............................N.....R<...........I....".................N..........=.................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\fpc[2].swf Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Macromedia Flash data, version 7
Category:	dropped
Size (bytes):	2001
Entropy (8bit):	4.914589593413625
Encrypted:	false
SSDEEP:	48:sYkfJCBynePZiMsy24gKkBh0CMJcM8ZzIGc3c0QhCa1o+Jdl/ZMf:jkfJCByneBiljCkBjXKMfq8l/ZMf
MD5:	1AA138249449D29827E983101964A50F
SHA1:	156B6738C6F88E60760FB37B731161885D22A82A
SHA-256:	6608FB1F5A2560C8E9617D5157D394B63DDCC9C40523BE722E0109909B47A53A
SHA-512:	1C2307A32FAA1864C749494F916976F6CFA131AEA0C2B2930093876E30B683121D6B0847F3EE15350C33D5A42808E278B13A52A004A69012D815B02F2B269007
Malicious:	false
Reputation:	low
Preview:	FWS.....8........C....?......k.6.0123456789abcdef..length.charAt.parseInt.session_id.charCodeAt.String.fromCharCode.xx10.session.SharedObject.getLocal.xx11.LoadVars.xx12.fa.fb.w.fg.xx43.?.split.xx14.&.i.xx15.=.p.toLowerCase.unescape.org.org_id.fx.fy.fap.xx57.clear.url.substr.clear.png.nu.Math.random.round.data.sessionid.xx48.toString.79826d0a7f53437a9fb9b8095b572a39.flush.fc.GET.sendAndLoad....xx57....*..s..................................................................NH................G.......Ng................................R..........G............RG..........=..................R........`b................RG..........P...............NI.................................G...............>....................R<................@<.....A.....A.....A.....A.....A.....A...................".....R........N<....................R<..............<.................NH...........................N.....R<.............................N.....R<...........I....".................N..........=.................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\fpc[3].swf Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Macromedia Flash data, version 7
Category:	dropped
Size (bytes):	2001
Entropy (8bit):	4.914589593413625
Encrypted:	false
SSDEEP:	48:sYkfJCBynePZiMsy24gKkBh0CMJcM8ZzIGc3c0QhCa1o+Jdl/ZMf:jkfJCByneBiljCkBjXKMfq8l/ZMf
MD5:	1AA138249449D29827E983101964A50F
SHA1:	156B6738C6F88E60760FB37B731161885D22A82A
SHA-256:	6608FB1F5A2560C8E9617D5157D394B63DDCC9C40523BE722E0109909B47A53A
SHA-512:	1C2307A32FAA1864C749494F916976F6CFA131AEA0C2B2930093876E30B683121D6B0847F3EE15350C33D5A42808E278B13A52A004A69012D815B02F2B269007
Malicious:	false
Reputation:	low
Preview:	FWS.....8........C....?......k.6.0123456789abcdef..length.charAt.parseInt.session_id.charCodeAt.String.fromCharCode.xx10.session.SharedObject.getLocal.xx11.LoadVars.xx12.fa.fb.w.fg.xx43.?.split.xx14.&.i.xx15.=.p.toLowerCase.unescape.org.org_id.fx.fy.fap.xx57.clear.url.substr.clear.png.nu.Math.random.round.data.sessionid.xx48.toString.79826d0a7f53437a9fb9b8095b572a39.flush.fc.GET.sendAndLoad....xx57....*..s..................................................................NH................G.......Ng................................R..........G............RG..........=..................R........`b................RG..........P...............NI.................................G...............>....................R<................@<.....A.....A.....A.....A.....A.....A...................".....R........N<....................R<..............<.................NH...........................N.....R<.............................N.....R<...........I....".................N..........=.................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\gui_library.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	619241
Entropy (8bit):	5.111297415876947
Encrypted:	false
SSDEEP:	6144:poYOZwsMvij6apXCWV4rUtbT8pGnMrANc:2dL4rQT8Ag
MD5:	AA9D6AC21588D0ECA457C9F4D2A57A07
SHA1:	EED2B556A50DCB4058F81F447355651DE4130C84
SHA-256:	EAB072BB56865320D55921F68D6A30EDD5893537150075A8E5E60C9B607116CA
SHA-512:	E202E31283C7D0C38A53D8194434EB0C299CDA9ED6387354A4E7906EB7B6205CBC28724E6BB282B7FD7BA097672335ED49CDE98540434B923FBBC5DCB29CF28B
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/js/gui_library.min.js
Preview:	!function(){function e(t,i,n){function a(o,s){if(!i[o]){if(!t[o]){var l="function"==typeof require&&require;if(!s&&l)return l(o,!0);if(r)return r(o,!0);var u=new Error("Cannot find module '"+o+"'");throw u.code="MODULE_NOT_FOUND",u}var d=i[o]={exports:{}};t[o][0].call(d.exports,function(e){return a(t[o][1][e]\|\|e)},d,d.exports,e,t,i,n)}return i[o].exports}for(var r="function"==typeof require&&require,o=0;o<n.length;o++)a(n[o]);return a}return e}()({1:[function(e,t,i){"console"in window\|\|(window.console={})&&(window.console.log=new Function),e("jfp/pubsub"),e("browser_detection"),e("language"),e("keyboard"),e("extensions"),e("jsrender_support"),e("modules/module"),e("forms/form"),e("forms/ensconced_form"),e("forms/ensconced_multiform"),e("forms/email_communications_form"),e("tables/table"),e("datebox"),e("tooltip"),e("modal"),e("modal_focus_manager"),e("drop_down"),e("accordion"),e("email_prompt_toggle"),e("navigation"),e("speedbump"),e("security_modal"),e("overlay_modal"),e("paperless_e

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\interaction_reporter[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	40257
Entropy (8bit):	5.188441791744953
Encrypted:	false
SSDEEP:	768:3LKfnDkxNC298q42wa/Jm3OtkM+l2VYpLKGIMYt+x:u/DsNC298ql/JT0P68
MD5:	D3CDBDCE0156A842133746821B75010D
SHA1:	2C4BA871FDFB315F0945D13D06968C13A17493BC
SHA-256:	E1950FC1A0CFF4C411A9C15E128CD5D9FDC0ED2BA1DE3798650331E069ADA2D9
SHA-512:	F4CF7B13E5A861AEC215D37D3660239142AC886F4DF8C3289B93F36B54FD10FFD45C4B5809ADF996FA9CA79F0EAB8DD124BB199F48B95EFB886F7CA3CED9C5F5
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/js/interaction_reporter.js
Preview:	!function(){function e(t,i,n){function a(o,s){if(!i[o]){if(!t[o]){var l="function"==typeof require&&require;if(!s&&l)return l(o,!0);if(r)return r(o,!0);var u=new Error("Cannot find module '"+o+"'");throw u.code="MODULE_NOT_FOUND",u}var d=i[o]={exports:{}};t[o][0].call(d.exports,function(e){return a(t[o][1][e]\|\|e)},d,d.exports,e,t,i,n)}return i[o].exports}for(var r="function"==typeof require&&require,o=0;o<n.length;o++)a(n[o]);return a}return e}()({1:[function(e,t,i){e("measurement/supervisor")()},{"measurement/supervisor":11}],2:[function(e,t,i){var n,a,r;n=e("./tracking_event_lookup"),a=e("../sitecatalyst_reporter"),r={get_previous_pagename:function(e){var t;return sessionStorage.getItem("prev_v66")?sessionStorage.getItem("v66")?"undefined"===sessionStorage.getItem("v66")\|\|sessionStorage.getItem("v66")===e.page.name\|\|a.prototype.previous_page_name?e.page.name===sessionStorage.getItem("v66")?sessionStorage.getItem("prev_v66"):(sessionStorage.setItem("prev_v66",sessionStorage.getItem("v

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\ls_fp[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	98044
Entropy (8bit):	5.489229419979787
Encrypted:	false
SSDEEP:	768:NT42tTPTCmivNyCJELlP9GdPk6+2bPgRD9ktgXto8ILRzD8oj:NYHlyYI6Pk6P6ZJILND8oj
MD5:	64D49315B760371892B125C5A3DC5B7B
SHA1:	EFE07A984760BBA3B44A9798B65CE44892222507
SHA-256:	76F902C82830E1F6D1E8F19B3BEB5F500DCBDC275BE5EF0CB5205BFF587B6CDC
SHA-512:	0B5764D68BA55B6A4A9F3AF94DDEAFE97F3F50C450AB0CABD21871D176F7A40BF4A439F5B16B8EA29E3F351654F7D78A7B8DC451F3FB6A1E0F29EB4DFA23F7AD
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_4l=td_4l\|\|{};td_4l.td_3F=function(td_O,td_g){var td_C=[""];var td_A=0;for(var td_k=0;td_k<td_g.length;++td_k){td_C.push(String.fromCharCode(td_O.charCodeAt(td_A)^td_g.charCodeAt(td_k)));td_A++;if(td_A>=td_O.length){td_A=0;.}}return td_C.join("");};td_4l.td_4q=function(td_y){this.td_c=td_y;this.td_d="";this.td_f=function(td_X,td_p){if(0===this.td_d.length){var td_O=this.td_c.substr(0,32);var td_N="";for(var td_g=32;td_g<td_y.length;.td_g+=2){td_N+=String.fromCharCode(parseInt(td_y.substr(td_g,2),16));}this.td_d=td_4l.td_3F(td_O,td_N);}return this.td_d.substr(td_X,td_p);};};td_4l.td_2E=function(td_A){if(td_A===null\|\|td_A.length===null){return null;.}var td_T=null;try{var td_P="";var td_j=[];var td_W=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_E=0;for(var td_F=0;td_F<td_A.length;++td_F){if(65+td_E>=126){td_E=0;}var td_X=(td_W+td_A.charCodeAt(td_E++)).slice(-3);.td_j.push(td_X);}var td_s=td_j.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\ls_fp[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	49022
Entropy (8bit):	5.467212112045314
Encrypted:	false
SSDEEP:	384:F7By/K+JlhaTOioDivXlsRLRsNLtoPhCinQ0YpH0bLQ0oEdYF0C+7sOBhOL0pIXa:hByCe2OioyGKNLt9pUfqPC5IyEa
MD5:	7903C1C5DA25E4A555B0FABE0BD3437E
SHA1:	33A2EF8944232D613C8080825FE56D480D3320A4
SHA-256:	C22CBBEE723A6BF01AB665EB4C474533537914E2C89F77CB54F7B29CDB870A20
SHA-512:	27C7CD7F87F4DBFD6705E610612D1E2B450D81969FFABEAE366BF1965647AA362F97DF0FF3594E02E5FF7FFA8F49420379524274D8DC745EE42F9C920ACB2AB1
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_1M=td_1M\|\|{};td_1M.td_2f=function(td_V,td_x){var td_R=[""];var td_D=0;for(var td_S=0;td_S<td_x.length;++td_S){td_R.push(String.fromCharCode(td_V.charCodeAt(td_D)^td_x.charCodeAt(td_S)));td_D++;if(td_D>=td_V.length){td_D=0;.}}return td_R.join("");};td_1M.td_5X=function(td_i){this.td_c=td_i;this.td_d="";this.td_f=function(td_a,td_S){if(0===this.td_d.length){var td_g=this.td_c.substr(0,32);var td_z="";for(var td_q=32;td_q<td_i.length;.td_q+=2){td_z+=String.fromCharCode(parseInt(td_i.substr(td_q,2),16));}this.td_d=td_1M.td_2f(td_g,td_z);}return this.td_d.substr(td_a,td_S);};};td_1M.td_0X=function(td_h){if(td_h===null\|\|td_h.length===null){return null;.}var td_j=null;try{var td_M="";var td_J=[];var td_w=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_n=0;for(var td_p=0;td_p<td_h.length;++td_p){if(65+td_n>=126){td_n=0;}var td_H=(td_w+td_h.charCodeAt(td_n++)).slice(-3);.td_J.push(td_H);}var td_R=td_J.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\marketingbuild-flow-mmBannerTemplate[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	9139
Entropy (8bit):	5.0811310027610945
Encrypted:	false
SSDEEP:	192:+rR/troBCAhWN/mNnIGfN3FtzBhpfmpHIYBCAhQ6FvpdvePPAjYsePTnjZ+1vQ:a1poBCBBCJ+0nD
MD5:	5F58DDE8E3425A64F8B24E9283ED6662
SHA1:	F8607087C15E9D365C06CE41A303737774140A18
SHA-256:	B867CE6106474402D741662FFF56E96E666882609DA68752F6F1086B85C13297
SHA-512:	47248F6BF56921CB29B3AFCC6EB309D1B2A52A97D03D74DEAED5000D83B970EA81BA2B693AFD9B89B3E072404B46141967D4BF57927D196E70367B1CC92B26B1
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/html/marketingbuild-flow-mmBannerTemplate.html?contentID=cmpnt_svc_mrktng_signon_welcome_message&siteId=PLCN_BESTBUY&langId=en_US
Preview:	<section data-module="mm_banner" role="complementary">. <article data-view="index" data-rendertarget="mm_banner-index"><script type="text/x-jsrender" id="mm_banner-index">. <div data-marketing="static" data-break-frame-small="false" data-break-frame-medium="false" ...data-break-frame-large="false" data-theme="{{:theme}}" data-offer-id="{{:offerId}}" data-screen-id="{{:screenId}}" data-propensity-code="{{:propensityCode}}" ...data-location-id="{{:locationId}}" data-pop-segment="{{:popSegment}}" data-figure-size="{{:figureSize}}" ...data-figure-padding="{{if iconName != ''}}true{{else}}{{:figurePadding}}{{/if}}" data-group-sequence="{{:groupSequence}}" ...data-figure-overflow="{{:figureOverflow}}" data-image-vertical-align-small="{{:imageVerticalAlignSmall}}" ...data-image-vertical-align-medium="{{:imageVerticalAlignMedium}}" data-image-vertical-align-large="{{:imageVerticalAlignLarge}}" ...data-image-horizontal-align-small="{{:imageHorizontalAlignSmall}}" data-image-horizontal-align

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\marketingbuild-flow-mmPromotionalLinkTemplate[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2060
Entropy (8bit):	4.995188437282936
Encrypted:	false
SSDEEP:	48:JXvA6K8sADrsh/cM732Y/Laep0HXokYu3p0UVXxxK:JAXArCkMKSLaWm7F5Jpxw
MD5:	A53C28F034381194A6E858C1FAA62E8E
SHA1:	514A995641AFA6843B87CDFA73B6856FDF4CA2B9
SHA-256:	FB998C6F6E15365B79A78AF6FF97ADBF92FA08FF16A4784B925C519C4D51A0FF
SHA-512:	4E5556B727937EEBC3F6CB44A99493AB5CFBDF6CF923884A957D4C798B5D76CF498D2F28D502CC36AB26289C9B8F7B8D54BF398CDC2801A84CEEB9EB5192BF89
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/html/marketingbuild-flow-mmPromotionalLinkTemplate.html?contentID=cmpnt_svc_mrktng_promo_sign_on_page&siteId=PLCN_BESTBUY&langId=en_US
Preview:	<section data-module="mm_promotional_link" role="complementary" data-is-sso="false">. <article data-view="index" data-rendertarget="mm_promotional_link-index"><script type="text/x-jsrender" id="mm_promotional_link-index">. <div data-offer-id="{{:offerId}}" data-pop-segment="{{:popSegment}}" data-screen-id="{{:screenId}}" data-propensity-code="{{:propensityCode}}" data-location-id="{{:locationId}}" data-marketing-subtype="link" data-has-icon="{{if iconName != ''}}true{{else}}false{{/if}}" data-show-at-breakpoint="{{:showAtBreakpoint}}">{{if iconName != ''}}. <figure data-icon="{{:iconName}}"></figure>{{/if}}. <header><h3 data-module-label="" class="visuallyhidden"></h3> dummy used for ADA to avoid the mm banner-->{{if contentId0!== undefined && contentId0 !== ''}}. <h3>{{:contentId0}} </h3>{{/if}}{{if contentId1 !== undefined && contentId1 !== '' && hasExternalLink !== 'true'}}<a href="{{:contentId1}}" aria-label="{{:contentId3}}" class="marketing_hash_chang

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\norton_logo[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 100 x 56, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2305
Entropy (8bit):	7.825883941384089
Encrypted:	false
SSDEEP:	48:9it9rvwXtiUNHajRMxt0/MIkTKhaYc6lcLrY39tjAY3wkqV:ylvwdF7t0/MIkuMYZlyu9GY3ls
MD5:	AAF347F69F95B150C12117DCE49B6673
SHA1:	E48A5B54256C7F9D726492701F6CBAFB6615400E
SHA-256:	68FB4920B2E814C4B56276D52A31ABBC6BA26B764C7EBC12E8616EFE956DF327
SHA-512:	57EA127F2A7F2C6C6EDCD2ED01920B80F91E870FEAABAF6C76FF75E8A46F147814018768D17CAA5B75EAF8A7EF635F7A670F7C9488206F34C1305A07B0B34375
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/images/norton_logo.png
Preview:	.PNG........IHDR...d...8.....<p......gAMA......a.....sRGB.........PLTE.....F.....................t..............C........F.....F.....F..F..F..F..F.....F.....F..F.....F...................F.....C............................................w...........#('/..#..............!*$..........#. .............................................ZXYywxJFG........,..bigh...+'(;89.....!301...........<...........P......................s.......G9......ya#ZG..u.......>3.)..~j;LA-S.w...GtRNS....N".......[..2@.S@..-.e.......r.-.v....Bh...l.rW...rscLt..2...W..h..W....IDATX.....H..'!D.Y.....jO......~...H .... .R...Xu..{..(G......}>$a&.....g...........[?...!./..7w...XY...>}~abbb..[....Sw..OO.X.ey..+.....w6.VW......4.9....0by._.<.s8T..U6.9]TUU...?....t.%v.1.>$..u;s.....L..l]...H...f..+....Z...R......h..<P}.....go.?"..J..J.j.ne.....x\|(.lF..n..x.....o...;sL.....&..k./..d....e..+O.h.Zs...6.l...R..1Y.L....{...}2........e.....Z.f...F..l.Kp....m.T.{.,..qo`.UBZ.....^&.6

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\pf.mutation.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5852
Entropy (8bit):	5.279907734537903
Encrypted:	false
SSDEEP:	96:zLjX4DoxXhU4B9MpEL2l22Pvr1CLHUj89GqiUDtLiyCafZhGjbMC+8G+:z34DoxXhU4B9MpD2qvrELHUj89GqiUDe
MD5:	E365D0CE8D91AD3298126D6F0610BC36
SHA1:	DAF55C4A8847C16DBBBBCD3D7ABE9838B23568F2
SHA-256:	6C78AE05DF0B4C0EFE0F28CFC44605DA8A0E9AC8E2B0A8907459929F2AC7CF5E
SHA-512:	3AA176A2CB9463B0F66EB2F4F6A9BC8E9FBCEDF6F906F06C0916A6C8A57DA402A7790237DB2DEA4E76205C484D7BD35709198760746842B594A3F5061D4948E2
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.digitalmarketing.citibankonline.com/dmar/js/pf.mutation.min.js
Preview:	/! picturefill - v3.0.2 - 2016-02-12. https://scottjehl.github.io/picturefill/. * Copyright (c) 2016 https://github.com/scottjehl/picturefill/blob/master/Authors.txt; Licensed MIT. */.!function(a){"use strict";var b,c=0,d=function(){window.picturefill&&a(window.picturefill),(window.picturefill\|\|c>9999)&&clearInterval(b),c++};b=setInterval(d,8),d()}(function(a){"use strict";var b=window.document,c=window.Element,d=window.MutationObserver,e=function(){},f={disconnect:e,take:e,observe:e,start:e,stop:e,connected:!1},g=/^loade\|^c\|^i/.test(b.readyState\|\|""),h=a._;if(h.mutationSupport=!1,h.observer=f,Object.keys&&window.HTMLSourceElement&&b.addEventListener){var i,j,k,l,m={src:1,srcset:1,sizes:1,media:1},n=Object.keys(m),o={attributes:!0,childList:!0,subtree:!0,attributeFilter:n},p=c&&c.prototype,q={},r=function(a,b){q[a]=h[a],h[a]=b};p&&!p.matches&&(p.matches=p.matchesSelector\|\|p.mozMatchesSelector\|\|p.webkitMatchesSelector\|\|p.msMatchesSelector),p&&p.matches&&(i=function(a,b){return a.matc

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\pubads_impl_2021010903[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	281571
Entropy (8bit):	5.476707257572967
Encrypted:	false
SSDEEP:	6144:zcrX84E4KX+yiGMuv+tYRXEttQLY7mBtY:zuLBznTYRUtb7mU
MD5:	89E5B7169D55961BAA7B0DF525D497EC
SHA1:	AB05A1AAE489BF7D983A6FFF9ABCD8F4C33EBADF
SHA-256:	9DABA360FCB1A652044AF1056D44769EF7E71B010F2492989BFD583158BE0EA0
SHA-512:	1B92081F89277F41CF4F487AC377BC4E06AFE146756687556726F10AF4C2D8D5F7677B629433D706E367B352D1504DBF1AA6716D95E1EE9B2B1010FE6F1D0E45
Malicious:	false
Reputation:	low
IE Cache URL:	https://securepubads.g.doubleclick.net/gpt/pubads_impl_2021010903.js
Preview:	(function(_){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var ba,aa,da,ea,fa,ja,la,ma,ka,na,oa,pa,sa,ua,wa,xa,za,Ba,Ca,Ea,Ha,Ia,Ja,Ka,Ma,Na,Wa,Za,eb,hb,ib,kb,nb,ob,lb,qb,rb,tb,Ab,Cb,Eb,Gb,Hb,Kb,Lb,Mb,Nb,Rb,Sb,Tb,Wb,bc,fc,gc,lc,oc,pc,vc,Ac,Dc,Gc,Hc,Ic,Jc,Mc,Sc,Tc,Uc,Wc,Xc,dd,K,ed,fd,gd,hd,id,v,jd,kd,ld,md,ic,nd,od,sd,td,ud,Kd,Ld,Jd,Id,Md,Nd,Od,ia,Pd,Rd,Sd,Td,ac,Wd;ba=function(a,b){b=aa(a,b);return 0>b?null:"string"===typeof a?a.charAt(b):a[b]};aa=function(a,b){for(var c=a.length,d="string"===typeof a?a.split(""):a,e=0;e<c;e++)if(e in d&&b.call(void 0,d[e],e,a))return e;return-1};_.ca=function(a,b){return 0<=Array.prototype.indexOf.call(a,b,void 0)};da=function(a,b){b=Array.prototype.indexOf.call(a,b,void 0);var c;(c=0<=b)&&Array.prototype.splice.call(a,b,1);return c};ea=function(a){var b=a.length;if(0<b){for(var c=Array(b),d=0;d<b;d++)c[d]=a[d];return c}return[]};fa=function(a,b,c){return 2>=arguments.length?Array.prototype.slice.call(a,b):Array.pr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\sid_fp[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	112232
Entropy (8bit):	5.49249362781088
Encrypted:	false
SSDEEP:	768:3TBAZztDgdw1FiJ+ZLbh8Hxcrpj8fIdCOY7Mg4yq2JHsd8X1AZpytXvrie212KSW:juT4OLAc1pCt7MgFq2JH2XhAg
MD5:	B604A88A367BE0D360E3DD607D9D34CB
SHA1:	117A8F675C339B7BCACA29E93649048EF33852BF
SHA-256:	4559D77445750CAFB2869B539BB7707295A7D38B5D4EAD99816CD915D3C5963F
SHA-512:	A273B761AD9469DD66B12EF4C235D0C77FEC230A0A47EACDBFC301EBC39DE0EBE9A08DFC62FDB3A731D4400A9A96328C7BF76B7D4D21BCCC0AA50ED27609AA17
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_3F=td_3F\|\|{};td_3F.td_3x=function(td_N,td_s){var td_R=[""];var td_F=0;for(var td_L=0;td_L<td_s.length;++td_L){td_R.push(String.fromCharCode(td_N.charCodeAt(td_F)^td_s.charCodeAt(td_L)));td_F++;if(td_F>=td_N.length){td_F=0;.}}return td_R.join("");};td_3F.td_1o=function(td_V){this.td_c=td_V;this.td_d="";this.td_f=function(td_Y,td_e){if(0===this.td_d.length){var td_L=this.td_c.substr(0,32);var td_k="";for(var td_J=32;td_J<td_V.length;.td_J+=2){td_k+=String.fromCharCode(parseInt(td_V.substr(td_J,2),16));}this.td_d=td_3F.td_3x(td_L,td_k);}return this.td_d.substr(td_Y,td_e);};};td_3F.td_3h=function(td_l){if(td_l===null\|\|td_l.length===null){return null;.}var td_Q=null;try{var td_Z="";var td_x=[];var td_F=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_L=0;for(var td_p=0;td_p<td_l.length;++td_p){if(65+td_L>=126){td_L=0;}var td_b=(td_F+td_l.charCodeAt(td_L++)).slice(-3);.td_x.push(td_b);}var td_v=td_x.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\sid_fp[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	56116
Entropy (8bit):	5.5014505001047285
Encrypted:	false
SSDEEP:	768:HKlXkWwr+yyjzmQQKGXxzRONqf/zgz8ydlmc3s544PANqaCvhvCeRtDU46yB0ZYL:MinfLoqaCvhKYqREHbT4S
MD5:	208C6349AB580E792CC3393F76925E72
SHA1:	174B7B316D75E4B2D117CF383132275DB9C0AA5F
SHA-256:	03709A3126FDBF8944F69DE87AF42CDB4661AEC98FFC801C3AA26303B77AC765
SHA-512:	8060728A5817F1B3C7DC7988D9AD299F66C1298B1D1398D5CA7360A9122AA9F9152201DA9ACB25E8A720FC0B49EB4D81A8DF8D29BAC30D78A34290A6EDE6D335
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_5g=td_5g\|\|{};td_5g.td_5R=function(td_R,td_V){var td_B=[""];var td_M=0;for(var td_I=0;td_I<td_V.length;++td_I){td_B.push(String.fromCharCode(td_R.charCodeAt(td_M)^td_V.charCodeAt(td_I)));td_M++;if(td_M>=td_R.length){td_M=0;.}}return td_B.join("");};td_5g.td_2i=function(td_T){this.td_c=td_T;this.td_d="";this.td_f=function(td_S,td_q){if(0===this.td_d.length){var td_l=this.td_c.substr(0,32);var td_j="";for(var td_k=32;td_k<td_T.length;.td_k+=2){td_j+=String.fromCharCode(parseInt(td_T.substr(td_k,2),16));}this.td_d=td_5g.td_5R(td_l,td_j);}return this.td_d.substr(td_S,td_q);};};td_5g.td_3S=function(td_j){if(td_j===null\|\|td_j.length===null){return null;.}var td_A=null;try{var td_e="";var td_v=[];var td_k=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_b=0;for(var td_a=0;td_a<td_j.length;++td_a){if(65+td_b>=126){td_b=0;}var td_l=(td_k+td_j.charCodeAt(td_b++)).slice(-3);.td_v.push(td_l);}var td_y=td_v.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\storage.secure.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	38599
Entropy (8bit):	5.363949324165766
Encrypted:	false
SSDEEP:	768:sSABqMuNhTGOp5JWXk+91YsGw/3uOV0UQa80ByZUoWlfm96knY:+BMtqNmjYl24
MD5:	40FA830B6618F784C0C98DFBC5690ECB
SHA1:	BAFE47BBB6D7DFF737A6AD3A20C1AAED21D89AE1
SHA-256:	B866A58E02B01CA9537CB6D024F348F7373C88B94A92D310560885C93DE8ABD2
SHA-512:	D1C5BC84075834B0E3C7DD37D24612562BA38E11AFB19CCE3DC9D02AF624F419F8A6E68257B3AFE30CEFB53C404B335EB4B54759B87162BC3DA5DE4567D7A761
Malicious:	false
Reputation:	low
IE Cache URL:	https://lpcdn.lpsnmedia.net/le_secure_storage/3.12.0.0-release_5037/storage.secure.min.js?loc=https%3A%2F%2Fcitiretailservices.citibankonline.com&site=58975020&force=1&env=prod
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.firstParty=!0;window.lpTag=window.lpTag\|\|{};window.lpTag.lzString=window.lpTag.lzString\|\|function(){var y=String.fromCharCode,n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",r="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",o={};function a(e,t){if(!o[e]){o[e]={};for(var n=0;n<e.length;n++)o[e][e.charAt(n)]=n}return o[e][t]}var i={compressToBase64:function(e){if(null==e)return"";var t=i._compress(e,6,function(e){return n.charAt(e)});switch(t.length%4){default:case 0:return t;case 1:return t+"===";case 2:return t+"==";case 3:return t+"="}},decompressFromBase64:function(t){return null==t?"":""==t?null:i._decompress(t.length,32,function(e){return a(n,t.charAt(e))})},compressToUTF16:function(e){return null==e?"":i._compress(e,15,function(e){return y(e+32)})+" "},decompressFromUTF16:function(t){return null==t?"":""==t?null:i._decompress(t.length,16384,function(e){return t.charCodeAt(e)-32})},compressToUint8Array:fu

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\stylesheet[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	449
Entropy (8bit):	4.950476244853406
Encrypted:	false
SSDEEP:	12:jFit6oQpFBI0dhQpFBIqzJmKpFBI8eKpFBIMYKpFBIaV38WO6ZN0G:5sboBI0zoBIqVTBI6BIiBIaDOYN0G
MD5:	F723EB50CF69EABBDE6ED086ABCFF89C
SHA1:	22F4B441606D47ADDFBEE9E99FD483FD658458F9
SHA-256:	95675E7B3EA24E73DB83A9E62FB9EC550AC1344C37D907DC5D1000FE1A06C0CB
SHA-512:	9B87CD2CA003B915697DAEFB7E811680CDCABEC4C9AE4064BC23E5AE67EA1B352E0FBE70EDA55B3C6BF5BF48BE86973C1C7B10A111709706363710A75CD7D2A1
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/fonts/bestbuy_human/condensed-bold/stylesheet.css
Preview:	@font-face {. font-family: 'Bestbuy Human Condensed';. src: url('HumanBBYCondensed-77Bold-Web.eot');. src: url('HumanBBYCondensed-77Bold-Web.eot?#iefix') format('embedded-opentype'),. url('HumanBBYCondensed-77Bold-Web.woff2') format('woff2'),. url('HumanBBYCondensed-77Bold-Web.woff') format('woff'),. url('HumanBBYCondensed-77Bold-Web.svg#bestbuy_humanbold_condensed') format('svg');. font-weight: 700;. font-style: normal;.}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\stylesheet[2].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	444
Entropy (8bit):	5.074814057488711
Encrypted:	false
SSDEEP:	12:jFit6oQHFNdhQHF/zJmKHJeKHfYKH9VrlO6ZGG:5sbONzO/VxfOYGG
MD5:	62EBBAB85F978366909AA4177B511DCB
SHA1:	A07360F4BC990330B0FC17C4FE24EA6E6DE120A2
SHA-256:	FB3D8656BDC062746AAE9F34E2D2214098AA09587561C0DAD0C3915D91344F10
SHA-512:	0D4650664813C54ED73283BCBD8250C3C314B0DFAB31A16AC1367654F0E77825CF0954F9828C98C642A98E7E8D02BC1BCCAFFFC6C93F8ABD27560E6C1FF65746
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/fonts/bestbuy_human/light-condensed/stylesheet.css
Preview:	@font-face {. font-family: 'Bestbuy Human Condensed';. src: url('HumanBBYCondensed-47Light-Web.eot');. src: url('HumanBBYCondensed-47Light-Web.eot?#iefix') format('embedded-opentype'),. url('HumanBBYCondensed-47Light-Web.woff2') format('woff2'),. url('HumanBBYCondensed-47Light-Web.woff') format('woff'),. url('HumanBBYCondensed-47Light-Web.svg#bestbuy_humanLtCn') format('svg');. font-weight: 300;. font-style: normal;.}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\tmx.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1187
Entropy (8bit):	5.147190067021059
Encrypted:	false
SSDEEP:	24:kWx/QpAR6ruRRwIhraw9TCEcw+WzRW8GuHLV5pN7WgAm/MiZPx3vIAIZNWWn9e:N2+FsIhb9T5cwjw8BpxWfYbx3vIAIZD8
MD5:	0A3E79F51009556D5922F0725463212A
SHA1:	A360B9B9007C70F58FC5649AE1431461815B925A
SHA-256:	BF4C8CA1E4824519DE56FB193237D2B3442546F12436981AD5EE662D222AEFC1
SHA-512:	4381130A43BD5D98485C0C45756EE3446B267C2BF7E8FE09AC0ACB804AD493FAB1CE21DC915310E1E4F56EA44982589EEB03DF5422BD1939AE64C4F1AD390E19
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/js/tmx.min.js
Preview:	var tmx_sessionId;function generateSessionID(){const a=new Date();strToHash=a.toString()+getuuid()+"WEB_BROWSER";hash=KJUR.crypto.Util.sha256(strToHash).toString();return hash}function getuuid(){const a=KJUR.crypto.Util.getRandomHexOfNbytes(16);return a}function tmx_profiling_complete(a){try{if(sessionID!=null){var c=document.getElementById(sessionID);c.parentNode.removeChild(c);window.removeEventListener("profiling-complete",tmx_profiling_complete)}}catch(b){console.warn("Error in profiling- tmx")}}var head,script,sessionID;function get_new_tmx_sessionid(){try{if(USCRS.getTMXEnabledByPartner()=="true"){head=document.getElementsByTagName("head").item(0);script=document.createElement("script");script.setAttribute("type","text/javascript");sessionID=generateSessionID();script.setAttribute("id",sessionID);script.setAttribute("src","https://content22.citibankonline.com/tags.js?org_id="+tmx_org_id+"&session_id="+sessionID+"&page_id=1&allow_reprofile=1");head.appendChild(script);if(window.a

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\top_fp[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	97642
Entropy (8bit):	5.483574192674417
Encrypted:	false
SSDEEP:	768:NT42tTPTX3QchNyCJ3ImiAP9Giy6+2FPD8o0D9ktgXtsPgs/2:NCGyY3IHAy6PFD8o0Z/
MD5:	F7369FB1D41113EF904B06528C7C5107
SHA1:	C51B8EB55646BC4BE839A28FA1B7F063989FF878
SHA-256:	154398905723A20659DE10F4150456C1095F217D312A8802634F3A0A4C351A2F
SHA-512:	3F2D1B1F469EBD3D875AD72BEDB4725E9F411F2B5F07B2B82CCC8EB7DE9507DD601C3B4D60206556476AC2F3A8F6B58B292AD28689E5026DD8EB9B4633F79AA7
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_4l=td_4l\|\|{};td_4l.td_3F=function(td_O,td_g){var td_C=[""];var td_A=0;for(var td_k=0;td_k<td_g.length;++td_k){td_C.push(String.fromCharCode(td_O.charCodeAt(td_A)^td_g.charCodeAt(td_k)));td_A++;if(td_A>=td_O.length){td_A=0;.}}return td_C.join("");};td_4l.td_4q=function(td_y){this.td_c=td_y;this.td_d="";this.td_f=function(td_X,td_p){if(0===this.td_d.length){var td_O=this.td_c.substr(0,32);var td_N="";for(var td_g=32;td_g<td_y.length;.td_g+=2){td_N+=String.fromCharCode(parseInt(td_y.substr(td_g,2),16));}this.td_d=td_4l.td_3F(td_O,td_N);}return this.td_d.substr(td_X,td_p);};};td_4l.td_2E=function(td_A){if(td_A===null\|\|td_A.length===null){return null;.}var td_T=null;try{var td_P="";var td_j=[];var td_W=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_E=0;for(var td_F=0;td_F<td_A.length;++td_F){if(65+td_E>=126){td_E=0;}var td_X=(td_W+td_A.charCodeAt(td_E++)).slice(-3);.td_j.push(td_X);}var td_s=td_j.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\top_fp[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	48821
Entropy (8bit):	5.461923015273285
Encrypted:	false
SSDEEP:	384:BlsRLRsNLtoPhCinQ0YpH0bLqaTOioDivJ0oEdYF0C+7sOBhOL0pIXf2N5pihtoC:EKNLt9pUfvOioy/PC5LVByCe0a
MD5:	C63339B58050164E31ADD40136673D27
SHA1:	ECFE872DDD28162511F03518AB16907D79FF210F
SHA-256:	EE7A18545075A9FED7AFB632FEF2C6846D3C2A883EF64864F9C28A9E0C6F41ED
SHA-512:	1D1A0A58872249F3A874A9B23B9BA88618DDF39B38BE22E35346A1C21383E0FCEACF4F78870BBD04500DCEEC1795219AE4B4865590FC8C3EE2515FC3ED1EAFE3
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_1M=td_1M\|\|{};td_1M.td_2f=function(td_V,td_x){var td_R=[""];var td_D=0;for(var td_S=0;td_S<td_x.length;++td_S){td_R.push(String.fromCharCode(td_V.charCodeAt(td_D)^td_x.charCodeAt(td_S)));td_D++;if(td_D>=td_V.length){td_D=0;.}}return td_R.join("");};td_1M.td_5X=function(td_i){this.td_c=td_i;this.td_d="";this.td_f=function(td_a,td_S){if(0===this.td_d.length){var td_g=this.td_c.substr(0,32);var td_z="";for(var td_q=32;td_q<td_i.length;.td_q+=2){td_z+=String.fromCharCode(parseInt(td_i.substr(td_q,2),16));}this.td_d=td_1M.td_2f(td_g,td_z);}return this.td_d.substr(td_a,td_S);};};td_1M.td_0X=function(td_h){if(td_h===null\|\|td_h.length===null){return null;.}var td_j=null;try{var td_M="";var td_J=[];var td_w=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_n=0;for(var td_p=0;td_p<td_h.length;++td_p){if(65+td_n>=126){td_n=0;}var td_H=(td_w+td_h.charCodeAt(td_n++)).slice(-3);.td_J.push(td_H);}var td_R=td_J.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\.jsonp[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	9388
Entropy (8bit):	4.853588247286578
Encrypted:	false
SSDEEP:	48:jQwwtFSWWi2KJB32+MBeQ1dBs/YVbib5/2LoZ72uxsA+z1NOohgNCE/ncRcRH1eR:ccAC4+ygDUosjm1QUPpFUEqF38
MD5:	A7CA84910183D4408F6C1C08942D4924
SHA1:	16032C8BC5B5141A7878939D2751D08DA8A7BA77
SHA-256:	90199936113D90BD52061A09E31D129B3C4AFFA15CD6FA3BCFBCA21DEE837426
SHA-512:	E02055C553036A1154B05B163CB6CB31393188C8241FA7A42F1ABC22C40DB9D5362FD27AC43783E2818FA867237592DA0C909F8C5C14572C5413797030D7D5DC
Malicious:	false
Reputation:	low
IE Cache URL:	https://lptag.liveperson.net/lptag/api/account/58975020/configuration/applications/taglets/.jsonp?v=2.0&df=0&ct=lp_dynButtons%2ClpSecureStorage%2CsdeInfoScraper%2Clp_sdes%2Cscraper%2ClpActivityMonitor%2CrendererStub%2Clp_version_detector%2Clp_monitoringSDK%2ClpTransporter%2ClpUnifiedWindow%2CSMT%2Chooks%2Clp_SMT%2Cauthenticator%2CcleanCCPatterns%2CunAuthMessaging%2CjsLoader&b=0
Preview:	lpTag.callback({"serviceMap":[{"service":"socialMsgDomain","account":"58975020","baseURI":"oh.social-msg.liveperson.net"},{"service":"accountConfigReadOnly","account":"58975020","baseURI":"z1.acr.liveperson.net"},{"service":"liveEngageUI","account":"58975020","baseURI":"va.le1.liveperson.net"},{"service":"rollover","account":"58975020","baseURI":"va.lp-rollover.liveperson.net"},{"service":"launchpadDomain","account":"58975020","baseURI":"hub.liveperson.net"},{"service":"acCdnDomain","account":"58975020","baseURI":"accdn.lpsnmedia.net"},{"service":"batchelor","account":"58975020","baseURI":"z1.batchelor.liveperson.net"},{"service":"whatsappConnector","account":"58975020","baseURI":"va.whatsapp-gw.liveperson.net"},{"service":"facadeMsg","account":"58975020","baseURI":"va2.facade-msg.liveperson.net"},{"service":"lpEng","account":"58975020","baseURI":"z1.lpEng.liveperson.net"},{"service":"coreAIFeedbackChuteDomain","account":"58975020","baseURI":"va.feedbackchute.int.liveperson.net"},{"ser

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\6c8322c7341eac98645c10e3d1d3c7ae[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	191833
Entropy (8bit):	6.077160439090959
Encrypted:	false
SSDEEP:	3072:SHk2OmGulx3LgIq/D8Dl3PGelgHxbJSkfbeC6LFj7T/VNr5Ltayi2JQ:momfNkIDlfdIxVSEiC6p/ZNvayi2i
MD5:	8DAFA6D260EA9BCB8AC7961EB71D484A
SHA1:	C2149B82177AA8C30C7FC21278387F88FB771A32
SHA-256:	1C1B3051ECC42249AE6FFADCD04D9D4C60E8A9B0283515B550B5C7DB337850DE
SHA-512:	02E22148D8EEA07EA07634A6BBFF13AEFAE06BB21E8A8CEC2CC696B6E8A184FCA77B11B3FB2D4440DC686FC32BDC4AF74EAA400A664535C20E3EDE22C5C0F4E9
Malicious:	false
Reputation:	low
Preview:	(function e(S){var O={},c={};var f=ReferenceError,B=TypeError,Y=Object,p=RegExp,D=Number,j=String,G=Array,d=Y.bind,Q=Y.call,X=Q.bind(d,Q),N=Y.apply,A=X(N),x=[].push,u=[].pop,y=[].slice,n=[].splice,E=[].join,C=[].map,r=X(x),J=X(y),s=X(E),o=X(C),w={}.hasOwnProperty,m=X(w),b=JSON.stringify,P=Y.getOwnPropertyDescriptor,M=Y.defineProperty,Z=j.fromCharCode,V=Math.min,K=Math.floor,z=Y.create,R="".indexOf,l="".charAt,U=X(R),T=X(l),L=typeof Uint8Array==="function"?Uint8Array:G;var F=[f,B,Y,p,D,j,G,d,Q,N,x,u,y,n,E,C,w,b,P,M,Z,V,K,z,R,l,L];var q=["dok6XRLqDA","idQcCTn6Sa6R19lqXA","FLQjVhvuIu797tARcURDObs","documentBody","VOMwehn6Cfjp-JpuIw","3oMk","eWM","yEeozJR853kqPA","lF6S-41Y-iM","mqM4AQTvHZ8","UCaW9pBUkFRiJw","LUXvhfozqiMaHyLZ5g","match","Nyaet-BR","set","HkY","sVrtmNMt","INIPfiXUS8GUzLdhLUVVIKPO59A","L-NKEkimOq3sx_B8cgwDFKrglMG3AG88TTVBZzxE0j9b9FI","aADB3PRJ3Q","IdEaczvQPtmTjbNjKWsQE5-1l47LKWpiHEseZC8j0Qwru35IVKuDQ_OpYV5yff9gAoGT98dBPTBwQ7bune_jUrXavnYeF6I4T1wJTZ_1DqEm6pn4Z24lwMA0IOkn9I35TS

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\8434c6c1ea362e9309dba5bd1928cbde[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	78192
Entropy (8bit):	5.281983024587661
Encrypted:	false
SSDEEP:	1536:EBw1DY3+XnuDPLdAt3QVf2AcT3CEDyhLZP+:EBqk30tgf2rr
MD5:	0C9EAEE380CCE728ABE3A91A53379AC0
SHA1:	24D3CF3B0D7FA78FC03A178828D796FB8FF3ED3C
SHA-256:	24DC6C68EDEE046BD33F88A6B2B41555CB3457874D9FA5DDD3723E2DFE2B364B
SHA-512:	BD0562D6D2981184C748E2C6A8F1A9D2011567AF53F7B1038CC3FEACB17D11DF965F000F5F2C57D71E0A778438190D2BE76D2C51CFEDF0169AB4EEA842906E81
Malicious:	false
Reputation:	low
IE Cache URL:	https://nexus.ensighten.com/citi/na_fsn_prod/code/8434c6c1ea362e9309dba5bd1928cbde.js?conditionId0=4849611
Preview:	/.. at.js 1.7.0 \| (c) Adobe Systems Incorporated \| All rights reserved. zepto.js \| (c) 2010-2016 Thomas Fuchs \| zeptojs.com/license./.Bootstrapper.bindImmediate(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;targetPageParams=function targetPageParams(){return{"at_property":"c0e47a6d-c1bd-fbc0-9273-7fb8ef8114f5"}};console.log("Loaded targetPageParams");window.adobe=window.adobe\|\|{},window.adobe.target=function(){function n(){}function t(n){if(null===n\|\|void 0===n)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(n)}function e(n){return Xc.call(n)}.function r(n){return e(n)}function i(n){var t=void 0===n?"undefined":Yc(n);return null!=n&&("object"===t\|\|"function"===t)}function o(n){return!!i(n)&&r(n)===Qc}function u(n){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:0;return o(n)?setTimeout(n,Number(t)\|\|0):-1}function c(){var n=arguments.length>0&&void 0!==arguments[0]?arguments

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\Bootstrap[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	54483
Entropy (8bit):	5.310724308443528
Encrypted:	false
SSDEEP:	1536:1U40YuIqGk+o1egm8sRIuiClrcsX5QrF0hVHKIj:lFkegm8KHGsHKIj
MD5:	6B92CA74EDA70C0272B49F7AB6CD1B58
SHA1:	621D2455256FB8FB7517FEA4372EF22E8A703540
SHA-256:	3C8040077378D67CBF51FA68A0B0797373494C35D75346F32BFC71A01F8D4BAB
SHA-512:	0C58A7DB5B03CDBC20945ECF2E6EB4CD29D50BA8D1F4DA1BB16C562C81D4047ED4B37E3DE5A8DA8F3153E38E33E4C22E2A83113EA8DE67EFCDCAF13EFF5C3EF0
Malicious:	false
Reputation:	low
IE Cache URL:	https://nexus.ensighten.com/citi/na_fsn_prod/Bootstrap.js
Preview:	(function ensightenInit(){var ensightenOptions = {client: "citi", clientId: 1129, publishPath: "na_fsn_prod", isPublic:0, serverComponentLocation: "nexus.ensighten.com/citi/na_fsn_prod/serverComponent.php", staticJavascriptPath: "nexus.ensighten.com/citi/na_fsn_prod/code/", ns: 'Bootstrapper', nexus:"nexus.ensighten.com", scUseCacheBuster: "true", enableTagAuditBeacon : "false", enablePagePerfBeacon : "false", registryNs : "ensBootstraps", generatedOn : "Thu Dec 03 19:11:26 GMT 2020", beaconSamplingSeedValue: 11};.if ( !window[ensightenOptions.ns] ) {.window[ensightenOptions.registryNs]\|\|(window[ensightenOptions.registryNs]={});.window[ensightenOptions.registryNs][ensightenOptions.ns]=window[ensightenOptions.ns]=function(f){function l(a){this.name="DependencyNotAvailableException";this.message="Dependency with id "+a+"is missing"}function m(a){this.name="BeaconException";this.message="There was an error durring beacon initialization";a=a\|\|{};this.lineNumber=a.lineNumber\|\|a.line;this.fi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\HumanBBY-55Regular-Web[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), Human BBY Web family
Category:	downloaded
Size (bytes):	89946
Entropy (8bit):	5.500967504117521
Encrypted:	false
SSDEEP:	768:BZ8n73x739dWZJ8CrbPgs4E20DzJCq8PdDI8sGz9PilYnHj8XEH8kwT3ktaph:P87riJ8CrkEhYdJIiEedckwT3zL
MD5:	8C39B3C2D6606FE6800653833864DEB4
SHA1:	F3FCEFA76A2F062800244AECB7EDF276AB734C1E
SHA-256:	8B973A0FE768936993C833D66369652DF635D5E0277029AA15173660DCD7CA54
SHA-512:	B21BC9F3DDF17CCB5E4DD5E6A77312669719C136925647768CD7FCC45FAA1FC296AE9807124AE0FC504D99D2C49988445FED4016E37AF0A0C8B771CF32B47666
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/fonts/bestbuy_human/regular/HumanBBY-55Regular-Web.eot?
Preview:	Z_...^............................LP/...z.............. .....e......................H.u.m.a.n. .B.B.Y. .W.e.b.....R.e.g.u.l.a.r...$.V.e.r.s.i.o.n. .1...0.0.1. .2.0.1.8....H.u.m.a.n. .B.B.Y. .W.e.b. .R.e.g.u.l.a.r.................GPOS+2.......Y.GSUB.;K...IX...(OS/2...k.......`cmap...........zcvt ............fpgm.a.7.......sgasp...........glyf.e.a...x...0head.D........6hhea./.....D...$hmtx!.tK.......4loca.%!....\....maxp.'.....h... name...........post...........prepi..p...............B..e._.<............7.......R... .B.Y...................>...b.....B.........................d...c...............................................2................./...z........COMM.@.......>...... .............. .........M.s.;.......+... ...1...;.>.3.>.....(..."...K.J.:...K.......:.....&. .X.&.e.2.G.).g.:.....[.7.h.5. .^. .^...D...&...A...#...+.j.X...5...X.2.X...X...5...X...]...$.d.X...X.T.X...X.'.5.A.X.'.5.p.X.v.3.-.....R....... ...+.R...O.".`.V...).`...........G...).o.R.6.+.o.+.4.+.V...o.+.R.R...E..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\HumanBBYCondensed-77Bold-Web[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), Human BBY Condensed Web family
Category:	downloaded
Size (bytes):	93018
Entropy (8bit):	5.4118654510479525
Encrypted:	false
SSDEEP:	1536:FAUV14f6oU3ynVg1NXlYqh4hVCDFA9krHxxXIiXkKTVQ1:2UV14f3U3vXy8WV8FAuHDrm1
MD5:	CF2532469C8092BDA79F7F126CB44035
SHA1:	345D6EB0FC8C86B489D2F0823315ECCA10CAA695
SHA-256:	A13377193FFF0F259566E0FF807149D702B936A359B8EB76BC769C89E4C734AB
SHA-512:	C2A2CD4A29AD88B9C9C6D5D19454EDE67B1F48F2359BF9C9AC670628DB7DF4CA7CA4B1587E4228C991A9474E8070ECD96A4FB575187FBB93EF466EACA0E9F4AF
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/fonts/bestbuy_human/condensed-bold/HumanBBYCondensed-77Bold-Web.eot?
Preview:	Zk..Xj............................LP/...z..@........... ....d.......................H.u.m.a.n. .B.B.Y. .C.o.n.d.e.n.s.e.d. .W.e.b.....R.e.g.u.l.a.r...$.V.e.r.s.i.o.n. .1...0.0.1. .2.0.1.8...>.H.u.m.a.n. .B.B.Y. .C.o.n.d.e.n.s.e.d. .W.e.b. .R.e.g.u.l.a.r.................GPOS.?.@.....i.GSUB..M...U0...(OS/2.DGV.......`cmap.......H...zcvt .c.....H...~fpgm.a.7.......sgasp...........glyfQ..\|........head...........6hhea...5...D...$hmtxT.S%.......`loca..........2maxp.2.....h... name.3.c.......post,).S........prepC:....8...........B...d_.<............+.......U.G.3.w.*...................>.....G.H.w.........................^...a...................................../.........2................./@..z........COMM.@.......>...... .............. ...........^.#...!.....`..... ...#.".%."...h.!...#...#. .(..."._.....'.<.....................'.......$... ...2...2...!...$...+.......$.../...'.../.../.../...'.../...2.C...../.../.\./.../...(.../...(.../...........-.....................$.3._...$.......E....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\NewErrorPageTemplate[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1612
Entropy (8bit):	4.869554560514657
Encrypted:	false
SSDEEP:	24:5Y0bQ573pHpACtUZtJD0lFBopZleqw87xTe4D8FaFJ/Doz9AtjJgbCzg:5m73jcJqQep89TEw7Uxkk
MD5:	DFEABDE84792228093A5A270352395B6
SHA1:	E41258C9576721025926326F76063C2305586F76
SHA-256:	77B138AB5D0A90FF04648C26ADDD5E414CC178165E3B54A4CB3739DA0F58E075
SHA-512:	E256F603E67335151BB709294749794E2E3085F4063C623461A0B3DECBCCA8E620807B707EC9BCBE36DCD7D639C55753DA0495BE85B4AE5FB6BFC52AB4B284FD
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/NewErrorPageTemplate.css
Preview:	.body..{.. background-repeat: repeat-x;.. background-color: white;.. font-family: "Segoe UI", "verdana", "arial";.. margin: 0em;.. color: #1f1f1f;..}.....mainContent..{.. margin-top:80px;.. width: 700px;.. margin-left: 120px;.. margin-right: 120px;..}.....title..{.. color: #54b0f7;.. font-size: 36px;.. font-weight: 300;.. line-height: 40px;.. margin-bottom: 24px;.. font-family: "Segoe UI", "verdana";.. position: relative;..}.....errorExplanation..{.. color: #000000;.. font-size: 12pt;.. font-family: "Segoe UI", "verdana", "arial";.. text-decoration: none;..}.....taskSection..{.. margin-top: 20px;.. margin-bottom: 28px;.. position: relative; ..}.....tasks..{.. color: #000000;.. font-family: "Segoe UI", "verdana";.. font-weight:200;.. font-size: 12pt;..}....li..{.. margin-top: 8px;..}.....diagnoseButton..{.. outline: none;.. font-size: 9pt;..}.....launchInternetOptionsButton..{.. outline: none;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\account_home.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	284448
Entropy (8bit):	5.446111682385462
Encrypted:	false
SSDEEP:	6144:HrNA/OOFwruwHPqSghx95ZKfhEbSP2qGQlYRO4Nc:LYe
MD5:	1CDC518D5C6C0E46302E43B1762AF3E9
SHA1:	23EB72DA8CF0C988A74FEC8F970F541912E37BAE
SHA-256:	4E54EE67246CFEA4E700B8A796CC7E37B1D0B4B5307674777EAB0CD28493BA69
SHA-512:	DB27D7E703F83097A92430A55224C5521156F4348740E360F0339ACE877781BA99A08D2695598BD715DB8681BFF766321D138D3EED87D559701B408858329231
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/Goodyear/css/modules/account_home.min.css
Preview:	section.module__card_selector em::before,.module__make_a_payment [data-view="index"] [data-accordion].error [data-accordion-button]>span:first-of-type::after,.module__make_a_payment [data-view="index"] .ui-radio[aria-disabled="true"] label.ui-radio-off small+small::before,.module__autopay_status [data-view="index"] a[data-link-type="autopay"]::after,.module__autopay_status_no_autopay [data-view="index"] a[data-link-type="autopay"]::after,[data-area="hero"] .module__autopay_status [data-view="index"] a[data-link-type*="autopay"]::after,.module__make_a_payment a.more_options::after,.module__make_a_payment [data-view="confirmation"] header>a.ui-link::after,section.module__promotional_balance_summary [data-view] header+div a::after,section.module__promotional_balance_summary [data-view] table td[data-sort-by="balance"] [data-link-type="promo_balance_details"]::after,section.module__promotional_balance_summary [data-view].takeover section a::after,section.module__settings_summary [data-vi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\accountproperties[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	4124
Entropy (8bit):	4.878518492528552
Encrypted:	false
SSDEEP:	48:7NdSYux+JjRNyJqaRBRvg0BdZZzDunV7EogCDajg6a7tQfDEWURJgPuyaHuB:mCZYqaRQkjZzolfe86aBXcaA
MD5:	0DAB038F9521BAC436B4E6DE4F472448
SHA1:	3A30921CE0F3BE9AD88203F21F478902DD989248
SHA-256:	E1B89E36A4BC0FBFBDAAD49BF97CAA00827521C5EFC31B5CB668B13DF83B48C8
SHA-512:	BBE8B4381130A4957669EB7D857D57F67FA960F86CB5D0D2B3C62A654E0A1065FE1757A6D9DE1C8D3796AB8CBC34FD27218A7719E4AAD425A318A3BDAC3FBC0F
Malicious:	false
Reputation:	low
IE Cache URL:	https://accdn.lpsnmedia.net/api/account/58975020/configuration/setting/accountproperties/?cb=lpCb73254x43765
Preview:	lpCb73254x43765([{"id":"messaging.ios.sdk.min.version","createdDate":"2017-01-10 04:11:41","type":2,"propertyValue":{"value":"1.1.36"},"deleted":false},{"id":"messaging.audio.sharing.enabled","createdDate":"2018-05-13 02:02:09","modifiedDate":"2018-11-14 08:32:03","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"messaging.ios.logs.settings","createdDate":"2017-01-10 04:11:41","type":4,"propertyValue":{"value":{"level":"WARNING","minLogLevel":"INFO","randomFactor":1000.0,"maxEvents":50.0,"maxPendingEventsRequests":10.0}},"deleted":false},{"id":"unified.window.fallback.to.first.party.cookies","createdDate":"2019-11-20 03:10:29","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"le.agent.widgetSdk.allowMicrophoneCamera","createdDate":"2019-08-19 04:03:07","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"le.site.automotive.conversation.topics","createdDate":"2019-10-11 09:13:33","type":3,"propertyValue":{"value":[]},"deleted":false},{"id"

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\bestbuy.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	514776
Entropy (8bit):	5.437813623047516
Encrypted:	false
SSDEEP:	6144:FWpRlQtH/mcd1toThpDd5NtYlCpNWGNO713CS+buzfw13Xs1jYU5YccQGtjad7IP:joWzM
MD5:	6C1BB3B8E6FFF55DDC3F6FB847E6111F
SHA1:	721FB103F80DB12ADFC5B292797C713EF3D182D9
SHA-256:	8913EA789691CFAE8AC50C76E06FE91F9124512A65E5652DCEB0A069C37DC31A
SHA-512:	73FC0E52CBC1F55B9C538BD9B8A251476454A96B057495AA436E3AACC550DA1E1405D4E55C161288D8184683F6A78EEC04791119A6A0C696E9577990FD17FB65
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/BestBuy/css/bestbuy.min.css
Preview:	@import url(../../USCRSGBL/fonts/bestbuy_human/bold/stylesheet.css);@import url(../../USCRSGBL/fonts/bestbuy_human/light/stylesheet.css);@import url(../../USCRSGBL/fonts/bestbuy_human/regular/stylesheet.css);@import url(../../USCRSGBL/fonts/bestbuy_human/medium/stylesheet.css);@import url(../../USCRSGBL/fonts/bestbuy_human/condensed-bold/stylesheet.css);@import url(../../USCRSGBL/fonts/bestbuy_human/light-condensed/stylesheet.css);div[data-dfp-slotname="MAIN_TOP"],div[data-dfp-slotname="MAIN_MIDDLE_1"],div[data-dfp-slotname="MAIN_MIDDLE_2"],div[data-dfp-slotname="MAIN_MIDDLE_3"],div[data-dfp-slotname="MAIN_MIDDLE_4"],div[data-dfp-slotname="MAIN_MIDDLE_5"],div[data-dfp-slotname="MAIN_BOTTOM"],div[data-dfp-slotname="UTILITY_TOP"],div[data-dfp-slotname="UTILITY_MIDDLE_1"],div[data-dfp-slotname="UTILITY_MIDDLE_2"],div[data-dfp-slotname="UTILITY_MIDDLE_3"],div[data-dfp-slotname="UTILITY_MIDDLE_4"],div[data-dfp-slotname="UTILITY_MIDDLE_5"],div[data-dfp-slotname="UTILITY_BOTTOM"]{margin-botto

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\chat_dispatcher.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	8443
Entropy (8bit):	5.078341830581704
Encrypted:	false
SSDEEP:	192:ygh7QT7paUhd8OiNGgJ4ue/nqPFn0JT81:bh7QT7paUhd8OQGgJ4ue/nqPFn0JT81
MD5:	90006BEBDE776BBC69B3D7DC64836E69
SHA1:	5F159CCB7AFDDE1FA14D570A3A94CE744D21A72F
SHA-256:	6971E567303EFBB910E3A5B2B7D1C28369C0A25457E813E375760E08336F1C4E
SHA-512:	93CC41EFDD0FFB2CEAEC2281EA9AD6E2BD556997BB09CAB344A950ECBF50E836A283E86FE65F3EBCC0390A8E79733D0F5920BBF160B3343C8BA6EE145ABD521A
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/js/chat_dispatcher.min.js
Preview:	var JSONdata={},copsUser,unitValue,PartnerType,pageName,SPA,uniqueId,loggedOut;var chatReqDispatcher={signon:function(){var b="signon";var a="";this.parametersLP(a,b)},signoff:function(){var b="signon";var a="";this.parametersLP(a,b)},timeoutSignon:function(){var b="signon";var a="";this.parametersLP(a,b)},dashboard:function(){var b="";var a="home";this.parametersLP(a,b)},manageaccountLP:function(){var a="general";var b="";this.parametersLP(a,b)},showclireqpage:function(){var a="general";var b="";this.parametersLP(a,b)},verifyclipage:function(){var a="general";var b="";this.parametersLP(a,b)},confirmclireqpage:function(){var a="general";var b="";this.parametersLP(a,b)},climakechangespage:function(){var a="general";var b="";this.parametersLP(a,b)},helpcontactLP:function(){var a="general";var b="";this.parametersLP(a,b)},paymentsLP:function(){var a="payments";var b="";this.parametersLP(a,b)},profileLP:function(){var a="profile";var b="";this.parametersLP(a,b)},statementsLP:function(){var

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\container[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5810
Entropy (8bit):	5.546604696057645
Encrypted:	false
SSDEEP:	96:euWaCmmku4wh5Wjg4bfIX5jch828cInOhfYzVAexeZCp+xPvF1zj:NjS4i50TfIXeh8vef4VAe8a+FNJj
MD5:	94918A2321B72368FDFE5B171AA653CD
SHA1:	98B7880B6C2A5FED14B55458E175424D34FDCD69
SHA-256:	E86479D6E54449D1085C2149E190A615C6BEAD407B20BACBCF5852B5D65F1FEE
SHA-512:	9C9616CCBC9765F4E825F6B57FBA35E57B97B5EF5F51E88A5FE6D44BF22EDBEE1A52975F3311FE25D2CA65837B34DCB51CC2E00F02410C54A3AEEE6A2C17E255
Malicious:	false
Reputation:	low
IE Cache URL:	https://f1cdcaabc54da9584cd2a76361681095.safeframe.googlesyndication.com/safeframe/1-0-37/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){var n=this\|\|self;var w={};var y=function(a){y[" "](a);return a};y[" "]=function(){};var B=null,G=function(a){var b=a.length,c=3b/4;c%3?c=Math.floor(c):-1!="=.".indexOf(a[b-1])&&(c=-1!="=.".indexOf(a[b-2])?c-2:c-1);var d=new Uint8Array(c),f=0;C(a,function(g){d[f++]=g});return d.subarray(0,f)},C=function(a,b){function c(q){for(;d<a.length;){var e=a.charAt(d++),k=B[e];if(null!=k)return k;if(!/^[\s\xa0]$/.test(e))throw Error("Unknown base64 encoding at char: "+e);}return q}H();for(var d=0;;){var f=c(-1),g=c(0),h=c(64),p=c(64);if(64===p&&-1===f)break;b(f<<2\|g>>4);64!=h&&(b(g<<4&240\|h>>2),64!=p&&b(h<<6&192\|p))}},H=function(){if(!B){B={};for(var a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789".split(""),b=["+/=","+/","-_=","-_.","-_"],c=0;5>c;c++)for(var d=a.concat(b[c].split("")),f=0;f<d.length;f++){var g=d[f];void 0===B[g]&&(B[g]=f)}}};var I=function

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\crossdomain[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	212
Entropy (8bit):	4.927709756598364
Encrypted:	false
SSDEEP:	3:vFWWMNHU0KdejTlLyL92xgLJS4fvyToWK5slLyLbBHLZGaRIZlLyL2JEi0MKzvZO:TMVcUw4xSc4fKToWK5bpH0aJ5MKBab3
MD5:	1C8BC0B7588CDF0D84AFBDAB47095E4D
SHA1:	90625E09A76792CE45FBD1C70DA953BE7D8B5625
SHA-256:	7B587BF339E305F2BC4150C5E73E34D3D9777B2DB6F5D7F98842B39968FCF51D
SHA-512:	DBC05CC7AD0FBAE65E885086EEF4F1104B764FCC78109C7EA22860836233F8C231ABA45C285F92A54E69A3789188A1AC0D77D208B74693A9ABEC3ECC31721BD6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0"?>.<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">.<cross-domain-policy>.<allow-access-from domain="" to-ports="" />.</cross-domain-policy>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\crossdomain[2].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	212
Entropy (8bit):	4.927709756598364
Encrypted:	false
SSDEEP:	3:vFWWMNHU0KdejTlLyL92xgLJS4fvyToWK5slLyLbBHLZGaRIZlLyL2JEi0MKzvZO:TMVcUw4xSc4fKToWK5bpH0aJ5MKBab3
MD5:	1C8BC0B7588CDF0D84AFBDAB47095E4D
SHA1:	90625E09A76792CE45FBD1C70DA953BE7D8B5625
SHA-256:	7B587BF339E305F2BC4150C5E73E34D3D9777B2DB6F5D7F98842B39968FCF51D
SHA-512:	DBC05CC7AD0FBAE65E885086EEF4F1104B764FCC78109C7EA22860836233F8C231ABA45C285F92A54E69A3789188A1AC0D77D208B74693A9ABEC3ECC31721BD6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0"?>.<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">.<cross-domain-policy>.<allow-access-from domain="" to-ports="" />.</cross-domain-policy>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\crossdomain[3].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	212
Entropy (8bit):	4.927709756598364
Encrypted:	false
SSDEEP:	3:vFWWMNHU0KdejTlLyL92xgLJS4fvyToWK5slLyLbBHLZGaRIZlLyL2JEi0MKzvZO:TMVcUw4xSc4fKToWK5bpH0aJ5MKBab3
MD5:	1C8BC0B7588CDF0D84AFBDAB47095E4D
SHA1:	90625E09A76792CE45FBD1C70DA953BE7D8B5625
SHA-256:	7B587BF339E305F2BC4150C5E73E34D3D9777B2DB6F5D7F98842B39968FCF51D
SHA-512:	DBC05CC7AD0FBAE65E885086EEF4F1104B764FCC78109C7EA22860836233F8C231ABA45C285F92A54E69A3789188A1AC0D77D208B74693A9ABEC3ECC31721BD6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0"?>.<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">.<cross-domain-policy>.<allow-access-from domain="" to-ports="" />.</cross-domain-policy>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\dfb038475322ee8409beb6dce83d96b8[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	157998
Entropy (8bit):	5.3207821018772306
Encrypted:	false
SSDEEP:	3072:3FO6usxcpFgYYCCQUocKBpJb7wBVBcxJyLHjAalGtKHhKoBAguxxKMBugBnygERR:l
MD5:	7AAFF0FA31B6D96AB21BA5BA5C2D61BD
SHA1:	3328FBC45CA1CA1807FDC8B7994260D7E80E319E
SHA-256:	9828E25CC86799AA7EE3BAAF9C8B8BD7982717D1172E652DA6B17615D0FBD6BE
SHA-512:	2034BABF2FD5ABC60C0BF7C9D9724E7518A8BACA6E0018304D4B6BB7025CAC2141F0D0D2C55777CF624E9AC26DAE235F1828936DF032CB86AD9DFD3B43814472
Malicious:	false
Reputation:	low
IE Cache URL:	https://nexus.ensighten.com/citi/na_fsn_prod/code/dfb038475322ee8409beb6dce83d96b8.js?conditionId0=351524
Preview:	Bootstrapper.bindImmediate(function(){Bootstrapper.ensEvent.add(["decisionPending_homedepot_consumer"],function(){var ensEventContext=this;if(ensEventContext==window)ensEventContext=undefined;var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;Bootstrapper.bindDOMParsed(function(){var frame=document.createElement("iframe");frame.style.display="none";frame.style.width="1px";frame.style.height="1px";frame.src="https://3518820.fls.doubleclick.net/activityi;src\x3d3518820;type\x3dcre;cat\x3dthdfu002;dc_lat\x3d;dc_rdid\x3d;tag_for_child_directed_treatment\x3d;ord\x3d1?";.document.body.appendChild(frame)})})},1539851,412482);Bootstrapper.bindImmediate(function(){Bootstrapper.ensEvent.add(["crs_plcn_llbean_mc_start"],function(){var ensEventContext=this;if(ensEventContext==window)ensEventContext=undefined;var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;gtag("event","conversion",{"allow_custom_scripts":true,"u21":

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\figure[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 450 x 281, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	101518
Entropy (8bit):	7.992881235977913
Encrypted:	true
SSDEEP:	3072:2zCLLuJZiQ7lZE6g4Gau3CvrsrUwzKGC/lCC13Aakw:22LLuJ57w6gSEVWGC/lTSw
MD5:	6E7536D7ACCCF26D463D95CC09C07515
SHA1:	92A6A9957691544948B2A622F69EFB8FE4CAD19B
SHA-256:	8E28796817E01B1011126BF7E1BBD21AF1552A0BBD4717853A2D6A8EC3D0EB32
SHA-512:	CA0F9D0CEB23F37C6763F12552790F3F880F55260B49D7B1C679F7344C2E2FD625FFFF2609EA7FE1C1196174C18AC7220C52E0DCF1F190573AFE5326F885C6D8
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/BestBuy/images/en_US/marketing/offers/sign_on_cards/01_2018/figure.png
Preview:	.PNG........IHDR...............%.....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xmpMM:InstanceID="xmp.iid:B880D694374011E9BEF1B51A064E4611" xmpMM:DocumentID="xmp.did:B880D695374011E9BEF1B51A064E4611"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B880D692374011E9BEF1B51A064E4611" stRef:documentID="xmp.did:B880D693374011E9BEF1B51A064E4611"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..%....IDATx....dE.>...<;;..9.3.H.........b@..((....EPA... .$%'Q@r...9.....S_.....N/......k.g...:.O..>o.RJ4Z.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\fpc[1].swf Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Macromedia Flash data, version 7
Category:	dropped
Size (bytes):	2001
Entropy (8bit):	4.914589593413625
Encrypted:	false
SSDEEP:	48:sYkfJCBynePZiMsy24gKkBh0CMJcM8ZzIGc3c0QhCa1o+Jdl/ZMf:jkfJCByneBiljCkBjXKMfq8l/ZMf
MD5:	1AA138249449D29827E983101964A50F
SHA1:	156B6738C6F88E60760FB37B731161885D22A82A
SHA-256:	6608FB1F5A2560C8E9617D5157D394B63DDCC9C40523BE722E0109909B47A53A
SHA-512:	1C2307A32FAA1864C749494F916976F6CFA131AEA0C2B2930093876E30B683121D6B0847F3EE15350C33D5A42808E278B13A52A004A69012D815B02F2B269007
Malicious:	false
Reputation:	low
Preview:	FWS.....8........C....?......k.6.0123456789abcdef..length.charAt.parseInt.session_id.charCodeAt.String.fromCharCode.xx10.session.SharedObject.getLocal.xx11.LoadVars.xx12.fa.fb.w.fg.xx43.?.split.xx14.&.i.xx15.=.p.toLowerCase.unescape.org.org_id.fx.fy.fap.xx57.clear.url.substr.clear.png.nu.Math.random.round.data.sessionid.xx48.toString.79826d0a7f53437a9fb9b8095b572a39.flush.fc.GET.sendAndLoad....xx57....*..s..................................................................NH................G.......Ng................................R..........G............RG..........=..................R........`b................RG..........P...............NI.................................G...............>....................R<................@<.....A.....A.....A.....A.....A.....A...................".....R........N<....................R<..............<.................NH...........................N.....R<.............................N.....R<...........I....".................N..........=.................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\icon_60_ios[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3890
Entropy (8bit):	7.937462116133039
Encrypted:	false
SSDEEP:	96:7fDkfG2oZOKddgYSXDoaLqtnlvsXUo8v8bZBgimEZl:DYe2TKHgYSXDwnpAoYcgl
MD5:	E9C9E537EF101681B3D6EAEA78F8E10F
SHA1:	34EB404AC2916B55C6B540AB5EA02D91A4F24169
SHA-256:	27BB402DBD8E2D1567010652197863D7885F22388A84DC0AE526EFA0D1ECC7D5
SHA-512:	77BCA4689461E5A274530A47AAC84C60B79D1224E803F146F8B8929D1350145726AF63E42BA843DDD394C5CEF63B97861B9D04274CA0E6849596D77AD12B2AF0
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/BestBuy/images/icon_60_ios.png
Preview:	.PNG........IHDR...<...<.....:..r....IDATx.............l6.:p...........c.W...2.9.R.1'......y..$.d7q.uUW..........UU=.xQ..Q"r..-..t.[f.....X...H.-.....@.:.......1.C.....O... I....>..5.......x......Kf.ky.."..c.}..1.)pp...........\@..Gb...0.._......v}B.....?.w0a.......k.(.M.?.\..].._.....E....#..z=.Tu.?.83.\....J....3.&......AD^..{.....\|..W..\|...u'.G>.U@,.^.B......F.1..}.M.{.`....L;..->wn.[n:..Sk.....Gr.....%F..71..1...8....u..q\fm.....`....}..O}..(1^...t.>/.y..w..g..W.....$G..(....?..o:F.yBY..0....KE..M.........'cb"........L.[.o.....\w.z{..Q.}..W?.oCc..."U...TU.}..o..?x.........b.P....".\}.KM.u>....f..........^D.G.........@...U..8yq..D...Z.p....}.\|.HY...D.R.D.mq ....j.^.z]..$R.~?..`...x...>.'=.C ...z.J.m..R...\|...%...X)....F....A..t..:.... .!o.>}...@.,... ..D....@.Q.u.....G.....7.....s..U`iu....^.....j./.q.s.=..........P...B..C...N@.........&....H.[lN.(..j.."e............F...z....n..Oc.8.I...C.H.4I........fA.q...}:..5....6.;t..\|..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\index[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ISO-8859 text, with very long lines, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	71879
Entropy (8bit):	5.182039638912459
Encrypted:	false
SSDEEP:	768:+A/kylbueRnmoof0Mpa2I0fX7UTw/pxIp2CyTksGldPGRGjJ4V9:dJNocAaz0fozGRGjJ4V9
MD5:	EADDFC746323D67B9DB1A19EE6382B1C
SHA1:	BD453C5D14070AAC882F9CF4C271930A3C06588D
SHA-256:	55204BBE04289CCB9D09E6EFD05D9D572B1511CE4DFAEE0BD195CBDDA9B1DF81
SHA-512:	91EEC4F6423B9FC7FA97071CCF6990630D40325676214242AA7314DA00D863BD8D671D902F3750EBC0CC5D8C2AE9C51599F571E3F35A3CB30F5D23FC15C1C61C
Malicious:	false
Reputation:	low
Preview:	.................................................................................................................................................................................................................... ........................................................................................................................................................................................................................................................................<!DOCTYPE html> ..<html lang="en" manifest="/USCRSF/appcache/PLCN_BESTBUY.en_US.appcache">..<head>..<script src="/assets/scripts/global/6c8322c7341eac98645c10e3d1d3c7ae.js"></script>..<script src="https://www.promisejs.org/polyfills/promise-6.1.0.js"></script>..<script>..var tmx_org_id = '530q7tul';..</script>..<script type="text/javascript" src="https://resources.digital-cloud-citi.medallia.com/wdcusciti/2290/onsite/embed.js" async></script>..<script src ="/USCRSF/USCRSGBL/js/injectChat.js"></script>..<script src= "/

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\jqm-datebox.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	7012
Entropy (8bit):	4.903335674785119
Encrypted:	false
SSDEEP:	96:kakT84unMppWNvU+cuwJQCvrGdSrdvbnAwn5nvt70H3N8:k0MzWNqGmAyRN098
MD5:	B22D9457CB5B1FA418C010FC618FEF2C
SHA1:	26F6FCB3AB37EACA81AEE60B60C8D7864B905AFE
SHA-256:	28FD32DCD9260FCE1DDCAAD7DAFB573DD42CF87AF5976D2181B7F6356D870854
SHA-512:	603402F7FAB82A8800BDBB3A23225EA07B25CC9779498A2BD38C7553CD975F13C2382E37EAD5EB7C9D111396EA3ADA4560273BDBAF4888920E1CE51EBDFFE323
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/css/vendor/jqm-datebox.min.css
Preview:	/. jQuery Mobile Framework : plugin to provide a date and time picker.. * Copyright (c) JTSage. * CC 3.0 Attribution. May be relicensed without permission/notification.. * https://github.com/jtsage/jquery-mobile-datebox. /..ui-input-datebox{width:97%;background-image:none;padding:.4em;line-height:1.4;font-size:16px;display:block;padding-top:0;padding-bottom:0;background-color:transparent}.ui-input-datebox{min-height:38px}.ui-datebox-container>.ui-header:first-child{-webkit-border-top-left-radius:3px;border-top-left-radius:3px;-webkit-border-top-right-radius:3px;border-top-right-radius:3px}.ui-input-datebox input{width:100%!important;padding:0!important;margin-top:5px!important;margin-right:-40px!important;border:1px solid transparent!important;vertical-align:middle;display:inline-block!important;background-color:transparent;zoom:1;display:inline}.ui-input-datebox input:focus{outline:0}.ui-input-datebox .ui-btn-text{display:none}.ui-input-datebox.ui-mini{min-height:20px;font-size:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\jquery.mobile.structure-1.4.5.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	68712
Entropy (8bit):	4.930873219097013
Encrypted:	false
SSDEEP:	384:YoRsUjcdJqaj/saFXxCqyFZGCqyFZDCXoOULU/J4cW/GaqhUacdJmaj/scGaTJj6:SUbaFXxCqyFZGCqyFZDOIyWjMueQo/v
MD5:	1544CA9F803EDFF31BE0577B9F985853
SHA1:	12DB16F24C602523FE6610221B56928FC090DA96
SHA-256:	E1D94776078325C58B4CD50EEDB8A10E8DB7860D5D353618934B117057F8DB8C
SHA-512:	C9C6252EA1D35CF46870A155F2DD02E5F5304EFBA2BFEE26E641D64CDE63B9490E88610922A96A36D3C2C217CA6859701FE75F41D291C213829C8DB376CFDD98
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/css/vendor/jquery.mobile.structure-1.4.5.min.css
Preview:	/! jQuery Mobile 1.4.5 \| Git HEADhash: 68e55e7 <> 2014-10-31T17:33:30Z \| (c) 2010, 2014 jQuery Foundation, Inc. \| jquery.org/license /...ui-mobile,.ui-mobile body{height:99.9%}.ui-mobile fieldset,.ui-page{padding:0;margin:0}.ui-mobile a img,.ui-mobile fieldset{border-width:0}.ui-mobile fieldset{min-width:0}@-moz-document url-prefix(){.ui-mobile fieldset{display:table-column;vertical-align:middle}}.ui-mobile-viewport{margin:0;overflow-x:visible;-webkit-text-size-adjust:100%;-ms-text-size-adjust:none;-webkit-tap-highlight-color:rgba(0,0,0,0)}body.ui-mobile-viewport,div.ui-mobile-viewport{overflow-x:hidden}.ui-mobile [data-role=page],.ui-mobile [data-role=dialog],.ui-page{top:0;left:0;width:100%;min-height:100%;position:absolute;display:none;border:0}.ui-page{outline:0}.ui-mobile .ui-page-active{display:block;overflow:visible;overflow-x:hidden}@media screen and (orientation:portrait){.ui-mobile .ui-page{min-height:420px}}@media screen and (orientation:landscape){.ui-mobile .ui-page{min-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\js[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	98767
Entropy (8bit):	5.51463989843675
Encrypted:	false
SSDEEP:	3072:JB4bXR7peBY0E2JqUgumBlTjwMBpY2pN+:Pmi9QQ2j+
MD5:	086D807DF8BD2E3198A3D6BDA5594FFE
SHA1:	9B7CFA70DCC66D770D8E80D355929F672ED0D2EA
SHA-256:	62BF30E1A6F84E613E8C74228B53C2C04C3A93623CF11B1F0B776BCB1C59AF4C
SHA-512:	BB9AE723138787E6A0E3BBE3BC22138DD33239F97CA9B903B98AC826F64A46074777F0BF41C1A685F930BCD1DAAD3477D5AE58C6B0BA86EAFB278F0913F171C1
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagmanager.com/gtag/js?id=DC-4246576&l=gtagDataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"1",. . "macros":[{. "function":"__e". },{. "function":"__cid". }],. "tags":[{. "function":"__rep",. "once_per_event":true,. "vtp_containerId":["macro",1],. "tag_id":1. }],. "predicates":[{. "function":"_eq",. "arg0":["macro",0],. "arg1":"gtm.js". }],. "rules":[. [["if",0],["add",0]]].},."runtime":[].....};./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var ba,ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},da=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:ca(a)}},ea="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},ha;.if("function"==typeof Object.setPrototypeOf)ha=Object.setPrototypeOf;else{var ia;a:{var ja={wg:!0},la={};

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\ls_fp[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	147066
Entropy (8bit):	5.493051199170427
Encrypted:	false
SSDEEP:	3072:o9ZYUaRXkFJ/nvit+WwTJlTMJXCvxmSDr:o9ZYUa2FJ/nvit+WwTJlTMJXCvxmSv
MD5:	6423934014426FE572199FC0BA22867C
SHA1:	63AA8E526631DD5E8580B50EFFB154234E5CC0D7
SHA-256:	60932572CB6D33FAB0E1ADD4A6C88F4DC1E36259D71A8D1110FB55E0146170DA
SHA-512:	FFB6F886873BAFC681BAD7103CE288B9BBDE3C0D6669E067157F6F3C2B8B05764336BFCB899DE77B319BC352C6CCDD04800413AD4555910BE3715A03D2875FE2
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_4S=td_4S\|\|{};td_4S.td_2I=function(td_a,td_X){var td_B=[""];var td_t=0;for(var td_C=0;td_C<td_X.length;++td_C){td_B.push(String.fromCharCode(td_a.charCodeAt(td_t)^td_X.charCodeAt(td_C)));td_t++;if(td_t>=td_a.length){td_t=0;.}}return td_B.join("");};td_4S.td_4P=function(td_k){this.td_c=td_k;this.td_d="";this.td_f=function(td_T,td_e){if(0===this.td_d.length){var td_R=this.td_c.substr(0,32);var td_W="";for(var td_f=32;td_f<td_k.length;.td_f+=2){td_W+=String.fromCharCode(parseInt(td_k.substr(td_f,2),16));}this.td_d=td_4S.td_2I(td_R,td_W);}return this.td_d.substr(td_T,td_e);};};td_4S.td_0B=function(td_e){if(td_e===null\|\|td_e.length===null){return null;.}var td_q=null;try{var td_Y="";var td_N=[];var td_R=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_n=0;for(var td_l=0;td_l<td_e.length;++td_l){if(65+td_n>=126){td_n=0;}var td_X=(td_R+td_e.charCodeAt(td_n++)).slice(-3);.td_N.push(td_X);}var td_S=td_N.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\marketing.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	307035
Entropy (8bit):	5.338565572757154
Encrypted:	false
SSDEEP:	6144:pk7w8nzooN/5d6yhPJjCE9SnYqYmPFHWHg0g0QizXuRmsXPw8nz1oN/5d0Bvb0Dt:PmsbFq
MD5:	3ED39643283FE962E9353F8A416B1FD5
SHA1:	A92B37979BADADECD66ABD892602BEDB4E545666
SHA-256:	589A78C5A100CE6BC270D13038BEEADE770AEF81F2261768C6CEA3FD3EEF78CB
SHA-512:	9572B09CEB76FBE6B802BEDC17A1A98E9A4609BF366B26D121E508C12A8AC5086FF5BE4D3FE1716E6E65CDCC588DBA65B1DC99BA73E358E5951099D62D4F4D4C
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/BestBuy/css/modules/marketing.min.css
Preview:	div[data-dfp-slotname="MAIN_TOP"],div[data-dfp-slotname="MAIN_MIDDLE_1"],div[data-dfp-slotname="MAIN_MIDDLE_2"],div[data-dfp-slotname="MAIN_MIDDLE_3"],div[data-dfp-slotname="MAIN_MIDDLE_4"],div[data-dfp-slotname="MAIN_MIDDLE_5"],div[data-dfp-slotname="MAIN_BOTTOM"],div[data-dfp-slotname="UTILITY_TOP"],div[data-dfp-slotname="UTILITY_MIDDLE_1"],div[data-dfp-slotname="UTILITY_MIDDLE_2"],div[data-dfp-slotname="UTILITY_MIDDLE_3"],div[data-dfp-slotname="UTILITY_MIDDLE_4"],div[data-dfp-slotname="UTILITY_MIDDLE_5"],div[data-dfp-slotname="UTILITY_BOTTOM"]{margin-bottom:10px}.is-ie div[data-dfp-slotname="MAIN_TOP"],.is-ie div[data-dfp-slotname="MAIN_MIDDLE_1"],.is-ie div[data-dfp-slotname="MAIN_MIDDLE_2"],.is-ie div[data-dfp-slotname="MAIN_MIDDLE_3"],.is-ie div[data-dfp-slotname="MAIN_MIDDLE_4"],.is-ie div[data-dfp-slotname="MAIN_MIDDLE_5"],.is-ie div[data-dfp-slotname="MAIN_BOTTOM"],.is-ie div[data-dfp-slotname="UTILITY_TOP"],.is-ie div[data-dfp-slotname="UTILITY_MIDDLE_1"],.is-ie div[data-dfp-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\sid_fp[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	168348
Entropy (8bit):	5.489846047348728
Encrypted:	false
SSDEEP:	1536:wUbGj6Sd96X53Hl2rMINOgH4w4Y3MsJCbnzkUsrYp9k/LvyEI:wwhCUDdpq5I
MD5:	B9A1B48581F36DDF073F421F1EF877AB
SHA1:	C41EE4D2D9A9C7111AC8E680B2958F355E49A4F5
SHA-256:	E4252F17DFD3DDBE5E77E95ED5E80800677FB704FEB58D75973479274530BD4A
SHA-512:	E343CB92DF52B146E8A3FD74A6535869FE66ADE0714C974A4E22B5DFBE7A874CD2D3F2D2AD01C47F5FCF14E07218162F23037B2010641B56A689D4AC9471451B
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_5R=td_5R\|\|{};td_5R.td_1E=function(td_D,td_W){var td_i=[""];var td_L=0;for(var td_a=0;td_a<td_W.length;++td_a){td_i.push(String.fromCharCode(td_D.charCodeAt(td_L)^td_W.charCodeAt(td_a)));td_L++;if(td_L>=td_D.length){td_L=0;.}}return td_i.join("");};td_5R.td_3z=function(td_e){this.td_c=td_e;this.td_d="";this.td_f=function(td_m,td_k){if(0===this.td_d.length){var td_j=this.td_c.substr(0,32);var td_i="";for(var td_r=32;td_r<td_e.length;.td_r+=2){td_i+=String.fromCharCode(parseInt(td_e.substr(td_r,2),16));}this.td_d=td_5R.td_1E(td_j,td_i);}return this.td_d.substr(td_m,td_k);};};td_5R.td_1A=function(td_q){if(td_q===null\|\|td_q.length===null){return null;.}var td_m=null;try{var td_K="";var td_O=[];var td_j=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_T=0;for(var td_h=0;td_h<td_q.length;++td_h){if(65+td_T>=126){td_T=0;}var td_k=(td_j+td_q.charCodeAt(td_T++)).slice(-3);.td_O.push(td_k);}var td_x=td_O.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\stylesheet[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	384
Entropy (8bit):	4.99775957452409
Encrypted:	false
SSDEEP:	6:0IFF8ptEiz+P4rMdhiz+P4rC9OQVJIlrP4r5faerP4r5fKN2/rP4riVqPOVQ6ZNp:jFitExDdhx5zJmD5eDPYDtV/O6ZN0G
MD5:	A004FCF3C5FA2011C5950448D2E4CAAE
SHA1:	DFD76FCB85FF0265673A4EC0A4C9649F43643371
SHA-256:	6B398C2E0E1891E850BAFF46AE719EAF84820C44569E196F913771678CC2AC12
SHA-512:	7E80D9245FF4DE2BFD4BAC4B44E737E19C2F0A236A44D2809D59BC4D1CF0D6C0BC26D6DF9F39F4CBCA41FA42FAEB33DFBE86578DA8B553023350582E20570CE8
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/fonts/bestbuy_human/bold/stylesheet.css
Preview:	@font-face {. font-family: 'Bestbuy Human';. src: url('HumanBBY-75Bold-Web.eot');. src: url('HumanBBY-75Bold-Web.eot?#iefix') format('embedded-opentype'),. url('HumanBBY-75Bold-Web.woff2') format('woff2'),. url('HumanBBY-75Bold-Web.woff') format('woff'),. url('HumanBBY-75Bold-Web.svg#bestbuy_humanbold') format('svg');. font-weight: 700;. font-style: normal;.}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\stylesheet[2].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	390
Entropy (8bit):	5.077759365389122
Encrypted:	false
SSDEEP:	6:0IFF8ptEizhdANdhizhdA/9OQVJIl2dSKfae2dSKfKN2/2dWpVBaVQ6ZzS+t:jFitEkCNdhkC/zJm2qe2aY24VUO6ZGG
MD5:	5E8CCEADBC5D669F71183F1750C0DAB4
SHA1:	81B5E2C15FCA71D11BD4465585EF528EB2E72EFB
SHA-256:	FF68E723C49AD4B0E844DF6E96A4B5D2CA1CB44EF3A8C395452DB2C78981EAD7
SHA-512:	CFAE3B79D524320C0327BF0D2B495046000342BCF3C57218818175EE24C083A2E3E6DE680FFCFBF79FF7D5A3E8B5E81E7310C59E12C8F3993F47D1AEF4C39573
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/fonts/bestbuy_human/light/stylesheet.css
Preview:	@font-face {. font-family: 'Bestbuy Human';. src: url('HumanBBY-45Light-Web.eot');. src: url('HumanBBY-45Light-Web.eot?#iefix') format('embedded-opentype'),. url('HumanBBY-45Light-Web.woff2') format('woff2'),. url('HumanBBY-45Light-Web.woff') format('woff'),. url('HumanBBY-45Light-Web.svg#bestbuy_humanlight') format('svg');. font-weight: 300;. font-style: normal;.}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\tag[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	21652
Entropy (8bit):	5.471454971272349
Encrypted:	false
SSDEEP:	192:speXIcO8AiGMXMGc1IajSFkhChE7KYHliXMvjmPc3l7jcCVVmF6Q+3vMjT8LEc6q:sp63F4M3jFkfHlHL91cCVVbO8IkFAjl8
MD5:	E2EE8A9CD68C3D310A4C62FDB4B5C93A
SHA1:	67EB5F9547F1D9DE0A8B143C3B50511C26281399
SHA-256:	145D14BB73E5B03CC73062C2A78C392125B891C62B1CC9D542E5ADBA762F04E7
SHA-512:	4CFEE56CA068134354BE94127465E9AA7BFD8F68E0D2B6D6A367C0E9EACA5CDF5FC39290F6C1CB3DD4DC9319B60A38F810F220AD836C94FEDC991AE17EB82159
Malicious:	false
Reputation:	low
IE Cache URL:	https://lptag.liveperson.net/tag/tag.js?site=58975020
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.taglets=lpTag.taglets\|\|{};lpTag._tagv="4.1.2";!function(a,b){function c(c,d,e){b._logcnt=b._logcnt\|\|0;H(c,d,e,b._logcnt);if("undefined"!=typeof a.lpTaglogListeners&&a.lpTaglogListeners.constructor===Array)for(var f=0;f<lpTaglogListeners.length;f++)try{lpTaglogListeners[f](c,d,e,b._logcnt)}catch(g){H("Exception="+g.message+" msg="+c,d,e,b._logcnt)}b._logcnt++}function d(a){if(a)for(var b=0;b<a.length;b++)qa[a[b].service]=a[b].baseURI}function e(){for(var a=Ga.PRODUCTION,c=b.ovr&&b.ovr.domain,d=0;d<Ha.length;d++)if(Ha[d].tagDomain===c){a=Ha[d].env;break}return a}function f(a){var b;a=a\|\|e();if("string"==typeof a)for(var c=0;c<Ha.length;c++)if(Ha[c].env===a){b=Ha[c].tagDomain;break}return b}function g(a){var b=qa[a],c="ALL";return b?b:qa[c]}function h(){return qa}function i(a){return l(ra,a)}function j(a){return l(sa,a)}function k(a,b){for(var c in b)b.hasOwnProperty(c)&&(a[c]=b[c])}function l(a,b){var c;c="undefined"!=typeof b?"undefined"!=typeof a[b]?

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\top_fp[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	146463
Entropy (8bit):	5.488369185958888
Encrypted:	false
SSDEEP:	1536:dWIPwkayNYUaCWg2n64gnlY/JJvit+WwTJlTMJXCvfbTwmSGmUgcu:oCYUaCWhZ/nvit+WwTJlTMJXCvYmSGur
MD5:	2A28A1FF9BBDD9A2F981D1C98B3BC4FD
SHA1:	8B469A97D9C561F8D170D36BB18217637812B748
SHA-256:	BFC7E071B9BF69E0D470A21F8ED781D6771CAAB1C16AF18E3673F6AF34A15FAB
SHA-512:	96F9F92A2DF1747055554C55747CB9ABC76E880A75097917048C771C62F13E003FD28D30DECF3116874A1FAE50C46EF24C9AE7CD065556096DAA267E8497922B
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_4S=td_4S\|\|{};td_4S.td_2I=function(td_a,td_X){var td_B=[""];var td_t=0;for(var td_C=0;td_C<td_X.length;++td_C){td_B.push(String.fromCharCode(td_a.charCodeAt(td_t)^td_X.charCodeAt(td_C)));td_t++;if(td_t>=td_a.length){td_t=0;.}}return td_B.join("");};td_4S.td_4P=function(td_k){this.td_c=td_k;this.td_d="";this.td_f=function(td_T,td_e){if(0===this.td_d.length){var td_R=this.td_c.substr(0,32);var td_W="";for(var td_f=32;td_f<td_k.length;.td_f+=2){td_W+=String.fromCharCode(parseInt(td_k.substr(td_f,2),16));}this.td_d=td_4S.td_2I(td_R,td_W);}return this.td_d.substr(td_T,td_e);};};td_4S.td_0B=function(td_e){if(td_e===null\|\|td_e.length===null){return null;.}var td_q=null;try{var td_Y="";var td_N=[];var td_R=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_n=0;for(var td_l=0;td_l<td_e.length;++td_l){if(65+td_n>=126){td_n=0;}var td_X=(td_R+td_e.charCodeAt(td_n++)).slice(-3);.td_N.push(td_X);}var td_S=td_N.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\zones[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	2684
Entropy (8bit):	4.899567427673578
Encrypted:	false
SSDEEP:	24:xo3FohBxVguoMF0gTAeepdcuoNFEW+00pKuoKFGIS+nDiJ/GtH4memOU:iFoFDU+F0F5vDe+uU
MD5:	00BE2285C1CEB43E78C4661F9E3940FF
SHA1:	ECF7B4DF2FA3F14EEB8A9A442494A2C4BA7A8263
SHA-256:	A2ACF5EA2ACECDDCEC1A872F35DF1090E3AD034BC7841598AA7A29136CCA163E
SHA-512:	569595CBB63A96CE86C50D9905DE9CB277B4CBCA8650FAB6F4A10E5F2903354AA155AB1BF5A942E1D5944A654272818D45EC623A90C5634286041B38F168C9B1
Malicious:	false
Reputation:	low
Preview:	lpZonesStaticCB([{"id":487197012,"createdDate":"2016-01-13 09:37:37","modifiedDate":"2016-01-13 09:37:37","name":"Left Overlay","deleted":false,"zoneType":1,"mainZone":false,"capping":0,"mapping":[{"engagementSubType":15},{"engagementSubType":25},{"engagementSubType":20},{"engagementSubType":21},{"engagementSubType":14},{"engagementSubType":23},{"engagementSubType":16}],"isDeleted":false},{"id":487197112,"createdDate":"2016-01-13 09:37:37","modifiedDate":"2016-01-13 09:37:37","name":"Proactive Overlay","deleted":false,"zoneType":1,"mainZone":true,"capping":0,"mapping":[{"engagementSubType":12},{"engagementSubType":2},{"engagementSubType":1},{"engagementSubType":4},{"engagementSubType":10},{"engagementSubType":7},{"engagementSubType":6},{"engagementSubType":9},{"engagementSubType":13},{"engagementSubType":3},{"engagementSubType":0},{"engagementSubType":5},{"engagementSubType":11},{"engagementSubType":8}],"isDeleted":false},{"id":487197212,"createdDate":"2016-01-13 09:37:37","modifiedDat

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\.jsonp[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	272474
Entropy (8bit):	5.829786329870446
Encrypted:	false
SSDEEP:	3072:4tnaWYplStzJzr3056Q92rv4iDKdy4XaTLNh4Yala5apau999naUm0h3L5dIM0Sf:unaWSStzJzDM992rv4UpJ/2u7p0
MD5:	C31693C1B79B07555852AB5821817804
SHA1:	1036FDAAA8EDDE82337F9CB8D751EE89364A360C
SHA-256:	B3144311858BEA569B0B69CCEE983D1E678AB539A4D390E55F79A4DD94A36A45
SHA-512:	3B02FE5E411DC9784F58403725C784B919C4EB6005AFBAD6E393E4F6FE96775D1DCDB67B097329ED8E42167FCD33307A9326D57F358A03764EB82B4257C3E1FC
Malicious:	false
Reputation:	low
IE Cache URL:	https://lptag.liveperson.net/lptag/api/account/58975020/configuration/applications/taglets/.jsonp?v=2.0&df=0&b=0
Preview:	lpTag.callback({"serviceMap":[{"service":"liveEngage","account":"58975020","baseURI":"z1.le.liveperson.net"},{"service":"msgHist","account":"58975020","baseURI":"va.msghist.liveperson.net"},{"service":"pusher","account":"58975020","baseURI":"va.push.liveperson.net"},{"service":"provisionGW","account":"58975020","baseURI":"va.register.liveperson.net"},{"service":"faasUI","account":"58975020","baseURI":"va.faasui.liveperson.net"},{"service":"msdkgw","account":"58975020","baseURI":"va.v.liveperson.net"},{"service":"nlp","account":"58975020","baseURI":"va.nlp.liveperson.net"},{"service":"acCdnDomain","account":"58975020","baseURI":"accdn.lpsnmedia.net"},{"service":"usmsgwDomain","account":"58975020","baseURI":"va-ges-usmsgw.liveperson.net"},{"service":"engHistDomain","account":"58975020","baseURI":"va.enghist.liveperson.net"},{"service":"adminArea","account":"58975020","baseURI":"chat.online.citi.com"},{"service":"leCdnDomain","account":"58975020","baseURI":"lpcdn.lpsnmedia.net"},{"service

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\6c8322c7341eac98645c10e3d1d3c7ae[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	191833
Entropy (8bit):	6.0771394177526386
Encrypted:	false
SSDEEP:	3072:SqkWOmGulx3LgIq/D8Dl3PGelgHxbJSkfbeC6LFj7T/VNr5Ltayi2JQ:nMmfNkIDlfdIxVSEiC6p/ZNvayi2i
MD5:	A4BB5B531277B710560A604B063363FC
SHA1:	9CE99C49A9B5BF9EF6A8E3B91461D67545133A08
SHA-256:	90A5F903186F702A7DE41E3BCFF3764AFA6C7F1A6047936DBCCE106FEAC85852
SHA-512:	0A6AEA07EF371CB00AAE7F232C8F60B2210189E5929B350FD8918F16EE65947530159E74D0D8A168A4936C57663CA77D67CB05CF23DF63293D4B85BAA7CF9CFA
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/assets/scripts/global/6c8322c7341eac98645c10e3d1d3c7ae.js?seed=ACAZKvd2AQAAQLFyuVgME11ZObZ239x34AeidVDyL4LVPCQTNYe9nR2iamgq&X-soz9htCz--z=q
Preview:	(function e(S){var O={},c={};var f=ReferenceError,B=TypeError,Y=Object,p=RegExp,D=Number,j=String,G=Array,d=Y.bind,Q=Y.call,X=Q.bind(d,Q),N=Y.apply,A=X(N),x=[].push,u=[].pop,y=[].slice,n=[].splice,E=[].join,C=[].map,r=X(x),J=X(y),s=X(E),o=X(C),w={}.hasOwnProperty,m=X(w),b=JSON.stringify,P=Y.getOwnPropertyDescriptor,M=Y.defineProperty,Z=j.fromCharCode,V=Math.min,K=Math.floor,z=Y.create,R="".indexOf,l="".charAt,U=X(R),T=X(l),L=typeof Uint8Array==="function"?Uint8Array:G;var F=[f,B,Y,p,D,j,G,d,Q,N,x,u,y,n,E,C,w,b,P,M,Z,V,K,z,R,l,L];var q=["dok6XRLqDA","idQcCTn6Sa6R19lqXA","FLQjVhvuIu797tARcURDObs","documentBody","VOMwehn6Cfjp-JpuIw","3oMk","eWM","yEeozJR853kqPA","lF6S-41Y-iM","mqM4AQTvHZ8","UCaW9pBUkFRiJw","LUXvhfozqiMaHyLZ5g","match","Nyaet-BR","set","HkY","sVrtmNMt","INIPfiXUS8GUzLdhLUVVIKPO59A","L-NKEkimOq3sx_B8cgwDFKrglMG3AG88TTVBZzxE0j9b9FI","aADB3PRJ3Q","IdEaczvQPtmTjbNjKWsQE5-1l47LKWpiHEseZC8j0Qwru35IVKuDQ_OpYV5yff9gAoGT98dBPTBwQ7bune_jUrXavnYeF6I4T1wJTZ_1DqEm6pn4Z24lwMA0IOkn9I35TS

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\AppMeasurement[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	38146
Entropy (8bit):	5.405169886506454
Encrypted:	false
SSDEEP:	768:I2sWkekBC/BYKO7CIoNatBsXyTe7xiMG0T2:IJ8kB+Y6wBs6e1iMG0K
MD5:	24AF17637718726E75E8E1AEA006BCAA
SHA1:	F0659A7609FC576DD94C4D1EF3AB06DA673CC086
SHA-256:	B6613397A3E67ECB285D6AD58F79B22A885162D07CFAD305638D446715EF530B
SHA-512:	FE9A9B5401B765C1EC19AF1D351BD6F61F6EBE657EE74658B9897605A0124DB5279F823174DB63A3EDBAA0124E493115D444163B874BD3B28981EBA7DCC1A00B
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/js/AppMeasurement.js
Preview:	function s_doPlugins(e){function t(e){for(var t=window.location.search.substring(1),i=t.split("&"),n=0;n<i.length;n++){var a=i[n].split("=");if(a[0]==e)return a[1]}}void 0===e.pageName&&(e.pageName=""),e.pagename&&!e.pageName&&(e.pageName=e.pagename),e.pageName=e.trimWS(e.pageName),e.campaign\|\|(e.campaign=t("cmp")\|\|t("emc"),e.campaign=e.getValOnce(e.campaign,"s_gvo_v0",0)),e.eVar38\|\|(e.eVar38=t("desc"),e.campaign=e.getValOnce(e.campaign,"s_gvo_v38",0)),e.campaign&&e.eVar38&&(e.eVar39=e.campaign+"\|"+e.eVar38,e.eVar39=e.getValOnce(e.eVar39,"s_gvo_v39",0)),e.prop47=e.filterSensitiveData({orig:e.prop47,ruleset:"all",repltext:"SENSITIVE DATA REPLACED"}),e.prop48=e.filterSensitiveData({orig:e.prop48,ruleset:"all",repltext:"SENSITIVE DATA REPLACED"}),e.prop47&&!e.eVar6&&(e.eVar6=e.prop47),e.eVar1&&(e.prop1=e.eVar1),e.eVar26&&null!=e.eVar26&&"anonymous"!=e.eVar26.toLowerCase()?e.eVar27="Y":(e.eVar27="N",e.eVar26="anonymous"),e.eVar61=e.getVisitNum("m","s_vnum"),e.eVar60=e.getNewRepeat(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\BB[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1270
Entropy (8bit):	5.276835550821106
Encrypted:	false
SSDEEP:	24:2QQ+A2lL4aQ5NGhOmNfO4lLdlH6pzKArLETtOSYtst4r1RmTtcMtxtlNNTv:A0XQ54JBt6xStNYtst8XQtttxtlNNTv
MD5:	7675D80E10D5CE6638D55B971503D6B6
SHA1:	205DB819B4BBA3536531C5F6F953753F77AE2B1F
SHA-256:	1F42E4963A3C4E30A95020CD4BCE1DD2D456C41D3BA1E7B392B0C1D0B2E8BB1C
SHA-512:	ADC6310902304CE9C0DB4E980D92495229E52FF47575E3916E8E3A5A6E6A4C1F3D2EE03CB6CD8A085AA062787D26731B998D9C06B212680DDC880D2E31E7B69C
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/js/ad_placements/BB.js
Preview:	(function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}};e[i][0].call(p.exports,function(r){var n=e[i][1][r];return o(n\|\|r)},p,p.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}return r})()({1:[function(require,module,exports){.$.ad_placements = {. partner_id: 'BB',. contract_id: 220,. en_US: {. dashboard_hero_1: 4686866,. dashboard_main_2: 4528690,. make_a_payment_with_options_main_2: 4528693,. make_a_payment_with_options_utility_2: 4528701,. manage_account_main_2: 4686852,. manage_account_utility_2: 4686862,. payments_main_2: 4686844,. payments_utility_2: 4686849,. sign_off_main_2: 4528705. },. es_US: {. dashboard_hero_1: 4686868,. dashboard_main_2: 4528692,. make_a_payment_with

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\FoundationSans-Bold-webfont[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), Foundation Sans family
Category:	downloaded
Size (bytes):	24456
Entropy (8bit):	7.974254924945072
Encrypted:	false
SSDEEP:	384:Jh8ERBMxy1tDSQDwImFl5TOfBQZXbryZrUCleJ+9rAaG5AOp2XGQe:J2EXMxy1tDSWwDz5TamXyZrUCle8OaGH
MD5:	2372DA7D2A740C6271DDBBE10AC7EBC6
SHA1:	2C5AE902C4C6FC42BBB4CA6D702E52C9C7559327
SHA-256:	EB08FBC03D6C18B1AF1927B7AD747BEA18D025C45E1D41EBE641D8B4DD7ED2B4
SHA-512:	4B2172D48C310034D865AC1638EA97844B9E752AD6ABF20E4E54D539F534E58A66FDE5BDC3B782706728C646C285EC325339510E38993467D2EF95B93B4AB297
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/fonts/foundation_sans/bold/FoundationSans-Bold-webfont.eot?
Preview:	._...^............................LP....[ .P........... ....q.'Z....................F.o.u.n.d.a.t.i.o.n. .S.a.n.s.....B.o.l.d.....V.e.r.s.i.o.n. .1...0.7.1...(.F.o.u.n.d.a.t.i.o.n. .S.a.n.s. .B.o.l.d.....BSGP...................\.EX.Q..H.....xZg.icyR..&c..4o4F..w....[.uM...R._.N5-Vb...NhN...Ef....rr...q.....k^.I.^mG7\qn96@..8..\|m.y..NYSD.x.u.sJ..Z......r.8.....".&....2Ja\...8.........k......h..R@c.:a...u..,H........&.~.\|J...u6..WT....n....r.G.6wVC..l.. ...Wf..{...8.1^b..+t.i......o...6..+......%.k..(..v..\|\I.2=.-.}&...S.Q.I...(.'.t~H.......Q......G.....lJ..D&5...bt...>I......8..HAC.]9...m..9...~..h..%...7...A~..5../Q.A......6....p.K.<(..v<.....N._d-...5W.B.5h.Z...tq...f.1...YM..9....T..z..F.z:.N.....k...j...s..+Z.J.......>i&4E.2.=bP......j.q.5(.~W:4....A-9`....M........U....cfQv..j]i..V.b...*.'.. sA..P.I...............T(~j..Y...R1k.u#AF.....\|...RD(......bQ......%..M...gm3Vc....1Y.gq.. `M6W..5Q....8............d8.....G...........78......a.U.M.)...n...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\FoundationSans-BoldCd-webfont[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), Foundation Sans Cd family
Category:	downloaded
Size (bytes):	23409
Entropy (8bit):	7.968677337096365
Encrypted:	false
SSDEEP:	384:WWVTbqSsrEdcaVu7+RptFy/0VueX5hhRj5TrbrWgli7wcxwL07w5feXL3X//ix/1:WeTbqj0jVuQpPCs/Rj5TXrbjcx+v5+DE
MD5:	22295E40B3C25F0453977664A3234293
SHA1:	CD0DD9832F679C7A12FB225C658000718C685B73
SHA-256:	444B0A022C2EF332AFC19EA14F3A67C7DC3FB43729A6D0607402855C9E83A253
SHA-512:	5D881884776A68825F3ED0BBAC9DB66CF102B513ADC6F2A7BAB413452DBACD67700D172089536E3BAF3727F4DE1D7D53BD69121223CE2287EFDE20E0C5D3CD47
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/fonts/foundation_sans/condensed_bold/FoundationSans-BoldCd-webfont.eot?
Preview:	q[...Z............................LP....[ .P........... .......i..................$.F.o.u.n.d.a.t.i.o.n. .S.a.n.s. .C.d.....B.o.l.d.....V.e.r.s.i.o.n. .1...0.7.1.....F.o.u.n.d.a.t.i.o.n. .S.a.n.s. .C.d. .B.o.l.d.....BSGP.....................A,.K..Ap....xZg.icyR..&c..4o4F..w....[.uM...R._.G...1.V....r\:.5f...u\.....'.......4.G+F..8...a...~n.x.....:>._.g......G8...uP...x.0..d..qa.`..dg$(.%/]c.u.d.c...9m...1..,.Y._.~O...@d....j../...@.^.."....im\|D.@vS../.m.m\...`.Y8..Y.h.<-@8..L..k.I...W......k.%..NAs......b<..\|.@.....t.@..@.;..!?...eC$..D.....b.,...!?.J.FL.I......4}<.H...@.#g.?.t2...LZ.t..().iL(......\j.'...E..g..............J.K.\....N.NH..lQef...Z!.\....'T.(.T..8..&h....:..$GR.;"H...B..x...T.@..R..k.R..*.M..Y..j.j_{.nr#..hE..?..1.....,ZP..Y.%h.'C.RQ..9........BV.v.6.,2.<0#.y...F..jZ..($.{.k.,...E>...(.h..g..0.g..S.....k.v......O>=...P...n..{.@....<..../..3.yK....".<.+.4....6y..5.....tN..........+g.Fj........W..G.._.U("jUP.s.CH(..iPy.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\FoundationSans-Cond-webfont[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), Foundation Sans Cd family
Category:	downloaded
Size (bytes):	22717
Entropy (8bit):	7.972785355036339
Encrypted:	false
SSDEEP:	384:y19g0YtF1N7BbmJzNkJHzfHF9H6F/GMfqrawo+69CO8JRfffYPRWQ60zUL:mg0Y31xBKJZyHzPjH61G9rV0J8JRfgR6
MD5:	E5AC7AFF65B4C1143D1135F2D6852D49
SHA1:	413040018369BC6419E9CE937D8C1467FEDBAD7E
SHA-256:	9B0A4CC728907B1A0B9F9B33EE89FCD39226ABF2B2CE4D7AFEF3552C186C8FEF
SHA-512:	59ACB6F7DE43DE65A71C7C889606C62E6E5AD83577C4FCC317FCE441A99FF7E9CEA0ACF397E346B7075264750B071B4561B48DC41F6B82953480A85A80B75A90
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/fonts/foundation_sans/condensed/FoundationSans-Cond-webfont.eot?
Preview:	.X...W............................LP....[ .P........... .....kF/..................$.F.o.u.n.d.a.t.i.o.n. .S.a.n.s. .C.d.....R.e.g.u.l.a.r.....V.e.r.s.i.o.n. .1...0.7.1...4.F.o.u.n.d.a.t.i.o.n. .S.a.n.s. .C.d. .R.e.g.u.l.a.r.....BSGP.....................?..M..A.....xZg.icyR..&c..4o4F..w....[.uM...R._.G...1.V.).Wr\:..f..j.%.%(...<...SN...k.]lqq97...8..p;>....H.7...~j..&....%T-.^M..L.D`..=t..H.Jb.....+)!@.....ykBg..J..%.w....]v.#.....i.....Y>%.F..9f)......MK.V...n...d..S..'.)1....x...@..J. ....h..v...p8....y@]ws.m.\|..-....l86.J>\|.x'..E<..p. .....V...0.a...' 1'....`.....!>._..'.u..9=...GE..z.vCs...G...v..1.qx.).aH...E.....\.{B..]]C..x....T...+..?k&..^c..........u.X.....7 ..4..y....T.......G.....y.....$....iE...aT#m.z.L..g...QX.....$8.TT........u..os.o.7.dTq_..X..)\R.q.....n^-.2.o..i. ."...;Nh..^....4.).w.[.2........\C\.m<..%.<...F.?..K.>D ...].+U:=D..e+.^:A...:....iB%....BGd:.e.o.)"..d\|in.'.'EI.E...J..%..G.Q,0....h..e.....AnC..d.2.;C.=.%..jZ...zF.q..:.0.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\FoundationSans-Light-webfont[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), Foundation Sans Light family
Category:	downloaded
Size (bytes):	24100
Entropy (8bit):	7.966449777519657
Encrypted:	false
SSDEEP:	384:CYJqynAZR1a73tk/oEdToCAxD16LgI6j5XRbqPQDJlc1cfRhrbh3wYbA4qhHia7B:ZJqfZRM7q/oEdTE1l9d08c65hrbhHbAt
MD5:	4C6A6D0259326FB7BA31F99A05C10996
SHA1:	F6BFF389435815A6D99BB3A1319C26413E326EAB
SHA-256:	355708103FDF41DE54A4AA3025520E5F0169EC3B0CDF66D365E642B371058B9C
SHA-512:	413CF0313E208F1CE7D194A6BE2A4E225623CB8A9F112255362E76F607C60234AD826D49FE1A1F26A66FCDB41FA4E6B361EED648842D6D8F4B05EB84F73939C8
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/fonts/foundation_sans/light/FoundationSans-Light-webfont.eot?
Preview:	$^.. ]......................,.....LP....[ .P........... ......./...................F.o.u.n.d.a.t.i.o.n. .S.a.n.s. .L.i.g.h.t.....R.e.g.u.l.a.r.....V.e.r.s.i.o.n. .1...0.7.1...:.F.o.u.n.d.a.t.i.o.n. .S.a.n.s. .L.i.g.h.t. .R.e.g.u.l.a.r.....BSGP.....................Ee.R..J.....xZg.icyR..&c..4o4F..w....[.uM...R._.N.mVb...S...b....f..}.rr...p.=I....T.a.{..&.-.&..FC.o6...#).eV4..G..W....WTz....n=.J..q.a.?....&I\<{E.G.."......vY...c.F{.K....k.1..r.."1x.H....:.......\....l7m......s-~.^.....\|!...2m..:....tZ..I!\.. ..t[...7+>.<E..S....D.."J...x.p.y...p.#.w.....:..b...<#cD...............9<.............2\Im%"..[..@.6...G.g6b0.$$..%.....Wf.5....1.e.hH..7)O4f.v.v.....y......VA.Y.U....Bs;.....&...l.N....HX....!`.L.m..@..K.m..H..x..F....>E...J.`.)...S.C.gR....".4sVa;........g.m..E.@gF....8.8Z..E..I.#.Hk..T.'F...J)./..V....@....p.~..M.HB.c.....`..%k.].....l6.[ti..*..mf..&.#".I)G..U.;SJA..E\|.xe..##.......N..h..5....b.J<..t..?..xr....!.a8(Uk.P........G.sId.N+.,@.8=....8.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\FoundationSans-LightCd-webfont[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), Foundation Sans Cd Lt family
Category:	downloaded
Size (bytes):	24457
Entropy (8bit):	7.970515770558232
Encrypted:	false
SSDEEP:	384:jrK8oum1lPHT35r17xQ1e/iExfcHVH1NWhIi2Xss6ecuYBvTsA1ferp/dlUM5cq+:jrlmnzH7xj/hxEHVHOdIss/A4AterlUb
MD5:	64F187FC72D5D0FA09EA3DD68934EED9
SHA1:	24E869B0261515BBC9F06229D384534D3840D88D
SHA-256:	C4B7E5FF713F932328C808ED4DA683BECF896657117C7AED69B7DDE257C7F595
SHA-512:	5D1FD56BBCE3BA08E7C00F02FF55F2CD8044F700EDC2CC6DFB3B9B7869CBFF13968632AA953CA41F91E6646F7800774E03148A2D06537EF2846C8D9D587089AF
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/fonts/foundation_sans/lt_condensed/FoundationSans-LightCd-webfont.eot?
Preview:	._...^......................,.....LP....[ .P........... .........................F.o.u.n.d.a.t.i.o.n. .S.a.n.s. .C.d. .L.t.....R.e.g.u.l.a.r.....V.e.r.s.i.o.n. .1...0.7.1...:.F.o.u.n.d.a.t.i.o.n. .S.a.n.s. .C.d. .L.t. .R.e.g.u.l.a.r.....BSGP.....................E..Sx.FB....xZg.icyR..&c..4o4F..w....[.uM...R._.G9..1.V.'.;...a..Y.........S`..+mM9...K.Z.y....Zx..m...3.....].Z.p#M.[.y...D.G.Z!..n.;...d...f...$(@..r8..>...Z....-..s(.....f...z..+Z...P.P..q{.U'/.L"..mvs....-.{`....).B.....<x..p...O........i..w...[..):2.5..e.'.......p..P9...?.e.T..........H.>...g....9@..(Of.;.n....\:C..Jl....p<..r......A.d=..>1..-r.u..F..l..v.}d...p..m..nTaJ..Z.DE.u....K{W.{..E...%....R..[~..$.).f..T.,.."...v3...S% .x.'N..?..j.o"..!x..._......E.3U../DHY.[.%..jA.u.@.-.BH..`...Td3%.U.A..5Y..".....Z?...K....Q......z.........j......m..V....O\...y.. `d...z...K.,xi..Q..HCS70(k.........pA..}\|..9>.h...lL.x.&c....S.\...}.u.D..`...D..6i...a..Q?...9.............-..2..f../..;>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\accountproperties[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	4123
Entropy (8bit):	4.875931993211008
Encrypted:	false
SSDEEP:	48:OdSYux+JjRNyJqaRBRvg0BdZZzDunV7EogCDajg6a7tQfDEWURJgPuyaHuB:JCZYqaRQkjZzolfe86aBXcaA
MD5:	EC387B61E2009F6818647844DB3A2FAD
SHA1:	908DDED122F6E1579D37AB96BBC51A4CBC893CC7
SHA-256:	FB95944A3A1ABA2A249CDE8CCFD75D54DCC981F33F7E15BBBA5E6A6C3A975866
SHA-512:	65D2FA0AE403D84D41261EB57E21A1458127B56EDD42CE8D4905B4BA298C44AA7746421BCAD598418943620B33CFBA11176A355BF1F417CBB700478CC14D8E57
Malicious:	false
Reputation:	low
IE Cache URL:	https://accdn.lpsnmedia.net/api/account/58975020/configuration/setting/accountproperties/?cb=lpCb5312x24585
Preview:	lpCb5312x24585([{"id":"messaging.ios.sdk.min.version","createdDate":"2017-01-10 04:11:41","type":2,"propertyValue":{"value":"1.1.36"},"deleted":false},{"id":"messaging.audio.sharing.enabled","createdDate":"2018-05-13 02:02:09","modifiedDate":"2018-11-14 08:32:03","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"messaging.ios.logs.settings","createdDate":"2017-01-10 04:11:41","type":4,"propertyValue":{"value":{"level":"WARNING","minLogLevel":"INFO","randomFactor":1000.0,"maxEvents":50.0,"maxPendingEventsRequests":10.0}},"deleted":false},{"id":"unified.window.fallback.to.first.party.cookies","createdDate":"2019-11-20 03:10:29","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"le.agent.widgetSdk.allowMicrophoneCamera","createdDate":"2019-08-19 04:03:07","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"le.site.automotive.conversation.topics","createdDate":"2019-10-11 09:13:33","type":3,"propertyValue":{"value":[]},"deleted":false},{"id":

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\b5aad0fcfa88df623d73d778783501af[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	84014
Entropy (8bit):	5.36505842188187
Encrypted:	false
SSDEEP:	1536:2RftRcMYnAnhBKQnpVVST3mhWe3RkQ5go7AwJZweWXQMi883CBa54uB3CUBS5RWV:SfPNmuX4d4ES3ua2MC0S7XlxxXaXhI0h
MD5:	0FBD0EFDB165AF3818E4F800B029CDC7
SHA1:	5AC2AC087FB1B0128ADD6ED171B156CC96FCB1D3
SHA-256:	275AF0A76E6DB1A08BA2B949697E9F7FA5F490B50B739FFD11DFB4908323322E
SHA-512:	6A02B62AE856F92D4B788A48DA2B970F9570C615D785D40C897B19A7442365822B9180AC7CFF8C17FCFDBB8879335C1752C7A6F02FA11C6A75011AB98B4DE067
Malicious:	false
Reputation:	low
IE Cache URL:	https://nexus.ensighten.com/citi/na_fsn_prod/code/b5aad0fcfa88df623d73d778783501af.js?conditionId0=421908
Preview:	Bootstrapper.bindDOMLoaded(function(){Bootstrapper.ensEvent.add(["decisionDecline_ploc_shell_frmc"],function(){var ensEventContext=this;if(ensEventContext==window)ensEventContext=undefined;var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;Bootstrapper.bindDOMParsed(function(){var frame=document.createElement("iframe");frame.style.display="none";frame.style.width="1px";frame.style.height="1px";frame.src="https://3860008.fls.doubleclick.net/activityi;src\x3d3860008;type\x3dusret0;cat\x3dus_re007;dc_lat\x3d;dc_rdid\x3d;tag_for_child_directed_treatment\x3d;tfua\x3d;npa\x3d;ord\x3d1;num\x3d"+.Math.round(Math.random()*1E13)+";~oref\x3d"+window.encodeURIComponent(window.location.href)+"?";frame.title="No Content";document.body.appendChild(frame)})})},2655081,567485);.Bootstrapper.bindDOMLoaded(function(){Bootstrapper.ensEvent.add(["decisionPending_plcn_staples_consumer"],function(){var ensEventContext=this;if(ensEventContext==window)ensEventContext=und

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\configurations[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	11621
Entropy (8bit):	5.132626953588994
Encrypted:	false
SSDEEP:	192:8laV5koO3MokU29UIuUIayDkNFTxQiXTxsiZD0ZbiTVfDEYfDKNDaTjc:8lafkoO3Mo6OIuUIayDcd/XTZJQ
MD5:	0236F122EBCA20B65796D0AC70463D35
SHA1:	E83A14B143016AE5C2B46AC2FF8374B761B08BC5
SHA-256:	881CB7C65B11B297EA7C1A196F6CAF6A822E5FDB20DF71439237D20AA1C5CAA4
SHA-512:	1AB2AEE81577431B18860C8B2D62EF474DB7434057ADFB0D75D2BCCC471ED494D3A2D469A86F6F4D155CC8B053D5B6401C012BC8D3D9A08DA2EDD85981660313
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/js/configurations.json
Preview:	var chatConfigJson = {. "identifier": "CRS_FUSION_SRV",. "chatVendor": "LiveEngage",. "lpAccountNumber": USCRS.getLpWhiteLabelAccountNum(),. "lpAccountNumberSecondary": USCRS.getLpMBAccountNum(),. "customerServiceConfigCallFlag": false,. "divIds": "lpButtonDiv,lpButtonNeedHelp",. "showRightChatButtonFlag": false,. "liveEngageObj": "lpTag",. "lpTagVersion": "1.8.0",. "chatConfig": {. "activate": "on",. "lob": {. "lobDescription": "crs-fusion",. "chatLanguage": "en_us",. "lobName": "servicing". },. "chatJS": [. {. "src": "window.lpTag=window.lpTag\|\|{},\"undefined\"==typeof window.lpTag._tagCount?(window.lpTag={site:lpTag.site\|\|\"\",section:lpTag.section\|\|\"\",tagletSection:lpTag.tagletSection\|\|null,autoStart:lpTag.autoStart!==!1,ovr:lpTag.ovr\|\|{},_v:\"1.8.0\",_tagCount:1,protocol:\"https:\",events:{bind:function(t,e,i){lpTag.defer(function(){lpTag.events.bind(t,e,i)},0)},trigger:function(t,e,i){lpTag.defer(function(){lpTag.events.trigger(t

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\crossdomain[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	212
Entropy (8bit):	4.927709756598364
Encrypted:	false
SSDEEP:	3:vFWWMNHU0KdejTlLyL92xgLJS4fvyToWK5slLyLbBHLZGaRIZlLyL2JEi0MKzvZO:TMVcUw4xSc4fKToWK5bpH0aJ5MKBab3
MD5:	1C8BC0B7588CDF0D84AFBDAB47095E4D
SHA1:	90625E09A76792CE45FBD1C70DA953BE7D8B5625
SHA-256:	7B587BF339E305F2BC4150C5E73E34D3D9777B2DB6F5D7F98842B39968FCF51D
SHA-512:	DBC05CC7AD0FBAE65E885086EEF4F1104B764FCC78109C7EA22860836233F8C231ABA45C285F92A54E69A3789188A1AC0D77D208B74693A9ABEC3ECC31721BD6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0"?>.<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">.<cross-domain-policy>.<allow-access-from domain="" to-ports="" />.</cross-domain-policy>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\crossdomain[2].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	212
Entropy (8bit):	4.927709756598364
Encrypted:	false
SSDEEP:	3:vFWWMNHU0KdejTlLyL92xgLJS4fvyToWK5slLyLbBHLZGaRIZlLyL2JEi0MKzvZO:TMVcUw4xSc4fKToWK5bpH0aJ5MKBab3
MD5:	1C8BC0B7588CDF0D84AFBDAB47095E4D
SHA1:	90625E09A76792CE45FBD1C70DA953BE7D8B5625
SHA-256:	7B587BF339E305F2BC4150C5E73E34D3D9777B2DB6F5D7F98842B39968FCF51D
SHA-512:	DBC05CC7AD0FBAE65E885086EEF4F1104B764FCC78109C7EA22860836233F8C231ABA45C285F92A54E69A3789188A1AC0D77D208B74693A9ABEC3ECC31721BD6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0"?>.<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">.<cross-domain-policy>.<allow-access-from domain="" to-ports="" />.</cross-domain-policy>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\crossdomain[3].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	212
Entropy (8bit):	4.927709756598364
Encrypted:	false
SSDEEP:	3:vFWWMNHU0KdejTlLyL92xgLJS4fvyToWK5slLyLbBHLZGaRIZlLyL2JEi0MKzvZO:TMVcUw4xSc4fKToWK5bpH0aJ5MKBab3
MD5:	1C8BC0B7588CDF0D84AFBDAB47095E4D
SHA1:	90625E09A76792CE45FBD1C70DA953BE7D8B5625
SHA-256:	7B587BF339E305F2BC4150C5E73E34D3D9777B2DB6F5D7F98842B39968FCF51D
SHA-512:	DBC05CC7AD0FBAE65E885086EEF4F1104B764FCC78109C7EA22860836233F8C231ABA45C285F92A54E69A3789188A1AC0D77D208B74693A9ABEC3ECC31721BD6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0"?>.<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">.<cross-domain-policy>.<allow-access-from domain="" to-ports="" />.</cross-domain-policy>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\crossdomain[4].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	212
Entropy (8bit):	4.927709756598364
Encrypted:	false
SSDEEP:	3:vFWWMNHU0KdejTlLyL92xgLJS4fvyToWK5slLyLbBHLZGaRIZlLyL2JEi0MKzvZO:TMVcUw4xSc4fKToWK5bpH0aJ5MKBab3
MD5:	1C8BC0B7588CDF0D84AFBDAB47095E4D
SHA1:	90625E09A76792CE45FBD1C70DA953BE7D8B5625
SHA-256:	7B587BF339E305F2BC4150C5E73E34D3D9777B2DB6F5D7F98842B39968FCF51D
SHA-512:	DBC05CC7AD0FBAE65E885086EEF4F1104B764FCC78109C7EA22860836233F8C231ABA45C285F92A54E69A3789188A1AC0D77D208B74693A9ABEC3ECC31721BD6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0"?>.<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">.<cross-domain-policy>.<allow-access-from domain="" to-ports="" />.</cross-domain-policy>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\e29957e4e30c7817cc5b1503fbe4be3e[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	579
Entropy (8bit):	4.96504222018582
Encrypted:	false
SSDEEP:	6:BwNKbu3h837gbwuqm0wYGUyHMlVU2qdcBwu+McCmr7FkSokIV5wwNKbu3h837gb7:yKOaSJk3qC77eFk/KOaS5+oG72xjP
MD5:	7AA008684354C90B8CA58B0E7D27EE7E
SHA1:	BF365A6196C03F2E18AE45A965A967BF01165990
SHA-256:	5BC059C72917475EB2C755E4081547FF64871882A81FCC6EDB5719C34B0BEEB9
SHA-512:	4340D3D2A84AF48C2A8F65ED5851AB648B174ED973B70742458DA5FF4D5DD74F4019A292DFDD581EE320029B0707DE99914E53789EF55F952BF7C9DD81134959
Malicious:	false
Reputation:	low
IE Cache URL:	https://nexus.ensighten.com/citi/na_fsn_prod/code/e29957e4e30c7817cc5b1503fbe4be3e.js?conditionId0=460638
Preview:	Bootstrapper.bindImmediate(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;Bootstrapper.on("click","[data-screen-id\x3d'svc_ao_sign_on'] a",function(){Bootstrapper.ensEvent.trigger("CRS Best Buy Signon Apply Now Click",this)})},-1,-1);.Bootstrapper.bindImmediate(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;Bootstrapper.on("mousedown","form[data-form-id\x3d'sign_on'] button",function(){Bootstrapper.ensEvent.trigger("CRS Sign On Click Best Buy",this)},true)},-1,-1);

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\efa82b6ab4769a7788d6f5de5529f2e1[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	301
Entropy (8bit):	5.186675096977209
Encrypted:	false
SSDEEP:	6:BwNKbu3h837gbwuqm0wYGaTDWEKnBwu+McUMRL+iVe:yKOaScm7wRaP
MD5:	E8FEE926C8D6A3052347C498AF5CC88F
SHA1:	76D69D9ED46E93C0D1092C3D0AD07E406749E2B7
SHA-256:	4857FB59E1D65CBA13C68317AF822333E89CCD98D64CAFF2AB3251684B5A927B
SHA-512:	8CB15DE69F390D059774C32811D147584B79E8D4DBBEC133ED2A9FA8B773749F651C453064A9AE8F57DC3342E63F8A3FFE7D22E98094CA20D203B27D3FD716A6
Malicious:	false
Reputation:	low
IE Cache URL:	https://nexus.ensighten.com/citi/na_fsn_prod/code/efa82b6ab4769a7788d6f5de5529f2e1.js?conditionId0=4825525
Preview:	Bootstrapper.bindImmediate(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;Bootstrapper.on("click",'[data-offer-id\x3d"EE_P_ACQU_02172_1A2L"] a',function(){Bootstrapper.ensEvent.trigger("CRS-Link-Not a Cardholder-Apply Now",this)},true)},-1,-1);

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\fpc[1].swf Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Macromedia Flash data, version 7
Category:	dropped
Size (bytes):	2001
Entropy (8bit):	4.914589593413625
Encrypted:	false
SSDEEP:	48:sYkfJCBynePZiMsy24gKkBh0CMJcM8ZzIGc3c0QhCa1o+Jdl/ZMf:jkfJCByneBiljCkBjXKMfq8l/ZMf
MD5:	1AA138249449D29827E983101964A50F
SHA1:	156B6738C6F88E60760FB37B731161885D22A82A
SHA-256:	6608FB1F5A2560C8E9617D5157D394B63DDCC9C40523BE722E0109909B47A53A
SHA-512:	1C2307A32FAA1864C749494F916976F6CFA131AEA0C2B2930093876E30B683121D6B0847F3EE15350C33D5A42808E278B13A52A004A69012D815B02F2B269007
Malicious:	false
Reputation:	low
Preview:	FWS.....8........C....?......k.6.0123456789abcdef..length.charAt.parseInt.session_id.charCodeAt.String.fromCharCode.xx10.session.SharedObject.getLocal.xx11.LoadVars.xx12.fa.fb.w.fg.xx43.?.split.xx14.&.i.xx15.=.p.toLowerCase.unescape.org.org_id.fx.fy.fap.xx57.clear.url.substr.clear.png.nu.Math.random.round.data.sessionid.xx48.toString.79826d0a7f53437a9fb9b8095b572a39.flush.fc.GET.sendAndLoad....xx57....*..s..................................................................NH................G.......Ng................................R..........G............RG..........=..................R........`b................RG..........P...............NI.................................G...............>....................R<................@<.....A.....A.....A.....A.....A.....A...................".....R........N<....................R<..............<.................NH...........................N.....R<.............................N.....R<...........I....".................N..........=.................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\fpc[2].swf Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Macromedia Flash data, version 7
Category:	dropped
Size (bytes):	2001
Entropy (8bit):	4.914589593413625
Encrypted:	false
SSDEEP:	48:sYkfJCBynePZiMsy24gKkBh0CMJcM8ZzIGc3c0QhCa1o+Jdl/ZMf:jkfJCByneBiljCkBjXKMfq8l/ZMf
MD5:	1AA138249449D29827E983101964A50F
SHA1:	156B6738C6F88E60760FB37B731161885D22A82A
SHA-256:	6608FB1F5A2560C8E9617D5157D394B63DDCC9C40523BE722E0109909B47A53A
SHA-512:	1C2307A32FAA1864C749494F916976F6CFA131AEA0C2B2930093876E30B683121D6B0847F3EE15350C33D5A42808E278B13A52A004A69012D815B02F2B269007
Malicious:	false
Reputation:	low
Preview:	FWS.....8........C....?......k.6.0123456789abcdef..length.charAt.parseInt.session_id.charCodeAt.String.fromCharCode.xx10.session.SharedObject.getLocal.xx11.LoadVars.xx12.fa.fb.w.fg.xx43.?.split.xx14.&.i.xx15.=.p.toLowerCase.unescape.org.org_id.fx.fy.fap.xx57.clear.url.substr.clear.png.nu.Math.random.round.data.sessionid.xx48.toString.79826d0a7f53437a9fb9b8095b572a39.flush.fc.GET.sendAndLoad....xx57....*..s..................................................................NH................G.......Ng................................R..........G............RG..........=..................R........`b................RG..........P...............NI.................................G...............>....................R<................@<.....A.....A.....A.....A.....A.....A...................".....R........N<....................R<..............<.................NH...........................N.....R<.............................N.....R<...........I....".................N..........=.................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\fpc[3].swf Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Macromedia Flash data, version 7
Category:	dropped
Size (bytes):	2001
Entropy (8bit):	4.914589593413625
Encrypted:	false
SSDEEP:	48:sYkfJCBynePZiMsy24gKkBh0CMJcM8ZzIGc3c0QhCa1o+Jdl/ZMf:jkfJCByneBiljCkBjXKMfq8l/ZMf
MD5:	1AA138249449D29827E983101964A50F
SHA1:	156B6738C6F88E60760FB37B731161885D22A82A
SHA-256:	6608FB1F5A2560C8E9617D5157D394B63DDCC9C40523BE722E0109909B47A53A
SHA-512:	1C2307A32FAA1864C749494F916976F6CFA131AEA0C2B2930093876E30B683121D6B0847F3EE15350C33D5A42808E278B13A52A004A69012D815B02F2B269007
Malicious:	false
Reputation:	low
Preview:	FWS.....8........C....?......k.6.0123456789abcdef..length.charAt.parseInt.session_id.charCodeAt.String.fromCharCode.xx10.session.SharedObject.getLocal.xx11.LoadVars.xx12.fa.fb.w.fg.xx43.?.split.xx14.&.i.xx15.=.p.toLowerCase.unescape.org.org_id.fx.fy.fap.xx57.clear.url.substr.clear.png.nu.Math.random.round.data.sessionid.xx48.toString.79826d0a7f53437a9fb9b8095b572a39.flush.fc.GET.sendAndLoad....xx57....*..s..................................................................NH................G.......Ng................................R..........G............RG..........=..................R........`b................RG..........P...............NI.................................G...............>....................R<................@<.....A.....A.....A.....A.....A.....A...................".....R........N<....................R<..............<.................NH...........................N.....R<.............................N.....R<...........I....".................N..........=.................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\fpc[4].swf Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Macromedia Flash data, version 7
Category:	dropped
Size (bytes):	2001
Entropy (8bit):	4.914589593413625
Encrypted:	false
SSDEEP:	48:sYkfJCBynePZiMsy24gKkBh0CMJcM8ZzIGc3c0QhCa1o+Jdl/ZMf:jkfJCByneBiljCkBjXKMfq8l/ZMf
MD5:	1AA138249449D29827E983101964A50F
SHA1:	156B6738C6F88E60760FB37B731161885D22A82A
SHA-256:	6608FB1F5A2560C8E9617D5157D394B63DDCC9C40523BE722E0109909B47A53A
SHA-512:	1C2307A32FAA1864C749494F916976F6CFA131AEA0C2B2930093876E30B683121D6B0847F3EE15350C33D5A42808E278B13A52A004A69012D815B02F2B269007
Malicious:	false
Reputation:	low
Preview:	FWS.....8........C....?......k.6.0123456789abcdef..length.charAt.parseInt.session_id.charCodeAt.String.fromCharCode.xx10.session.SharedObject.getLocal.xx11.LoadVars.xx12.fa.fb.w.fg.xx43.?.split.xx14.&.i.xx15.=.p.toLowerCase.unescape.org.org_id.fx.fy.fap.xx57.clear.url.substr.clear.png.nu.Math.random.round.data.sessionid.xx48.toString.79826d0a7f53437a9fb9b8095b572a39.flush.fc.GET.sendAndLoad....xx57....*..s..................................................................NH................G.......Ng................................R..........G............RG..........=..................R........`b................RG..........P...............NI.................................G...............>....................R<................@<.....A.....A.....A.....A.....A.....A...................".....R........N<....................R<..............<.................NH...........................N.....R<.............................N.....R<...........I....".................N..........=.................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\fpc[5].swf Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Macromedia Flash data, version 7
Category:	dropped
Size (bytes):	2001
Entropy (8bit):	4.914589593413625
Encrypted:	false
SSDEEP:	48:sYkfJCBynePZiMsy24gKkBh0CMJcM8ZzIGc3c0QhCa1o+Jdl/ZMf:jkfJCByneBiljCkBjXKMfq8l/ZMf
MD5:	1AA138249449D29827E983101964A50F
SHA1:	156B6738C6F88E60760FB37B731161885D22A82A
SHA-256:	6608FB1F5A2560C8E9617D5157D394B63DDCC9C40523BE722E0109909B47A53A
SHA-512:	1C2307A32FAA1864C749494F916976F6CFA131AEA0C2B2930093876E30B683121D6B0847F3EE15350C33D5A42808E278B13A52A004A69012D815B02F2B269007
Malicious:	false
Reputation:	low
Preview:	FWS.....8........C....?......k.6.0123456789abcdef..length.charAt.parseInt.session_id.charCodeAt.String.fromCharCode.xx10.session.SharedObject.getLocal.xx11.LoadVars.xx12.fa.fb.w.fg.xx43.?.split.xx14.&.i.xx15.=.p.toLowerCase.unescape.org.org_id.fx.fy.fap.xx57.clear.url.substr.clear.png.nu.Math.random.round.data.sessionid.xx48.toString.79826d0a7f53437a9fb9b8095b572a39.flush.fc.GET.sendAndLoad....xx57....*..s..................................................................NH................G.......Ng................................R..........G............RG..........=..................R........`b................RG..........P...............NI.................................G...............>....................R<................@<.....A.....A.....A.....A.....A.....A...................".....R........N<....................R<..............<.................NH...........................N.....R<.............................N.....R<...........I....".................N..........=.................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\httpErrorPagesScripts[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	12105
Entropy (8bit):	5.451485481468043
Encrypted:	false
SSDEEP:	192:x20iniOciwd1BtvjrG8tAGGGVWnvyJVUrUiki3ayimi5ezLCvJG1gwm3z:xPini/i+1Btvjy815ZVUwiki3ayimi5f
MD5:	9234071287E637F85D721463C488704C
SHA1:	CCA09B1E0FBA38BA29D3972ED8DCECEFDEF8C152
SHA-256:	65CC039890C7CEB927CE40F6F199D74E49B8058C3F8A6E22E8F916AD90EA8649
SHA-512:	87D691987E7A2F69AD8605F35F94241AB7E68AD4F55AD384F1F0D40DC59FFD1432C758123661EE39443D624C881B01DCD228A67AFB8700FE5E66FC794A6C0384
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/httpErrorPagesScripts.js
Preview:	...function isExternalUrlSafeForNavigation(urlStr)..{..var regEx = new RegExp("^(http(s?)\|ftp\|file)://", "i");..return regEx.exec(urlStr);..}..function clickRefresh()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..window.location.replace(location.substring(poundIndex+1));..}..}..function navCancelInit()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..var bElement = document.createElement("A");..bElement.innerText = L_REFRESH_TEXT;..bElement.href = 'javascript:clickRefresh()';..navCancelContainer.appendChild(bElement);..}..else..{..var textNode = document.createTextNode(L_RELOAD_TEXT);..navCancelContainer.appendChild(textNode);..}..}..function getDisplayValue(elem

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\index[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ISO-8859 text, with very long lines, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	71879
Entropy (8bit):	5.182039638912459
Encrypted:	false
SSDEEP:	768:+A/kylbueRnmoof0Mpa2I0fX7UTw/pxIp2CyTksGldPGRGjJ4V9:dJNocAaz0fozGRGjJ4V9
MD5:	EADDFC746323D67B9DB1A19EE6382B1C
SHA1:	BD453C5D14070AAC882F9CF4C271930A3C06588D
SHA-256:	55204BBE04289CCB9D09E6EFD05D9D572B1511CE4DFAEE0BD195CBDDA9B1DF81
SHA-512:	91EEC4F6423B9FC7FA97071CCF6990630D40325676214242AA7314DA00D863BD8D671D902F3750EBC0CC5D8C2AE9C51599F571E3F35A3CB30F5D23FC15C1C61C
Malicious:	false
Reputation:	low
Preview:	.................................................................................................................................................................................................................... ........................................................................................................................................................................................................................................................................<!DOCTYPE html> ..<html lang="en" manifest="/USCRSF/appcache/PLCN_BESTBUY.en_US.appcache">..<head>..<script src="/assets/scripts/global/6c8322c7341eac98645c10e3d1d3c7ae.js"></script>..<script src="https://www.promisejs.org/polyfills/promise-6.1.0.js"></script>..<script>..var tmx_org_id = '530q7tul';..</script>..<script type="text/javascript" src="https://resources.digital-cloud-citi.medallia.com/wdcusciti/2290/onsite/embed.js" async></script>..<script src ="/USCRSF/USCRSGBL/js/injectChat.js"></script>..<script src= "/

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\initiateKoreAIChat.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	8109
Entropy (8bit):	5.290904638894504
Encrypted:	false
SSDEEP:	192:tK1bNXeeZ2Y6mPr4HA9rLxGg/ZW1bqDbZ0oXH:tKVN9Z2Y6mPr19/0g/ZW1bsbmoX
MD5:	CB017B56288037ED48CA8193E80CFE5D
SHA1:	4A2D63B02A69ADC782E7DB69CAF5A4C75BD26F44
SHA-256:	D5F45180EE223ABF6CE5919EAE587808B8C5DDB417AD59561B204F845437065A
SHA-512:	4A9EBE86D961D7694405E22726FDD0BDEF147EB73EF8FDA050204BC93782124E8B3E5EAC4AFC1C3E3C1C126E6458F94BA90EBB4A54F2AF4061A7823C1E7C6BCE
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/js/initiateKoreAIChat.min.js
Preview:	var koreBot=koreBotChat();var detatched=false;var lastErrorCode=null;var initiateLP=false;function getQueryStringValue(a){return decodeURIComponent(window.location.search.replace(new RegExp("^(?:.[&\\?]"+encodeURIComponent(a).replace(/[\.\+\]/g,"\\$&")+"(?:\\=([^&]))?)?.$","i"),"$1"))}$(document).on("click tap",".chatInputBox",function(){$(this).focus()});function koreGenerateUUID(){console.info("generating UUID");var b=new Date().getTime();if(window.performance&&typeof window.performance.now==="function"){b+=performance.now()}var a="xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,function(e){var d=(b+Math.random()*16)%16\|0;b=Math.floor(b/16);return(e=="x"?d:(d&3\|8)).toString(16)});return a}function getJWT(a,g){var c=this;console.log("inside getJWT");var e="";var b=$.Deferred();var f=koreGenerateUUID();var h=USCRS.getSiteId();var d=getQueryStringValue("brandId");$.ajax({url:a,type:"post",data:'{"botInfo": { "chatBot": "COVA","taskBotId": "'+USCRS.getBotId()+'"} }',beforeSend:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\jsrsasign-all-min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	256613
Entropy (8bit):	5.723495058200819
Encrypted:	false
SSDEEP:	3072:o6Oy26UIPY71UO6nR01OHWlQQ18m1vEPqTybQE3xcGipR/oA5L5IaLOG+56iLyCg:ldPY74ti7L5IaLOGxiLyCZ1oeo
MD5:	D0F561A680D3BE8649A4BB60C9C43CB1
SHA1:	ABF538661ED7A5E7297A888368AA34FCF676D2E6
SHA-256:	490CE9F59DFB6D43CA61D47008260E8F1FD236AC79EAB84EF718A39F52DD9A9B
SHA-512:	A0B0A67700FB310D6F8E942B695C7D1F3CBB419ECF3BE295AD521835716EB13047F78A725DDF16C3D086F430D61A6090706463D418ECE6EF2974D8DF82988276
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/js/jsrsasign-all-min.js
Preview:	/. jsrsasign(all) 8.0.6 (2018-02-10) (c) 2010-2017 Kenji Urushima \| kjur.github.com/jsrsasign/license. /../!.Copyright (c) 2011, Yahoo! Inc. All rights reserved..Code licensed under the BSD License:.http://developer.yahoo.com/yui/license.html.version: 2.9.0./.if(YAHOO===undefined){var YAHOO={}}YAHOO.lang={extend:function(g,h,f){if(!h\|\|!g){throw new Error("YAHOO.lang.extend failed, please check that all dependencies are included.")}var d=function(){};d.prototype=h.prototype;g.prototype=new d();g.prototype.constructor=g;g.superclass=h.prototype;if(h.prototype.constructor==Object.prototype.constructor){h.prototype.constructor=h}if(f){var b;for(b in f){g.prototype[b]=f[b]}var e=function(){},c=["toString","valueOf"];try{if(/MSIE/.test(navigator.userAgent)){e=function(j,i){for(b=0;b<c.length;b=b+1){var l=c[b],k=i[l];if(typeof k==="function"&&k!=Object.prototype[l]){j[l]=k}}}}}catch(a){}e(g.prototype,f)}}};../! CryptoJS v3.1.2 core-fix.js. * code.google.com/p/crypto-js. * (c) 2009-2013

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\ls_fp[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	49022
Entropy (8bit):	5.473580672169975
Encrypted:	false
SSDEEP:	384:/D+RJe1tV72gisIiYH83EJRJ6Z5TmKEnCOp1lL0M+BRsmJtlOLb9ruBF0ErhGIwe:i/e1tYhYOp1lL9a3YBWR6rkWp6
MD5:	782FF1C56FDE0F5DD178865AD445155B
SHA1:	6668432FE9CF02F83361BEFE185DDB753D8182F2
SHA-256:	A7E5A75579EDD708D332A977AB8063BA2B625DD6BB7946EC9F7DEE0C5890F948
SHA-512:	2BD7AB93E43DC1B104F37CC82E048F26B2439EB0C76615FD69A6BD781D6E8FE7EC962C3A4D80E2EEBE0AE9F6E3D601C0948B1F00244BF6870B82006E9102C6E7
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_1o=td_1o\|\|{};td_1o.td_2G=function(td_c,td_K){var td_P=[""];var td_k=0;for(var td_O=0;td_O<td_K.length;++td_O){td_P.push(String.fromCharCode(td_c.charCodeAt(td_k)^td_K.charCodeAt(td_O)));td_k++;if(td_k>=td_c.length){td_k=0;.}}return td_P.join("");};td_1o.td_0I=function(td_h){this.td_c=td_h;this.td_d="";this.td_f=function(td_G,td_Y){if(0===this.td_d.length){var td_m=this.td_c.substr(0,32);var td_p="";for(var td_N=32;td_N<td_h.length;.td_N+=2){td_p+=String.fromCharCode(parseInt(td_h.substr(td_N,2),16));}this.td_d=td_1o.td_2G(td_m,td_p);}return this.td_d.substr(td_G,td_Y);};};td_1o.td_1R=function(td_i){if(td_i===null\|\|td_i.length===null){return null;.}var td_E=null;try{var td_f="";var td_l=[];var td_V=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_R=0;for(var td_e=0;td_e<td_i.length;++td_e){if(65+td_R>=126){td_R=0;}var td_S=(td_V+td_i.charCodeAt(td_R++)).slice(-3);.td_l.push(td_S);}var td_B=td_l.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\ls_fp[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	49022
Entropy (8bit):	5.502208113207336
Encrypted:	false
SSDEEP:	384:C5Z51bkds6RHR8V/Zr3CJNqAYKckGkf0dLHhttXPbxerPOBdkJ1zOUbwYPoRV4Uk:5ds6RHR9FILPZI1P2/4UtgPAqhGiB
MD5:	0605C2C5B79E105F4B6BDCA9E6066964
SHA1:	8990C0BF03D3A1878A5B3FEE135F84B97CC82199
SHA-256:	C7077F72AC2E3AA35362C3F6446BDABB86A1A50CE10B1897F1402321E7C65E14
SHA-512:	8F221A1CCD96FE24EF18F45C1CF7B1A0D97417605EA3C981B074AF38C99D10C9F8302F7F8FD000C1B0EC239B98EB7EE27BA836A9A2DF147EDC540FC1DF41F825
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_4I=td_4I\|\|{};td_4I.td_5i=function(td_Y,td_N){var td_u=[""];var td_g=0;for(var td_k=0;td_k<td_N.length;++td_k){td_u.push(String.fromCharCode(td_Y.charCodeAt(td_g)^td_N.charCodeAt(td_k)));td_g++;if(td_g>=td_Y.length){td_g=0;.}}return td_u.join("");};td_4I.td_2W=function(td_m){this.td_c=td_m;this.td_d="";this.td_f=function(td_d,td_Z){if(0===this.td_d.length){var td_W=this.td_c.substr(0,32);var td_p="";for(var td_N=32;td_N<td_m.length;.td_N+=2){td_p+=String.fromCharCode(parseInt(td_m.substr(td_N,2),16));}this.td_d=td_4I.td_5i(td_W,td_p);}return this.td_d.substr(td_d,td_Z);};};td_4I.td_2b=function(td_w){if(td_w===null\|\|td_w.length===null){return null;.}var td_L=null;try{var td_I="";var td_x=[];var td_b=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_l=0;for(var td_s=0;td_s<td_w.length;++td_s){if(65+td_l>=126){td_l=0;}var td_G=(td_b+td_w.charCodeAt(td_l++)).slice(-3);.td_x.push(td_G);}var td_o=td_x.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\ls_fp[3].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	49022
Entropy (8bit):	5.451021997286779
Encrypted:	false
SSDEEP:	384:L0AVDnfgH0qGd9boF8aHOUO+a77ry0fEbROlfVmJdwS08eHzKOUfmF9FG9JCPRwU:e0qs9GOoAgASJwidbt2aq
MD5:	36E3777054F4DCF63694B9A77B8DE9FB
SHA1:	94445DB333DEBAFEB23056F5197024B584ECAF05
SHA-256:	A7FF7E34619A74B1033078CB127171D63D92A2D31E29DC8A9C834F403D420935
SHA-512:	93B76924449FB62E94159A23F5F7649870EE585C613C193F8C8E8D4484FB8A3C1F19DC7BDB68A09D56EDF91B917F16B2A85F959F59603F00D6CCA7C12F5E4A4A
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_2n=td_2n\|\|{};td_2n.td_2r=function(td_B,td_Q){var td_D=[""];var td_V=0;for(var td_n=0;td_n<td_Q.length;++td_n){td_D.push(String.fromCharCode(td_B.charCodeAt(td_V)^td_Q.charCodeAt(td_n)));td_V++;if(td_V>=td_B.length){td_V=0;.}}return td_D.join("");};td_2n.td_5x=function(td_B){this.td_c=td_B;this.td_d="";this.td_f=function(td_r,td_p){if(0===this.td_d.length){var td_A=this.td_c.substr(0,32);var td_q="";for(var td_w=32;td_w<td_B.length;.td_w+=2){td_q+=String.fromCharCode(parseInt(td_B.substr(td_w,2),16));}this.td_d=td_2n.td_2r(td_A,td_q);}return this.td_d.substr(td_r,td_p);};};td_2n.td_0P=function(td_H){if(td_H===null\|\|td_H.length===null){return null;.}var td_u=null;try{var td_Y="";var td_R=[];var td_P=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_o=0;for(var td_A=0;td_A<td_H.length;++td_A){if(65+td_o>=126){td_o=0;}var td_M=(td_P+td_H.charCodeAt(td_o++)).slice(-3);.td_R.push(td_M);}var td_L=td_R.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\picturefill.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	11397
Entropy (8bit):	5.482278145912722
Encrypted:	false
SSDEEP:	192:OgEoyC0qKAEVqWAS2jIwELpjQ2gMAUzkLegvuCIaeVoQFFkqPgrsr:af88opoU1MAUzkLegG37VoQFFgrK
MD5:	C5FA432EA06766601CAC4C886D7B1672
SHA1:	7C91402118AD46A77B826B5F01FB2668945E66B8
SHA-256:	223945B53510064DD2F32EEABD1C7CB173AADE83DB577FFE6DECE694BB289DBA
SHA-512:	010D8E9A2E12E5154FA1CA94F371A015FC558898E4C7DA44BF9C439F3D53B1AD54301FC928080D8F8F19BFEE3988FE945C73FD16F2AAB681FBFD408C313E9091
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.digitalmarketing.citibankonline.com/dmar/js/picturefill.min.js
Preview:	/! Picturefill - v3.0.1 - 2015-09-30. http://scottjehl.github.io/picturefill. * Copyright (c) 2015 https://github.com/scottjehl/picturefill/blob/master/Authors.txt; Licensed MIT. */.!function(a){var b=navigator.userAgent;a.HTMLPictureElement&&/ecko/.test(b)&&b.match(/rv\:(\d+)/)&&RegExp.$1<41&&addEventListener("resize",function(){var b,c=document.createElement("source"),d=function(a){var b,d,e=a.parentNode;"PICTURE"===e.nodeName.toUpperCase()?(b=c.cloneNode(),e.insertBefore(b,e.firstElementChild),setTimeout(function(){e.removeChild(b)})):(!a._pfLastSize\|\|a.offsetWidth>a._pfLastSize)&&(a._pfLastSize=a.offsetWidth,d=a.sizes,a.sizes+=",100vw",setTimeout(function(){a.sizes=d}))},e=function(){var a,b=document.querySelectorAll("picture > img, img[srcset][sizes]");for(a=0;a<b.length;a++)d(b[a])},f=function(){clearTimeout(b),b=setTimeout(e,99)},g=a.matchMedia&&matchMedia("(orientation: landscape)"),h=function(){f(),g&&g.addListener&&g.addListener(f)};return c.srcset="data:image/gif;base64,R

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\promise-6.1.0[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	11066
Entropy (8bit):	4.3064603904936
Encrypted:	false
SSDEEP:	192:abPwgDQwLQBcRlqyfeHq7XeXA6EQxcAqF1a/ZZUmFc6Z7yhtxHWka5BoaQCWZyoy:4LOCXeA6tFc6Z7ytx2ke+4Nc7u
MD5:	9C520D4748B8A968F6E34EE7B00AA925
SHA1:	996EA88F64B3C23B3CA69E0024136109AD83D79B
SHA-256:	50604F7BBB77B04039514824022A0324D797946B965A2C35AA569C48CF4003D0
SHA-512:	D95144770E62745511C23CEF2FEE6D6DC79D939E68C85424A922B447BEF04E1343D5032A6BD2FDC0C899EA25EB494728193D634F208DAB555857C3E3FC37A514
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.promisejs.org/polyfills/promise-6.1.0.js
Preview:	(function e(t, n, r) {. function s(o, u) {. if (!n[o]) {. if (!t[o]) {. var a = typeof require == "function" && require;. if (!u && a) return a(o, !0);. if (i) return i(o, !0);. var f = new Error("Cannot find module '" + o + "'");. throw f.code = "MODULE_NOT_FOUND", f;. }. var l = n[o] = {. exports: {}. };. t[o][0].call(l.exports, function(e) {. var n = t[o][1][e];. return s(n ? n : e);. }, l, l.exports, e, t, n, r);. }. return n[o].exports;. }. var i = typeof require == "function" && require;. for (var o = 0; o < r.length; o++) s(r[o]);. return s;.})({. 1: [ function(require, module, exports) {. var process = module.exports = {};. process.nextTick = function() {. var canSetImmediate = typeof window !== "undefined" && window.setImmediate;. var canPost = typeof window !== "undefined" && window.postMessage && window.addEventListener;. if (canSetImmediate) {. re

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\runner[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	12318
Entropy (8bit):	5.314497117961088
Encrypted:	false
SSDEEP:	192:I7UTGaZMNZU5mFCD+hgnFGzb90VzsiKvWJ9jkyN88:y4AFcZn8F0VzseJQ8
MD5:	892009D341852C0AE2F39AAADC568D6C
SHA1:	B645A3A8CD30464433BAA0ABEE04396D5BDE0525
SHA-256:	E46E226858CB1C57593472A14B545F60F1A7CD2BE103EB0F711917A4F2A01308
SHA-512:	4B7ACD8B3C7E89CFFA18C6BBDF31EF317EAB82CCE271D93133E6DD71EE0B5DEA5E8A4FA51DBCB0D10F00B46E501750AEFA263A66FB2F18F562D8666C3892CE5A
Malicious:	false
Reputation:	low
IE Cache URL:	https://tpc.googlesyndication.com/sodar/sodar2/220/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function p(a){var b="undefined"!=typeof t.Symbol&&u(t.Symbol,"iterator")&&a[u(t.Symbol,"iterator")];return b?b.call(a):{next:m(a)}}var aa="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},v="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var w=ba(this),x="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},y={};function

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\sid_fp[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	56116
Entropy (8bit):	5.4980284664723245
Encrypted:	false
SSDEEP:	768:4snSA0FG2xngtv3gCqzk4nch+jQpcbXH37N:5nShGv4DQpcbXHrN
MD5:	326A82000A0825788FA444B26D69701A
SHA1:	37A96A5F16BFE73E5699652DFEC63178D3CB2F42
SHA-256:	38C9A19476CFBD791EF032DFD3C969AB103AEBD9B5849AEDFF09889C5A632779
SHA-512:	4A59CCF7B0FEDA05BD8B0B9F83CF56E953AE573DF15A23E0C548F7DA09034A9E93085EB8407BFD455CB728464D406B836A22ED8C28B59F9A28B83C050A31D7F4
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_4G=td_4G\|\|{};td_4G.td_4L=function(td_P,td_F){var td_X=[""];var td_T=0;for(var td_U=0;td_U<td_F.length;++td_U){td_X.push(String.fromCharCode(td_P.charCodeAt(td_T)^td_F.charCodeAt(td_U)));td_T++;if(td_T>=td_P.length){td_T=0;.}}return td_X.join("");};td_4G.td_3s=function(td_B){this.td_c=td_B;this.td_d="";this.td_f=function(td_j,td_n){if(0===this.td_d.length){var td_u=this.td_c.substr(0,32);var td_c="";for(var td_C=32;td_C<td_B.length;.td_C+=2){td_c+=String.fromCharCode(parseInt(td_B.substr(td_C,2),16));}this.td_d=td_4G.td_4L(td_u,td_c);}return this.td_d.substr(td_j,td_n);};};td_4G.td_0Z=function(td_u){if(td_u===null\|\|td_u.length===null){return null;.}var td_E=null;try{var td_g="";var td_A=[];var td_l=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_h=0;for(var td_x=0;td_x<td_u.length;++td_x){if(65+td_h>=126){td_h=0;}var td_C=(td_l+td_u.charCodeAt(td_h++)).slice(-3);.td_A.push(td_C);}var td_F=td_A.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\sid_fp[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	56116
Entropy (8bit):	5.487231180956244
Encrypted:	false
SSDEEP:	768:xhO8konoc40fhtCLPNrllEWHprkScn1CJx6:xhZ8c4rPNcS5kScn1Cu
MD5:	484E6359F1680E86CBBE7521985A6457
SHA1:	7C5C017CB9B45D427905C92B04B088D8C7544CC8
SHA-256:	43FE8C0437DF2EBDC26FA7ADC3D5E0E3D798A5FD2AB3C6DE4994B4DDC2D19C0A
SHA-512:	E2EE2FD58934060B8820C571A5835353EA1816ADAB1CF658F76D7DD3ABAACEC9CA845D3B010AD267E07D1052D9E335C718BF5D81EB11B9E82F7F3F1777304F18
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_2P=td_2P\|\|{};td_2P.td_2I=function(td_F,td_x){var td_A=[""];var td_o=0;for(var td_Q=0;td_Q<td_x.length;++td_Q){td_A.push(String.fromCharCode(td_F.charCodeAt(td_o)^td_x.charCodeAt(td_Q)));td_o++;if(td_o>=td_F.length){td_o=0;.}}return td_A.join("");};td_2P.td_3F=function(td_w){this.td_c=td_w;this.td_d="";this.td_f=function(td_K,td_j){if(0===this.td_d.length){var td_u=this.td_c.substr(0,32);var td_N="";for(var td_n=32;td_n<td_w.length;.td_n+=2){td_N+=String.fromCharCode(parseInt(td_w.substr(td_n,2),16));}this.td_d=td_2P.td_2I(td_u,td_N);}return this.td_d.substr(td_K,td_j);};};td_2P.td_0h=function(td_Z){if(td_Z===null\|\|td_Z.length===null){return null;.}var td_u=null;try{var td_h="";var td_W=[];var td_t=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_Q=0;for(var td_D=0;td_D<td_Z.length;++td_D){if(65+td_Q>=126){td_Q=0;}var td_G=(td_t+td_Z.charCodeAt(td_Q++)).slice(-3);.td_W.push(td_G);}var td_K=td_W.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\sid_fp[3].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	56116
Entropy (8bit):	5.468790894941792
Encrypted:	false
SSDEEP:	384:3XRM8INCi8Jw+c+zZB9y32eOKonSS/o373u2ArJFsVN1SDSOmcLVFU9RjWxxy1Pp:xM8Ir3JV4o3q2uXsVNgIN+Q9i3tGA+QA
MD5:	6B2F7A755C8C8A846A34B9F3856569E9
SHA1:	15B50D0AE0983C0C0141E42615429ABBB2A9224D
SHA-256:	95C28570418DC8D083A92F074D44C346C94CB1847D56A0609A7546F65502082D
SHA-512:	77609B5C38A3196C54774CFC7259BB9D7402D56172F5A2A3DD85DED6AD8874A872E8544FF4BBD514DBC9010F1C1C4305977DC0C01C9EE718E1C24AA5DC8C4CED
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_0P=td_0P\|\|{};td_0P.td_5M=function(td_a,td_X){var td_W=[""];var td_H=0;for(var td_P=0;td_P<td_X.length;++td_P){td_W.push(String.fromCharCode(td_a.charCodeAt(td_H)^td_X.charCodeAt(td_P)));td_H++;if(td_H>=td_a.length){td_H=0;.}}return td_W.join("");};td_0P.td_2s=function(td_s){this.td_c=td_s;this.td_d="";this.td_f=function(td_i,td_C){if(0===this.td_d.length){var td_Q=this.td_c.substr(0,32);var td_q="";for(var td_p=32;td_p<td_s.length;.td_p+=2){td_q+=String.fromCharCode(parseInt(td_s.substr(td_p,2),16));}this.td_d=td_0P.td_5M(td_Q,td_q);}return this.td_d.substr(td_i,td_C);};};td_0P.td_4H=function(td_Y){if(td_Y===null\|\|td_Y.length===null){return null;.}var td_q=null;try{var td_a="";var td_M=[];var td_P=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_b=0;for(var td_d=0;td_d<td_Y.length;++td_d){if(65+td_b>=126){td_b=0;}var td_S=(td_P+td_Y.charCodeAt(td_b++)).slice(-3);.td_M.push(td_S);}var td_W=td_M.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\stylesheet[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	398
Entropy (8bit):	5.026462974374962
Encrypted:	false
SSDEEP:	12:jFitEyDdhy5zJmcHZecHvYcDpV7bO6Z4i:5sEyDzy5VVjXDpFOY4i
MD5:	A5F6EBED4582B7A997C76BB0778B1B7D
SHA1:	EDA316FEAF9030D048C8B680564AB701DB30D411
SHA-256:	33980DCA3E517A6E34E10E97D7AC4AE5F782B85DC2D01697E2B9576BF01DCB2E
SHA-512:	6B1A431DE881906142008F48E8CA65BF05C3F2DB1DD69A48BDCB22016B269B48564F09B34C088E0240FB89F6EDB61F4FE99D34BBDB9A89A3E35ED8D0FAC02111
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/fonts/bestbuy_human/medium/stylesheet.css
Preview:	@font-face {. font-family: 'Bestbuy Human';. src: url('HumanBBY-65Medium-Web.eot');. src: url('HumanBBY-65Medium-Web.eot?#iefix') format('embedded-opentype'),. url('HumanBBY-65Medium-Web.woff2') format('woff2'),. url('HumanBBY-65Medium-Web.woff') format('woff'),. url('HumanBBY-65Medium-Web.svg#bestbuy_humanmedium') format('svg');. font-weight: 500;. font-style: normal;.}..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\stylesheet[2].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	402
Entropy (8bit):	4.995841654911964
Encrypted:	false
SSDEEP:	6:0IFF8ptEizmudhizmY9OQVJIl/ffae/ffKN2//4VQMYVQ6ZRWHM+t:jFitEJudhJYzJm/qe/aY/4VQNO6ZRoMG
MD5:	8B04A694485BB35EA1A43988455720D1
SHA1:	8116CE0210C1F95EDAA1D4260FB71692170D45B4
SHA-256:	0E803CFC30AAEDDB1B0FB8C0FF07B9BE63B2ED36E03BB7464787F49297665B58
SHA-512:	32B0A086886A6111A6C9A91DD3C945ADF345E4FBB083C788B21B8B05314A97ACCFCD422EABE297A215ABC9D519F86F45103C0EC682609FD5DB7AD7C658952EFF
Malicious:	false
Reputation:	low
IE Cache URL:	https://citiretailservices.citibankonline.com/USCRSF/USCRSGBL/fonts/bestbuy_human/regular/stylesheet.css
Preview:	@font-face {. font-family: 'Bestbuy Human';. src: url('HumanBBY-55Regular-Web.eot');. src: url('HumanBBY-55Regular-Web.eot?#iefix') format('embedded-opentype'),. url('HumanBBY-55Regular-Web.woff2') format('woff2'),. url('HumanBBY-55Regular-Web.woff') format('woff'),. url('HumanBBY-55Regular-Web.svg#bestbuy_humanregular') format('svg');. font-weight: 400;. font-style: normal;.}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\top_fp[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	48821
Entropy (8bit):	5.470572012608467
Encrypted:	false
SSDEEP:	384:/XuRQCWGzrJOLb9ruBF0ErhGIwboUCxtsNTWjxZ5TmKEnCOp1lL0Mu/0vM36rkWm:4zrVYBWvOp1lL9A6rkWSLo/e1tYw
MD5:	04A7BDAF3EB39907A81CF2399189C398
SHA1:	3D4C9AC87B94A532076C8E1F8E199E277D02CB02
SHA-256:	66E4279AE796EDF2EAE90738FD0B20FC46FD7FDCA8DE002A63F5EC2E6837D5E4
SHA-512:	2AEEC0F83AFA1343D7F995761043CE64BC2BE20D9494DDA15496BBA42DFECC779A1E4669FC4D9BF07EA4FFC28CC88B4E6B8DFED242A0A787EF6EB3A00B2B9325
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_1o=td_1o\|\|{};td_1o.td_2G=function(td_c,td_K){var td_P=[""];var td_k=0;for(var td_O=0;td_O<td_K.length;++td_O){td_P.push(String.fromCharCode(td_c.charCodeAt(td_k)^td_K.charCodeAt(td_O)));td_k++;if(td_k>=td_c.length){td_k=0;.}}return td_P.join("");};td_1o.td_0I=function(td_h){this.td_c=td_h;this.td_d="";this.td_f=function(td_G,td_Y){if(0===this.td_d.length){var td_m=this.td_c.substr(0,32);var td_p="";for(var td_N=32;td_N<td_h.length;.td_N+=2){td_p+=String.fromCharCode(parseInt(td_h.substr(td_N,2),16));}this.td_d=td_1o.td_2G(td_m,td_p);}return this.td_d.substr(td_G,td_Y);};};td_1o.td_1R=function(td_i){if(td_i===null\|\|td_i.length===null){return null;.}var td_E=null;try{var td_f="";var td_l=[];var td_V=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_R=0;for(var td_e=0;td_e<td_i.length;++td_e){if(65+td_R>=126){td_R=0;}var td_S=(td_V+td_i.charCodeAt(td_R++)).slice(-3);.td_l.push(td_S);}var td_B=td_l.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\top_fp[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	48821
Entropy (8bit):	5.496702718797941
Encrypted:	false
SSDEEP:	384:soRV4UtQHdFWPi0pzz+d/Zr3CJNqAYKckGkf0dLq5Z51bkds6RHR8bVerPOBdkJf:v/4UtgPA1FILRds6RHRoI1PKZiB
MD5:	F000839AB079BA936ED884E284BCECB1
SHA1:	729A5F936C7727CFD52ACE5D1D517840C3991002
SHA-256:	A4B416C4D55D6E51550975EECAFF61BFB460E5E0CCB21B4083B136D0AD343771
SHA-512:	AEC6ACD7DC17D1B2AB230C8F6A5BE1AC2ACAF403B38A2565A580478D394638A19A4ED18C319CA981050153ED554CAA7E33FC5058784FF47D9FB28D284DC8256B
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_4I=td_4I\|\|{};td_4I.td_5i=function(td_Y,td_N){var td_u=[""];var td_g=0;for(var td_k=0;td_k<td_N.length;++td_k){td_u.push(String.fromCharCode(td_Y.charCodeAt(td_g)^td_N.charCodeAt(td_k)));td_g++;if(td_g>=td_Y.length){td_g=0;.}}return td_u.join("");};td_4I.td_2W=function(td_m){this.td_c=td_m;this.td_d="";this.td_f=function(td_d,td_Z){if(0===this.td_d.length){var td_W=this.td_c.substr(0,32);var td_p="";for(var td_N=32;td_N<td_m.length;.td_N+=2){td_p+=String.fromCharCode(parseInt(td_m.substr(td_N,2),16));}this.td_d=td_4I.td_5i(td_W,td_p);}return this.td_d.substr(td_d,td_Z);};};td_4I.td_2b=function(td_w){if(td_w===null\|\|td_w.length===null){return null;.}var td_L=null;try{var td_I="";var td_x=[];var td_b=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_l=0;for(var td_s=0;td_s<td_w.length;++td_s){if(65+td_l>=126){td_l=0;}var td_G=(td_b+td_w.charCodeAt(td_l++)).slice(-3);.td_x.push(td_G);}var td_o=td_x.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\top_fp[3].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	48821
Entropy (8bit):	5.441997547647145
Encrypted:	false
SSDEEP:	384:0PRwdbtjvUiKDZ0FOboF8aH3pjnf+RRx0AVDnfgH0qGdroYHPlwS08eHzKOUfmFw:Cidbt2BGlr0qsroSJcLgF
MD5:	560A08FB57D06D73AE297D8474B7C325
SHA1:	B3CFF7869B78E9949FFAB1B9EA4BDA791B0D0DC2
SHA-256:	1E67DAED055C184827F43041FEDD8DC5214D73B43A5386EEBDA5EE8CF10218C4
SHA-512:	558CC6CC7DE7AFECCD6D42459183CE05A6EDCEAC8811B9E7E826302A0C21A7C2F934BEDE1F06743DF20DB63485391C2036627EF025C8D9C7925CC7B363534DB4
Malicious:	false
Reputation:	low
Preview:	<html lang="en"><body><script type="text/javascript">var td_2n=td_2n\|\|{};td_2n.td_2r=function(td_B,td_Q){var td_D=[""];var td_V=0;for(var td_n=0;td_n<td_Q.length;++td_n){td_D.push(String.fromCharCode(td_B.charCodeAt(td_V)^td_Q.charCodeAt(td_n)));td_V++;if(td_V>=td_B.length){td_V=0;.}}return td_D.join("");};td_2n.td_5x=function(td_B){this.td_c=td_B;this.td_d="";this.td_f=function(td_r,td_p){if(0===this.td_d.length){var td_A=this.td_c.substr(0,32);var td_q="";for(var td_w=32;td_w<td_B.length;.td_w+=2){td_q+=String.fromCharCode(parseInt(td_B.substr(td_w,2),16));}this.td_d=td_2n.td_2r(td_A,td_q);}return this.td_d.substr(td_r,td_p);};};td_2n.td_0P=function(td_H){if(td_H===null\|\|td_H.length===null){return null;.}var td_u=null;try{var td_Y="";var td_R=[];var td_P=String.fromCharCode(48)+String.fromCharCode(48)+String.fromCharCode(48);var td_o=0;for(var td_A=0;td_A<td_H.length;++td_A){if(65+td_o>=126){td_o=0;}var td_M=(td_P+td_H.charCodeAt(td_o++)).slice(-3);.td_R.push(td_M);}var td_L=td_R.joi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\zones[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	2684
Entropy (8bit):	4.899567427673578
Encrypted:	false
SSDEEP:	24:xo3FohqOjtH4uoMF0E4+XBRpVuoNFEWyFA00O4uoKF2IS+nDiJ/GtH4memOU:iF6HLFxxbFo5FpvDe+uU
MD5:	2809CFA19090B7AEF30A75E4E5318D83
SHA1:	16918C3D83A28C4F5F1B348CD1F4F0A57A433044
SHA-256:	FE305F2BD46F2766B7B2D994CF82B3DAB246554C469FF38B3CBD58E926A51B10
SHA-512:	2B56499268197842B8D7A4060EF34CF52D4EE18943E7D21241C0862D25576A5344BCD9E6252147CE35F37226C0112201BE13071AAD6FDE5707D76259271ABC03
Malicious:	false
Reputation:	low
IE Cache URL:	https://accdn.lpsnmedia.net/api/account/58975020/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB
Preview:	lpZonesStaticCB([{"id":487197012,"createdDate":"2016-01-13 09:37:37","modifiedDate":"2016-01-13 09:37:37","name":"Left Overlay","deleted":false,"zoneType":1,"mainZone":false,"capping":0,"mapping":[{"engagementSubType":14},{"engagementSubType":25},{"engagementSubType":16},{"engagementSubType":23},{"engagementSubType":15},{"engagementSubType":21},{"engagementSubType":20}],"isDeleted":false},{"id":487197112,"createdDate":"2016-01-13 09:37:37","modifiedDate":"2016-01-13 09:37:37","name":"Proactive Overlay","deleted":false,"zoneType":1,"mainZone":true,"capping":0,"mapping":[{"engagementSubType":3},{"engagementSubType":13},{"engagementSubType":12},{"engagementSubType":8},{"engagementSubType":2},{"engagementSubType":4},{"engagementSubType":11},{"engagementSubType":6},{"engagementSubType":5},{"engagementSubType":9},{"engagementSubType":7},{"engagementSubType":1},{"engagementSubType":10},{"engagementSubType":0}],"isDeleted":false},{"id":487197212,"createdDate":"2016-01-13 09:37:37","modifiedDat

C:\Users\user\AppData\Local\Temp\~DF4B9D5CBE966F349A.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	292094
Entropy (8bit):	2.698090588332067
Encrypted:	false
SSDEEP:	1536:IJzsysIRbGJzlys/RbXpnQKg0xnppnQKg0xn:IJzsysIRbGJzlys/Rb
MD5:	C635060690C19E0912F8D438C6D6F2DB
SHA1:	D21EDEEE93AC9A94A76625609CDE8DCAE8A9EEDF
SHA-256:	11E9E98A2735A3C8A8EE842B7C9ADEFEDE417C159691086ACFC500A4512ECD15
SHA-512:	B21897DDBB05559A5E648213260716937657A8694457715B239EC3B8970101AC3C2EC654D1D7A0376B3B88AC903EDB9B517CB418B8F9EDBC2D8C27A896DDAF7B
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DF6C6D7510B656CB6F.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	29745
Entropy (8bit):	0.31593780696980905
Encrypted:	false
SSDEEP:	24:c9lLh9lLh9lIn9lIn9lRx/9lRJ9lTb9lTb9lSSU9lSSU9laAa/9laAg09laAC9lf:kBqoxxJhHWSVSEabgkQ2y
MD5:	B4AD475C74E05F6CA22BBD067BED0288
SHA1:	325C76FD075FCEB0AB6EA8B5FC1E6192B8FA765A
SHA-256:	8C6D8973E4DA93314696A34D2C17834F6ADC158751660A78C4E7835BE6FC4B8A
SHA-512:	3B231DDFCEDD672FBB94644148544C7EFAFF869943789BC9EED4028AAF99D2C342418782BEC71823099C056AC41D00021D1F4416DCB547E1116C71532D39453F
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFD81F58F3F86AF88D.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	13077
Entropy (8bit):	0.5114342228265079
Encrypted:	false
SSDEEP:	24:c9lLh9lLh9lIn9lIn9loRS9loRC9lWRgi3piQ3EjEuiZQZQQZ3:kBqoI7d0
MD5:	716F66D3BADBB3262C22E7CB4B97D2B7
SHA1:	1AE681050879F3084D877EEABDDE64996261AA41
SHA-256:	E114371E9D4515351B8D69B5CE8AC9895EFCC43FC662E88E29D30D7E46161743
SHA-512:	5F49C2B9F463C8CA275E3BFD71C4DF8DDB33226D0E4F72643C9DC808050C9248335EC27A511D9367032C753FD9E4743100A587E61FF886EB1841A2C4B60EF0CC
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\8FDCKBK2\aa.online-metrix.net\fpc.swf\session.sxx Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	76
Entropy (8bit):	4.43192496983521
Encrypted:	false
SSDEEP:	3:AlS71iXzWonl6xzdUsaYtHdl5n:AmoDWongaYRP5n
MD5:	3D40298E3F68A1656731B762B8DED70A
SHA1:	C7FDBC1BBF1F665D7EC7A1CD48E74F2A90A57D4F
SHA-256:	B7E83E2F28936CD53CA23B4D11A18F8DC09DCC2B0984BA65ABDC96AE1005A6AF
SHA-512:	5CDD537D87F504049FA55FC7EBD7E4FD6B5F5BF8109FB6AAB5E55CD784A03132CCEA943C13BDF090ECFE30901EA7C6B8BADB666B192C6DC9D7E7C400A04B28F0
Malicious:	false
Reputation:	low
Preview:	.....FTCSO........session......sessionid.. eb4e3817f2c6490ba6b1c565929c8d6f.

C:\Users\user\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#aa.online-metrix.net\settings.sxx Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	3167
Entropy (8bit):	4.871020283503
Encrypted:	false
SSDEEP:	48:89t9d/dw8dwU3dwUDdwUakdwUaDdwUaIdwUaYKdwUDhYKdwUdYKdwU6YKdwUxYKb:8BPbXKldYDyYGY9YCY2YrYqYhYp
MD5:	1687964355D79CAEE9FA8EB0C67E7E5E
SHA1:	CC683820E57A83182E2AF21D1D99ADCD1F10F2A6
SHA-256:	355A7BBD12017493FBA23F1F14CD21017182242375B3304D310B6D5CAB1F4A31
SHA-512:	3D8E2DE7795198418384AD58DAC3FBCDC407E380660FAC91D2CCB2C3909A997DBF50840AB1CACDA605BC162BFB4BB97D708C451EF3A2F4D47AA713142AF549EA
Malicious:	false
Reputation:	low
Preview:	.....=TCSO........aa.online-metrix.net/settings......hstsEnabled........UTCSO........aa.online-metrix.net/settings......hstsEnabled.....hstsMaxAge...31536000......jTCSO........aa.online-metrix.net/settings......hstsEnabled.....hstsMaxAge...31536000...hstsIncSubDomain.........TCSO........aa.online-metrix.net/settings......hstsEnabled.....hstsMaxAge...31536000...hstsIncSubDomain.....hstsStartTime...317360.......TCSO........aa.online-metrix.net/settings......hstsEnabled.....hstsMaxAge...31536000...hstsIncSubDomain.....hstsStartTime...317360...allow.........TCSO........aa.online-metrix.net/settings......hstsEnabled.....hstsMaxAge...31536000...hstsIncSubDomain.....hstsStartTime...317360...allow.....always.........TCSO........aa.online-metrix.net/settings......hstsEnabled.....hstsMaxAge...31536000...hstsIncSubDomain.....hstsStartTime...317360...allow.....always.....allowsecure.........TCSO........aa.online-metrix.net/settings......hstsEnabled.....hstsMaxAge...31536000...hstsIncSubDomain.....

C:\Users\user\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#content22.citibankonline.com\settings.sxx Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	5047
Entropy (8bit):	4.883709670226102
Encrypted:	false
SSDEEP:	96:YXTvi5r+3+o+a+l+7+1+m+r+H+Wp+O+V+Yk+b+V+e+M:YXTvi5r+3+o+a+l+7+1+m+r+H+Wp+O+4
MD5:	A20F0FF4122808AA06DF1310CDE8EB82
SHA1:	2F4444FC3F558093D895040A077B58DE82F178E4
SHA-256:	C2AB011A22BA96801EFC0F356BDD31C5E4B56D10A4670EF662728E75CD3ABBF5
SHA-512:	F9DC033C5263CF42C3E8083400FD1AAAB62E06EA2009B858F4D569EE9CCA62FCCFC83EF4536A717F843F8D961F3E362AC242665C66725D422755855059D613BD
Malicious:	false
Reputation:	low
Preview:	.....ETCSO.......%content22.citibankonline.com/settings......hstsEnabled........]TCSO.......%content22.citibankonline.com/settings......hstsEnabled.....hstsMaxAge...31536000......rTCSO.......%content22.citibankonline.com/settings......hstsEnabled.....hstsMaxAge...31536000...hstsIncSubDomain.........TCSO.......%content22.citibankonline.com/settings......hstsEnabled.....hstsMaxAge...31536000...hstsIncSubDomain.....hstsStartTime...323596.......TCSO.......%content22.citibankonline.com/settings......hstsEnabled.....hstsMaxAge...31536000...hstsIncSubDomain.....hstsStartTime...323596...allow.........TCSO.......%content22.citibankonline.com/settings......hstsEnabled.....hstsMaxAge...31536000...hstsIncSubDomain.....hstsStartTime...323596...allow.....always.........TCSO.......%content22.citibankonline.com/settings......hstsEnabled.....hstsMaxAge...31536000...hstsIncSubDomain.....hstsStartTime...323596...allow.....always.....allowsecure.........TCSO.......%content22.citibankonline.com/settings...

C:\Users\user\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	28213
Entropy (8bit):	5.108271253531246
Encrypted:	false
SSDEEP:	384:2HS0R/V+V57mTmfmwmWm4m8mlmZmkmLmRmSmrmhmpm+m4mHmgmXmQmZm+mE:WsD
MD5:	DD34951E32C0910EB4CA3F248FC58D8C
SHA1:	4E5796559BF64939BBC9E8DFF6C8A824847AD6FD
SHA-256:	7B2B11EC46535C63D044D60D30F2D30DEC480102F455D12D0FA7C7217E55046B
SHA-512:	2B586CBA248259B92C2EA652230D03F91DD08BB531A5DAB42DC198E971A3F4476E65D5D1E8852E2430C79C3A88C0B6527B7A5D72F79D6471AA7FC48C383E1E63
Malicious:	false
Reputation:	low
Preview:	.....(TCSO........settings......gain.@I............<TCSO........settings......gain.@I.........echosuppression........STCSO........settings......gain.@I.........echosuppression.....defaultmicrophone.........fTCSO........settings......gain.@I.........echosuppression.....defaultmicrophone......defaultcamera.........xTCSO........settings......gain.@I.........echosuppression.....defaultmicrophone......defaultcamera......defaultaudio..........TCSO........settings......gain.@I.........echosuppression.....defaultmicrophone......defaultcamera......defaultaudio......defaultklimit.@Y.............TCSO........settings......gain.@I.........echosuppression.....defaultmicrophone......defaultcamera......defaultaudio......defaultklimit.@Y.........defaultalways.........TCSO........settings......gain.@I.........echosuppression.....defaultmicrophone......defaultcamera......defaultaudio......defaultklimit.@Y.........defaultalways.....windowlessDisable.........TCSO........settings......gain.@I.........echosu

C:\Users\user\AppData\Roaming\Macromedia\Flash Player\openssl\cache\RevocationCacheFile.dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	1024
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0F343B0931126A20F133D67C2B018A3B
SHA1:	60CACBF3D72E1E7834203DA608037B1BF83B40E8
SHA-256:	5F70BF18A086007016E948B04AED3B82103A36BEA41755B6CDDFAF10ACE3C6EF
SHA-512:	8EFB4F73C5655351C444EB109230C556D39E2C7624E9C11ABC9E3FB4B9B9254218CC5085B454A9698D085CFA92198491F07A723BE4574ADC70617B73EB0B6461
Malicious:	false
Reputation:	low
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\83B9DG69WY58BQ3228LO.temp Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	5149
Entropy (8bit):	3.1729235368960857
Encrypted:	false
SSDEEP:	48:vuddiEPiIGC9GrIouAsASFOsdiEPiIGh683GrIouAczO3diEPiIGx9GrIouAV1H:WHPiY9SOAJ+Pih3SOAHPi/9SOAf
MD5:	C3F077E67DEB668EAE142494FEAC159A
SHA1:	36A18F5ED8491B8B9A8CB7C1C24A7B675BDDCBB3
SHA-256:	08CBDABF165AA8F34B133F2985236DE2B299D20CE5FF636C15283055972CA565
SHA-512:	EF736AD94B51C77D83D672147CE27B671422735C9CD930E44708A000219102E8455EBD3335927015E2CC3B48845EFFC5D286D4BA0C09515103B6EA91E000DA79
Malicious:	false
Reputation:	low
Preview:	...................................FL..................F.@.. .....@.>.....Aj......?.c................................P.O. .:i.....+00.../C:\.....................1.....>Q.;..PROGRA~1..t......L.>Qs<....E...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....l.1......L.J..INTERN~1..T......L.,R................................i.n.t.e.r.n.e.t. .e.x.p.l.o.r.e.r.....f.2......L.9 .iexplore.exe..J......L.J,R.~.....R..........x.............i.e.x.p.l.o.r.e...e.x.e.......^...............-.......]............).......C:\Program Files\internet explorer\iexplore.exe....-.p.r.i.v.a.t.e...C.:.\.W.i.n.d.o.w.s.\.S.Y.S.T.E.M.3.2.\.I.E.F.R.A.M.E...d.l.l.........%SystemRoot%\SYSTEM32\IEFRAME.dll...................................................................................................................................................................................................................................%.S.y.s.t.e.m.R.o.o.t.%.\.S.Y.S.T.E.M.3.2.\.I

Static File Info

No static file info

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
01/12/21-16:56:07.989940	TCP	2657	WEB-MISC SSLv2 Client_Hello with pad Challenge Length overflow attempt	49774	443	192.168.2.4	91.235.134.131
01/12/21-16:56:07.990591	TCP	2657	WEB-MISC SSLv2 Client_Hello with pad Challenge Length overflow attempt	49773	443	192.168.2.4	91.235.134.131
01/12/21-16:56:37.441546	TCP	2657	WEB-MISC SSLv2 Client_Hello with pad Challenge Length overflow attempt	49839	443	192.168.2.4	91.235.134.131
01/12/21-16:56:37.442362	TCP	2657	WEB-MISC SSLv2 Client_Hello with pad Challenge Length overflow attempt	49838	443	192.168.2.4	91.235.134.131
01/12/21-16:56:39.393782	TCP	2657	WEB-MISC SSLv2 Client_Hello with pad Challenge Length overflow attempt	49850	443	192.168.2.4	91.235.134.131
01/12/21-16:56:39.444393	TCP	2657	WEB-MISC SSLv2 Client_Hello with pad Challenge Length overflow attempt	49851	443	192.168.2.4	91.235.134.131
01/12/21-16:57:12.607053	TCP	2657	WEB-MISC SSLv2 Client_Hello with pad Challenge Length overflow attempt	49909	443	192.168.2.4	91.235.134.131
01/12/21-16:57:12.607723	TCP	2657	WEB-MISC SSLv2 Client_Hello with pad Challenge Length overflow attempt	49910	443	192.168.2.4	91.235.134.131
01/12/21-16:57:16.861397	TCP	2657	WEB-MISC SSLv2 Client_Hello with pad Challenge Length overflow attempt	49924	443	192.168.2.4	91.235.134.131
01/12/21-16:57:16.861592	TCP	2657	WEB-MISC SSLv2 Client_Hello with pad Challenge Length overflow attempt	49925	443	192.168.2.4	91.235.134.131
01/12/21-16:57:18.775758	TCP	2657	WEB-MISC SSLv2 Client_Hello with pad Challenge Length overflow attempt	49939	443	192.168.2.4	91.235.134.131
01/12/21-16:57:18.776063	TCP	2657	WEB-MISC SSLv2 Client_Hello with pad Challenge Length overflow attempt	49940	443	192.168.2.4	91.235.134.131
01/12/21-16:57:25.360704	TCP	2657	WEB-MISC SSLv2 Client_Hello with pad Challenge Length overflow attempt	49960	443	192.168.2.4	91.235.134.131
01/12/21-16:57:25.361278	TCP	2657	WEB-MISC SSLv2 Client_Hello with pad Challenge Length overflow attempt	49961	443	192.168.2.4	91.235.134.131

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 12, 2021 16:55:59.357944965 CET	49741	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:55:59.359080076 CET	49742	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:55:59.483257055 CET	443	49741	63.148.46.109	192.168.2.4
Jan 12, 2021 16:55:59.483547926 CET	49741	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:55:59.484508991 CET	443	49742	63.148.46.109	192.168.2.4
Jan 12, 2021 16:55:59.484646082 CET	49742	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:55:59.493642092 CET	49741	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:55:59.494060993 CET	49742	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:55:59.617513895 CET	443	49741	63.148.46.109	192.168.2.4
Jan 12, 2021 16:55:59.617954016 CET	443	49742	63.148.46.109	192.168.2.4
Jan 12, 2021 16:55:59.618267059 CET	443	49741	63.148.46.109	192.168.2.4
Jan 12, 2021 16:55:59.618307114 CET	443	49741	63.148.46.109	192.168.2.4
Jan 12, 2021 16:55:59.618344069 CET	443	49741	63.148.46.109	192.168.2.4
Jan 12, 2021 16:55:59.618371010 CET	49741	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:55:59.618424892 CET	49741	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:55:59.618887901 CET	443	49742	63.148.46.109	192.168.2.4
Jan 12, 2021 16:55:59.618930101 CET	443	49742	63.148.46.109	192.168.2.4
Jan 12, 2021 16:55:59.618968010 CET	443	49742	63.148.46.109	192.168.2.4
Jan 12, 2021 16:55:59.618973017 CET	49742	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:55:59.619016886 CET	49742	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:55:59.619064093 CET	49742	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:55:59.742141008 CET	443	49741	63.148.46.109	192.168.2.4
Jan 12, 2021 16:55:59.742371082 CET	49741	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:55:59.742820978 CET	443	49742	63.148.46.109	192.168.2.4
Jan 12, 2021 16:55:59.742909908 CET	49742	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:55:59.771109104 CET	49742	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:55:59.771151066 CET	49741	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:55:59.776926994 CET	49742	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:55:59.894880056 CET	443	49741	63.148.46.109	192.168.2.4
Jan 12, 2021 16:55:59.895286083 CET	443	49742	63.148.46.109	192.168.2.4
Jan 12, 2021 16:55:59.895885944 CET	443	49741	63.148.46.109	192.168.2.4
Jan 12, 2021 16:55:59.896034002 CET	49741	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:55:59.896209002 CET	443	49742	63.148.46.109	192.168.2.4
Jan 12, 2021 16:55:59.896325111 CET	49742	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:55:59.901400089 CET	443	49742	63.148.46.109	192.168.2.4
Jan 12, 2021 16:55:59.901484013 CET	49742	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:55:59.914927959 CET	443	49742	63.148.46.109	192.168.2.4
Jan 12, 2021 16:55:59.914974928 CET	443	49742	63.148.46.109	192.168.2.4
Jan 12, 2021 16:55:59.915062904 CET	49742	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:55:59.915132999 CET	49742	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:56:00.020421028 CET	443	49741	63.148.46.109	192.168.2.4
Jan 12, 2021 16:56:00.020510912 CET	49741	443	192.168.2.4	63.148.46.109
Jan 12, 2021 16:56:00.973476887 CET	49746	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:00.974423885 CET	49747	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:00.977008104 CET	49748	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:00.977787971 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.019133091 CET	443	49746	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.019227982 CET	49746	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.019494057 CET	443	49748	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:01.019572020 CET	49748	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.020247936 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:01.020325899 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.020442963 CET	443	49747	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.020513058 CET	49747	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.035896063 CET	49747	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.036916018 CET	49746	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.054671049 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.055444002 CET	49748	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.082221985 CET	443	49747	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.082817078 CET	443	49746	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.083410025 CET	443	49747	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.083446980 CET	443	49747	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.083487034 CET	49747	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.083534002 CET	49747	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.087801933 CET	443	49746	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.087842941 CET	443	49746	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.087865114 CET	49746	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.087889910 CET	49746	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.097191095 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:01.097919941 CET	443	49748	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:01.098711014 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:01.098752975 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:01.098782063 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.098789930 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:01.098808050 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.098839045 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:01.098845959 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.098869085 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:01.098900080 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.098920107 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.105017900 CET	443	49748	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:01.105077028 CET	443	49748	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:01.105086088 CET	49748	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.105114937 CET	443	49748	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:01.105129957 CET	49748	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.105150938 CET	443	49748	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:01.105168104 CET	49748	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.105176926 CET	443	49748	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:01.105204105 CET	49748	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.105227947 CET	49748	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.111067057 CET	49747	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.111591101 CET	49746	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.115530014 CET	49750	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.115710974 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.157166958 CET	443	49746	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.157193899 CET	443	49747	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.157532930 CET	443	49746	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.157560110 CET	443	49746	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.157614946 CET	49746	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.157649994 CET	49746	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.158027887 CET	443	49747	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.158060074 CET	443	49747	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.158094883 CET	49747	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.158112049 CET	49747	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.163580894 CET	443	49750	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.163676023 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.163702965 CET	49750	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.163744926 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.181076050 CET	49747	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.181813002 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.182249069 CET	49746	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.186252117 CET	49747	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.186310053 CET	49747	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.227983952 CET	443	49747	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.228291988 CET	443	49746	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.228404999 CET	443	49746	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.228482962 CET	443	49747	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.228496075 CET	49746	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.228549004 CET	49747	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.230276108 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.230402946 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.230427980 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.230448961 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.230463028 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.230484962 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.230505943 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.232315063 CET	443	49747	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.241875887 CET	443	49747	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.241899967 CET	443	49747	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.241941929 CET	443	49747	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.241976976 CET	443	49747	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.241998911 CET	443	49747	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.242002010 CET	49747	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.242044926 CET	49747	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.242053032 CET	49747	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.242059946 CET	49747	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.242067099 CET	49747	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.379394054 CET	49750	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.384177923 CET	49746	443	192.168.2.4	172.67.147.58
Jan 12, 2021 16:56:01.395159006 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.403924942 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.405595064 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.427619934 CET	443	49750	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.427815914 CET	443	49750	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.427859068 CET	443	49750	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.427885056 CET	443	49750	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.427911043 CET	49750	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.427951097 CET	49750	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.427954912 CET	49750	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.443769932 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.443825006 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.443864107 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.443909883 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.452033043 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.452122927 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.455419064 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.455461979 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.455497980 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.455512047 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.455534935 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.455558062 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.455585957 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.457901001 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.457945108 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.457979918 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.458007097 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.460545063 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.460587025 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.460618973 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.460644960 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.462552071 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.462590933 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.462640047 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.462666988 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.465060949 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.465101004 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.465135098 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.465161085 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.467390060 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.467431068 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.467444897 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.467479944 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.469880104 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.469923973 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.469964027 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.469985008 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.470026016 CET	443	49746	172.67.147.58	192.168.2.4
Jan 12, 2021 16:56:01.548209906 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.549947977 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.550127983 CET	49751	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.555989981 CET	49748	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.556510925 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.556786060 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.556899071 CET	49748	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.570902109 CET	49750	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.571310997 CET	49750	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.591036081 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:01.591129065 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.598159075 CET	443	49751	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.598753929 CET	443	49748	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:01.598862886 CET	49748	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.605092049 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:01.619250059 CET	443	49750	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.619282007 CET	443	49750	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.619347095 CET	49750	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.619393110 CET	49750	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.619394064 CET	443	49750	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.619455099 CET	49750	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.620047092 CET	49750	443	192.168.2.4	172.217.218.154
Jan 12, 2021 16:56:01.634004116 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:01.634140015 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.634464979 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.641978025 CET	443	49748	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:01.642128944 CET	49748	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.642316103 CET	49748	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:01.673469067 CET	443	49750	172.217.218.154	192.168.2.4
Jan 12, 2021 16:56:01.718095064 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:01.725903988 CET	443	49748	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:03.121531963 CET	49753	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.122524977 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.162414074 CET	443	49753	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.162559986 CET	49753	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.163326979 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.163431883 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.164349079 CET	49753	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.164653063 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.204791069 CET	443	49753	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.205048084 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.206127882 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.206161022 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.206182003 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.206265926 CET	443	49753	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.206274033 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.206301928 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.206331015 CET	49753	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.206335068 CET	443	49753	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.206360102 CET	443	49753	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.206398010 CET	49753	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.206418991 CET	49753	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.214032888 CET	49753	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.214200020 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.215565920 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.216203928 CET	49753	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.216248989 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.241318941 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.241401911 CET	49755	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.255034924 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.255068064 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.255085945 CET	443	49753	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.255103111 CET	443	49753	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.255199909 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.255265951 CET	49753	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.255956888 CET	49753	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.255997896 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.256103039 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.256737947 CET	443	49753	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.256839037 CET	49753	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.258591890 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.258624077 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.258649111 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.258677006 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.258703947 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.258728981 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.258749962 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.258801937 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.258824110 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.258826971 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.258830070 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.289478064 CET	443	49755	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.289510012 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.289616108 CET	49755	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.289664984 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.290621042 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.292716026 CET	49755	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.295893908 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.295941114 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.295973063 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.296000957 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.296029091 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.296087027 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.296561956 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.296601057 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.296662092 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.296705008 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:03.337110996 CET	443	49753	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:03.338766098 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.338923931 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.338975906 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.339015961 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.339024067 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.339060068 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.339090109 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.340828896 CET	443	49755	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.340995073 CET	443	49755	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.341053009 CET	443	49755	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.341089010 CET	443	49755	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.341106892 CET	49755	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.341157913 CET	49755	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.341165066 CET	49755	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.345396042 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.345923901 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.346337080 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.346965075 CET	49755	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.347338915 CET	49755	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.394274950 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.394309998 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.394346952 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.394418001 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.394505978 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.395359039 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.395541906 CET	443	49755	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.395575047 CET	443	49755	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.395600080 CET	443	49755	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.395663023 CET	49755	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.395694971 CET	49755	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.396079063 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.396130085 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.396163940 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.396193981 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.396380901 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.398555040 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.398600101 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.398674965 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.398757935 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.400993109 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.401038885 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.401093960 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.401174068 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.403398037 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.403445005 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.403557062 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.403650045 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.405811071 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.405857086 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.405942917 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.406022072 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.408178091 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.408221006 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.408364058 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.408389091 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.410649061 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.410696983 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.411000013 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.413198948 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.413335085 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.413570881 CET	49755	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.443116903 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.443166018 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.443253994 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.444046974 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.444211006 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.444253922 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.444319010 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.444374084 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.446636915 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.446680069 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.446739912 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.446768045 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.449026108 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.449076891 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.449126005 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.449145079 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.451438904 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.451487064 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.451575041 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.451606035 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.453814030 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.453869104 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.453943014 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.453975916 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.456300974 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.456347942 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.456393957 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.456414938 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.458642006 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.458686113 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.458726883 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.458775043 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.461093903 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.461141109 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.461194038 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.461230040 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.463475943 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.463520050 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.463634968 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.463949919 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.465979099 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.466025114 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.466109037 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.466171026 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.466450930 CET	443	49755	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.468319893 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.468368053 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.468446016 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.468496084 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.470669985 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.470716953 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.470771074 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.470803976 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.473025084 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.473098040 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.473145008 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.473206043 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.475382090 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.475425959 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.475471020 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.475508928 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.477747917 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.477791071 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.477860928 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.477919102 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.480077982 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.480124950 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.480165005 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.480190039 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.482466936 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.482510090 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.482594013 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.482647896 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.484862089 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.484905005 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.485013962 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.485069990 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.487128973 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.487180948 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.487270117 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.487320900 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.491430044 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.491552114 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.492165089 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.492206097 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.492248058 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.492275000 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.493460894 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.493513107 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.493541002 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.493582010 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.495225906 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.495270967 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.495311022 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.495338917 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.496733904 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.496783972 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.496810913 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.496844053 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.498388052 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.498431921 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.498471022 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.498508930 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.499990940 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.500040054 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.500066996 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.500108957 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.501565933 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.501610041 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.501665115 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.501696110 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.503221035 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.503267050 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.503314018 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.503349066 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.504787922 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.504832029 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.504872084 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.504904985 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.506365061 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.506408930 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:03.506438017 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.506469965 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.509284973 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:03.563158989 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:04.902772903 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:04.903930902 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:04.951702118 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:04.951905012 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:04.952559948 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:04.952626944 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:04.952714920 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:04.953713894 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.004391909 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.004420996 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.004448891 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.004472017 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.004489899 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.004507065 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.004556894 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.004627943 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.004848957 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.004914045 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.004920006 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.004940033 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.004976034 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.004983902 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.005014896 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.006825924 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.006987095 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.007997036 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.008074999 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.014087915 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.015019894 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.019422054 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.063112020 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.063246012 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.068416119 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.068450928 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.068480015 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.068507910 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.068526983 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.068536997 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.068563938 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.068567038 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.068591118 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.068598986 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.068624973 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.068649054 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.068789959 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.068821907 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.068854094 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.068866014 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.068903923 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.068984032 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.069180965 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.069247007 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.159598112 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.161315918 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.161360979 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.182885885 CET	49763	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.211595058 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.217426062 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.217470884 CET	49765	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.221231937 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.221368074 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.221435070 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.221443892 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.221486092 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.221523046 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.221560955 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.221606970 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.221618891 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.221662998 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.221678019 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.221700907 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.221739054 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.221750021 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.221761942 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.221776962 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.221779108 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.221812963 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.221839905 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.221868992 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.222409010 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.231945038 CET	443	49763	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.232115030 CET	49763	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.239638090 CET	49763	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.257596016 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.257635117 CET	443	49765	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.257805109 CET	49765	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.257811069 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.259349108 CET	49765	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.260207891 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.270538092 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.270580053 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.270618916 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.270658016 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.270675898 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.270750999 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.270920038 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.270961046 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.270994902 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.270997047 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.271035910 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.271095037 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.271163940 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.271663904 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.271706104 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.271752119 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.271773100 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.271820068 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.271830082 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.271898985 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.272011995 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.272053957 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.272090912 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.272119999 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.272129059 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.272181988 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.272238016 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.272284031 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.272325993 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.272351027 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.272362947 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.272398949 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.272401094 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.272434950 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.272474051 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.273572922 CET	49766	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.280246973 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:05.280819893 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.280863047 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.280899048 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.280932903 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.280967951 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.281006098 CET	443	49761	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.281011105 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.281090021 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.283400059 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.283454895 CET	49761	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.288522005 CET	443	49763	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.288824081 CET	443	49763	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.288973093 CET	49763	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.289628029 CET	49763	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.292630911 CET	49763	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.299335003 CET	443	49765	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.300343037 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.300381899 CET	443	49765	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.300421000 CET	443	49765	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.300451994 CET	49765	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.300457001 CET	443	49765	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.300477982 CET	49765	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.300486088 CET	443	49765	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.300502062 CET	49765	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.300528049 CET	49765	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.301577091 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.301615953 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.301652908 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.301662922 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.301673889 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.301697016 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.301707029 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.301738977 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.308526039 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.315217018 CET	49765	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.315876961 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.316052914 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.316116095 CET	49765	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.319386005 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.319469929 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.319508076 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.319513083 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.319538116 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.319545984 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.319555044 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.319580078 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.319613934 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.319650888 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.322402954 CET	443	49766	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.322552919 CET	49766	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.323359013 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:05.323380947 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:05.323482990 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:05.324238062 CET	49766	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.341578960 CET	443	49763	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.341989994 CET	443	49763	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.342122078 CET	49763	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.348884106 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.348913908 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.349030018 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.349078894 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.349939108 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.355645895 CET	443	49765	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.355676889 CET	443	49765	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.355739117 CET	49765	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.355777025 CET	49765	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.355885983 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.355950117 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.356170893 CET	443	49765	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.356235027 CET	49765	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.356884956 CET	49765	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.358403921 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.358455896 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.358498096 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.358520985 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.358536959 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.358558893 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.358625889 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.360434055 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.360472918 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.360538960 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.360551119 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.362441063 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.362483978 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.362586975 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.362611055 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.364505053 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.364542007 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.364653111 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.364677906 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.364919901 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:05.373070955 CET	443	49766	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.373279095 CET	443	49766	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:05.373370886 CET	49766	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.374083042 CET	49766	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:05.394783020 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.402465105 CET	443	49765	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.405031919 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:05.462929010 CET	443	49766	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.038352013 CET	49763	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.091495991 CET	443	49763	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.091561079 CET	443	49763	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.091603994 CET	443	49763	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.091640949 CET	49763	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.091646910 CET	443	49763	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.091660976 CET	49763	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.091661930 CET	443	49763	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.091685057 CET	443	49763	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.091759920 CET	49763	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.091764927 CET	49763	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.091767073 CET	49763	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.193114042 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.244826078 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.244847059 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.244981050 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.386863947 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.386919022 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.435832977 CET	443	49762	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.435928106 CET	49762	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.834203005 CET	49766	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.837568045 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.883251905 CET	443	49766	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.886570930 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.886710882 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.887164116 CET	443	49766	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.887192965 CET	443	49766	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.887217045 CET	443	49766	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.887238979 CET	443	49766	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.887254953 CET	49766	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.887264013 CET	443	49766	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.887284994 CET	49766	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.887286901 CET	443	49766	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.887332916 CET	49766	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.887378931 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.887393951 CET	443	49766	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.887420893 CET	443	49766	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.887433052 CET	49766	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.887444973 CET	443	49766	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.887463093 CET	443	49766	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.887464046 CET	49766	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.887491941 CET	49766	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.887512922 CET	49766	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.911442995 CET	49768	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:06.911513090 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:06.936837912 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.937122107 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.937216043 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.937833071 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.939574003 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:06.960308075 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:06.960345984 CET	443	49768	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:06.960407972 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:06.960449934 CET	49768	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:06.961607933 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:06.961638927 CET	49768	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:06.988639116 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.989470005 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:06.989576101 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:07.010464907 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.010494947 CET	443	49768	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.010519981 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.010543108 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.010637045 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.010941982 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.010966063 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.010987997 CET	443	49768	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.011012077 CET	443	49768	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.011020899 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.011034966 CET	443	49768	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.011051893 CET	443	49768	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.011085033 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.011092901 CET	49768	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.011131048 CET	49768	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.011748075 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.011828899 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.012372971 CET	443	49768	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.012453079 CET	49768	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.029542923 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.029902935 CET	49768	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.030440092 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.078628063 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.078706026 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.078843117 CET	443	49768	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.078903913 CET	49768	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.082720041 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.082827091 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.082942009 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.082994938 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.083120108 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.083173037 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.083277941 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.083328009 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.083506107 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.083568096 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.083718061 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.083767891 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.084722996 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.084778070 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.084781885 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.084820986 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.127823114 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.127856016 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.127867937 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:07.127947092 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.127985954 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:07.863153934 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:07.908843040 CET	49771	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:07.912571907 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:07.912669897 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:07.913924932 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:07.917079926 CET	49772	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:07.918179989 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.920149088 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.921350956 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.922606945 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.923974991 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.936887980 CET	49773	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:07.938150883 CET	49774	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:07.957794905 CET	443	49771	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:07.957922935 CET	49771	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:07.958565950 CET	49771	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:07.960630894 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.962950945 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.962989092 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.963020086 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.963032961 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.963051081 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.963062048 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.963084936 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.963104963 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.963118076 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.963145971 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.963157892 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.963174105 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.963193893 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.963205099 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.963224888 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.963227034 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.963259935 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.963268995 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.963293076 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.963303089 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.963320971 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.963331938 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.963345051 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.963362932 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.963387966 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.965815067 CET	443	49772	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:07.965950012 CET	49772	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:07.966116905 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.966156006 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.966187954 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.966213942 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.966219902 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.966247082 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.966254950 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.966284037 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.966308117 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.966336966 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.966341972 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.966362953 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.966375113 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.966392994 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.966418028 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.966419935 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.966454029 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.966466904 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.966485977 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.966507912 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.966520071 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.966530085 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.966552973 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:07.966581106 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.966584921 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:07.966618061 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:07.966618061 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:07.966650963 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:07.966686964 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:07.966690063 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:07.966707945 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:07.966726065 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:07.966749907 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:07.966757059 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:07.966788054 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:07.966789007 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:07.966814041 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:07.966820002 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:07.966839075 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:07.966867924 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:07.967005014 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:07.967030048 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:07.967062950 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:07.967116117 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:07.975413084 CET	49772	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:07.975876093 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:07.985846996 CET	443	49773	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:07.986042023 CET	49773	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:07.986962080 CET	443	49774	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:07.987118959 CET	49774	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:07.989939928 CET	49774	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:07.990591049 CET	49773	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.004013062 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:08.004070044 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:08.004108906 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:08.004112959 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:08.004144907 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:08.004147053 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:08.004179001 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:08.004208088 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:08.004236937 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:08.004251003 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:08.004276991 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:08.004277945 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:08.004306078 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:08.004328966 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:08.004354954 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:08.004389048 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:08.004416943 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:08.004440069 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:08.004460096 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:08.004496098 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:08.004498959 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:08.004530907 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:08.004544020 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:08.007335901 CET	443	49771	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:08.007623911 CET	443	49771	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:08.007704973 CET	49771	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:08.014512062 CET	49771	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:08.016880035 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:08.017703056 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:08.017745972 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:08.017812014 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:08.017854929 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:08.018734932 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:08.018774986 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:08.018810987 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:08.018846035 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:08.020787954 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:08.020822048 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:08.020873070 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:08.020895004 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:08.022294044 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:08.022372961 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:08.024926901 CET	443	49772	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:08.025221109 CET	443	49772	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:08.025295019 CET	49772	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:08.034573078 CET	49772	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:08.038721085 CET	443	49774	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:08.038909912 CET	443	49774	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:08.038954020 CET	443	49774	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:08.038980007 CET	49774	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.038991928 CET	443	49774	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:08.039016008 CET	49774	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.039021015 CET	443	49774	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:08.039069891 CET	49774	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.039287090 CET	443	49773	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:08.039580107 CET	443	49773	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:08.039623976 CET	443	49773	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:08.039647102 CET	49773	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.039664030 CET	49773	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.039664030 CET	443	49773	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:08.039690018 CET	443	49773	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:08.039705992 CET	49773	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.039726973 CET	49773	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.040003061 CET	443	49774	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:08.040031910 CET	443	49774	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:08.040064096 CET	49774	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.040091038 CET	49774	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.041610956 CET	443	49773	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:08.041642904 CET	443	49773	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:08.041712046 CET	49773	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.041734934 CET	49773	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.056555986 CET	49771	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:08.056746006 CET	49764	443	192.168.2.4	34.107.138.236
Jan 12, 2021 16:56:08.067969084 CET	49773	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.069259882 CET	49774	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.070017099 CET	49773	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.091180086 CET	443	49763	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:08.091203928 CET	443	49763	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:08.091274977 CET	49763	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:08.091310024 CET	49763	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:08.101747990 CET	443	49764	34.107.138.236	192.168.2.4
Jan 12, 2021 16:56:08.102957964 CET	443	49771	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:08.105540991 CET	443	49771	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:08.105556011 CET	443	49771	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:08.107357025 CET	443	49771	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:08.107446909 CET	49771	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:08.116909981 CET	443	49773	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:08.117001057 CET	49773	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.118253946 CET	443	49774	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:08.118359089 CET	49774	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.118881941 CET	443	49773	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:08.118953943 CET	49773	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.119029999 CET	443	49773	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:08.119080067 CET	49773	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.121011972 CET	49773	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.121032953 CET	49773	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.122859955 CET	443	49772	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:08.170260906 CET	443	49773	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:08.170396090 CET	49773	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:08.460021019 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.502621889 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.503705978 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.503736973 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.503757000 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.503777027 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.503797054 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.503817081 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.503820896 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.503837109 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.503839970 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.503855944 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.503878117 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.503897905 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.507724047 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.507749081 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.507785082 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.507812023 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.508017063 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.508047104 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.508070946 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.508080959 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.511406898 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.511432886 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.511518955 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.512245893 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.512268066 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.512336016 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.512382030 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.514415979 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.514439106 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.514514923 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.514539003 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.516530991 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.516555071 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.516602039 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.516625881 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.518843889 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.518866062 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.518944025 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.520788908 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.520807981 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.520906925 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.522850990 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.522875071 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.522892952 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.522907972 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.522958994 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.524091005 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.526007891 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.526034117 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.526103020 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.526123047 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.547550917 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.547569990 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.547660112 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.547684908 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.550519943 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.550543070 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.550614119 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.551132917 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.551150084 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.551208973 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.551242113 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.552469969 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.552489042 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.552546978 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.553811073 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.553828955 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.553896904 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.555171013 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.555188894 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.555293083 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.555329084 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.557495117 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.557559967 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.557580948 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.557621002 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.558408976 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.558429956 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.558474064 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.558490992 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.558753967 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.558770895 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.558803082 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.558820963 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.693839073 CET	49771	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:08.743103027 CET	443	49771	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:08.743242979 CET	49771	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:08.782097101 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.821702957 CET	49763	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:08.826620102 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.826667070 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:08.826703072 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.826740980 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:08.870861053 CET	443	49763	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:08.889409065 CET	443	49766	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:08.889462948 CET	443	49766	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:08.889614105 CET	49766	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:08.889663935 CET	49766	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:09.064340115 CET	49766	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:09.084701061 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:09.084741116 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:09.084836006 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:09.084866047 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:09.113240957 CET	443	49766	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:09.403539896 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:09.452893972 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:09.453207016 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:09.453308105 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:09.455245972 CET	49785	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.455547094 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.502875090 CET	443	49785	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.503062010 CET	49785	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.503113985 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.503206968 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.504108906 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.504996061 CET	49785	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.552279949 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.553330898 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.553375006 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.553422928 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.553443909 CET	443	49785	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.553492069 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.554764032 CET	443	49785	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.554801941 CET	443	49785	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.554820061 CET	443	49785	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.554831982 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.554886103 CET	49785	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.554940939 CET	49785	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.562232018 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.562604904 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.562978983 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.582006931 CET	49785	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.582508087 CET	49785	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.610384941 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.610434055 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.610461950 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.610490084 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.610516071 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.611217022 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.611701012 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.611764908 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.629930019 CET	443	49785	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.629976034 CET	443	49785	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.630002022 CET	443	49785	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.630085945 CET	49785	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.630145073 CET	49785	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.630732059 CET	49785	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.663815975 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.682768106 CET	443	49785	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.704416037 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.704581022 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.714646101 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:09.761446953 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:09.762288094 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:09.810858011 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:09.811148882 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:09.811244965 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:09.841670036 CET	49788	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:09.844876051 CET	49789	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:09.853674889 CET	49790	843	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:09.892672062 CET	443	49788	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:09.892822981 CET	49788	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:09.896459103 CET	443	49789	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:09.896596909 CET	49789	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:09.905817032 CET	49789	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:09.913664103 CET	49788	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:09.955236912 CET	443	49789	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:09.956720114 CET	443	49789	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:09.956777096 CET	443	49789	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:09.956803083 CET	443	49789	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:09.956820965 CET	443	49789	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:09.956839085 CET	443	49789	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:09.956885099 CET	49789	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:09.956928968 CET	49789	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:09.964706898 CET	443	49788	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:09.965723038 CET	443	49788	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:09.965770960 CET	443	49788	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:09.965795040 CET	443	49788	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:09.965811014 CET	443	49788	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:09.965864897 CET	49788	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:09.965926886 CET	49788	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:09.966398001 CET	443	49788	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:09.966494083 CET	49788	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:09.981775045 CET	49791	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:09.982654095 CET	49792	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:09.991879940 CET	49789	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:09.992393970 CET	49789	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:10.001507044 CET	49788	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:10.041852951 CET	443	49789	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:10.042006969 CET	49789	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:10.042332888 CET	443	49789	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:10.042361021 CET	443	49789	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:10.042381048 CET	443	49791	52.212.164.82	192.168.2.4
Jan 12, 2021 16:56:10.042423964 CET	49789	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:10.042485952 CET	49789	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:10.042520046 CET	49791	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:10.043771982 CET	443	49792	52.212.164.82	192.168.2.4
Jan 12, 2021 16:56:10.043899059 CET	49792	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:10.044836044 CET	49791	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:10.050890923 CET	443	49788	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:10.051006079 CET	49788	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:10.054738998 CET	49792	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:10.105371952 CET	443	49791	52.212.164.82	192.168.2.4
Jan 12, 2021 16:56:10.106173992 CET	443	49791	52.212.164.82	192.168.2.4
Jan 12, 2021 16:56:10.106197119 CET	443	49791	52.212.164.82	192.168.2.4
Jan 12, 2021 16:56:10.106208086 CET	443	49791	52.212.164.82	192.168.2.4
Jan 12, 2021 16:56:10.106287956 CET	49791	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:10.106339931 CET	49791	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:10.115961075 CET	443	49792	52.212.164.82	192.168.2.4
Jan 12, 2021 16:56:10.116849899 CET	443	49792	52.212.164.82	192.168.2.4
Jan 12, 2021 16:56:10.116873980 CET	443	49792	52.212.164.82	192.168.2.4
Jan 12, 2021 16:56:10.116888046 CET	443	49792	52.212.164.82	192.168.2.4
Jan 12, 2021 16:56:10.116918087 CET	49792	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:10.116950035 CET	49792	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:10.124068022 CET	49791	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:10.124480009 CET	49791	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:10.124830961 CET	49791	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:10.129782915 CET	49792	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:10.130199909 CET	49792	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:10.185060978 CET	443	49791	52.212.164.82	192.168.2.4
Jan 12, 2021 16:56:10.185094118 CET	443	49791	52.212.164.82	192.168.2.4
Jan 12, 2021 16:56:10.185224056 CET	49791	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:10.185273886 CET	49791	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:10.186312914 CET	49791	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:10.189615011 CET	443	49791	52.212.164.82	192.168.2.4
Jan 12, 2021 16:56:10.189644098 CET	443	49791	52.212.164.82	192.168.2.4
Jan 12, 2021 16:56:10.189770937 CET	49791	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:10.191113949 CET	443	49792	52.212.164.82	192.168.2.4
Jan 12, 2021 16:56:10.191140890 CET	443	49792	52.212.164.82	192.168.2.4
Jan 12, 2021 16:56:10.191247940 CET	49792	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:10.191572905 CET	443	49792	52.212.164.82	192.168.2.4
Jan 12, 2021 16:56:10.191632986 CET	49792	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:10.192800045 CET	49792	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:56:10.293361902 CET	443	49791	52.212.164.82	192.168.2.4
Jan 12, 2021 16:56:10.295221090 CET	443	49792	52.212.164.82	192.168.2.4
Jan 12, 2021 16:56:10.745256901 CET	443	49771	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:10.745296001 CET	443	49771	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:10.745352983 CET	49771	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:10.745378017 CET	49771	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:11.813124895 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:11.813150883 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:11.813283920 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:11.813306093 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:12.044405937 CET	443	49789	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:12.044435978 CET	443	49789	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:12.044495106 CET	49789	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:12.044531107 CET	49789	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:12.891096115 CET	49790	843	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:14.642386913 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.642520905 CET	49794	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.690874100 CET	443	49794	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:14.691060066 CET	49794	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.691827059 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:14.691935062 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.705698967 CET	49794	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.715889931 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.753640890 CET	443	49794	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:14.754460096 CET	443	49794	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:14.754544020 CET	443	49794	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:14.754622936 CET	443	49794	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:14.754677057 CET	49794	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.754734993 CET	49794	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.754750967 CET	49794	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.764465094 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:14.765228987 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:14.765292883 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:14.765311003 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.765331030 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:14.765360117 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.765429020 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.772064924 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.772517920 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.772844076 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.820594072 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:14.820765018 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.821070910 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:14.821106911 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:14.821176052 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.824342966 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:14.824367046 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:14.824435949 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.824467897 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.835956097 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.839612007 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.882570982 CET	49794	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.882939100 CET	49794	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.887984991 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:14.889578104 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:14.889672995 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.930718899 CET	443	49794	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:14.930789948 CET	443	49794	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:14.930886984 CET	49794	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.930938005 CET	49794	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:14.931827068 CET	49794	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:15.020175934 CET	443	49794	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:15.647660017 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:15.647701979 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:15.647979021 CET	49771	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:15.648001909 CET	49771	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:15.648612976 CET	49772	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:15.696835995 CET	443	49767	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:15.696882010 CET	443	49771	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:15.696962118 CET	49767	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:15.697458982 CET	443	49772	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:15.697498083 CET	443	49772	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:15.697516918 CET	49771	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:15.697527885 CET	443	49772	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:15.700037956 CET	443	49772	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:15.700117111 CET	49772	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:15.716101885 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:15.716128111 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:15.716778994 CET	49768	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:15.765000105 CET	443	49769	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:15.765103102 CET	49769	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:15.765604019 CET	443	49768	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:15.767668009 CET	443	49768	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:15.767755032 CET	49768	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:16.364268064 CET	49772	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:16.413456917 CET	443	49772	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:16.413551092 CET	443	49772	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:16.413645983 CET	49772	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:16.813764095 CET	49795	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.815794945 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.861660004 CET	443	49795	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:16.861761093 CET	49795	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.864677906 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:16.864790916 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.865452051 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.884758949 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:16.885791063 CET	49798	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:16.891120911 CET	49795	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.913342953 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:16.913464069 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:16.913501024 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:16.913553953 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.913588047 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.920510054 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.920911074 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.921125889 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.932753086 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:16.932883978 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:16.933706045 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:16.937273979 CET	443	49798	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:16.937386990 CET	49798	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:16.939007044 CET	443	49795	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:16.939273119 CET	443	49795	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:16.939312935 CET	443	49795	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:16.939414024 CET	49795	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.939456940 CET	49795	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.944531918 CET	49795	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.945408106 CET	49795	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.949604034 CET	49798	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:16.968879938 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:16.968923092 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:16.968961954 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:16.968993902 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.969033957 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.972054958 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:16.972090960 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:16.972116947 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:16.972121000 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.972142935 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.972156048 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.981585979 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:16.981760025 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:16.981808901 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:16.981827974 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:16.981848001 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:16.981856108 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:16.981904984 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:16.992585897 CET	443	49795	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:16.992615938 CET	443	49795	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:16.992685080 CET	49795	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.992722034 CET	49795	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.993252039 CET	443	49795	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:16.993314028 CET	49795	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.993999004 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:16.994818926 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.994868040 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.995060921 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:16.995541096 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:16.995599031 CET	49795	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:16.997467041 CET	443	49798	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:16.997507095 CET	443	49798	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:16.997555017 CET	443	49798	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:16.997576952 CET	49798	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:16.997594118 CET	443	49798	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:16.997622967 CET	49798	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:16.997629881 CET	49798	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:17.001064062 CET	49798	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:17.001486063 CET	49798	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:17.042285919 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:17.042321920 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:17.042397022 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:17.042434931 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:17.042680979 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:17.042948961 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:17.043001890 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:17.048415899 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:17.048728943 CET	443	49795	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:17.048918962 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:17.048960924 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:17.048980951 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:17.048996925 CET	443	49798	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:17.049015999 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:17.049024105 CET	443	49798	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:17.049053907 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:17.049088955 CET	49798	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:17.049104929 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:17.049120903 CET	49798	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:17.049392939 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:17.049421072 CET	443	49798	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:17.049484015 CET	49798	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:17.050736904 CET	49772	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.054608107 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:17.054893970 CET	49798	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:17.099766016 CET	443	49772	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.099919081 CET	443	49772	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.099948883 CET	443	49772	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.099992990 CET	49772	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.100029945 CET	49772	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.100122929 CET	49772	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.100158930 CET	49772	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.102346897 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:17.102379084 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:17.108207941 CET	443	49798	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:17.149205923 CET	443	49772	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.149312019 CET	49772	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.151268005 CET	49799	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.202435017 CET	8080	49799	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.202565908 CET	49799	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.350652933 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:17.365387917 CET	49799	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.417890072 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:17.418610096 CET	8080	49799	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.418637037 CET	8080	49799	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.419096947 CET	8080	49799	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.419213057 CET	49799	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.449332952 CET	49799	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.459408998 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:17.459451914 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:17.459558010 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:17.459589958 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:17.459775925 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:17.459799051 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:17.459829092 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:17.459897995 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:17.459988117 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:17.460038900 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:17.498588085 CET	8080	49799	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.566284895 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:17.574953079 CET	49802	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.614636898 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:17.624046087 CET	443	49802	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.624221087 CET	49802	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.630072117 CET	49802	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.632194042 CET	49803	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.632386923 CET	49801	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.679209948 CET	443	49802	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.679471970 CET	443	49802	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.679666042 CET	49802	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.681060076 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.681207895 CET	49803	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.681463957 CET	443	49801	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.681538105 CET	49801	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.743418932 CET	49802	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.751082897 CET	49802	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.753734112 CET	49801	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.763550043 CET	49803	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.769797087 CET	443	49768	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:17.769838095 CET	443	49768	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:17.769913912 CET	49768	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:17.769953012 CET	49768	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:17.800477028 CET	443	49802	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.802126884 CET	443	49802	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.802217960 CET	49802	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.802676916 CET	443	49801	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.802917957 CET	443	49801	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.802995920 CET	49801	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.812468052 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.862847090 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.901921988 CET	49801	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.912866116 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.913001060 CET	49803	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.922231913 CET	49806	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:17.922302008 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:17.931164026 CET	49803	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:17.970282078 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:17.970324993 CET	443	49806	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:17.970474958 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:17.970532894 CET	49806	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:17.980057955 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:17.990989923 CET	443	49801	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:18.030738115 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:18.081145048 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:18.081334114 CET	49803	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:18.123424053 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.171521902 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.171582937 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.171622038 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.171649933 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.171674013 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.171719074 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.171730995 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.172188997 CET	49806	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.208117008 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.208471060 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.208722115 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.220211983 CET	443	49806	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.220376015 CET	443	49806	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.220403910 CET	443	49806	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.220424891 CET	443	49806	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.220478058 CET	49806	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.220524073 CET	49806	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.256344080 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.256376982 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.256387949 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.256506920 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.261490107 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.261523008 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.261539936 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.261555910 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.261630058 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.261681080 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.263916016 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.263936996 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.264019012 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.266302109 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.266339064 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.266436100 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.267642021 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.267766953 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.585612059 CET	49806	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.586179018 CET	49806	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.633960962 CET	443	49806	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.633985996 CET	443	49806	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.634085894 CET	49806	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.634368896 CET	443	49806	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:18.634434938 CET	49806	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.635271072 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.635355949 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:18.684020042 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:19.068671942 CET	49803	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:19.117645979 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:19.168195963 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:19.218986988 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:19.219070911 CET	49803	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:19.229454041 CET	49806	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:19.283093929 CET	443	49806	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:19.520919085 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:19.535160065 CET	49803	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:19.569746971 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:19.569798946 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:19.584275007 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:19.611675024 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:19.611707926 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:19.611737967 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:19.611766100 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:19.611834049 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:19.611881971 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:19.611893892 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:19.611900091 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:19.631890059 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:19.634274006 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:19.680259943 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:19.685110092 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:19.685276985 CET	49803	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:19.698652983 CET	49803	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:19.747739077 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:19.760504961 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:19.798016071 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:19.804248095 CET	443	49802	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:19.804266930 CET	443	49802	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:19.804344893 CET	49802	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:19.809859037 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:19.809892893 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:19.809956074 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:19.810009003 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:19.810916901 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:19.811006069 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:19.811175108 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:19.811244011 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:19.813447952 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:19.813500881 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:19.813549042 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:19.813576937 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:19.815650940 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:19.815713882 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:19.815738916 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:19.815771103 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:19.818080902 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:19.818135977 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:19.818159103 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:19.818182945 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:19.820559978 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:19.820621014 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:19.820703983 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:19.820756912 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:19.823081970 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:19.823183060 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:19.824165106 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:19.848418951 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:19.848532915 CET	49803	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:19.857435942 CET	49803	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:19.877944946 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:19.906410933 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:19.956856012 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:20.007430077 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:20.007515907 CET	49803	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:20.020169973 CET	49803	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:20.069097042 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:20.120043039 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:20.170854092 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:20.170922041 CET	49803	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:20.172317982 CET	49803	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:20.221146107 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:20.221168995 CET	8080	49803	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:20.286473036 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:20.334618092 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:20.337378025 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:20.337436914 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:20.337451935 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:20.337481976 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:20.337507963 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:20.337521076 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:20.337773085 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:56:20.390001059 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:56:23.742626905 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:23.743844032 CET	49824	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:23.867878914 CET	443	49823	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:23.867975950 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:23.868697882 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:23.873596907 CET	443	49824	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:23.873671055 CET	49824	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:23.874320984 CET	49824	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:23.991003990 CET	443	49823	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:23.992933035 CET	443	49823	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:23.992964029 CET	443	49823	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:23.992979050 CET	443	49823	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:23.993016005 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:23.993063927 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.001713991 CET	443	49824	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.003540039 CET	443	49824	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.003560066 CET	443	49824	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.003575087 CET	443	49824	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.003696918 CET	49824	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.003748894 CET	49824	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.115653038 CET	443	49823	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.115832090 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.131532907 CET	443	49824	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.131666899 CET	49824	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.137331963 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.137901068 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.138214111 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.143138885 CET	49824	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.143795013 CET	49824	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.263185024 CET	443	49823	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.263602972 CET	443	49823	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.263624907 CET	443	49823	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.263705969 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.263726950 CET	443	49823	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.263746977 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.263772011 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.265383005 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.270941019 CET	443	49824	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.271007061 CET	443	49824	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.271143913 CET	49824	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.271164894 CET	443	49824	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.389256954 CET	443	49823	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.389431953 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.389728069 CET	443	49823	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.401824951 CET	443	49824	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.401992083 CET	49824	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.403558016 CET	49824	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.405374050 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.528776884 CET	443	49823	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.532987118 CET	443	49824	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.533570051 CET	443	49823	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.533685923 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.536669016 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.659440994 CET	443	49823	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.664201021 CET	443	49823	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.664311886 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.667669058 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:24.877952099 CET	443	49823	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.878021955 CET	443	49823	208.89.12.87	192.168.2.4
Jan 12, 2021 16:56:24.878179073 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:56:29.716778040 CET	49802	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:29.716835022 CET	49802	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:29.717411995 CET	49801	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:29.719188929 CET	49827	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:29.719460011 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:29.765855074 CET	443	49802	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:29.766007900 CET	49802	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:29.766412020 CET	443	49801	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:29.766465902 CET	443	49801	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:29.766501904 CET	49801	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:29.766540051 CET	49801	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:29.768311977 CET	443	49827	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:29.768404961 CET	49827	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:29.768470049 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:29.768558979 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:29.769433975 CET	49827	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:29.769449949 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:29.818181038 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:29.818258047 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:29.818320036 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:29.818454027 CET	443	49827	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:29.818696022 CET	443	49827	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:29.818751097 CET	49827	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:29.819370031 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:29.819581032 CET	49827	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:29.821537018 CET	49827	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:29.871220112 CET	443	49827	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:29.871524096 CET	443	49827	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:29.871615887 CET	49827	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:29.907953024 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:31.872977018 CET	443	49827	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:31.873008013 CET	443	49827	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:31.873096943 CET	49827	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:32.853923082 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:32.898545980 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:32.898709059 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:34.552407980 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:34.595920086 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:34.595988989 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:34.596184969 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:36.173450947 CET	49827	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.173675060 CET	49827	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.174207926 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.222630978 CET	443	49827	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.222728968 CET	49827	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.222822905 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.222881079 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.227086067 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.227114916 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.227140903 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.227164030 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.227188110 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.227206945 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.227245092 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.227262020 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.227291107 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.227302074 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.227309942 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.227322102 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.227354050 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.227372885 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.228951931 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.229037046 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.539827108 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.546247005 CET	49829	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.554961920 CET	49830	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.582560062 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.589082956 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.589293003 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.589435101 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.590279102 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.595485926 CET	443	49829	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.595627069 CET	49829	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.597002983 CET	49829	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.603796959 CET	443	49830	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.603921890 CET	49830	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.605389118 CET	49830	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.605760098 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:36.631556988 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.631649971 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.632391930 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.639122963 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.645745993 CET	443	49829	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.645876884 CET	443	49829	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.645955086 CET	49829	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.646752119 CET	49829	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.648612022 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:36.648695946 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:36.649684906 CET	49829	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.649925947 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.649952888 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.649980068 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.650006056 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.650006056 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.650038004 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.650042057 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.650058031 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.650058985 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.650077105 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.650093079 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.650095940 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.650110006 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.650116920 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.650129080 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.650146961 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.650166035 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.650194883 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.654136896 CET	443	49830	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.654321909 CET	443	49830	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.654385090 CET	49830	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.655500889 CET	49830	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.657938004 CET	49830	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.681272030 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.681296110 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.681366920 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.682024002 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.698412895 CET	443	49829	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.698733091 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.698772907 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.698808908 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.698836088 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.698841095 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.698879957 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.698880911 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.698889017 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.698908091 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.698919058 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.698940039 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.698964119 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.698986053 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.699002981 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.699028015 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.699065924 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.699297905 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.699333906 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.699371099 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.699378014 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.699394941 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.699419022 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.699440002 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.699485064 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.699909925 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.699947119 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.699981928 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.699985027 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.700007915 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.700017929 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.700050116 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.700084925 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.700272083 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.700311899 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.700333118 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.700346947 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.700380087 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.700381041 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.700402975 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.700433969 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.700875044 CET	443	49829	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.700943947 CET	443	49829	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.700990915 CET	443	49829	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.700995922 CET	49829	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.701020956 CET	49829	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.701031923 CET	443	49829	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.701046944 CET	49829	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.701083899 CET	49829	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.701287031 CET	49829	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.701298952 CET	443	49829	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.701323986 CET	49829	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.701356888 CET	49829	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.706738949 CET	443	49830	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.707145929 CET	443	49830	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.707246065 CET	49830	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.748128891 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.748158932 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.748177052 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.748198032 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.748214006 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.748239040 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.748284101 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.769853115 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.840589046 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:36.883500099 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:36.883604050 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:36.940390110 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.989278078 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.991162062 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.991194963 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.991213083 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.991250992 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.991285086 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:36.991303921 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.991357088 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:36.991410971 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.029831886 CET	49830	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.079082012 CET	443	49830	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.079271078 CET	443	49830	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.079301119 CET	443	49830	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.079349041 CET	49830	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.079389095 CET	49830	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.083523989 CET	49830	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.083579063 CET	49830	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.134438992 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.134501934 CET	443	49830	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.134597063 CET	49830	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.136228085 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.140150070 CET	49768	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.140185118 CET	49768	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.141140938 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.141927958 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.185461998 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.185489893 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.185616970 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.186220884 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.187088013 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.187114000 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.187130928 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.187158108 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.187170029 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.187182903 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.187203884 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.187202930 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.187236071 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.187239885 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.187333107 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.187351942 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.187366009 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.187386990 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.187417984 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.190865040 CET	443	49768	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:37.190937996 CET	49768	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.193401098 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:37.193430901 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:37.193495035 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.193530083 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.194295883 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.194426060 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.195648909 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.219564915 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.226386070 CET	49837	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.235037088 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.235304117 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.235382080 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.236053944 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.237704992 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.243031979 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:37.243164062 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:37.243204117 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:37.243387938 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.243411064 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:37.243469000 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.243927956 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.244570971 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.244694948 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.245795965 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.246048927 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.247632027 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.268615007 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.268726110 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.269376040 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.275540113 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.275656939 CET	49837	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.276443005 CET	49837	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.286494970 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.286962986 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.287039042 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.287760019 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.294925928 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.296469927 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:37.296588898 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.296658993 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.297307968 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.300317049 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:37.300343990 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:37.300364017 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:37.300380945 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:37.300381899 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.300399065 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:37.300403118 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.300417900 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:37.300441027 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.300466061 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.300493002 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:37.300513029 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:37.300529957 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:37.300542116 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.300545931 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:37.300584078 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.311311960 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.312607050 CET	49838	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.312710047 CET	49839	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.318401098 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.318478107 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.318559885 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.319252014 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.321139097 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.325464010 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.325607061 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.325679064 CET	49837	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.326334000 CET	49837	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.334827900 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:37.336625099 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.337435961 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.337507010 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.349217892 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:37.349343061 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:37.360405922 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.361526012 CET	443	49839	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:37.361644030 CET	49839	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.361649036 CET	443	49838	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:37.361730099 CET	49838	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.364629030 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.364655018 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.364670992 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.364690065 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.364706993 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.364708900 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.364723921 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.364737988 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.364743948 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.364756107 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.364768028 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.364782095 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.364790916 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.364790916 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:37.364809990 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.364841938 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.364866018 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.370214939 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.372308969 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.372399092 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.414746046 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:37.414797068 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:37.415492058 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.441545963 CET	49839	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.442362070 CET	49838	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.490300894 CET	443	49839	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:37.490446091 CET	443	49839	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:37.490488052 CET	443	49839	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:37.490519047 CET	49839	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.490526915 CET	443	49839	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:37.490546942 CET	49839	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.490557909 CET	443	49839	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:37.490585089 CET	49839	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.490606070 CET	49839	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.491359949 CET	443	49838	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:37.491558075 CET	443	49838	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:37.491610050 CET	443	49838	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:37.491619110 CET	49838	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.491650105 CET	443	49838	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:37.491672039 CET	443	49838	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:37.491724968 CET	443	49839	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:37.491764069 CET	49838	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.491785049 CET	443	49839	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:37.491835117 CET	49838	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.491841078 CET	49839	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.491863012 CET	49839	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.495317936 CET	443	49838	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:37.495366096 CET	443	49838	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:37.495439053 CET	49838	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.496815920 CET	49838	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.496819019 CET	49839	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.497219086 CET	49839	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.501914024 CET	49838	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.513060093 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:37.513187885 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:37.513448000 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:37.547137976 CET	443	49839	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:37.547158957 CET	443	49839	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:37.547209978 CET	49839	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.547240973 CET	49839	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.547981977 CET	49839	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.551316023 CET	443	49838	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:37.551407099 CET	49838	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:37.561063051 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:37.596616030 CET	443	49839	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:37.631143093 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.680160999 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.680254936 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.680322886 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.794831991 CET	49789	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:37.794969082 CET	49789	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:37.795196056 CET	49788	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:37.795233011 CET	49788	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:37.797610998 CET	49842	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:37.797684908 CET	49843	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:37.798356056 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.844048023 CET	443	49789	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:37.844145060 CET	49789	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:37.846307993 CET	443	49842	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:37.846338987 CET	443	49843	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:37.846391916 CET	49842	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:37.846424103 CET	49843	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:37.847368002 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.847690105 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:37.847748995 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.897733927 CET	49842	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:37.898869991 CET	49843	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:37.911587000 CET	49844	843	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:37.946477890 CET	443	49842	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:37.946696043 CET	443	49842	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:37.946842909 CET	49842	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:37.947777033 CET	443	49843	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:37.947966099 CET	443	49843	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:37.948021889 CET	49843	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:37.953659058 CET	49842	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:37.956670046 CET	49843	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:37.957181931 CET	49842	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:38.005923033 CET	443	49842	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:38.006246090 CET	443	49842	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:38.006268024 CET	443	49842	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:38.006418943 CET	49842	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:38.006464005 CET	49842	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:38.045049906 CET	443	49843	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:38.148109913 CET	443	49774	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:38.148128033 CET	443	49774	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:38.148188114 CET	49774	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:38.298461914 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.347451925 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.347744942 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.347829103 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.352930069 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.402102947 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.409221888 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.409276009 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.409404039 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.409432888 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.409815073 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.409868002 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.409909010 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.409965038 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.410115957 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.410173893 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.410207033 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.410258055 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.410291910 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.410346031 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.410450935 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.410501957 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.410547972 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.410593987 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.411267996 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.411345005 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.464541912 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.513462067 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.513501883 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.513591051 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.545147896 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.546499014 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.546899080 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.594655991 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.596317053 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.596676111 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.597162008 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.597368002 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.598071098 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.598114014 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.598153114 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.598186970 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.598233938 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.598283052 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.598292112 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.598297119 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.598325968 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.598393917 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.605705023 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.605772018 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.605815887 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.605845928 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.605854988 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.605887890 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.605894089 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.605895996 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.605915070 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.605935097 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.605962038 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.605993986 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.606137991 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.606182098 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.606205940 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.606220961 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.606246948 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.606259108 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.606283903 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.606342077 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.655479908 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.655535936 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.655576944 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.655616045 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.655653954 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.655684948 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.655693054 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.655724049 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.655730963 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.655731916 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.655736923 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.655781031 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.655788898 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.655823946 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.655838013 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.655860901 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.655874968 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.655899048 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.655913115 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.655937910 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.655949116 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.655975103 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.655988932 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.656013012 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.656028032 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.656054020 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.656086922 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.656100988 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.656105995 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.656142950 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.656157017 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.656179905 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.656198025 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.656218052 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.656234026 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.656255960 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.656270027 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.656311035 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.666326046 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.667073965 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.669652939 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.705065012 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.705089092 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.705106974 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.705123901 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.705137968 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.705176115 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.705220938 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.715549946 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.715579987 CET	443	49835	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.715724945 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.715754986 CET	49835	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.719237089 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.719418049 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.722326040 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.722428083 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.737447023 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.786408901 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.788181067 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.788223028 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.788250923 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.788271904 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.788275003 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.788295984 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.788321018 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.788328886 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.788379908 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.805844069 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.855067015 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.855331898 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.855348110 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.855477095 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.855508089 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.871922970 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.872196913 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:38.924165010 CET	443	49831	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:38.924304008 CET	49831	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.052156925 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.053303003 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.054106951 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:39.103427887 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.105007887 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.105366945 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.105500937 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.106874943 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.106910944 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.106935978 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.106960058 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.106964111 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.106983900 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.107007027 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.107008934 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.107044935 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.107076883 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.107083082 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.107109070 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.107132912 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.107136011 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.107152939 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.107161999 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.107186079 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.107203960 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.109493017 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:39.109522104 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:39.109544992 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:39.109574080 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:39.109590054 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:39.109603882 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:39.109613895 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:39.109631062 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:39.109653950 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:39.109658003 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:39.109688044 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:39.109709978 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:39.109713078 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:39.109735012 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:39.109757900 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:39.109767914 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:39.109791040 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:39.109802008 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:39.115113020 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.161216021 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:39.161341906 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:39.166804075 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.166932106 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.167018890 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.185193062 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.199198961 CET	49837	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.205133915 CET	49849	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.234360933 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.237878084 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.237909079 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.237926006 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.237943888 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.237960100 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.237976074 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.237989902 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.238034964 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.238080025 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.238084078 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.238105059 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.238121986 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.238135099 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.238136053 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.238159895 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.238189936 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.248414993 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.248435020 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.250669956 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.250766993 CET	49837	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.253942966 CET	443	49849	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.254077911 CET	49849	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.255022049 CET	49849	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.256623030 CET	49837	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.258590937 CET	49850	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.277703047 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:39.286914110 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.287014008 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.303741932 CET	443	49849	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.304007053 CET	443	49849	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.304085970 CET	49849	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.305572033 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.306047916 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.306157112 CET	49837	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.307537079 CET	443	49850	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.307637930 CET	49850	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.326750040 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:39.326771975 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:39.328461885 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:39.328589916 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:39.391751051 CET	49849	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.393781900 CET	49850	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.393878937 CET	49851	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.442852974 CET	443	49851	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.442897081 CET	443	49850	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.442965031 CET	443	49850	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.442982912 CET	49851	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.443007946 CET	443	49850	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.443048954 CET	443	49850	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.443072081 CET	49850	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.443077087 CET	443	49850	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.443118095 CET	49850	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.443124056 CET	49850	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.443128109 CET	49850	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.444183111 CET	443	49850	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.444217920 CET	443	49850	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.444271088 CET	49850	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.444294930 CET	49850	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.444392920 CET	49851	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.453087091 CET	49850	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.453947067 CET	49850	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.480110884 CET	443	49849	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.493372917 CET	443	49851	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.493479967 CET	443	49851	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.493526936 CET	443	49851	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.493566990 CET	443	49851	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.493576050 CET	49851	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.493594885 CET	443	49851	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.493608952 CET	49851	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.493626118 CET	49851	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.493652105 CET	49851	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.494579077 CET	443	49851	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.494611025 CET	443	49851	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.494654894 CET	49851	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.494680882 CET	49851	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.498605013 CET	49851	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.502346992 CET	443	49850	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.502486944 CET	49850	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.503192902 CET	443	49850	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.503226042 CET	443	49850	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.503267050 CET	49850	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.503320932 CET	49850	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.528502941 CET	49850	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.547811031 CET	443	49851	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.547897100 CET	49851	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:56:39.577713013 CET	443	49850	91.235.134.131	192.168.2.4
Jan 12, 2021 16:56:39.719522953 CET	49837	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.769507885 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.776036978 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.776065111 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.776082039 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.776098967 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.776115894 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.776138067 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.776144028 CET	49837	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.776155949 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.776171923 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.776182890 CET	49837	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.776187897 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:39.776246071 CET	49837	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.776271105 CET	49837	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:39.816548109 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:39.865359068 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:39.866697073 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:39.866851091 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:40.010808945 CET	443	49842	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:40.010864019 CET	443	49842	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:40.010951042 CET	49842	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:40.011002064 CET	49842	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:40.366133928 CET	49837	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.415323019 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.415910959 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.415930986 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.416021109 CET	49837	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.416064024 CET	49837	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.416208982 CET	49837	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.416229010 CET	49837	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.465343952 CET	443	49837	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.465460062 CET	49837	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.591651917 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.592776060 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.598328114 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.618237019 CET	49849	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.641540051 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.641936064 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.642009020 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.642496109 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.647897959 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.648933887 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.648998022 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.649027109 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.649064064 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.649104118 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.649122953 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.649127960 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.649185896 CET	443	49828	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.649187088 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.649236917 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.649358034 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.649404049 CET	49828	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.655771017 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.655843019 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.655865908 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.655900002 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.655935049 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.655953884 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.655965090 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.656022072 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.656024933 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.656080961 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.656081915 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.656141043 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.656141043 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.656194925 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.656197071 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.656251907 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.656255007 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.656308889 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.656312943 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.656367064 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.667452097 CET	443	49849	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.667495966 CET	443	49849	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.667680025 CET	443	49849	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.667756081 CET	49849	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.705317974 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.705401897 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.705408096 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.705461025 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.705476999 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.705511093 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.705527067 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.705580950 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.708955050 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.709008932 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.709039927 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.709041119 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.709081888 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.709086895 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.709104061 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.709120989 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.709150076 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.709155083 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.709191084 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.709191084 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.709220886 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.709229946 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.709264040 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.709264040 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.709289074 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.709297895 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.709331036 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.709331036 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.709356070 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.709371090 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.709435940 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.709450006 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.709450006 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.709498882 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.709517002 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.709542990 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.709564924 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.709587097 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.709609985 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.709650993 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.755481958 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.755522013 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.755553007 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.755584955 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.755583048 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.755642891 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.755652905 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.755780935 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.755841017 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.784399986 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.784964085 CET	49849	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.834826946 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.834883928 CET	443	49849	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.834922075 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.834959984 CET	443	49849	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:40.835019112 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:40.835064888 CET	49849	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.026817083 CET	49849	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.067251921 CET	49844	843	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.075808048 CET	443	49849	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.077889919 CET	443	49849	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.077923059 CET	443	49849	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.077944994 CET	443	49849	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.077961922 CET	443	49849	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.077975035 CET	443	49849	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.078017950 CET	49849	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.078058004 CET	49849	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.087471962 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.108639956 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:41.108669996 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:41.108760118 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:41.108798981 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:41.136532068 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.136717081 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.136790991 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.136893034 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.137360096 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.138355017 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.138396978 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.149769068 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.151859045 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.154117107 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:41.154134989 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:41.154752970 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:41.187371016 CET	443	49836	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.187539101 CET	49836	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.192254066 CET	49853	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.198721886 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.200813055 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.200927019 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.202058077 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.202065945 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.202090979 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.202112913 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.202133894 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.202138901 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.202156067 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.202174902 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.202178955 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.202229977 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.202930927 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.202956915 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.202977896 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.202996969 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.202996016 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.203016043 CET	443	49834	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:41.203048944 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.203084946 CET	49834	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:41.207199097 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:41.207232952 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:41.207257986 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:41.207278967 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:41.207297087 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:41.207319975 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:41.207339048 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:41.207343102 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:41.207364082 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:41.207374096 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:41.207380056 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:41.207385063 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:41.207407951 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:41.207421064 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:41.207453012 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:41.222040892 CET	49854	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.226404905 CET	49855	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.241369963 CET	443	49853	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.241471052 CET	49853	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.246583939 CET	49853	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.251111984 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.251470089 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.251534939 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.252271891 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.256109953 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:41.256212950 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:41.256745100 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.270992041 CET	443	49854	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.271135092 CET	49854	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.272006035 CET	49854	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.275521994 CET	443	49855	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.276190996 CET	49855	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.276215076 CET	49855	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.295584917 CET	443	49853	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.295665979 CET	443	49853	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.295737028 CET	49853	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.296350956 CET	49853	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.297887087 CET	49853	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.305674076 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.306076050 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.306196928 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.306982040 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.320859909 CET	443	49854	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.321001053 CET	443	49854	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.321217060 CET	49854	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.323123932 CET	49854	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.325038910 CET	443	49855	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.325234890 CET	443	49855	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.325563908 CET	49854	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.325830936 CET	49855	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.326498032 CET	49862	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:41.327316046 CET	49855	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.343332052 CET	49855	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.343393087 CET	49842	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:41.343957901 CET	49842	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:41.345805883 CET	49843	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:41.347129107 CET	443	49853	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.347428083 CET	443	49853	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.349818945 CET	49853	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.350550890 CET	49853	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.356235981 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.359684944 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.359709978 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.359730959 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.359755993 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.359780073 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.359802961 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.359826088 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.359838009 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.359847069 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.359869957 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.359885931 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.359899998 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.359925032 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.367206097 CET	49849	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.374545097 CET	443	49854	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.375276089 CET	443	49862	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:41.375381947 CET	49862	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:41.376909018 CET	49862	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:41.377077103 CET	443	49854	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.377201080 CET	49854	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.392888069 CET	443	49842	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:41.393021107 CET	443	49855	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.393039942 CET	443	49855	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.393161058 CET	49842	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:41.394510984 CET	443	49843	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:41.394607067 CET	443	49855	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.394684076 CET	49855	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.395215034 CET	443	49843	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:41.395229101 CET	443	49843	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:41.395318985 CET	49843	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:41.395339966 CET	49843	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:41.399573088 CET	443	49853	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.401458979 CET	443	49853	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.402035952 CET	49853	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.416245937 CET	443	49849	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.416515112 CET	443	49849	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.416613102 CET	49849	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.426017046 CET	443	49862	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:41.426044941 CET	443	49862	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:41.426136017 CET	49862	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:41.426629066 CET	49862	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:41.428282976 CET	49862	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:41.477088928 CET	443	49862	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:41.478892088 CET	443	49862	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:41.479780912 CET	49862	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:41.550601006 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.600227118 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.600833893 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.601474047 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.608803988 CET	49843	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:41.632137060 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.657982111 CET	443	49843	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:41.658003092 CET	443	49843	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:41.658102036 CET	49843	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:41.658127069 CET	49843	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:41.681658983 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.682106018 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:41.683188915 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:41.980271101 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:42.025809050 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:42.029371023 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:42.029596090 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:42.029716015 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:42.064212084 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:42.078274012 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:42.079143047 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:42.079437017 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:42.081906080 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:42.116530895 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:42.116574049 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:42.116781950 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:42.130625010 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:42.130919933 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:42.133202076 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:42.161601067 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:42.180675983 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:42.210803032 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:42.211338043 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:42.211400032 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:42.211405039 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:42.211458921 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:42.211636066 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:42.211734056 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:42.229734898 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:42.230231047 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:42.230287075 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:42.230293036 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:42.230336905 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:42.230453968 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:42.230479956 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:42.260440111 CET	443	49832	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:42.261485100 CET	49832	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:42.279253960 CET	443	49852	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:42.279356003 CET	49852	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:42.683351994 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:42.685344934 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:42.733263016 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:42.734649897 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:42.734680891 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:42.734749079 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:42.734776020 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:42.735076904 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:42.735137939 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:42.735183954 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:42.735236883 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:42.735505104 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:56:42.738197088 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:42.738229036 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:42.738342047 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:42.738396883 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:42.738594055 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:42.738655090 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:42.738663912 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:42.738724947 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:42.738847971 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:56:42.789221048 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:56:42.793148994 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:56:43.378240108 CET	443	49854	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:43.378279924 CET	443	49854	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:43.378432989 CET	49854	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:43.378472090 CET	49854	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:43.396117926 CET	443	49855	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:43.396161079 CET	443	49855	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:43.396348000 CET	49855	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:43.403073072 CET	443	49853	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:43.403101921 CET	443	49853	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:43.403340101 CET	49853	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:43.418106079 CET	443	49849	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:43.418133020 CET	443	49849	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:43.418261051 CET	49849	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:43.480670929 CET	443	49862	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:43.480715036 CET	443	49862	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:43.480797052 CET	49862	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:43.480839968 CET	49862	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:43.659392118 CET	443	49843	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:43.659429073 CET	443	49843	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:43.659548998 CET	49843	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:43.689966917 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:43.738682032 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:43.785737991 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:43.785769939 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:43.785887957 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:43.786041975 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:43.786060095 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:43.786093950 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:43.786149979 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:43.786542892 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:43.786636114 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:43.786645889 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:43.786695004 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:43.832036972 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:43.881021976 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:44.078685999 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:44.078732014 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:44.078797102 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:44.078845978 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:44.519648075 CET	49849	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.519707918 CET	49849	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.520569086 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:44.520716906 CET	49853	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.520759106 CET	49853	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.521122932 CET	49855	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.521142006 CET	49855	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.522332907 CET	49854	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.522367954 CET	49854	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.523551941 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.525013924 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.569541931 CET	443	49849	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.569576025 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:44.569590092 CET	443	49853	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.569642067 CET	49849	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.569679976 CET	49853	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.569916964 CET	443	49855	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.569967985 CET	49855	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.570116997 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:44.570235968 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:44.571130037 CET	443	49854	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.571214914 CET	49854	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.575503111 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.575536966 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.575617075 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.575684071 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.576632023 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.577434063 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.625591040 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.625766993 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.625847101 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.626203060 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.626395941 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.626467943 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.627263069 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.629873991 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.631995916 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.681077957 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.686937094 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.687020063 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.687113047 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.687123060 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.687165022 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.687181950 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.687227964 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.687279940 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.687359095 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.687412024 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.687513113 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.687565088 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.688077927 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.688098907 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.688116074 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.688147068 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.688193083 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:44.718204975 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:44.754376888 CET	443	49794	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:44.754487991 CET	49794	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:45.322648048 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.323447943 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.324568033 CET	49865	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.328489065 CET	49866	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.371882915 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.372199059 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.372284889 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.372369051 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.372400045 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.373562098 CET	443	49865	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.373666048 CET	49865	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.374303102 CET	49865	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.377485037 CET	443	49866	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.377604961 CET	49866	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.378374100 CET	49866	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.384897947 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.384952068 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.384994030 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.385011911 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.385031939 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.385044098 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.385050058 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.385072947 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.385077000 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.385113001 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.385119915 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.385150909 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.385164976 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.385193110 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.385195971 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.385229111 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.385245085 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.385274887 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.385278940 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.385327101 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.423700094 CET	443	49865	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.423798084 CET	443	49865	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.423912048 CET	49865	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.427316904 CET	443	49866	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.427505970 CET	443	49866	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.427589893 CET	49866	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.434253931 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.434340000 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.434401989 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.434416056 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.434432983 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.434474945 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.434478998 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.434551001 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.434554100 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.434597969 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.434612036 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.434674025 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.434676886 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.434725046 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.434736013 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.434789896 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.434798956 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.434849977 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.434868097 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.434931993 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.434938908 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.434992075 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.435002089 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.435050964 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.435065985 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.435113907 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.435127020 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.435175896 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.435184956 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.435239077 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.435245037 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.435295105 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.435306072 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.435355902 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.435373068 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.435434103 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.435445070 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.435494900 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.435503960 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.435558081 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.485594988 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.485641956 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.485661983 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.485687971 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.485708952 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.485796928 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.485845089 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.523093939 CET	49866	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.525340080 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.525630951 CET	49866	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.574628115 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.574661016 CET	443	49866	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.574968100 CET	443	49866	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.575100899 CET	49866	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.576838970 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.576868057 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.576889992 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.576908112 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.576946020 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.576991081 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.577044964 CET	443	49864	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:45.577097893 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.609873056 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.609916925 CET	49864	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.612870932 CET	49865	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:45.702255011 CET	443	49865	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:46.771596909 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:46.820671082 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:46.824197054 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:46.824224949 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:46.824245930 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:46.824264050 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:46.824280977 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:46.824347019 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:46.824405909 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:46.824414015 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.291327953 CET	49866	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.340467930 CET	443	49866	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.340580940 CET	443	49866	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.340657949 CET	443	49866	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.340687990 CET	49866	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.340780973 CET	49866	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.340801001 CET	49866	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.340838909 CET	49866	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.390078068 CET	443	49866	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.390255928 CET	49866	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.615066051 CET	49865	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.651117086 CET	49867	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.652048111 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.652338028 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.652362108 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.652683020 CET	49862	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.652731895 CET	49862	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.653539896 CET	49869	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.654340982 CET	49870	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.664266109 CET	443	49865	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.664318085 CET	443	49865	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.667844057 CET	443	49865	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.667893887 CET	443	49865	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.667922974 CET	49865	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.667932034 CET	443	49865	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.667951107 CET	49865	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.667969942 CET	443	49865	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.667974949 CET	49865	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.668006897 CET	443	49865	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.668009043 CET	49865	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.668045044 CET	443	49865	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.668047905 CET	49865	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.668083906 CET	443	49865	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.668087006 CET	49865	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.668122053 CET	49865	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.668131113 CET	443	49865	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.668173075 CET	443	49865	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.668174028 CET	49865	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.668201923 CET	443	49865	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.668215036 CET	49865	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.668242931 CET	49865	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.697069883 CET	49871	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.697922945 CET	49872	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.700108051 CET	443	49867	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.700247049 CET	49867	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.700987101 CET	443	49833	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.701004982 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.701057911 CET	49833	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.701122046 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.701448917 CET	443	49862	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.701514006 CET	49862	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.701719999 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.702439070 CET	443	49869	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.702511072 CET	49869	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.703330040 CET	443	49870	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.703423023 CET	49870	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.703946114 CET	49870	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.713080883 CET	49867	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.713344097 CET	49869	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.747033119 CET	443	49871	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.747062922 CET	443	49872	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.747196913 CET	49871	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.748224974 CET	49872	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.748904943 CET	49872	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.750691891 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.750840902 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.750933886 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.752794027 CET	443	49870	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.752914906 CET	443	49870	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.752989054 CET	49870	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.762125969 CET	443	49867	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.762150049 CET	443	49869	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.762229919 CET	443	49867	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.762311935 CET	49867	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.762314081 CET	443	49869	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.762403965 CET	49869	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.798119068 CET	443	49872	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.798147917 CET	443	49872	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.798269033 CET	49872	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.827982903 CET	49872	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.829926968 CET	49869	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.831896067 CET	49867	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.833287954 CET	49872	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.833611012 CET	49869	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.833942890 CET	49867	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.834640980 CET	49871	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.835505962 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.838903904 CET	49870	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.877226114 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.882446051 CET	443	49872	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.882472992 CET	443	49869	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.882828951 CET	443	49867	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.883230925 CET	443	49867	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.883244038 CET	443	49871	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.883354902 CET	49867	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.883584976 CET	443	49871	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.883666992 CET	49871	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.883996010 CET	443	49872	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.884084940 CET	49872	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.886220932 CET	443	49869	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.886245966 CET	443	49869	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.886260986 CET	443	49869	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.886281013 CET	443	49869	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.886287928 CET	49869	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.886298895 CET	443	49869	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.886316061 CET	49869	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.886316061 CET	443	49869	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.886353016 CET	49869	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.886354923 CET	443	49869	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.886396885 CET	49869	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.886413097 CET	443	49869	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.886430979 CET	443	49869	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.886447906 CET	443	49869	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.886457920 CET	49869	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.886481047 CET	49869	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.886497974 CET	49869	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.925004959 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.926297903 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.926688910 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.926811934 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.927448988 CET	443	49870	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.934655905 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.935245037 CET	443	49869	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:47.935368061 CET	49869	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:47.935410976 CET	49871	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.983724117 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.987504959 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.987528086 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.987544060 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.987557888 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.987574100 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.987581015 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.987591028 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.987612009 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.987628937 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.987629890 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.987643957 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.987673044 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:47.987683058 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:47.987723112 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:48.025012016 CET	443	49871	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:48.202111006 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:48.250267982 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:48.250293970 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:48.298281908 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:48.298329115 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:48.298341036 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:48.298352957 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:48.298424959 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:48.298460007 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:48.419091940 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:48.421230078 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:56:48.468086958 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:48.468471050 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:48.468612909 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:48.469252110 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:56:48.714148045 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:48.767760992 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:48.768079042 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:48.768194914 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:48.900388002 CET	49843	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:48.900425911 CET	49843	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:48.902793884 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:48.949228048 CET	443	49843	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:48.949398041 CET	49843	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:48.951849937 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:48.952177048 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:48.952374935 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:48.998104095 CET	49877	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:49.001688004 CET	49878	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:49.047272921 CET	443	49877	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:49.047519922 CET	49877	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:49.050496101 CET	443	49878	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:49.050651073 CET	49878	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:49.058023930 CET	49877	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:49.058351994 CET	49878	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:49.108033895 CET	443	49877	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:49.108062983 CET	443	49878	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:49.108104944 CET	443	49877	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:49.108196020 CET	49877	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:49.108278036 CET	443	49878	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:49.108465910 CET	49878	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:49.108916998 CET	49877	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:49.111808062 CET	49877	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:49.114662886 CET	49878	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:49.160887957 CET	443	49877	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:49.162548065 CET	443	49877	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:49.162570953 CET	443	49877	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:49.162667990 CET	49877	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:49.203190088 CET	443	49878	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:49.330877066 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:49.380227089 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:49.380376101 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:49.380531073 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:49.450051069 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:49.499135017 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:49.499423027 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:49.499486923 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:49.503878117 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:49.553529978 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:49.553577900 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:49.553677082 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:49.574197054 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:49.623565912 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:49.623795986 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:49.623886108 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:49.669059992 CET	443	49865	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:49.669086933 CET	443	49865	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:49.669168949 CET	49865	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:49.680989027 CET	49865	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:49.686980009 CET	49865	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:49.688364029 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:49.730038881 CET	443	49865	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:49.730123997 CET	49865	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:49.737327099 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:49.737510920 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:49.737606049 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:49.754466057 CET	443	49794	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:49.754582882 CET	49794	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:49.885257006 CET	443	49867	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:49.885287046 CET	443	49867	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:49.885396957 CET	49867	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:49.886063099 CET	443	49872	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:49.886116982 CET	443	49872	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:49.886194944 CET	49872	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:49.886234999 CET	49872	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:49.887653112 CET	443	49869	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:49.887691975 CET	443	49869	91.235.132.130	192.168.2.4
Jan 12, 2021 16:56:49.887747049 CET	49869	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:49.887788057 CET	49869	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:56:50.470174074 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:50.470206022 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:50.470280886 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:50.754761934 CET	443	49794	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:50.754791975 CET	443	49794	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:50.754899979 CET	49794	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:50.772027016 CET	49794	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:50.819617033 CET	443	49794	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:51.163584948 CET	443	49877	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:51.163630009 CET	443	49877	91.235.132.129	192.168.2.4
Jan 12, 2021 16:56:51.163784981 CET	49877	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:56:51.739687920 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:51.739727974 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:51.739839077 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:52.432718039 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:52.476330996 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:52.476453066 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:53.817939043 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:53.860434055 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:53.860472918 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:56:53.860565901 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:53.860610008 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:56:55.429789066 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:55.472678900 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:55.472824097 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:55.583630085 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:55.600951910 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:55.626518965 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:56:55.626705885 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:56:55.648673058 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:55.648725033 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:55.740720987 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:55.740936041 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:55.741168022 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:56:55.788763046 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:56:59.428145885 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.428210020 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.428714037 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.428761959 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.430191994 CET	49872	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.430211067 CET	49872	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.430533886 CET	49867	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.430556059 CET	49867	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.430870056 CET	49871	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.433799982 CET	49879	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.437532902 CET	49880	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.477130890 CET	443	49868	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.477236986 CET	49868	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.477559090 CET	443	49863	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.477639914 CET	49863	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.478857040 CET	443	49872	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.478918076 CET	49872	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.479300976 CET	443	49867	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.479360104 CET	49867	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.479460001 CET	443	49871	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.479494095 CET	443	49871	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.479516029 CET	49871	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.479547977 CET	49871	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.482652903 CET	443	49879	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.482765913 CET	49879	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.483434916 CET	49879	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.486465931 CET	443	49880	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.486526966 CET	49880	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.529303074 CET	49880	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.532162905 CET	443	49879	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.532335043 CET	443	49879	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.532422066 CET	49879	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.533049107 CET	49879	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.534836054 CET	49879	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.578572035 CET	443	49880	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.578639030 CET	443	49880	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.578744888 CET	49880	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.579395056 CET	49880	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.583762884 CET	443	49879	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.588224888 CET	443	49879	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.588289022 CET	443	49879	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.588323116 CET	443	49879	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.588330984 CET	49879	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.588356972 CET	443	49879	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.588396072 CET	443	49879	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.588408947 CET	49879	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.588417053 CET	49879	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.588421106 CET	49879	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.588449001 CET	49879	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.588488102 CET	443	49879	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.588526964 CET	443	49879	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.588543892 CET	49879	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.588562012 CET	443	49879	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.588571072 CET	49879	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.588592052 CET	443	49879	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.588612080 CET	49879	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.588639975 CET	49879	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:56:59.626895905 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:56:59.668184042 CET	443	49880	91.235.133.67	192.168.2.4
Jan 12, 2021 16:56:59.675302029 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:59.676436901 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:56:59.676491022 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:57:00.156842947 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:57:00.178597927 CET	49879	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:00.180109978 CET	49880	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:00.186408043 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:00.191200972 CET	49879	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:00.191201925 CET	49880	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:00.202590942 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:57:00.202713966 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:57:00.227595091 CET	443	49879	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:00.227715015 CET	49879	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:00.227824926 CET	443	49879	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:00.227880001 CET	49879	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:00.229087114 CET	443	49880	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:00.229101896 CET	443	49880	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:00.229156971 CET	49880	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:00.229180098 CET	49880	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:00.235515118 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:00.235599041 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:00.240108013 CET	443	49880	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:00.240139008 CET	443	49880	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:00.240178108 CET	49880	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:00.240181923 CET	443	49880	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:00.240199089 CET	443	49880	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:00.240206003 CET	49880	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:00.240216017 CET	443	49880	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:00.240231991 CET	443	49880	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:00.240262985 CET	49880	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:00.240298986 CET	49880	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:00.240768909 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:00.289977074 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:00.290045977 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:00.290111065 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:00.290874958 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:00.379897118 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:01.355477095 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:57:01.398114920 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:57:01.398130894 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:57:01.398278952 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:57:02.948291063 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:02.997705936 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:02.997750044 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.002243996 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.002319098 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.002398968 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.002439976 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.002441883 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.002477884 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.002490044 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.002516985 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.002521992 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.002547026 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.002566099 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.002564907 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.002609015 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.002644062 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.002660036 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.002692938 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.004472017 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.008176088 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.814163923 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.815315008 CET	49882	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.823596001 CET	49883	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.863504887 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.864384890 CET	443	49882	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.864470005 CET	49882	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.872770071 CET	443	49883	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.872860909 CET	49883	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.874675989 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.874722004 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.874759912 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.874799967 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.874804974 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.874835968 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.874861002 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.874886036 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.874921083 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.874924898 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.874964952 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.874979973 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.875001907 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.875019073 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.875041008 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.875060081 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.875078917 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.875099897 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.875137091 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.886363029 CET	49882	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.898716927 CET	49883	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.924392939 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.924462080 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.924494028 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.924534082 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.924571037 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.924607992 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.924644947 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.924680948 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.924686909 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.924737930 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.924741983 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.924745083 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.924855947 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.924899101 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.924911976 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.924935102 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.924947023 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.924983025 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.924987078 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.925033092 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.925184011 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.925235987 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.925254107 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.925309896 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.925322056 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.925359011 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.925378084 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.925410032 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.925437927 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.925487041 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.925493002 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.925528049 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.925537109 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.925566912 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.925590038 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.925621986 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.935467958 CET	443	49882	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.935487032 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.935570002 CET	443	49882	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.935627937 CET	49882	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.936213970 CET	49882	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.937726021 CET	49882	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.947638988 CET	443	49883	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.947851896 CET	443	49883	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.947909117 CET	49883	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.948590040 CET	49883	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.950165033 CET	49883	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.974298000 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.974353075 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.974392891 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.974431038 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.974438906 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.974464893 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.974478006 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.974530935 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.984357119 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.984510899 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.986784935 CET	443	49882	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.987134933 CET	443	49882	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:03.987221003 CET	49882	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:03.999166965 CET	443	49883	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.001137972 CET	443	49883	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.001189947 CET	443	49883	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.001243114 CET	49883	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.001244068 CET	443	49883	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.001280069 CET	443	49883	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.001281977 CET	49883	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.001305103 CET	443	49883	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.001311064 CET	49883	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.001338959 CET	49883	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.001365900 CET	49883	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.145071983 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.145345926 CET	49748	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:57:04.145514011 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:57:04.146980047 CET	49885	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.168112040 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.169193029 CET	49883	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.169223070 CET	49883	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.187942028 CET	443	49748	151.101.2.133	192.168.2.4
Jan 12, 2021 16:57:04.187999964 CET	443	49748	151.101.2.133	192.168.2.4
Jan 12, 2021 16:57:04.188081980 CET	49748	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:57:04.188095093 CET	49748	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:57:04.188297987 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:57:04.188358068 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:57:04.194432974 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.194691896 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.194770098 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.195739031 CET	443	49885	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.195900917 CET	49885	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.195977926 CET	49882	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.203350067 CET	49885	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.216938972 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.217154026 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.217243910 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.217896938 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.245070934 CET	443	49882	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.245302916 CET	443	49882	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.245331049 CET	443	49882	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.245361090 CET	49882	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.245378971 CET	49882	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.249902010 CET	49882	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.249948978 CET	49882	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.252088070 CET	443	49885	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.252450943 CET	443	49885	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.252532005 CET	49885	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.262831926 CET	49885	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.287715912 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.299236059 CET	443	49882	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.299331903 CET	49882	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.305996895 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.322674990 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.337104082 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.340483904 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.340528965 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.340574980 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.340610027 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.340698957 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.340750933 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.340861082 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.340900898 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.340907097 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.340948105 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.340965033 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.340986013 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.340990067 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.341026068 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.341037035 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.341059923 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.341064930 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.341094017 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.341105938 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.341131926 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.350918055 CET	443	49885	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.371531963 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.371871948 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.372013092 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.409765959 CET	49869	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.409781933 CET	49869	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.410120964 CET	49870	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.426594973 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.441591978 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.443432093 CET	49886	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.458698034 CET	443	49869	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.458762884 CET	49869	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.459017038 CET	443	49870	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.459045887 CET	443	49870	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.459103107 CET	49870	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.459148884 CET	49870	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.475610018 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.475848913 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.475955009 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.490515947 CET	443	49887	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.490633965 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.492583990 CET	443	49886	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.492683887 CET	49886	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.524173021 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.524600029 CET	49886	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.536323071 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.538263083 CET	49885	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.573255062 CET	443	49887	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.573355913 CET	443	49887	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.573421001 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.573582888 CET	443	49886	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.573832035 CET	443	49886	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.573899031 CET	49886	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.584177017 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.585148096 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.586158991 CET	49886	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.587090015 CET	443	49885	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.587106943 CET	443	49885	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.588320017 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.588565111 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.588641882 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.588695049 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.588717937 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.588745117 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.588748932 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.588772058 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.588792086 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.588793993 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.588835955 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.588912964 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.588944912 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.588968039 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.588977098 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.588994980 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.589005947 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.589010954 CET	443	49885	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.589030981 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.589061975 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.589267969 CET	49885	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.590245962 CET	49885	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.591188908 CET	49888	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.637196064 CET	443	49887	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.639098883 CET	443	49885	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.640031099 CET	443	49888	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.640130997 CET	49888	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.641177893 CET	443	49885	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.641211987 CET	443	49885	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.641244888 CET	443	49885	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.641269922 CET	443	49885	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.641344070 CET	49885	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.641366005 CET	443	49885	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:04.641412973 CET	49885	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.641431093 CET	49885	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:04.641802073 CET	443	49887	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.641869068 CET	443	49887	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.641884089 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.641916990 CET	443	49887	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.641942024 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.641963959 CET	443	49887	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.641982079 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.642013073 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.642035961 CET	443	49887	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.642064095 CET	443	49887	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.642077923 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.642103910 CET	443	49887	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.642116070 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.642152071 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.642246962 CET	443	49887	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.642276049 CET	443	49887	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.642302036 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.642322063 CET	443	49887	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.642359972 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.642390013 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:04.674582958 CET	443	49886	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.691024065 CET	443	49887	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:04.691174030 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:05.025166035 CET	49888	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:05.051870108 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:57:05.080883026 CET	443	49888	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:05.080914021 CET	443	49888	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:05.080990076 CET	49888	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:05.099301100 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:57:05.099461079 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:57:05.132539034 CET	49888	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:05.222132921 CET	443	49888	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:05.232490063 CET	49888	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:05.281460047 CET	443	49888	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:05.281507969 CET	443	49888	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:05.281959057 CET	443	49888	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:05.282043934 CET	49888	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:05.325318098 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:57:05.376549006 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:57:05.376651049 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:57:05.465461969 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:57:05.465626955 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:57:05.548254967 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:57:05.595922947 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:57:05.712155104 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:05.761218071 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:05.761368990 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:05.761487007 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:06.342309952 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:06.342354059 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:06.342394114 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:06.342468023 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:06.362613916 CET	49877	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:06.362678051 CET	49877	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:06.362983942 CET	49878	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:06.363883972 CET	49895	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:06.370990992 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:06.371056080 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:06.371695042 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:06.379980087 CET	49896	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:06.412175894 CET	443	49877	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:06.412215948 CET	443	49878	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:06.412249088 CET	443	49878	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:06.412365913 CET	49878	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:06.412363052 CET	49877	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:06.412381887 CET	49878	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:06.413088083 CET	443	49895	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:06.413193941 CET	49895	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:06.420164108 CET	443	49881	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:06.420248032 CET	49881	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:06.420536995 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:06.420861006 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:06.420964956 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:06.429053068 CET	443	49896	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:06.429160118 CET	49896	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:06.472103119 CET	49895	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:06.476059914 CET	49896	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:06.520999908 CET	443	49895	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:06.521044016 CET	443	49895	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:06.521145105 CET	49895	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:06.521605015 CET	49895	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:06.524003983 CET	49895	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:06.525057077 CET	443	49896	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:06.525234938 CET	443	49896	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:06.525300980 CET	49896	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:06.525758028 CET	49896	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:06.572968006 CET	443	49895	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:06.573431015 CET	443	49895	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:06.573465109 CET	443	49895	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:06.573577881 CET	49895	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:06.573594093 CET	49895	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:06.614146948 CET	443	49896	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:06.643429041 CET	443	49885	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:06.643471956 CET	443	49885	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:06.643567085 CET	49885	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:06.643584013 CET	49885	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:06.643723011 CET	443	49887	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:06.643752098 CET	443	49887	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:06.643821001 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:06.848318100 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:06.848350048 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:06.849033117 CET	49886	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:06.851517916 CET	49885	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:06.851547003 CET	49885	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:06.852191925 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:06.897347927 CET	443	49887	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:06.897448063 CET	49887	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:06.898199081 CET	443	49886	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:06.898240089 CET	443	49886	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:06.898269892 CET	443	49886	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:06.899708033 CET	443	49886	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:06.899800062 CET	49886	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:06.900141954 CET	443	49885	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:06.900197029 CET	49885	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:06.900926113 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:06.901060104 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:06.902653933 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:06.902729034 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:07.119519949 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:07.134917974 CET	49888	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:07.168484926 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:07.168533087 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:07.168664932 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:07.183916092 CET	443	49888	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:07.184211016 CET	443	49888	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:07.184283018 CET	49888	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:07.192441940 CET	49888	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:07.241245031 CET	443	49888	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:07.241724968 CET	443	49888	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:07.241790056 CET	443	49888	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:07.241796970 CET	49888	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:07.241839886 CET	49888	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:07.243824005 CET	49888	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:07.243848085 CET	49888	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:07.292623043 CET	443	49888	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:07.292759895 CET	49888	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:07.581209898 CET	443	49838	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:07.581264973 CET	443	49838	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:07.581401110 CET	49838	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:07.629563093 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:57:07.678221941 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:57:07.679361105 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:57:07.679511070 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:57:08.171843052 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:57:08.258232117 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:57:08.575378895 CET	443	49895	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:08.575422049 CET	443	49895	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:08.575608015 CET	49895	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:08.858567953 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:57:08.858769894 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:57:08.901851892 CET	443	49886	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:08.901895046 CET	443	49886	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:08.902026892 CET	49886	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:08.902081013 CET	49886	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:09.170012951 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:09.170058012 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:09.170121908 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:09.170160055 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:09.577863932 CET	443	49851	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:09.577907085 CET	443	49851	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:09.578084946 CET	49851	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:10.095335960 CET	49753	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:57:10.095551014 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:57:10.104402065 CET	443	49792	52.212.164.82	192.168.2.4
Jan 12, 2021 16:57:10.104456902 CET	443	49792	52.212.164.82	192.168.2.4
Jan 12, 2021 16:57:10.104474068 CET	443	49792	52.212.164.82	192.168.2.4
Jan 12, 2021 16:57:10.104645967 CET	49792	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:57:10.118169069 CET	49792	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:57:10.136302948 CET	443	49753	18.195.42.228	192.168.2.4
Jan 12, 2021 16:57:10.136405945 CET	49753	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:57:10.137614965 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:57:10.137645960 CET	443	49754	18.195.42.228	192.168.2.4
Jan 12, 2021 16:57:10.137782097 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:57:10.137852907 CET	49754	443	192.168.2.4	18.195.42.228
Jan 12, 2021 16:57:10.180542946 CET	443	49792	52.212.164.82	192.168.2.4
Jan 12, 2021 16:57:10.189841986 CET	443	49791	52.212.164.82	192.168.2.4
Jan 12, 2021 16:57:10.189857960 CET	443	49791	52.212.164.82	192.168.2.4
Jan 12, 2021 16:57:10.189867020 CET	443	49791	52.212.164.82	192.168.2.4
Jan 12, 2021 16:57:10.190032005 CET	49791	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:57:10.190078020 CET	49791	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:57:10.190542936 CET	49791	443	192.168.2.4	52.212.164.82
Jan 12, 2021 16:57:10.251055002 CET	443	49791	52.212.164.82	192.168.2.4
Jan 12, 2021 16:57:11.745249033 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:11.745903969 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:11.746131897 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:11.748503923 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:11.794363022 CET	443	49884	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:11.794500113 CET	49884	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:11.796056032 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:11.796235085 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:11.797072887 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:11.797251940 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:11.798022032 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:11.799909115 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:11.846084118 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:11.846338034 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:11.847316980 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:11.848582029 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:11.848813057 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:11.849939108 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:11.850812912 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:11.852755070 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:11.855385065 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:11.901859999 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:11.906495094 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:11.906577110 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:11.906645060 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:11.906678915 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:11.906683922 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:11.906722069 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:11.906744957 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:11.906759977 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:11.906784058 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:11.906796932 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:11.906819105 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:11.906832933 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:11.906851053 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:11.906867027 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:11.906924963 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:11.944164991 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.097598076 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.100091934 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.104624987 CET	49899	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.118988037 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.139539957 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:57:12.146745920 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.147000074 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.147164106 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.148199081 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.148844957 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.148858070 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.153300047 CET	443	49899	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.153430939 CET	49899	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.154772043 CET	49899	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.162132978 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.162162066 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.162188053 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.162209988 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.162230968 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.162235975 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.162251949 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.162301064 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.162322044 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.162364006 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.162386894 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.162406921 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.162415028 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.162427902 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.162436008 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.162455082 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.162487984 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.168056011 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.168262005 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.170202017 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.182151079 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:57:12.197238922 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.198973894 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.199017048 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.199055910 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.199086905 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.199143887 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.199189901 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.199198008 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.199239016 CET	443	49897	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.199306011 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.199354887 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.199362993 CET	49897	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.203408003 CET	443	49899	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.203639984 CET	443	49899	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.203725100 CET	49899	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.204282045 CET	49899	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.205959082 CET	49899	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.210944891 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.210987091 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.211025000 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.211064100 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.211061954 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.211112976 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.211147070 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.211224079 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.211265087 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.211285114 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.211301088 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.211311102 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.211350918 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.211400986 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.211443901 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.211450100 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.211481094 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.211492062 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.211524010 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.211528063 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.211570024 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.211574078 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.212151051 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.212208033 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.212214947 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.212269068 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.212326050 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.212342024 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.212388992 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.212430000 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.212466002 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.212500095 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.212503910 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.212512970 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.212542057 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.212553024 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.212590933 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.219351053 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.219398975 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.219489098 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.220031977 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.252971888 CET	49901	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.252979040 CET	49902	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.254703045 CET	443	49899	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.255072117 CET	443	49899	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.255247116 CET	49899	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.259826899 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.259871006 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.259907961 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.259958029 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.259964943 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.260005951 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.260238886 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.260291100 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.292774916 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.309003115 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.313947916 CET	443	49901	54.75.9.158	192.168.2.4
Jan 12, 2021 16:57:12.314464092 CET	49901	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.315498114 CET	49901	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.316602945 CET	443	49902	54.75.9.158	192.168.2.4
Jan 12, 2021 16:57:12.318012953 CET	49902	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.318751097 CET	49902	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.341726065 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.343358994 CET	49899	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.343518972 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.343564987 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.343605042 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.343616009 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.343636990 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.343648911 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.343666077 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.343677998 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.343749046 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.343754053 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.376470089 CET	443	49901	54.75.9.158	192.168.2.4
Jan 12, 2021 16:57:12.377219915 CET	443	49901	54.75.9.158	192.168.2.4
Jan 12, 2021 16:57:12.377264023 CET	443	49901	54.75.9.158	192.168.2.4
Jan 12, 2021 16:57:12.377294064 CET	443	49901	54.75.9.158	192.168.2.4
Jan 12, 2021 16:57:12.377361059 CET	49901	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.377420902 CET	49901	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.377428055 CET	49901	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.381509066 CET	49901	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.381808996 CET	49901	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.382188082 CET	443	49902	54.75.9.158	192.168.2.4
Jan 12, 2021 16:57:12.382908106 CET	49901	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.383243084 CET	443	49902	54.75.9.158	192.168.2.4
Jan 12, 2021 16:57:12.383285046 CET	443	49902	54.75.9.158	192.168.2.4
Jan 12, 2021 16:57:12.383315086 CET	443	49902	54.75.9.158	192.168.2.4
Jan 12, 2021 16:57:12.383374929 CET	49902	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.383423090 CET	49902	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.383429050 CET	49902	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.386624098 CET	49902	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.387142897 CET	49902	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.392553091 CET	443	49899	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.392796993 CET	443	49899	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.392838001 CET	443	49899	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.392863989 CET	49899	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.392908096 CET	49899	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.392997980 CET	49899	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.393033028 CET	49899	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.431888103 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.433970928 CET	49903	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.435765028 CET	49886	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.435796022 CET	49886	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.437575102 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.438205004 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.441674948 CET	443	49899	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.441791058 CET	49899	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.442583084 CET	443	49901	54.75.9.158	192.168.2.4
Jan 12, 2021 16:57:12.442615986 CET	443	49901	54.75.9.158	192.168.2.4
Jan 12, 2021 16:57:12.442635059 CET	443	49901	54.75.9.158	192.168.2.4
Jan 12, 2021 16:57:12.442735910 CET	49901	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.442781925 CET	49901	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.443310976 CET	49901	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.447211027 CET	443	49901	54.75.9.158	192.168.2.4
Jan 12, 2021 16:57:12.447241068 CET	443	49901	54.75.9.158	192.168.2.4
Jan 12, 2021 16:57:12.447324991 CET	49901	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.450014114 CET	49901	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.450300932 CET	443	49902	54.75.9.158	192.168.2.4
Jan 12, 2021 16:57:12.450330019 CET	443	49902	54.75.9.158	192.168.2.4
Jan 12, 2021 16:57:12.450426102 CET	49902	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.450460911 CET	49902	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.450611115 CET	443	49902	54.75.9.158	192.168.2.4
Jan 12, 2021 16:57:12.450690031 CET	49902	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.451530933 CET	49902	443	192.168.2.4	54.75.9.158
Jan 12, 2021 16:57:12.470613956 CET	49906	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.481240034 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.481281042 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.483375072 CET	443	49903	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.483504057 CET	49903	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.484755039 CET	443	49886	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:12.484869003 CET	49886	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.485198021 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.485240936 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.485277891 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.485306978 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.485315084 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.485351086 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.485414982 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.485420942 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.485425949 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.485430002 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.485466003 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.485506058 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.485543013 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.485536098 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.485575914 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.485579967 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.485604048 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.485616922 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.485683918 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.486006975 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.486377001 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:12.486468077 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.486934900 CET	443	49905	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:12.487020016 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.489029884 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.490566969 CET	49903	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.490914106 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.493635893 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.499113083 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.519753933 CET	443	49906	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.519891977 CET	49906	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.521641970 CET	49906	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.537817001 CET	443	49905	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:12.537906885 CET	443	49905	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:12.537978888 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.538594007 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.539562941 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:12.539772034 CET	443	49903	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.539800882 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:12.539889097 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.539954901 CET	443	49903	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.540054083 CET	49903	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.540287971 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.540793896 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.542612076 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.542737007 CET	49903	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.542741060 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.544197083 CET	443	49901	54.75.9.158	192.168.2.4
Jan 12, 2021 16:57:12.544877052 CET	49903	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.545309067 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.548082113 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.548182011 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.548683882 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.556257963 CET	443	49902	54.75.9.158	192.168.2.4
Jan 12, 2021 16:57:12.557120085 CET	49909	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.557965040 CET	49910	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.570702076 CET	443	49906	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.570969105 CET	443	49906	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.571044922 CET	49906	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.571690083 CET	49906	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.573199034 CET	49906	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.588913918 CET	443	49905	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:12.592742920 CET	443	49905	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:12.592783928 CET	443	49905	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:12.592822075 CET	443	49905	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:12.592828989 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.592853069 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.592859030 CET	443	49905	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:12.592880964 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.592896938 CET	443	49905	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:12.592912912 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.592935085 CET	443	49905	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:12.592947960 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.592998981 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.593223095 CET	443	49905	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:12.593277931 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.593364000 CET	443	49905	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:12.593420982 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.593430042 CET	443	49905	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:12.593472004 CET	443	49905	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:12.593487024 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.593522072 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.594152927 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.594182014 CET	443	49903	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.594371080 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.594441891 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.594621897 CET	443	49903	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.594772100 CET	49903	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.595323086 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.597498894 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.597796917 CET	49903	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.597814083 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.597939014 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.598014116 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.598591089 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.606098890 CET	443	49909	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.606203079 CET	49909	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.606848955 CET	443	49910	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.606949091 CET	49910	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.607053041 CET	49909	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.607722998 CET	49910	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.622284889 CET	443	49906	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.622504950 CET	443	49906	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.622574091 CET	49906	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.628712893 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:12.641582012 CET	443	49905	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:12.641666889 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:12.646667004 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.647209883 CET	443	49903	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.647279978 CET	443	49903	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.648978949 CET	443	49903	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.649168968 CET	49903	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.650047064 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.650119066 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.650122881 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.650146961 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.650190115 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.650194883 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.650222063 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.650224924 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.650240898 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.650264025 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.650268078 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.650290966 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.650305986 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.650317907 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.650335073 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.650342941 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.650362015 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.650362968 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.650384903 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.650409937 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.655973911 CET	443	49909	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.656091928 CET	443	49909	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.656131983 CET	443	49909	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.656157970 CET	443	49909	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.656158924 CET	49909	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.656173944 CET	49909	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.656176090 CET	443	49909	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.656202078 CET	49909	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.656227112 CET	49909	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.656543970 CET	443	49910	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.656816006 CET	443	49910	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.656842947 CET	443	49910	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.656867981 CET	443	49910	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.656877041 CET	49910	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.656903028 CET	443	49910	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.656910896 CET	49910	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.656928062 CET	49910	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.656950951 CET	49910	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.657263994 CET	443	49909	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.657284021 CET	443	49909	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.657325983 CET	49909	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.657347918 CET	49909	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.658011913 CET	443	49910	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.658034086 CET	443	49910	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.658087969 CET	49910	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.658107996 CET	49910	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.660914898 CET	49909	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.661473989 CET	49910	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.661614895 CET	49909	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.686933994 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.710009098 CET	443	49909	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.710081100 CET	49909	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.710573912 CET	443	49910	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.710647106 CET	49910	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.710778952 CET	443	49909	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.710808039 CET	443	49909	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.710840940 CET	49909	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.710884094 CET	49909	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.711100101 CET	49909	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.711128950 CET	49909	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.760121107 CET	443	49909	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:12.760207891 CET	49909	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:12.821080923 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:57:12.821187019 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:57:12.907840014 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:57:12.923192978 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:12.950676918 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:57:12.950819969 CET	443	49749	151.101.2.133	192.168.2.4
Jan 12, 2021 16:57:12.950920105 CET	49749	443	192.168.2.4	151.101.2.133
Jan 12, 2021 16:57:12.972510099 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.972799063 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:12.972904921 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:13.005012989 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:13.010081053 CET	49785	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:57:13.010401011 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:57:13.038609982 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:13.045902967 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:13.054280996 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:13.054609060 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:13.054694891 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:13.057600021 CET	443	49785	35.241.45.82	192.168.2.4
Jan 12, 2021 16:57:13.057765961 CET	49785	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:57:13.057924986 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:57:13.057936907 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:57:13.087343931 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:13.087356091 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:13.089154959 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:13.089257956 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:13.094599962 CET	443	49905	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:13.098087072 CET	443	49905	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:13.098180056 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:13.150892019 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:57:13.151216030 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:57:13.151225090 CET	49786	443	192.168.2.4	35.241.45.82
Jan 12, 2021 16:57:13.198699951 CET	443	49786	35.241.45.82	192.168.2.4
Jan 12, 2021 16:57:13.233112097 CET	49895	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:13.233304024 CET	49895	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:13.236355066 CET	49896	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:13.237211943 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:13.281861067 CET	443	49895	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:13.281945944 CET	49895	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:13.285161018 CET	443	49896	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:13.285748959 CET	443	49896	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:13.285762072 CET	443	49896	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:13.285940886 CET	49896	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:13.285979033 CET	49896	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:13.286118984 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:13.286437035 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:13.286521912 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:13.304637909 CET	49917	843	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:13.371557951 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:13.420481920 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:13.420608044 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:13.420686960 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:13.612463951 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:13.661366940 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:13.661639929 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:13.661673069 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:13.661720037 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:13.661766052 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:13.662276983 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:13.662307024 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:13.710978031 CET	443	49907	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:13.711112976 CET	49907	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:14.334614038 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:14.383367062 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:14.387753010 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:14.387770891 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:14.387783051 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:14.387794971 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:14.387811899 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:14.387823105 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:14.387856960 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:14.387897968 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:14.387902021 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:14.388134003 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:14.388159037 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:14.388171911 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:14.388190031 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:14.388205051 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:14.388230085 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:14.488426924 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:57:14.536828041 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:57:14.538554907 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:57:14.538757086 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:57:14.624577999 CET	443	49906	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:14.624592066 CET	443	49906	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:14.624685049 CET	49906	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:14.624752998 CET	49906	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:14.651164055 CET	443	49903	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:14.651179075 CET	443	49903	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:14.651247025 CET	49903	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:14.651288986 CET	49903	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.056274891 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.056309938 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.056427956 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.056478977 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.099107981 CET	443	49905	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:15.099139929 CET	443	49905	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:15.099281073 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:15.102272034 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:15.287803888 CET	443	49896	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:15.287849903 CET	443	49896	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:15.287993908 CET	49896	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:15.577474117 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.577529907 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.577857018 CET	49903	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.577897072 CET	49903	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.578164101 CET	49906	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.578213930 CET	49906	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.583024025 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.584407091 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.626789093 CET	443	49900	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.626966953 CET	443	49903	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.626995087 CET	443	49906	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.627075911 CET	49903	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.627078056 CET	49900	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.630291939 CET	49906	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.631961107 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.632258892 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.632489920 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.633456945 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.633486032 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.645622015 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.645664930 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.645692110 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.645723104 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.645751953 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.645797968 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.645838976 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.645874977 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.645911932 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.645921946 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.645948887 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.645951033 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.645956993 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.645961046 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.645981073 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.646025896 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.695074081 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.695127964 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.695167065 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.695224047 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.695259094 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.695280075 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.695323944 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.695338964 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.695359945 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.695378065 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.695406914 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.695411921 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.695447922 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.695461988 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.695485115 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.695502043 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.695523024 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.695544958 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.695559978 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.695578098 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.695595026 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.695616007 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.695647955 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.695841074 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.695880890 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.695916891 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.695919037 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.695955038 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.695957899 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.695972919 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.696011066 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.696396112 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.696435928 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.696459055 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.696470976 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.696487904 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.696516991 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.696522951 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.696576118 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.744535923 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.744577885 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.744616985 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.744653940 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.744771957 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.744931936 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:15.744981050 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.745011091 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:15.962157965 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.011349916 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.013400078 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.013479948 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.013516903 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.013566017 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.013571978 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.013601065 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.013617039 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.013629913 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.013655901 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.013675928 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.013859034 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.013895988 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.062647104 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.062688112 CET	443	49898	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.062750101 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.062792063 CET	49898	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.127876997 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.177140951 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.177489996 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.177598000 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.395179987 CET	49917	843	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.606071949 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.655162096 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.655323029 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.655388117 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.655457973 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.655503988 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.656326056 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.656358957 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.683643103 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.684473991 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.689451933 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:16.689486980 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:16.690098047 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:16.705353975 CET	443	49908	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.705454111 CET	49908	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.724622011 CET	49920	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.732892990 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.733014107 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.733366966 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.733462095 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.736658096 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.738070011 CET	443	49905	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:16.738207102 CET	49905	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:16.738780975 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:16.742525101 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:16.742568016 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:16.742605925 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:16.742643118 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:16.742652893 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:16.742683887 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:16.742690086 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:16.742688894 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:16.742693901 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:16.742732048 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:16.742744923 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:16.742790937 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:16.743053913 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:16.743097067 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:16.743122101 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:16.743134975 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:16.743161917 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:16.743171930 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:16.743201017 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:16.743223906 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:16.769409895 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.771115065 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.772963047 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.773750067 CET	443	49920	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.773848057 CET	49920	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.775326014 CET	49920	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.785677910 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.785731077 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.785804987 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.786475897 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.788367987 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.791507959 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:16.791572094 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:16.796328068 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.811127901 CET	49924	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.811286926 CET	49925	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.818404913 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.818599939 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.818810940 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.819694042 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.820269108 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.820384026 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.821762085 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.821880102 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.822210073 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.822675943 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.823082924 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.824227095 CET	443	49920	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.824508905 CET	443	49920	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.824585915 CET	49920	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.825150967 CET	49920	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.826849937 CET	49920	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.837471008 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.845405102 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.845468044 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.845494986 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.845508099 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.845546961 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.845556974 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.845570087 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.845587969 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.845618010 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.845626116 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.845640898 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.845674038 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.845684052 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.845716953 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.845731974 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.845753908 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.845772982 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.845783949 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.845805883 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.845813036 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.845835924 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.845907927 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.846780062 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.860143900 CET	443	49924	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:16.860186100 CET	443	49925	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:16.860239983 CET	49924	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.860275030 CET	49925	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.861397028 CET	49924	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.861592054 CET	49925	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.871253014 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.871665955 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.871732950 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.871831894 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.871864080 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.872003078 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.872044086 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.872082949 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.872107029 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.872608900 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.872878075 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.872977972 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.875014067 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.875392914 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.875754118 CET	443	49920	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.876203060 CET	443	49920	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.876277924 CET	49920	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.894771099 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.894855022 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.895709038 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.895970106 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.896051884 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.896709919 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.910419941 CET	443	49924	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:16.910546064 CET	443	49925	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:16.910598993 CET	443	49924	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:16.910641909 CET	443	49924	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:16.910660982 CET	49924	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.910681009 CET	443	49924	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:16.910684109 CET	49924	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.910708904 CET	443	49924	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:16.910727978 CET	49924	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.910746098 CET	443	49925	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:16.910748959 CET	49924	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.910782099 CET	443	49925	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:16.910799026 CET	49925	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.910820007 CET	443	49925	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:16.910829067 CET	49925	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.910845995 CET	443	49925	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:16.910878897 CET	49925	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.910896063 CET	49925	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.911521912 CET	443	49924	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:16.911554098 CET	443	49924	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:16.911586046 CET	49924	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.911611080 CET	49924	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.911613941 CET	443	49925	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:16.911645889 CET	443	49925	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:16.911672115 CET	49925	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.911711931 CET	49925	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.915426970 CET	49925	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.915505886 CET	49924	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.915991068 CET	49925	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.921664000 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.924190044 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.924237013 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.924263000 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.926021099 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.926074028 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.926114082 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.926115036 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.926139116 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.926152945 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.926156998 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.926191092 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.926212072 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.926229000 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.926248074 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.926284075 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.926469088 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.926501989 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.926532030 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.926538944 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.926577091 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.926589966 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.926593065 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.926604033 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.926634073 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.926664114 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.926824093 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.926865101 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.926893950 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.926912069 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.926944017 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.926975012 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.926992893 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.927021027 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.927512884 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:16.927592993 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:16.964534044 CET	443	49924	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:16.964591026 CET	443	49925	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:16.964627028 CET	49924	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.964715004 CET	49925	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.965173960 CET	443	49925	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:16.965203047 CET	443	49925	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:16.965250969 CET	49925	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.965285063 CET	49925	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.977663994 CET	49925	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:16.985106945 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.026583910 CET	443	49925	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:17.054035902 CET	49926	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.103115082 CET	8080	49926	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.103260994 CET	49926	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.266275883 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.268484116 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.277033091 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.302942038 CET	49896	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:17.304327965 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.304357052 CET	49926	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.315308094 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.315718889 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.315813065 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.317460060 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.318095922 CET	49896	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:17.319052935 CET	49933	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:17.319881916 CET	49934	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:17.326364040 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.326916933 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.327023029 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.352066994 CET	443	49896	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:17.352157116 CET	49896	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:17.352427006 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.352511883 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.353370905 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.353523016 CET	8080	49926	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.353552103 CET	8080	49926	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.353661060 CET	8080	49926	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.353756905 CET	49926	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.354005098 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.354079962 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.368081093 CET	443	49933	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:17.368233919 CET	49933	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:17.368541002 CET	443	49934	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:17.368685007 CET	49934	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:17.369440079 CET	49934	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:17.370368004 CET	49935	843	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.373579025 CET	49933	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:17.383802891 CET	49926	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.384361029 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:17.418287992 CET	443	49934	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:17.418405056 CET	443	49934	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:17.418514013 CET	49934	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:17.422386885 CET	443	49933	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:17.422617912 CET	443	49933	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:17.422719002 CET	49933	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:17.431240082 CET	49934	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:17.432856083 CET	8080	49926	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.433228970 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:17.434884071 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:17.434984922 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:17.440512896 CET	49934	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:17.470127106 CET	49933	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:17.489367008 CET	443	49934	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:17.489866018 CET	443	49934	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:17.489901066 CET	443	49934	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:17.489974022 CET	49934	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:17.499799967 CET	49936	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.545126915 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.549002886 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.550499916 CET	49936	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.559078932 CET	443	49933	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:17.594455004 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.594532013 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.594635010 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.691237926 CET	49936	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.695581913 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.740278959 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.744546890 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.749160051 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.749218941 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.749286890 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.749305010 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.749324083 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.749336958 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.749362946 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.749367952 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.749403000 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.749507904 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.749548912 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.749591112 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.749594927 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.749634981 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.749679089 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.790643930 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.841418028 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:17.841555119 CET	49936	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:17.975642920 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.024627924 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.024892092 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.024952888 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.024971008 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.025082111 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.025183916 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.025213003 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.073962927 CET	443	49918	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.074064970 CET	49918	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.089582920 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.089890957 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.093105078 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.098721981 CET	49920	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.138598919 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.138834953 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.138906002 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.139043093 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.142043114 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.144340038 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.144393921 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.144433975 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.144465923 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.144496918 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.144507885 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.144586086 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.144593954 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.145634890 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.145776033 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.147661924 CET	443	49920	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.148061991 CET	443	49920	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.150506973 CET	49920	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.151695967 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.151734114 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.151782036 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.151823044 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.151859999 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.151896000 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.151921034 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.151952028 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.151957989 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.151962042 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.151968002 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.151972055 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.151988983 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.152026892 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.152040958 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.152062893 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.152082920 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.152101040 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.152154922 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.194717884 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.194757938 CET	443	49919	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.194865942 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.195858002 CET	49919	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.201209068 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.201252937 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.201289892 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.201327085 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.201356888 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.201402903 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.201678038 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.201719999 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.201740026 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.201759100 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.201776981 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.201797962 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.201849937 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.202157974 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.202198029 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.202234983 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.202259064 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.202272892 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.202286005 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.202311039 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.202347040 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.202363014 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.202384949 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.202399969 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.202421904 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.202450991 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.202466965 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.202470064 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.202512026 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.202548027 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.202567101 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.202585936 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.202599049 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.204602003 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.250781059 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.250863075 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.250912905 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.250938892 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.250952959 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.250977993 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.251002073 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.251015902 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.251075983 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.302581072 CET	49795	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:57:18.302915096 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:57:18.304069042 CET	49798	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:57:18.304264069 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:57:18.350682020 CET	443	49795	173.194.79.155	192.168.2.4
Jan 12, 2021 16:57:18.350790024 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:57:18.350939989 CET	49795	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:57:18.351855993 CET	443	49798	108.177.119.157	192.168.2.4
Jan 12, 2021 16:57:18.351929903 CET	49798	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:57:18.352122068 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:57:18.353831053 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:57:18.353864908 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:57:18.353929996 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:57:18.354208946 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:57:18.354273081 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:57:18.354319096 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:57:18.354366064 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:57:18.354515076 CET	49796	443	192.168.2.4	173.194.79.155
Jan 12, 2021 16:57:18.357454062 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:57:18.357486010 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:57:18.357536077 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:57:18.357570887 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:57:18.357732058 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:57:18.357836962 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:57:18.357903957 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:57:18.358052969 CET	49797	443	192.168.2.4	108.177.119.157
Jan 12, 2021 16:57:18.408114910 CET	443	49796	173.194.79.155	192.168.2.4
Jan 12, 2021 16:57:18.411557913 CET	443	49797	108.177.119.157	192.168.2.4
Jan 12, 2021 16:57:18.429833889 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.479324102 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.481443882 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.481488943 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.481527090 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.481539965 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.481558084 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.481579065 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.481585026 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.481587887 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.481605053 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.481628895 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.527234077 CET	49920	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.576574087 CET	443	49920	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.576689005 CET	443	49920	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.576740026 CET	443	49920	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.576787949 CET	49920	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.576838017 CET	49920	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.580133915 CET	49920	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.580276966 CET	49920	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.583736897 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.585148096 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.587603092 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:18.629144907 CET	443	49920	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.629277945 CET	49920	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.632761955 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.634147882 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.634167910 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.634403944 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.634543896 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.636081934 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.636110067 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.636131048 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.636157036 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.636176109 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.636182070 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.636204958 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.636205912 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.636271000 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.636337042 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.636370897 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.636392117 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.636394024 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.636410952 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.636430025 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.636459112 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.636477947 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.637517929 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.640315056 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:18.640403032 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:18.640427113 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:18.640453100 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:18.640480042 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:18.640492916 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:18.640503883 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:18.640530109 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:18.640538931 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:18.640562057 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:18.640579939 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:18.640599012 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:18.640609026 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:18.640630960 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:18.640640974 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:18.640666962 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:18.640676975 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:18.640700102 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:18.640710115 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:18.640742064 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:18.659393072 CET	49937	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.687849998 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.687875986 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.689475060 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:18.689707041 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:18.689712048 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.708406925 CET	443	49937	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.708553076 CET	49937	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.711515903 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.712726116 CET	49937	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.713151932 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.725914955 CET	49939	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.726258039 CET	49940	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.760505915 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.760673046 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.761240959 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.761683941 CET	443	49937	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.761816025 CET	443	49937	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.761882067 CET	49937	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.762176991 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.762459040 CET	49937	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.764642954 CET	49937	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.766064882 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.766103983 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.766149998 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.766191959 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.766196966 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.766230106 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.766239882 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.766246080 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.766271114 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.766287088 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.766309977 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.766324997 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.766346931 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.766365051 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.766386032 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.766402960 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.766413927 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.766449928 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.766462088 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.770678043 CET	49755	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:18.771069050 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:18.774847984 CET	443	49939	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.774955988 CET	49939	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.775182009 CET	443	49940	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.775264978 CET	49940	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.775758028 CET	49939	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.776062965 CET	49940	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.810225010 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.810353994 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.810441017 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.811125040 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.813647985 CET	443	49937	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.813725948 CET	443	49937	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.815681934 CET	443	49937	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.815763950 CET	49937	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.818712950 CET	443	49755	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:18.818794012 CET	49755	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:18.819163084 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:18.824734926 CET	443	49939	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.824795008 CET	443	49939	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.824832916 CET	443	49939	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.824867010 CET	49939	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.824881077 CET	443	49939	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.824913979 CET	443	49939	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.824913025 CET	49939	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.824944019 CET	443	49940	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.824948072 CET	49939	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.824960947 CET	49939	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.825107098 CET	443	49940	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.825177908 CET	49940	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.825234890 CET	443	49940	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.825274944 CET	443	49940	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.825290918 CET	49940	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.825303078 CET	443	49940	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.825325012 CET	49940	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.825346947 CET	49940	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.825951099 CET	443	49939	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.825983047 CET	443	49939	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.826031923 CET	49939	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.826060057 CET	49939	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.826302052 CET	443	49940	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.826338053 CET	443	49940	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.826373100 CET	49940	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.826400042 CET	49940	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.830204010 CET	49939	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.830492020 CET	49940	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.830993891 CET	49939	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.857897043 CET	49936	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.858519077 CET	49937	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.863570929 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:18.863610029 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:18.863692045 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:18.864092112 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:18.864121914 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:18.864141941 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:18.864181042 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:18.864191055 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:18.864497900 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:18.864593983 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:18.865196943 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:18.879370928 CET	443	49939	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.879487038 CET	49939	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.879566908 CET	443	49940	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.879633904 CET	49940	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.880112886 CET	443	49939	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.880145073 CET	443	49939	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.880172014 CET	49939	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.880203009 CET	49939	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.880430937 CET	49939	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.880470991 CET	49939	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.899981022 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.907165051 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.907591105 CET	443	49937	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.907633066 CET	443	49937	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.909097910 CET	443	49937	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:18.909178019 CET	49937	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:18.913252115 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:18.929203987 CET	443	49939	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:18.929291964 CET	49939	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:18.957915068 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:19.008716106 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:19.008833885 CET	49936	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:19.023555994 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:19.072762012 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:19.072879076 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:19.072972059 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:19.126624107 CET	49936	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:19.127906084 CET	49934	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:19.137868881 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:19.172164917 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:19.175797939 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:19.177242994 CET	443	49934	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:19.177273989 CET	443	49934	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:19.177336931 CET	49934	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:19.177375078 CET	49934	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:19.185229063 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:19.186846018 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:19.187366962 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:19.187463045 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:19.200968981 CET	49949	843	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:19.221529961 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:19.221678019 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:19.221760988 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:19.226347923 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:19.234278917 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:19.236478090 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:19.236556053 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:19.277419090 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:19.277426958 CET	49936	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:19.289572954 CET	49936	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:19.338711023 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:19.389710903 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:19.440399885 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:19.440479040 CET	49936	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:19.901597977 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:19.950588942 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:19.950668097 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:19.950737000 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:20.143264055 CET	49936	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:20.192502022 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:20.243238926 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:20.293447018 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:20.293561935 CET	49936	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:20.371469975 CET	49935	843	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:20.483340979 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:20.483409882 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:20.483692884 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:20.799675941 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:20.799760103 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:20.800301075 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:20.800844908 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:57:20.849181890 CET	443	49921	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:20.849239111 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:57:20.849267006 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:20.849287033 CET	49921	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:20.851501942 CET	443	49793	35.181.18.61	192.168.2.4
Jan 12, 2021 16:57:20.851584911 CET	49793	443	192.168.2.4	35.181.18.61
Jan 12, 2021 16:57:20.853316069 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:20.853363991 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:20.853399992 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:20.853425026 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:20.853436947 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:20.853463888 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:20.853487968 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:20.853502035 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:20.853513002 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:20.853542089 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:20.853547096 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:20.853581905 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:20.853588104 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:20.853621960 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:20.853627920 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:20.853658915 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:20.853668928 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:20.853704929 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:20.911206961 CET	443	49937	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:20.911258936 CET	443	49937	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:20.911323071 CET	49937	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:20.911359072 CET	49937	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.179313898 CET	443	49934	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:21.179367065 CET	443	49934	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:21.179419994 CET	49934	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:21.179446936 CET	49934	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:21.189121962 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.189168930 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.189233065 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.189287901 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.237724066 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:21.237778902 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:21.237844944 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:21.237909079 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:21.362391949 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.362479925 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.362683058 CET	49937	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.362716913 CET	49937	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.389075041 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.389718056 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.411401987 CET	443	49923	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.411547899 CET	443	49937	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.411612034 CET	49923	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.411626101 CET	49937	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.432636976 CET	49950	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.438085079 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.438254118 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.438334942 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.438649893 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.438688993 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.439086914 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.449240923 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.449290991 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.449330091 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.449366093 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.449415922 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.449434996 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.449446917 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.449453115 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.449457884 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.449484110 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.449484110 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.449528933 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.449542046 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.449565887 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.449580908 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.449604988 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.449618101 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.449644089 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.449659109 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.449695110 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.468367100 CET	49951	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.481653929 CET	443	49950	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.481755018 CET	49950	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.482307911 CET	49950	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.488010883 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.489864111 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.489907980 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.489944935 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.489985943 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.489986897 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.490016937 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.490051985 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.490113974 CET	443	49922	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.490164995 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.490299940 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.490326881 CET	49922	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.498513937 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.498553038 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.498589993 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.498604059 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.498625994 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.498627901 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.498647928 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.498666048 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.498699903 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.498714924 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.498750925 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.498753071 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.498788118 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.498790979 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.498805046 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.498830080 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.498846054 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.498868942 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.498882055 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.498918056 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.498923063 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.498963118 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.498970985 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.499001026 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.499013901 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.499038935 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.499052048 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.499078035 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.499090910 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.499114037 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.499129057 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.499165058 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.499382019 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.499440908 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.499459982 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.499500036 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.499516964 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.499540091 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.499553919 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.499598026 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.517518044 CET	443	49951	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.517630100 CET	49951	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.518443108 CET	49951	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.531171083 CET	443	49950	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.531363964 CET	443	49950	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.531440973 CET	49950	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.532196045 CET	49950	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.533968925 CET	49950	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.548049927 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.548110008 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.548125029 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.548150063 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.548165083 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.548198938 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.548202991 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.548240900 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.548254013 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.548291922 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.567424059 CET	443	49951	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.567470074 CET	443	49951	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.567548037 CET	49951	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.577522039 CET	49951	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.582866907 CET	443	49950	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.583723068 CET	443	49950	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:21.583878994 CET	49950	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:21.666119099 CET	443	49951	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:22.295667887 CET	49949	843	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:23.451251030 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:23.451303959 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:23.451467037 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:23.451520920 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:23.585235119 CET	443	49950	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:23.585259914 CET	443	49950	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:23.585510969 CET	49950	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:23.974546909 CET	49950	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:23.974591970 CET	49950	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:23.974878073 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:23.974906921 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:23.975508928 CET	49951	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:23.976459980 CET	49952	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.023705959 CET	443	49950	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.023763895 CET	443	49938	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.023808956 CET	49950	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.024521112 CET	443	49951	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.024559021 CET	443	49951	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.024576902 CET	49938	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.025142908 CET	443	49952	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.025240898 CET	49952	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.027208090 CET	443	49951	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.027262926 CET	443	49951	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.027297020 CET	49951	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.027317047 CET	443	49951	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.027343035 CET	49951	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.027360916 CET	443	49951	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.027384996 CET	49951	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.027398109 CET	443	49951	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.027439117 CET	49951	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.027473927 CET	49951	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.056803942 CET	49952	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.107434034 CET	443	49952	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.107525110 CET	443	49952	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.107611895 CET	49952	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.136039972 CET	49952	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.145709991 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:24.145766020 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:24.194686890 CET	443	49904	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:24.194833040 CET	49904	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:24.224086046 CET	443	49952	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.497451067 CET	49952	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.546355963 CET	443	49952	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.546400070 CET	443	49952	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.546833038 CET	443	49952	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.547024965 CET	49952	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.606715918 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.655833006 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.655994892 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.879076004 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.879935026 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.881306887 CET	49955	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:24.882781029 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:24.884922981 CET	49952	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.888539076 CET	49957	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.928169012 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.928271055 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.928606987 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.928838015 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.928946018 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.930236101 CET	443	49955	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:24.930325985 CET	49955	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:24.931781054 CET	443	49956	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:24.931866884 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:24.933701992 CET	443	49952	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.934132099 CET	443	49952	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.934212923 CET	443	49952	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.934230089 CET	49952	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.934282064 CET	49952	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:24.937395096 CET	443	49957	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:24.937491894 CET	49957	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.076498985 CET	49957	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.125571966 CET	443	49957	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.125694990 CET	443	49957	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.125775099 CET	49957	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.137038946 CET	49957	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.195247889 CET	49952	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.195302963 CET	49952	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.202253103 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:25.203016043 CET	49955	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:25.203591108 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.205557108 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.226139069 CET	443	49957	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.237238884 CET	49958	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.238332987 CET	49957	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.239346027 CET	49959	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.239454985 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.244476080 CET	443	49952	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.244544029 CET	49952	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.251559019 CET	443	49956	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:25.251605034 CET	443	49956	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:25.251672029 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:25.251846075 CET	443	49955	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:25.252145052 CET	443	49955	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:25.252214909 CET	49955	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:25.254632950 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.254941940 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.255002975 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.273422956 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.275687933 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:25.277286053 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.277662039 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:25.278836966 CET	49960	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.278893948 CET	49961	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.279438019 CET	49955	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:25.286470890 CET	443	49958	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.286598921 CET	49958	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.287166119 CET	49958	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.287280083 CET	443	49957	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.287311077 CET	443	49957	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.287727118 CET	443	49957	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.287902117 CET	49957	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.288260937 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.288474083 CET	443	49959	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.288570881 CET	49959	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.289144993 CET	49957	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.289366961 CET	49959	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.292157888 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.292202950 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.292238951 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.292241096 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.292263031 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.292292118 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.292314053 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.292336941 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.292355061 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.292375088 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.292413950 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.292432070 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.292452097 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.292454004 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.292470932 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.292493105 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.292512894 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.292522907 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.292552948 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.292568922 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.327466965 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.327511072 CET	443	49956	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:25.327723980 CET	443	49960	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.327750921 CET	443	49961	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.327899933 CET	49961	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.327904940 CET	49960	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.329907894 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.329952955 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.329993963 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.330024004 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.330035925 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.330051899 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.330091000 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.330091000 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.330116987 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.330132008 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.330142021 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.330221891 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.332447052 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.332489014 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.332520008 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.332552910 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.332571983 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.332592010 CET	443	49956	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:25.332624912 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.332639933 CET	443	49956	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:25.332679987 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:25.332683086 CET	443	49956	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:25.332703114 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:25.332720995 CET	443	49956	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:25.332760096 CET	443	49956	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:25.332761049 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:25.332777023 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:25.332798004 CET	443	49956	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:25.332818031 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:25.332834005 CET	443	49956	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:25.332849979 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:25.332874060 CET	443	49956	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:25.332889080 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:25.332911968 CET	443	49956	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:25.332930088 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:25.332958937 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:25.332961082 CET	443	49956	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:25.333009005 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:25.338130951 CET	443	49958	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.338162899 CET	443	49958	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.338237047 CET	49958	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.338583946 CET	443	49957	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.338778973 CET	443	49959	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.339001894 CET	443	49959	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.339114904 CET	49959	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.340296030 CET	443	49957	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.340396881 CET	49957	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.356625080 CET	49959	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.358578920 CET	49958	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.360703945 CET	49960	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.361278057 CET	49961	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.367744923 CET	443	49955	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:25.381999969 CET	443	49956	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:25.382103920 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:25.412039042 CET	443	49960	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.412091017 CET	443	49960	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.412131071 CET	443	49960	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.412170887 CET	443	49960	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.412174940 CET	49960	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.412197113 CET	443	49960	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.412216902 CET	49960	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.412225008 CET	443	49961	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.412256002 CET	49960	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.412262917 CET	443	49961	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.412300110 CET	49960	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.412312031 CET	443	49961	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.412332058 CET	49961	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.412354946 CET	443	49961	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.412372112 CET	49961	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.412384033 CET	443	49961	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.412427902 CET	49961	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.412475109 CET	49961	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.412590027 CET	443	49961	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.412621975 CET	443	49961	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.412658930 CET	443	49960	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.412667990 CET	49961	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.412693024 CET	49961	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.412698030 CET	443	49960	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.412725925 CET	49960	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.412746906 CET	49960	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.421288013 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:25.424781084 CET	49960	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.428508043 CET	49961	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.445009947 CET	443	49959	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.447498083 CET	443	49958	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.453366995 CET	49960	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.457600117 CET	49957	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.465857983 CET	49936	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.469436884 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:25.469469070 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:25.474030018 CET	443	49960	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.474117041 CET	49960	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.477679014 CET	443	49961	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.477845907 CET	49961	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.503468990 CET	443	49960	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.503536940 CET	443	49960	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.503587961 CET	49960	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.503628016 CET	49960	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.505733967 CET	49960	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.505769014 CET	49960	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.507292032 CET	443	49957	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.507688046 CET	443	49957	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.507729053 CET	443	49957	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.507771969 CET	49957	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.507803917 CET	49957	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.510186911 CET	49957	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.510230064 CET	49957	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.515763044 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.517553091 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:25.517610073 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:25.517649889 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:25.517651081 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:25.517689943 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:25.517720938 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:25.517724991 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:25.517739058 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:25.518656015 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:25.555593967 CET	443	49960	91.235.134.131	192.168.2.4
Jan 12, 2021 16:57:25.555929899 CET	49960	443	192.168.2.4	91.235.134.131
Jan 12, 2021 16:57:25.559307098 CET	443	49957	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.559403896 CET	49957	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.566648960 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.567743063 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:25.617264986 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.617455006 CET	49936	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.742980003 CET	49966	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.743091106 CET	49967	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.792352915 CET	8080	49966	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.792402983 CET	8080	49967	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.792463064 CET	49966	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.792505026 CET	49967	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.799428940 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.845069885 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.848882914 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.848968983 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.849030018 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.855146885 CET	49936	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.894275904 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.894609928 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.895144939 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.904269934 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.927625895 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.928221941 CET	49934	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:25.928303003 CET	49934	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:25.928869009 CET	49933	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:25.935769081 CET	49966	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.936180115 CET	49967	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.950632095 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.955090046 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.976819038 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.976897001 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.976927042 CET	443	49934	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:25.977041006 CET	49934	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:25.977581978 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.977709055 CET	443	49933	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:25.978488922 CET	443	49933	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:25.978522062 CET	443	49933	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:25.978549004 CET	443	49933	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:25.978590012 CET	49933	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:25.978625059 CET	49933	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:25.978631020 CET	49933	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:25.984774113 CET	8080	49966	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.984806061 CET	8080	49966	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.984834909 CET	8080	49966	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.984895945 CET	49966	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.984998941 CET	8080	49967	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.985028028 CET	8080	49967	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.985730886 CET	8080	49967	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.985797882 CET	49967	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:25.999898911 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:25.999931097 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.002007961 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.002082109 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.005317926 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.005422115 CET	49936	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.011090040 CET	49933	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:26.011187077 CET	49933	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:26.018851042 CET	49968	843	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.027179003 CET	49936	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.029113054 CET	443	49951	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.029145956 CET	443	49951	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.029206991 CET	49951	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.029242039 CET	49951	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.032111883 CET	49966	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.032289028 CET	49967	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.033833027 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:26.052983999 CET	49969	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.060333014 CET	443	49933	91.235.132.129	192.168.2.4
Jan 12, 2021 16:57:26.060508013 CET	49933	443	192.168.2.4	91.235.132.129
Jan 12, 2021 16:57:26.076334953 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.076383114 CET	8080	49936	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.081284046 CET	8080	49966	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.081326962 CET	8080	49967	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.083076954 CET	443	49956	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:26.084971905 CET	443	49956	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:26.085083961 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:26.102219105 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.102344990 CET	49969	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.115118980 CET	49969	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.164263964 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.215085030 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.248300076 CET	49951	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.248358965 CET	49951	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.263254881 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.265469074 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.265547037 CET	49969	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.266804934 CET	49969	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.297451019 CET	443	49951	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.297535896 CET	49951	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.312305927 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.312360048 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.312474012 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.315648079 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.360169888 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.366872072 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.409410000 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.409468889 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.409497023 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.409554958 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.409591913 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.410367012 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.410384893 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.417248964 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.417340994 CET	49969	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.418711901 CET	49969	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.459321976 CET	443	49953	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.459455013 CET	49953	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.467784882 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.518238068 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.561336994 CET	49969	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.568834066 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.580976009 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.589288950 CET	49970	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.593187094 CET	49969	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.630249023 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.631746054 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.631829023 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.638293982 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.638531923 CET	49970	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.642278910 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.692647934 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.743005037 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:26.743130922 CET	49969	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.955365896 CET	49970	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.955573082 CET	49969	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:26.984886885 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:27.004172087 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.004383087 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.033984900 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.035315990 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.035429955 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:27.054904938 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.054936886 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.096472025 CET	49969	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:27.105110884 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.105133057 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.105210066 CET	49970	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:27.196496964 CET	49969	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:27.353693008 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:27.369563103 CET	49970	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:27.370112896 CET	49969	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:27.401917934 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:27.401948929 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:27.418431044 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.419037104 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.449435949 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:27.465706110 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:27.465756893 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:27.466011047 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.466026068 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:27.466058016 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:27.466075897 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:27.466101885 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:27.466130018 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:27.466144085 CET	49806	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.466620922 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:27.467287064 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:27.467751980 CET	49976	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.468779087 CET	49977	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.469047070 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.469233036 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:27.470098972 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.498806953 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.500138998 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.502338886 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:27.514074087 CET	443	49807	108.177.127.157	192.168.2.4
Jan 12, 2021 16:57:27.514173985 CET	443	49806	108.177.127.157	192.168.2.4
Jan 12, 2021 16:57:27.514236927 CET	49807	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.514370918 CET	49806	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.515799999 CET	443	49976	108.177.127.157	192.168.2.4
Jan 12, 2021 16:57:27.516689062 CET	49976	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.516824961 CET	443	49977	108.177.127.157	192.168.2.4
Jan 12, 2021 16:57:27.517280102 CET	49977	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.517339945 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:27.518563986 CET	49976	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.519140005 CET	49977	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.519809961 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.520752907 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.522321939 CET	49969	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:27.522336006 CET	49970	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:27.522769928 CET	49970	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:27.522996902 CET	49969	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:27.566579103 CET	443	49976	108.177.127.157	192.168.2.4
Jan 12, 2021 16:57:27.567255020 CET	443	49977	108.177.127.157	192.168.2.4
Jan 12, 2021 16:57:27.567384958 CET	443	49976	108.177.127.157	192.168.2.4
Jan 12, 2021 16:57:27.567472935 CET	49976	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.567961931 CET	443	49977	108.177.127.157	192.168.2.4
Jan 12, 2021 16:57:27.569436073 CET	49977	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.571402073 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.572063923 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.572688103 CET	49977	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.574304104 CET	49977	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.574660063 CET	49977	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.576507092 CET	49976	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.578022957 CET	49976	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.620794058 CET	443	49977	108.177.127.157	192.168.2.4
Jan 12, 2021 16:57:27.620914936 CET	49977	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.621160984 CET	49977	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.621812105 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.622313023 CET	443	49977	108.177.127.157	192.168.2.4
Jan 12, 2021 16:57:27.622956038 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.623064995 CET	49977	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.624582052 CET	443	49976	108.177.127.157	192.168.2.4
Jan 12, 2021 16:57:27.624710083 CET	49976	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.624891996 CET	49976	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.626127005 CET	443	49976	108.177.127.157	192.168.2.4
Jan 12, 2021 16:57:27.626935005 CET	49976	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.627799988 CET	443	49977	108.177.127.157	192.168.2.4
Jan 12, 2021 16:57:27.627924919 CET	443	49977	108.177.127.157	192.168.2.4
Jan 12, 2021 16:57:27.627942085 CET	443	49977	108.177.127.157	192.168.2.4
Jan 12, 2021 16:57:27.628026009 CET	443	49977	108.177.127.157	192.168.2.4
Jan 12, 2021 16:57:27.628030062 CET	49977	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.629292011 CET	49977	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.629462004 CET	49977	443	192.168.2.4	108.177.127.157
Jan 12, 2021 16:57:27.644037962 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:27.644125938 CET	49824	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:27.661783934 CET	49978	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:27.662437916 CET	49979	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:27.672216892 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.673564911 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.673708916 CET	49970	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:27.674293995 CET	49970	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:27.674293041 CET	49969	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:27.674578905 CET	49969	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:27.674710035 CET	443	49977	108.177.127.157	192.168.2.4
Jan 12, 2021 16:57:27.677489042 CET	443	49977	108.177.127.157	192.168.2.4
Jan 12, 2021 16:57:27.678242922 CET	443	49976	108.177.127.157	192.168.2.4
Jan 12, 2021 16:57:27.723114967 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.723481894 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.723537922 CET	8080	49969	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.767374992 CET	443	49823	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:27.767405033 CET	443	49823	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:27.767625093 CET	49823	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:27.772604942 CET	443	49824	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:27.772845030 CET	443	49824	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:27.772936106 CET	49824	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:27.773215055 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.789458990 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:27.789594889 CET	49978	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:27.789834976 CET	443	49979	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:27.790312052 CET	49979	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:27.794420958 CET	49979	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:27.795429945 CET	49978	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:27.824116945 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.824225903 CET	49970	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:27.850117922 CET	49970	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:27.899014950 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:27.922080994 CET	443	49979	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:27.922744989 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:27.923938990 CET	443	49979	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:27.923966885 CET	443	49979	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:27.924010992 CET	443	49979	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:27.924062014 CET	49979	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:27.924099922 CET	49979	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:27.924803019 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:27.924838066 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:27.924866915 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:27.924937963 CET	49978	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:27.949589968 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:28.000185966 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:28.000303030 CET	49970	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:28.051492929 CET	443	49979	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:28.052151918 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:28.052211046 CET	49979	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:28.052243948 CET	49978	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:28.055460930 CET	49978	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:28.055881977 CET	49978	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:28.056133032 CET	49978	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:28.056319952 CET	49978	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:28.059303999 CET	49979	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:28.059787989 CET	49979	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:28.086606979 CET	443	49956	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:28.086630106 CET	443	49956	91.235.132.130	192.168.2.4
Jan 12, 2021 16:57:28.086757898 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:28.086807013 CET	49956	443	192.168.2.4	91.235.132.130
Jan 12, 2021 16:57:28.182744026 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:28.182965040 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:28.183249950 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:28.183414936 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:28.183434010 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:28.184186935 CET	49978	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:28.184916973 CET	49978	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:28.186719894 CET	443	49979	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:28.187128067 CET	443	49979	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:28.187447071 CET	443	49979	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:28.188822031 CET	49979	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:28.195280075 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:28.195384979 CET	49978	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:28.229223013 CET	49978	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:28.229454041 CET	49970	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:28.278143883 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:28.312098980 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:28.312247038 CET	49978	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:28.316211939 CET	443	49979	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:28.317569971 CET	49979	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:28.318409920 CET	49979	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:28.319756031 CET	49978	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:28.328656912 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:28.356528997 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:28.379292965 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:28.379419088 CET	49970	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:28.386558056 CET	49970	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:28.435329914 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:28.439445019 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:28.439541101 CET	49978	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:28.446965933 CET	443	49979	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:28.448132038 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:28.470318079 CET	49978	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:28.486577988 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:28.536446095 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:28.536569118 CET	49970	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:28.536964893 CET	49970	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:28.566813946 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:28.566910982 CET	49978	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:28.585664034 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:28.585706949 CET	8080	49970	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:28.597580910 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:28.694119930 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:28.694200993 CET	49978	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:29.177898884 CET	49968	843	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:29.420855999 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:29.469213963 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:29.469259024 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:29.502485037 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:29.502525091 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:29.502686024 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:29.502733946 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:29.521548986 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:29.521576881 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:29.521589994 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:29.521606922 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:29.521681070 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:29.521724939 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:29.674067974 CET	49756	443	192.168.2.4	108.177.127.154
Jan 12, 2021 16:57:29.722528934 CET	443	49756	108.177.127.154	192.168.2.4
Jan 12, 2021 16:57:30.389524937 CET	49993	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:30.438833952 CET	8080	49993	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:30.438946962 CET	49993	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:30.440324068 CET	49993	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:30.489413977 CET	8080	49993	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:30.489492893 CET	8080	49993	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:30.489523888 CET	8080	49993	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:30.489605904 CET	49993	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:30.489845991 CET	49993	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:30.538907051 CET	8080	49993	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:30.750734091 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:30.750796080 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:30.751530886 CET	49959	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:30.799981117 CET	443	49954	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:30.800121069 CET	49954	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:30.800647020 CET	443	49959	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:30.800676107 CET	443	49959	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:30.804152966 CET	443	49959	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:30.804311037 CET	49959	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:31.139220953 CET	49994	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:31.188316107 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:31.188440084 CET	49994	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:31.197191954 CET	49994	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:31.246097088 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:31.296066046 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:31.346539974 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:31.346678972 CET	49994	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:31.463510990 CET	49994	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:31.512605906 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:31.562872887 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:31.613100052 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:31.613187075 CET	49994	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:31.613464117 CET	49994	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:31.662281036 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:31.712958097 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:31.763446093 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:31.763593912 CET	49994	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:31.782418966 CET	49994	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:31.831418037 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:31.882575035 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:31.932813883 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:31.932893038 CET	49994	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:31.933264971 CET	49994	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:31.982044935 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:32.032793999 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:32.083261013 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:32.083344936 CET	49994	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:32.083714962 CET	49994	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:32.132591009 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:32.182975054 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:32.233316898 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:32.233397007 CET	49994	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:32.233844042 CET	49994	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:32.282787085 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:32.333857059 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:32.384571075 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:32.384653091 CET	49994	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:32.384989023 CET	49994	8080	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:32.433902025 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:32.433948040 CET	8080	49994	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:32.805361032 CET	443	49959	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:32.805448055 CET	443	49959	91.235.133.67	192.168.2.4
Jan 12, 2021 16:57:32.805560112 CET	49959	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:32.805803061 CET	49959	443	192.168.2.4	91.235.133.67
Jan 12, 2021 16:57:38.713558912 CET	49978	443	192.168.2.4	208.89.12.87
Jan 12, 2021 16:57:38.840974092 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:38.843381882 CET	443	49978	208.89.12.87	192.168.2.4
Jan 12, 2021 16:57:38.844309092 CET	49978	443	192.168.2.4	208.89.12.87

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 12, 2021 16:55:52.927491903 CET	64549	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:55:52.975574017 CET	53	64549	8.8.8.8	192.168.2.4
Jan 12, 2021 16:55:53.963669062 CET	63153	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:55:54.011518002 CET	53	63153	8.8.8.8	192.168.2.4
Jan 12, 2021 16:55:54.981641054 CET	52991	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:55:55.029444933 CET	53	52991	8.8.8.8	192.168.2.4
Jan 12, 2021 16:55:56.373213053 CET	53700	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:55:56.429522991 CET	53	53700	8.8.8.8	192.168.2.4
Jan 12, 2021 16:55:57.561311960 CET	51726	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:55:57.609267950 CET	53	51726	8.8.8.8	192.168.2.4
Jan 12, 2021 16:55:57.963582993 CET	56794	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:55:58.023269892 CET	53	56794	8.8.8.8	192.168.2.4
Jan 12, 2021 16:55:58.838285923 CET	56534	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:55:58.886332035 CET	53	56534	8.8.8.8	192.168.2.4
Jan 12, 2021 16:55:59.037334919 CET	56627	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:55:59.341609955 CET	53	56627	8.8.8.8	192.168.2.4
Jan 12, 2021 16:55:59.856071949 CET	56621	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:55:59.906935930 CET	53	56621	8.8.8.8	192.168.2.4
Jan 12, 2021 16:55:59.935334921 CET	63116	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:55:59.995145082 CET	53	63116	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:00.900218964 CET	64078	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:00.913403988 CET	64801	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:00.951294899 CET	53	64078	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:00.962657928 CET	61721	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:00.972528934 CET	53	64801	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:01.039899111 CET	53	61721	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:02.051644087 CET	51255	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:02.102273941 CET	53	51255	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:03.059086084 CET	61522	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:03.119623899 CET	53	61522	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:03.173336983 CET	52337	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:03.238369942 CET	53	52337	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:03.314338923 CET	55046	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:03.362368107 CET	53	55046	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:04.308762074 CET	49612	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:04.373209953 CET	53	49612	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:04.566849947 CET	49285	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:04.614665031 CET	53	49285	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:04.839148998 CET	50601	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:04.901103973 CET	53	50601	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:05.144025087 CET	60875	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:05.214848042 CET	53	60875	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:06.848751068 CET	56448	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:06.908579111 CET	53	56448	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:06.956880093 CET	59172	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:07.018723965 CET	53	59172	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:07.869833946 CET	62420	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:07.933917046 CET	53	62420	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:08.657324076 CET	60579	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:08.705427885 CET	53	60579	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:08.732552052 CET	50183	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:08.741455078 CET	61531	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:08.790576935 CET	53	50183	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:08.792223930 CET	53	61531	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:09.396928072 CET	49228	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:09.447726965 CET	53	49228	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:09.769243002 CET	59794	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:09.778089046 CET	55916	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:09.829638004 CET	53	59794	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:09.836029053 CET	53	55916	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:09.918513060 CET	52752	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:09.979815960 CET	53	52752	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:14.560590029 CET	60542	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:14.629643917 CET	53	60542	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:16.600018024 CET	60689	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:16.664855003 CET	53	60689	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:16.818289042 CET	64206	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:16.882715940 CET	53	64206	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:17.084639072 CET	50904	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:17.093761921 CET	57525	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:17.150068045 CET	53	57525	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:17.150937080 CET	53	50904	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:17.614907026 CET	53814	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:17.672750950 CET	53	53814	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:17.760346889 CET	53418	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:17.824947119 CET	53	53418	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:19.352683067 CET	62833	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:19.422156096 CET	53	62833	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:19.545749903 CET	59260	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:19.596426964 CET	53	59260	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:20.035129070 CET	49944	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:20.098993063 CET	53	49944	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:20.117650986 CET	63300	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:20.165462971 CET	53	63300	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:20.568295002 CET	61449	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:20.616344929 CET	53	61449	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:21.537111998 CET	51275	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:21.593626976 CET	53	51275	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:22.015997887 CET	63492	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:22.096250057 CET	53	63492	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:22.142787933 CET	58945	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:22.191090107 CET	53	58945	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:22.357137918 CET	60779	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:22.414823055 CET	53	60779	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:22.620003939 CET	64014	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:22.670717001 CET	53	64014	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:22.788475990 CET	57091	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:22.836720943 CET	53	57091	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:23.684251070 CET	55904	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:23.735021114 CET	53	55904	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:25.557529926 CET	52109	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:25.618848085 CET	53	52109	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:27.955430984 CET	54450	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:28.003947020 CET	53	54450	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:28.612728119 CET	49374	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:28.674643993 CET	53	49374	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:28.965826988 CET	54450	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:29.013811111 CET	53	54450	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:29.483618021 CET	50436	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:29.542653084 CET	53	50436	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:29.620558023 CET	49374	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:29.671224117 CET	53	49374	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:29.980875015 CET	54450	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:30.038681030 CET	53	54450	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:30.636404037 CET	49374	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:30.687200069 CET	53	49374	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:31.998120070 CET	54450	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:32.054390907 CET	53	54450	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:32.837918997 CET	49374	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:32.898880959 CET	53	49374	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:36.000000000 CET	54450	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:36.056371927 CET	53	54450	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:36.829565048 CET	49374	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:36.888588905 CET	53	49374	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:37.234949112 CET	62605	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:37.298578024 CET	53	62605	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:37.806524038 CET	54256	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:37.854569912 CET	53	54256	8.8.8.8	192.168.2.4
Jan 12, 2021 16:56:39.154957056 CET	52189	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:56:39.218725920 CET	53	52189	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:12.186994076 CET	56131	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:12.243180990 CET	53	56131	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:12.491761923 CET	62992	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:12.555576086 CET	53	62992	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:13.242367983 CET	54432	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:13.302875042 CET	53	54432	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:16.737746000 CET	57227	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:16.804282904 CET	53	57227	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:16.993524075 CET	58383	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:17.052947998 CET	53	58383	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:17.310905933 CET	63136	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:17.368488073 CET	53	63136	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:18.658246040 CET	50911	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:18.722048998 CET	53	50911	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:18.820307970 CET	63409	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:18.887218952 CET	53	63409	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:19.143098116 CET	59185	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:19.199529886 CET	53	59185	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:25.209209919 CET	64236	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:25.274277925 CET	53	64236	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:25.690628052 CET	56157	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:25.741609097 CET	53	56157	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:25.952815056 CET	55601	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:26.017340899 CET	53	55601	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:27.324105024 CET	52984	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:27.382365942 CET	53	52984	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:30.176966906 CET	51141	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:30.233371973 CET	53	51141	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:34.647994041 CET	53610	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:34.771496058 CET	53	53610	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:35.215759039 CET	61247	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:35.272336960 CET	53	61247	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:35.817930937 CET	65165	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:35.958209991 CET	53	65165	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:36.320008039 CET	52076	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:36.376394987 CET	53	52076	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:36.734612942 CET	54903	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:36.796367884 CET	53	54903	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:37.228802919 CET	55045	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:37.288358927 CET	53	55045	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:37.724436045 CET	54464	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:37.785284996 CET	53	54464	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:38.485589027 CET	50970	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:38.544961929 CET	53	50970	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:39.171466112 CET	55261	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:39.219516039 CET	53	55261	8.8.8.8	192.168.2.4
Jan 12, 2021 16:57:39.599652052 CET	59809	53	192.168.2.4	8.8.8.8
Jan 12, 2021 16:57:39.656191111 CET	53	59809	8.8.8.8	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Jan 12, 2021 16:55:59.037334919 CET	192.168.2.4	8.8.8.8	0xab4a	Standard query (0)	l.info6.accountonline.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:55:59.935334921 CET	192.168.2.4	8.8.8.8	0xda6f	Standard query (0)	citiretailservices.citibankonline.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:00.900218964 CET	192.168.2.4	8.8.8.8	0x5314	Standard query (0)	www.promisejs.org	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:00.913403988 CET	192.168.2.4	8.8.8.8	0xd721	Standard query (0)	resources.digital-cloud-citi.medallia.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:00.962657928 CET	192.168.2.4	8.8.8.8	0xa829	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:03.059086084 CET	192.168.2.4	8.8.8.8	0x692d	Standard query (0)	nexus.ensighten.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:03.173336983 CET	192.168.2.4	8.8.8.8	0xeaef	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:04.839148998 CET	192.168.2.4	8.8.8.8	0xb288	Standard query (0)	content22.citibankonline.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:05.144025087 CET	192.168.2.4	8.8.8.8	0x8978	Standard query (0)	cdn.digitalmarketing.citibankonline.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:06.848751068 CET	192.168.2.4	8.8.8.8	0xd374	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:07.869833946 CET	192.168.2.4	8.8.8.8	0x5c8c	Standard query (0)	530q7tul6fwyjard2qsg5hq5snx3q3dm6cm3getw67b9806a42a06d88am1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:08.732552052 CET	192.168.2.4	8.8.8.8	0xe9fe	Standard query (0)	nebula-cdn.kampyle.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:09.396928072 CET	192.168.2.4	8.8.8.8	0x6e11	Standard query (0)	udc-neb.kampyle.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:09.769243002 CET	192.168.2.4	8.8.8.8	0xd87	Standard query (0)	content22.citibankonline.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:09.778089046 CET	192.168.2.4	8.8.8.8	0x7237	Standard query (0)	aa.online-metrix.net	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:09.918513060 CET	192.168.2.4	8.8.8.8	0xb22	Standard query (0)	citicorpcreditservic.tt.omtrdc.net	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:14.560590029 CET	192.168.2.4	8.8.8.8	0x5782	Standard query (0)	metrics1.citibankonline.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:16.600018024 CET	192.168.2.4	8.8.8.8	0x8b66	Standard query (0)	adservice.google.co.uk	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:17.093761921 CET	192.168.2.4	8.8.8.8	0xfadc	Standard query (0)	content22.citibankonline.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:17.614907026 CET	192.168.2.4	8.8.8.8	0xc256	Standard query (0)	lptag.liveperson.net	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:20.035129070 CET	192.168.2.4	8.8.8.8	0xb392	Standard query (0)	accdn.lpsnmedia.net	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:22.015997887 CET	192.168.2.4	8.8.8.8	0xadeb	Standard query (0)	lpcdn.lpsnmedia.net	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:22.357137918 CET	192.168.2.4	8.8.8.8	0x5d5c	Standard query (0)	fpdownload.macromedia.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:23.684251070 CET	192.168.2.4	8.8.8.8	0x7985	Standard query (0)	va.v.liveperson.net	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:25.557529926 CET	192.168.2.4	8.8.8.8	0x637f	Standard query (0)	citiretailservices.citibankonline.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:37.234949112 CET	192.168.2.4	8.8.8.8	0x6b6c	Standard query (0)	530q7tul7hqjtptrx4pdeztidymlzqwqsjbpeiyyddbada1c24c4b3b4am1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:37.806524038 CET	192.168.2.4	8.8.8.8	0x4357	Standard query (0)	content22.citibankonline.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:39.154957056 CET	192.168.2.4	8.8.8.8	0x2b9f	Standard query (0)	530q7tul2oksten67a72qbpmvqmitj7yq5kac55k94166c0d8e41729dam1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:12.186994076 CET	192.168.2.4	8.8.8.8	0x103d	Standard query (0)	mboxedge37.tt.omtrdc.net	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:12.491761923 CET	192.168.2.4	8.8.8.8	0xf540	Standard query (0)	530q7tulzku6wdtu3adkuko7yi3uw5v645fpbwat2d4d830982da375dam1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:13.242367983 CET	192.168.2.4	8.8.8.8	0xaef9	Standard query (0)	content22.citibankonline.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:16.737746000 CET	192.168.2.4	8.8.8.8	0xfaed	Standard query (0)	530q7tul45nwl2gnwoxnwxppglz6x5doqbb3tpm267d05aaca2f79383am1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:16.993524075 CET	192.168.2.4	8.8.8.8	0xef50	Standard query (0)	content22.citibankonline.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:17.310905933 CET	192.168.2.4	8.8.8.8	0x9ddf	Standard query (0)	content22.citibankonline.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:18.658246040 CET	192.168.2.4	8.8.8.8	0x81ea	Standard query (0)	530q7tulteoc536ivgylc2l3xxnh46bngnkb3uqf705048ba308e840eam1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:19.143098116 CET	192.168.2.4	8.8.8.8	0x5e25	Standard query (0)	content22.citibankonline.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:25.209209919 CET	192.168.2.4	8.8.8.8	0xd39a	Standard query (0)	530q7tulbgrmpc2zn2elpybtplympict4fjkql6n799c07a567a2684fam1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:25.690628052 CET	192.168.2.4	8.8.8.8	0x301	Standard query (0)	content22.citibankonline.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:25.952815056 CET	192.168.2.4	8.8.8.8	0x23ab	Standard query (0)	content22.citibankonline.com	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:30.176966906 CET	192.168.2.4	8.8.8.8	0x3522	Standard query (0)	content22.citibankonline.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Jan 12, 2021 16:55:59.341609955 CET	8.8.8.8	192.168.2.4	0xab4a	No error (0)	l.info6.accountonline.com	x.info6.accountonline.com		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:55:59.341609955 CET	8.8.8.8	192.168.2.4	0xab4a	No error (0)	x.info6.accountonline.com		63.148.46.109	A (IP address)	IN (0x0001)
Jan 12, 2021 16:55:59.995145082 CET	8.8.8.8	192.168.2.4	0xda6f	No error (0)	citiretailservices.citibankonline.com	san.citiretailservices.citibankonline.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:56:00.951294899 CET	8.8.8.8	192.168.2.4	0x5314	No error (0)	www.promisejs.org		172.67.147.58	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:00.951294899 CET	8.8.8.8	192.168.2.4	0x5314	No error (0)	www.promisejs.org		104.18.48.133	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:00.951294899 CET	8.8.8.8	192.168.2.4	0x5314	No error (0)	www.promisejs.org		104.18.49.133	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:00.972528934 CET	8.8.8.8	192.168.2.4	0xd721	No error (0)	resources.digital-cloud-citi.medallia.com	medallia.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:56:00.972528934 CET	8.8.8.8	192.168.2.4	0xd721	No error (0)	medallia.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:00.972528934 CET	8.8.8.8	192.168.2.4	0xd721	No error (0)	medallia.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:00.972528934 CET	8.8.8.8	192.168.2.4	0xd721	No error (0)	medallia.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:00.972528934 CET	8.8.8.8	192.168.2.4	0xd721	No error (0)	medallia.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:01.039899111 CET	8.8.8.8	192.168.2.4	0xa829	No error (0)	www.googletagservices.com	pagead46.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:56:01.039899111 CET	8.8.8.8	192.168.2.4	0xa829	No error (0)	pagead46.l.doubleclick.net		172.217.218.154	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:01.039899111 CET	8.8.8.8	192.168.2.4	0xa829	No error (0)	pagead46.l.doubleclick.net		172.217.218.155	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:01.039899111 CET	8.8.8.8	192.168.2.4	0xa829	No error (0)	pagead46.l.doubleclick.net		172.217.218.156	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:01.039899111 CET	8.8.8.8	192.168.2.4	0xa829	No error (0)	pagead46.l.doubleclick.net		172.217.218.157	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:03.119623899 CET	8.8.8.8	192.168.2.4	0x692d	No error (0)	nexus.ensighten.com		18.195.42.228	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:03.238369942 CET	8.8.8.8	192.168.2.4	0xeaef	No error (0)	securepubads.g.doubleclick.net	partnerad.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:56:03.238369942 CET	8.8.8.8	192.168.2.4	0xeaef	No error (0)	partnerad.l.doubleclick.net		108.177.127.154	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:03.238369942 CET	8.8.8.8	192.168.2.4	0xeaef	No error (0)	partnerad.l.doubleclick.net		108.177.127.155	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:03.238369942 CET	8.8.8.8	192.168.2.4	0xeaef	No error (0)	partnerad.l.doubleclick.net		108.177.127.157	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:03.238369942 CET	8.8.8.8	192.168.2.4	0xeaef	No error (0)	partnerad.l.doubleclick.net		108.177.127.156	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:04.901103973 CET	8.8.8.8	192.168.2.4	0xb288	No error (0)	content22.citibankonline.com	h-citibankonline.online-metrix.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:56:04.901103973 CET	8.8.8.8	192.168.2.4	0xb288	No error (0)	h-citibankonline.online-metrix.net		91.235.133.67	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:05.214848042 CET	8.8.8.8	192.168.2.4	0x8978	No error (0)	cdn.digitalmarketing.citibankonline.com		34.107.138.236	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:06.908579111 CET	8.8.8.8	192.168.2.4	0xd374	No error (0)	h.online-metrix.net		91.235.132.130	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:07.933917046 CET	8.8.8.8	192.168.2.4	0x5c8c	No error (0)	530q7tul6fwyjard2qsg5hq5snx3q3dm6cm3getw67b9806a42a06d88am1.e.aa.online-metrix.net		91.235.134.131	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:08.790576935 CET	8.8.8.8	192.168.2.4	0xe9fe	No error (0)	nebula-cdn.kampyle.com	j.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:56:09.447726965 CET	8.8.8.8	192.168.2.4	0x6e11	No error (0)	udc-neb.kampyle.com	cooladata.kampyle.com		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:56:09.447726965 CET	8.8.8.8	192.168.2.4	0x6e11	No error (0)	cooladata.kampyle.com		35.241.45.82	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:09.829638004 CET	8.8.8.8	192.168.2.4	0xd87	No error (0)	content22.citibankonline.com	h-citibankonline.online-metrix.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:56:09.829638004 CET	8.8.8.8	192.168.2.4	0xd87	No error (0)	h-citibankonline.online-metrix.net		91.235.133.67	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:09.836029053 CET	8.8.8.8	192.168.2.4	0x7237	No error (0)	aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:09.979815960 CET	8.8.8.8	192.168.2.4	0xb22	No error (0)	citicorpcreditservic.tt.omtrdc.net		52.212.164.82	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:09.979815960 CET	8.8.8.8	192.168.2.4	0xb22	No error (0)	citicorpcreditservic.tt.omtrdc.net		34.252.156.174	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:09.979815960 CET	8.8.8.8	192.168.2.4	0xb22	No error (0)	citicorpcreditservic.tt.omtrdc.net		34.252.166.160	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:09.979815960 CET	8.8.8.8	192.168.2.4	0xb22	No error (0)	citicorpcreditservic.tt.omtrdc.net		54.75.9.158	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:09.979815960 CET	8.8.8.8	192.168.2.4	0xb22	No error (0)	citicorpcreditservic.tt.omtrdc.net		52.19.133.54	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:09.979815960 CET	8.8.8.8	192.168.2.4	0xb22	No error (0)	citicorpcreditservic.tt.omtrdc.net		52.51.251.137	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:09.979815960 CET	8.8.8.8	192.168.2.4	0xb22	No error (0)	citicorpcreditservic.tt.omtrdc.net		52.18.150.20	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:09.979815960 CET	8.8.8.8	192.168.2.4	0xb22	No error (0)	citicorpcreditservic.tt.omtrdc.net		52.213.168.74	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:14.629643917 CET	8.8.8.8	192.168.2.4	0x5782	No error (0)	metrics1.citibankonline.com	citibankonline.com.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:56:14.629643917 CET	8.8.8.8	192.168.2.4	0x5782	No error (0)	citibankonline.com.ssl.sc.omtrdc.net		35.181.18.61	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:14.629643917 CET	8.8.8.8	192.168.2.4	0x5782	No error (0)	citibankonline.com.ssl.sc.omtrdc.net		15.237.136.106	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:14.629643917 CET	8.8.8.8	192.168.2.4	0x5782	No error (0)	citibankonline.com.ssl.sc.omtrdc.net		15.237.76.117	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:16.664855003 CET	8.8.8.8	192.168.2.4	0x8b66	No error (0)	adservice.google.co.uk	pagead46.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:56:16.664855003 CET	8.8.8.8	192.168.2.4	0x8b66	No error (0)	pagead46.l.doubleclick.net		173.194.79.155	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:16.664855003 CET	8.8.8.8	192.168.2.4	0x8b66	No error (0)	pagead46.l.doubleclick.net		173.194.79.157	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:16.664855003 CET	8.8.8.8	192.168.2.4	0x8b66	No error (0)	pagead46.l.doubleclick.net		173.194.79.156	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:16.664855003 CET	8.8.8.8	192.168.2.4	0x8b66	No error (0)	pagead46.l.doubleclick.net		173.194.79.154	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:16.882715940 CET	8.8.8.8	192.168.2.4	0x476f	No error (0)	pagead46.l.doubleclick.net		108.177.119.157	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:16.882715940 CET	8.8.8.8	192.168.2.4	0x476f	No error (0)	pagead46.l.doubleclick.net		108.177.119.154	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:16.882715940 CET	8.8.8.8	192.168.2.4	0x476f	No error (0)	pagead46.l.doubleclick.net		108.177.119.155	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:16.882715940 CET	8.8.8.8	192.168.2.4	0x476f	No error (0)	pagead46.l.doubleclick.net		108.177.119.156	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:17.150068045 CET	8.8.8.8	192.168.2.4	0xfadc	No error (0)	content22.citibankonline.com	h-citibankonline.online-metrix.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:56:17.150068045 CET	8.8.8.8	192.168.2.4	0xfadc	No error (0)	h-citibankonline.online-metrix.net		91.235.133.67	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:17.672750950 CET	8.8.8.8	192.168.2.4	0xc256	No error (0)	lptag.liveperson.net	lptag.liveperson.cotcdb.net.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:56:17.824947119 CET	8.8.8.8	192.168.2.4	0xa55a	No error (0)	pagead46.l.doubleclick.net		108.177.127.157	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:17.824947119 CET	8.8.8.8	192.168.2.4	0xa55a	No error (0)	pagead46.l.doubleclick.net		108.177.127.155	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:17.824947119 CET	8.8.8.8	192.168.2.4	0xa55a	No error (0)	pagead46.l.doubleclick.net		108.177.127.156	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:17.824947119 CET	8.8.8.8	192.168.2.4	0xa55a	No error (0)	pagead46.l.doubleclick.net		108.177.127.154	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:20.098993063 CET	8.8.8.8	192.168.2.4	0xb392	No error (0)	accdn.lpsnmedia.net	accdn.lpsnmedia.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:56:22.096250057 CET	8.8.8.8	192.168.2.4	0xadeb	No error (0)	lpcdn.lpsnmedia.net	lpcdn.lpsnmedia.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:56:22.414823055 CET	8.8.8.8	192.168.2.4	0x5d5c	No error (0)	fpdownload.macromedia.com	fpdownload.macromedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:56:23.735021114 CET	8.8.8.8	192.168.2.4	0x7985	No error (0)	va.v.liveperson.net		208.89.12.87	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:25.618848085 CET	8.8.8.8	192.168.2.4	0x637f	No error (0)	citiretailservices.citibankonline.com	san.citiretailservices.citibankonline.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:56:37.298578024 CET	8.8.8.8	192.168.2.4	0x6b6c	No error (0)	530q7tul7hqjtptrx4pdeztidymlzqwqsjbpeiyyddbada1c24c4b3b4am1.e.aa.online-metrix.net		91.235.134.131	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:37.854569912 CET	8.8.8.8	192.168.2.4	0x4357	No error (0)	content22.citibankonline.com	h-citibankonline.online-metrix.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:56:37.854569912 CET	8.8.8.8	192.168.2.4	0x4357	No error (0)	h-citibankonline.online-metrix.net		91.235.133.67	A (IP address)	IN (0x0001)
Jan 12, 2021 16:56:39.218725920 CET	8.8.8.8	192.168.2.4	0x2b9f	No error (0)	530q7tul2oksten67a72qbpmvqmitj7yq5kac55k94166c0d8e41729dam1.e.aa.online-metrix.net		91.235.134.131	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:12.243180990 CET	8.8.8.8	192.168.2.4	0x103d	No error (0)	mboxedge37.tt.omtrdc.net		54.75.9.158	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:12.243180990 CET	8.8.8.8	192.168.2.4	0x103d	No error (0)	mboxedge37.tt.omtrdc.net		52.51.251.137	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:12.243180990 CET	8.8.8.8	192.168.2.4	0x103d	No error (0)	mboxedge37.tt.omtrdc.net		18.203.205.32	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:12.243180990 CET	8.8.8.8	192.168.2.4	0x103d	No error (0)	mboxedge37.tt.omtrdc.net		52.212.164.82	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:12.243180990 CET	8.8.8.8	192.168.2.4	0x103d	No error (0)	mboxedge37.tt.omtrdc.net		52.18.150.20	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:12.243180990 CET	8.8.8.8	192.168.2.4	0x103d	No error (0)	mboxedge37.tt.omtrdc.net		34.252.166.160	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:12.243180990 CET	8.8.8.8	192.168.2.4	0x103d	No error (0)	mboxedge37.tt.omtrdc.net		34.252.156.174	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:12.243180990 CET	8.8.8.8	192.168.2.4	0x103d	No error (0)	mboxedge37.tt.omtrdc.net		52.212.193.208	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:12.555576086 CET	8.8.8.8	192.168.2.4	0xf540	No error (0)	530q7tulzku6wdtu3adkuko7yi3uw5v645fpbwat2d4d830982da375dam1.e.aa.online-metrix.net		91.235.134.131	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:13.302875042 CET	8.8.8.8	192.168.2.4	0xaef9	No error (0)	content22.citibankonline.com	h-citibankonline.online-metrix.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:57:13.302875042 CET	8.8.8.8	192.168.2.4	0xaef9	No error (0)	h-citibankonline.online-metrix.net		91.235.133.67	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:16.804282904 CET	8.8.8.8	192.168.2.4	0xfaed	No error (0)	530q7tul45nwl2gnwoxnwxppglz6x5doqbb3tpm267d05aaca2f79383am1.e.aa.online-metrix.net		91.235.134.131	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:17.052947998 CET	8.8.8.8	192.168.2.4	0xef50	No error (0)	content22.citibankonline.com	h-citibankonline.online-metrix.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:57:17.052947998 CET	8.8.8.8	192.168.2.4	0xef50	No error (0)	h-citibankonline.online-metrix.net		91.235.133.67	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:17.368488073 CET	8.8.8.8	192.168.2.4	0x9ddf	No error (0)	content22.citibankonline.com	h-citibankonline.online-metrix.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:57:17.368488073 CET	8.8.8.8	192.168.2.4	0x9ddf	No error (0)	h-citibankonline.online-metrix.net		91.235.133.67	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:18.722048998 CET	8.8.8.8	192.168.2.4	0x81ea	No error (0)	530q7tulteoc536ivgylc2l3xxnh46bngnkb3uqf705048ba308e840eam1.e.aa.online-metrix.net		91.235.134.131	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:19.199529886 CET	8.8.8.8	192.168.2.4	0x5e25	No error (0)	content22.citibankonline.com	h-citibankonline.online-metrix.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:57:19.199529886 CET	8.8.8.8	192.168.2.4	0x5e25	No error (0)	h-citibankonline.online-metrix.net		91.235.133.67	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:25.274277925 CET	8.8.8.8	192.168.2.4	0xd39a	No error (0)	530q7tulbgrmpc2zn2elpybtplympict4fjkql6n799c07a567a2684fam1.e.aa.online-metrix.net		91.235.134.131	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:25.741609097 CET	8.8.8.8	192.168.2.4	0x301	No error (0)	content22.citibankonline.com	h-citibankonline.online-metrix.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:57:25.741609097 CET	8.8.8.8	192.168.2.4	0x301	No error (0)	h-citibankonline.online-metrix.net		91.235.133.67	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:26.017340899 CET	8.8.8.8	192.168.2.4	0x23ab	No error (0)	content22.citibankonline.com	h-citibankonline.online-metrix.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:57:26.017340899 CET	8.8.8.8	192.168.2.4	0x23ab	No error (0)	h-citibankonline.online-metrix.net		91.235.133.67	A (IP address)	IN (0x0001)
Jan 12, 2021 16:57:30.233371973 CET	8.8.8.8	192.168.2.4	0x3522	No error (0)	content22.citibankonline.com	h-citibankonline.online-metrix.net		CNAME (Canonical name)	IN (0x0001)
Jan 12, 2021 16:57:30.233371973 CET	8.8.8.8	192.168.2.4	0x3522	No error (0)	h-citibankonline.online-metrix.net		91.235.133.67	A (IP address)	IN (0x0001)

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Jan 12, 2021 16:55:59.742141008 CET	63.148.46.109	443	192.168.2.4	49741	CN=info6.accountonline.com, OU=Citi Cards Internet Services, O=Citigroup Inc., L=New York, ST=New York, C=US, SERIALNUMBER=2154254, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu May 02 02:00:00 CEST 2019 Tue Oct 22 14:00:00 CEST 2013 Fri Nov 10 01:00:00 CET 2006	Thu Jun 10 14:00:00 CEST 2021 Sun Oct 22 14:00:00 CEST 2028 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028
					CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jan 12, 2021 16:55:59.742820978 CET	63.148.46.109	443	192.168.2.4	49742	CN=info6.accountonline.com, OU=Citi Cards Internet Services, O=Citigroup Inc., L=New York, ST=New York, C=US, SERIALNUMBER=2154254, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu May 02 02:00:00 CEST 2019 Tue Oct 22 14:00:00 CEST 2013 Fri Nov 10 01:00:00 CET 2006	Thu Jun 10 14:00:00 CEST 2021 Sun Oct 22 14:00:00 CEST 2028 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028
					CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jan 12, 2021 16:56:01.083446980 CET	172.67.147.58	443	192.168.2.4	49747	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Thu Jul 16 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Fri Jul 16 14:00:00 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:01.083446980 CET	172.67.147.58	443	192.168.2.4	49747	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:01.087842941 CET	172.67.147.58	443	192.168.2.4	49746	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Thu Jul 16 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Fri Jul 16 14:00:00 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:01.087842941 CET	172.67.147.58	443	192.168.2.4	49746	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:01.098839045 CET	151.101.2.133	443	192.168.2.4	49749	CN=*.digital-cloud-citi.medallia.com CN=SSL.com RSA SSL subCA, O=SSL Corporation, L=Houston, ST=Texas, C=US CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US	CN=SSL.com RSA SSL subCA, O=SSL Corporation, L=Houston, ST=Texas, C=US CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	Wed Oct 21 04:33:59 CEST 2020 Fri Feb 12 19:48:52 CET 2016 Tue Sep 11 11:26:47 CEST 2018	Sun Nov 21 03:33:59 CET 2021 Wed Feb 12 19:48:52 CET 2031 Mon Sep 11 11:26:47 CEST 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=SSL.com RSA SSL subCA, O=SSL Corporation, L=Houston, ST=Texas, C=US	CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US	Fri Feb 12 19:48:52 CET 2016	Wed Feb 12 19:48:52 CET 2031
					CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US	CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	Tue Sep 11 11:26:47 CEST 2018	Mon Sep 11 11:26:47 CEST 2023
Jan 12, 2021 16:56:01.105150938 CET	151.101.2.133	443	192.168.2.4	49748	CN=*.digital-cloud-citi.medallia.com CN=SSL.com RSA SSL subCA, O=SSL Corporation, L=Houston, ST=Texas, C=US CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US	CN=SSL.com RSA SSL subCA, O=SSL Corporation, L=Houston, ST=Texas, C=US CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	Wed Oct 21 04:33:59 CEST 2020 Fri Feb 12 19:48:52 CET 2016 Tue Sep 11 11:26:47 CEST 2018	Sun Nov 21 03:33:59 CET 2021 Wed Feb 12 19:48:52 CET 2031 Mon Sep 11 11:26:47 CEST 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=SSL.com RSA SSL subCA, O=SSL Corporation, L=Houston, ST=Texas, C=US	CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US	Fri Feb 12 19:48:52 CET 2016	Wed Feb 12 19:48:52 CET 2031
					CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US	CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL	Tue Sep 11 11:26:47 CEST 2018	Mon Sep 11 11:26:47 CEST 2023
Jan 12, 2021 16:56:01.230427980 CET	172.217.218.154	443	192.168.2.4	49751	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Dec 15 15:42:47 CET 2020 Thu Jun 15 02:00:42 CEST 2017	Tue Mar 09 15:42:46 CET 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:01.230427980 CET	172.217.218.154	443	192.168.2.4	49751	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:01.427859068 CET	172.217.218.154	443	192.168.2.4	49750	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Dec 15 15:42:47 CET 2020 Thu Jun 15 02:00:42 CEST 2017	Tue Mar 09 15:42:46 CET 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:01.427859068 CET	172.217.218.154	443	192.168.2.4	49750	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:03.206182003 CET	18.195.42.228	443	192.168.2.4	49754	CN=nexus.ensighten.com, O="Ensighten, Inc", L=SAN JOSE, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 09 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Mon Oct 11 02:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:03.206182003 CET	18.195.42.228	443	192.168.2.4	49754	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:03.206360102 CET	18.195.42.228	443	192.168.2.4	49753	CN=nexus.ensighten.com, O="Ensighten, Inc", L=SAN JOSE, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 09 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Mon Oct 11 02:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:03.206360102 CET	18.195.42.228	443	192.168.2.4	49753	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:03.338975906 CET	108.177.127.154	443	192.168.2.4	49756	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Dec 15 15:42:47 CET 2020 Thu Jun 15 02:00:42 CEST 2017	Tue Mar 09 15:42:46 CET 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:03.338975906 CET	108.177.127.154	443	192.168.2.4	49756	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:03.341053009 CET	108.177.127.154	443	192.168.2.4	49755	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Dec 15 15:42:47 CET 2020 Thu Jun 15 02:00:42 CEST 2017	Tue Mar 09 15:42:46 CET 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:03.341053009 CET	108.177.127.154	443	192.168.2.4	49755	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:05.006825924 CET	91.235.133.67	443	192.168.2.4	49761	CN=content22.citibankonline.com, OU=Web Hosting Group - A, O=Citigroup Inc., L=New York, ST=New York, C=US, SERIALNUMBER=2154254, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Jul 14 02:00:00 CEST 2020 Tue Oct 22 14:00:00 CEST 2013 Fri Nov 10 01:00:00 CET 2006	Sat Aug 06 14:00:00 CEST 2022 Sun Oct 22 14:00:00 CEST 2028 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028
					CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jan 12, 2021 16:56:05.007997036 CET	91.235.133.67	443	192.168.2.4	49762	CN=content22.citibankonline.com, OU=Web Hosting Group - A, O=Citigroup Inc., L=New York, ST=New York, C=US, SERIALNUMBER=2154254, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Jul 14 02:00:00 CEST 2020 Tue Oct 22 14:00:00 CEST 2013 Fri Nov 10 01:00:00 CET 2006	Sat Aug 06 14:00:00 CEST 2022 Sun Oct 22 14:00:00 CEST 2028 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028
					CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jan 12, 2021 16:56:05.300486088 CET	34.107.138.236	443	192.168.2.4	49765	CN=cdn.digitalmarketing.citibankonline.com, OU=Citi Cards Internet Services, O=Citigroup Inc., L=New York, ST=New York, C=US, SERIALNUMBER=2154254, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Jun 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006 Tue Oct 22 14:00:00 CEST 2013	Sat Jun 25 14:00:00 CEST 2022 Mon Nov 10 01:00:00 CET 2031 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
					CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028
Jan 12, 2021 16:56:05.301697016 CET	34.107.138.236	443	192.168.2.4	49764	CN=cdn.digitalmarketing.citibankonline.com, OU=Citi Cards Internet Services, O=Citigroup Inc., L=New York, ST=New York, C=US, SERIALNUMBER=2154254, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Jun 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006 Tue Oct 22 14:00:00 CEST 2013	Sat Jun 25 14:00:00 CEST 2022 Mon Nov 10 01:00:00 CET 2031 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
					CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028
Jan 12, 2021 16:56:07.011748075 CET	91.235.132.130	443	192.168.2.4	49769	C=US, ST=California, L=San Jose, O=Threat Metrix, CN=h.online-metrix.net EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US CN=SecureTrust CA, O=SecureTrust Corporation, C=US	EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US CN=SecureTrust CA, O=SecureTrust Corporation, C=US CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Thu Feb 20 16:19:08 CET 2020 Thu Sep 01 16:35:35 CEST 2016 Tue Nov 07 20:31:18 CET 2006	Fri Feb 19 22:19:08 CET 2021 Sun Sep 29 16:35:35 CEST 2024 Mon Dec 31 20:40:55 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US	CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Thu Sep 01 16:35:35 CEST 2016	Sun Sep 29 16:35:35 CEST 2024
					CN=SecureTrust CA, O=SecureTrust Corporation, C=US	CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Tue Nov 07 20:31:18 CET 2006	Mon Dec 31 20:40:55 CET 2029
Jan 12, 2021 16:56:07.012372971 CET	91.235.132.130	443	192.168.2.4	49768	C=US, ST=California, L=San Jose, O=Threat Metrix, CN=h.online-metrix.net EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US CN=SecureTrust CA, O=SecureTrust Corporation, C=US	EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US CN=SecureTrust CA, O=SecureTrust Corporation, C=US CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Thu Feb 20 16:19:08 CET 2020 Thu Sep 01 16:35:35 CEST 2016 Tue Nov 07 20:31:18 CET 2006	Fri Feb 19 22:19:08 CET 2021 Sun Sep 29 16:35:35 CEST 2024 Mon Dec 31 20:40:55 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US	CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Thu Sep 01 16:35:35 CEST 2016	Sun Sep 29 16:35:35 CEST 2024
					CN=SecureTrust CA, O=SecureTrust Corporation, C=US	CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Tue Nov 07 20:31:18 CET 2006	Mon Dec 31 20:40:55 CET 2029
Jan 12, 2021 16:56:08.040003061 CET	91.235.134.131	443	192.168.2.4	49774	CN=*.e.aa.online-metrix.net, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Fri Sep 13 23:00:21 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon Sep 13 23:00:21 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jan 12, 2021 16:56:08.041610956 CET	91.235.134.131	443	192.168.2.4	49773	CN=*.e.aa.online-metrix.net, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Fri Sep 13 23:00:21 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon Sep 13 23:00:21 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jan 12, 2021 16:56:09.553422928 CET	35.241.45.82	443	192.168.2.4	49786	CN=*.kampyle.com CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Feb 11 01:00:00 CET 2020 Mon Nov 06 13:23:33 CET 2017	Sun Mar 06 13:00:00 CET 2022 Sat Nov 06 13:23:33 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:09.553422928 CET	35.241.45.82	443	192.168.2.4	49786	CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:33 CET 2017	Sat Nov 06 13:23:33 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:09.554820061 CET	35.241.45.82	443	192.168.2.4	49785	CN=*.kampyle.com CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Feb 11 01:00:00 CET 2020 Mon Nov 06 13:23:33 CET 2017	Sun Mar 06 13:00:00 CET 2022 Sat Nov 06 13:23:33 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:09.554820061 CET	35.241.45.82	443	192.168.2.4	49785	CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:33 CET 2017	Sat Nov 06 13:23:33 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:09.956820965 CET	91.235.132.129	443	192.168.2.4	49789	C=US, ST=California, L=San Jose, O=Threat Metrix, CN=aa.online-metrix.net EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US CN=SecureTrust CA, O=SecureTrust Corporation, C=US	EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US CN=SecureTrust CA, O=SecureTrust Corporation, C=US CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Thu Feb 20 15:43:15 CET 2020 Thu Sep 01 16:35:35 CEST 2016 Tue Nov 07 20:31:18 CET 2006	Fri Feb 19 21:43:15 CET 2021 Sun Sep 29 16:35:35 CEST 2024 Mon Dec 31 20:40:55 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US	CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Thu Sep 01 16:35:35 CEST 2016	Sun Sep 29 16:35:35 CEST 2024
					CN=SecureTrust CA, O=SecureTrust Corporation, C=US	CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Tue Nov 07 20:31:18 CET 2006	Mon Dec 31 20:40:55 CET 2029
Jan 12, 2021 16:56:09.965811014 CET	91.235.132.129	443	192.168.2.4	49788	C=US, ST=California, L=San Jose, O=Threat Metrix, CN=aa.online-metrix.net EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US CN=SecureTrust CA, O=SecureTrust Corporation, C=US	EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US CN=SecureTrust CA, O=SecureTrust Corporation, C=US CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Thu Feb 20 15:43:15 CET 2020 Thu Sep 01 16:35:35 CEST 2016 Tue Nov 07 20:31:18 CET 2006	Fri Feb 19 21:43:15 CET 2021 Sun Sep 29 16:35:35 CEST 2024 Mon Dec 31 20:40:55 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US	CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Thu Sep 01 16:35:35 CEST 2016	Sun Sep 29 16:35:35 CEST 2024
					CN=SecureTrust CA, O=SecureTrust Corporation, C=US	CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Tue Nov 07 20:31:18 CET 2006	Mon Dec 31 20:40:55 CET 2029
Jan 12, 2021 16:56:10.106208086 CET	52.212.164.82	443	192.168.2.4	49791	CN=*.tt.omtrdc.net, O=Adobe Inc., L=SAN JOSE, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 02 01:00:00 CET 2020 Fri Mar 08 13:00:00 CET 2013	Wed Nov 10 00:59:59 CET 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:10.106208086 CET	52.212.164.82	443	192.168.2.4	49791	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:10.116888046 CET	52.212.164.82	443	192.168.2.4	49792	CN=*.tt.omtrdc.net, O=Adobe Inc., L=SAN JOSE, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 02 01:00:00 CET 2020 Fri Mar 08 13:00:00 CET 2013	Wed Nov 10 00:59:59 CET 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:10.116888046 CET	52.212.164.82	443	192.168.2.4	49792	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:14.754622936 CET	35.181.18.61	443	192.168.2.4	49794	CN=metrics1.citibankonline.com, OU=CRS, O=Citigroup Inc., L=New York, ST=New York, C=US, SERIALNUMBER=2154254, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Apr 22 02:00:00 CEST 2020 Tue Oct 22 14:00:00 CEST 2013	Sun Jun 05 14:00:00 CEST 2022 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:14.754622936 CET	35.181.18.61	443	192.168.2.4	49794	CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:14.765331030 CET	35.181.18.61	443	192.168.2.4	49793	CN=metrics1.citibankonline.com, OU=CRS, O=Citigroup Inc., L=New York, ST=New York, C=US, SERIALNUMBER=2154254, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Apr 22 02:00:00 CEST 2020 Tue Oct 22 14:00:00 CEST 2013	Sun Jun 05 14:00:00 CEST 2022 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:14.765331030 CET	35.181.18.61	443	192.168.2.4	49793	CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:16.913501024 CET	173.194.79.155	443	192.168.2.4	49796	CN=*.google.co.uk, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Dec 15 15:51:09 CET 2020 Thu Jun 15 02:00:42 CEST 2017	Tue Mar 09 15:51:08 CET 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:16.913501024 CET	173.194.79.155	443	192.168.2.4	49796	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:16.939312935 CET	173.194.79.155	443	192.168.2.4	49795	CN=*.google.co.uk, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Dec 15 15:51:09 CET 2020 Thu Jun 15 02:00:42 CEST 2017	Tue Mar 09 15:51:08 CET 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:16.939312935 CET	173.194.79.155	443	192.168.2.4	49795	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:16.981848001 CET	108.177.119.157	443	192.168.2.4	49797	CN=*.google.com, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Dec 15 15:42:53 CET 2020 Thu Jun 15 02:00:42 CEST 2017	Tue Mar 09 15:42:52 CET 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:16.981848001 CET	108.177.119.157	443	192.168.2.4	49797	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:16.997594118 CET	108.177.119.157	443	192.168.2.4	49798	CN=*.google.com, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Dec 15 15:42:53 CET 2020 Thu Jun 15 02:00:42 CEST 2017	Tue Mar 09 15:42:52 CET 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:16.997594118 CET	108.177.119.157	443	192.168.2.4	49798	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:18.171622038 CET	108.177.127.157	443	192.168.2.4	49807	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Dec 15 15:42:47 CET 2020 Thu Jun 15 02:00:42 CEST 2017	Tue Mar 09 15:42:46 CET 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:18.171622038 CET	108.177.127.157	443	192.168.2.4	49807	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:18.220403910 CET	108.177.127.157	443	192.168.2.4	49806	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Dec 15 15:42:47 CET 2020 Thu Jun 15 02:00:42 CEST 2017	Tue Mar 09 15:42:46 CET 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:18.220403910 CET	108.177.127.157	443	192.168.2.4	49806	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:56:24.115653038 CET	208.89.12.87	443	192.168.2.4	49823	CN=*.v.liveperson.net, OU="LivePerson, Inc.", O="LivePerson, Inc", STREET=475 10TH AVE FL 5, L=New York, ST=New York, OID.2.5.4.17=10018, C=US CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Mon Apr 13 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019	Thu Apr 14 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
Jan 12, 2021 16:56:24.131532907 CET	208.89.12.87	443	192.168.2.4	49824	CN=*.v.liveperson.net, OU="LivePerson, Inc.", O="LivePerson, Inc", STREET=475 10TH AVE FL 5, L=New York, ST=New York, OID.2.5.4.17=10018, C=US CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Mon Apr 13 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019	Thu Apr 14 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
Jan 12, 2021 16:56:37.491724968 CET	91.235.134.131	443	192.168.2.4	49839	CN=*.e.aa.online-metrix.net, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Fri Sep 13 23:00:21 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon Sep 13 23:00:21 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jan 12, 2021 16:56:37.495317936 CET	91.235.134.131	443	192.168.2.4	49838	CN=*.e.aa.online-metrix.net, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Fri Sep 13 23:00:21 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon Sep 13 23:00:21 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jan 12, 2021 16:56:39.444183111 CET	91.235.134.131	443	192.168.2.4	49850	CN=*.e.aa.online-metrix.net, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Fri Sep 13 23:00:21 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon Sep 13 23:00:21 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jan 12, 2021 16:56:39.494579077 CET	91.235.134.131	443	192.168.2.4	49851	CN=*.e.aa.online-metrix.net, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Fri Sep 13 23:00:21 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon Sep 13 23:00:21 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jan 12, 2021 16:57:12.377294064 CET	54.75.9.158	443	192.168.2.4	49901	CN=*.tt.omtrdc.net, O=Adobe Inc., L=SAN JOSE, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 02 01:00:00 CET 2020 Fri Mar 08 13:00:00 CET 2013	Wed Nov 10 00:59:59 CET 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:57:12.377294064 CET	54.75.9.158	443	192.168.2.4	49901	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:57:12.383315086 CET	54.75.9.158	443	192.168.2.4	49902	CN=*.tt.omtrdc.net, O=Adobe Inc., L=SAN JOSE, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 02 01:00:00 CET 2020 Fri Mar 08 13:00:00 CET 2013	Wed Nov 10 00:59:59 CET 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:57:12.383315086 CET	54.75.9.158	443	192.168.2.4	49902	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jan 12, 2021 16:57:12.657263994 CET	91.235.134.131	443	192.168.2.4	49909	CN=*.e.aa.online-metrix.net, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Fri Sep 13 23:00:21 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon Sep 13 23:00:21 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jan 12, 2021 16:57:12.658011913 CET	91.235.134.131	443	192.168.2.4	49910	CN=*.e.aa.online-metrix.net, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Fri Sep 13 23:00:21 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon Sep 13 23:00:21 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jan 12, 2021 16:57:16.911521912 CET	91.235.134.131	443	192.168.2.4	49924	CN=*.e.aa.online-metrix.net, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Fri Sep 13 23:00:21 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon Sep 13 23:00:21 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jan 12, 2021 16:57:16.911613941 CET	91.235.134.131	443	192.168.2.4	49925	CN=*.e.aa.online-metrix.net, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Fri Sep 13 23:00:21 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon Sep 13 23:00:21 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jan 12, 2021 16:57:18.825951099 CET	91.235.134.131	443	192.168.2.4	49939	CN=*.e.aa.online-metrix.net, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Fri Sep 13 23:00:21 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon Sep 13 23:00:21 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jan 12, 2021 16:57:18.826302052 CET	91.235.134.131	443	192.168.2.4	49940	CN=*.e.aa.online-metrix.net, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Fri Sep 13 23:00:21 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon Sep 13 23:00:21 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jan 12, 2021 16:57:25.412590027 CET	91.235.134.131	443	192.168.2.4	49961	CN=*.e.aa.online-metrix.net, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Fri Sep 13 23:00:21 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon Sep 13 23:00:21 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jan 12, 2021 16:57:25.412658930 CET	91.235.134.131	443	192.168.2.4	49960	CN=*.e.aa.online-metrix.net, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Fri Sep 13 23:00:21 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon Sep 13 23:00:21 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jan 12, 2021 16:57:28.051492929 CET	208.89.12.87	443	192.168.2.4	49979	CN=*.v.liveperson.net, OU="LivePerson, Inc.", O="LivePerson, Inc", STREET=475 10TH AVE FL 5, L=New York, ST=New York, OID.2.5.4.17=10018, C=US CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Mon Apr 13 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019	Thu Apr 14 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
Jan 12, 2021 16:57:28.052151918 CET	208.89.12.87	443	192.168.2.4	49978	CN=*.v.liveperson.net, OU="LivePerson, Inc.", O="LivePerson, Inc", STREET=475 10TH AVE FL 5, L=New York, ST=New York, OID.2.5.4.17=10018, C=US CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Mon Apr 13 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019	Thu Apr 14 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: iexplore.exe PID: 5728 Parent PID: 800

General

Start time:	16:55:56
Start date:	12/01/2021
Path:	C:\Program Files\internet explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x7ff623fe0000
File size:	823560 bytes
MD5 hash:	6465CB92B25A7BC1DF8E01D8AC5E7596
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Analysis Process: iexplore.exe PID: 3280 Parent PID: 5728

General

Start time:	16:55:57
Start date:	12/01/2021
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5728 CREDAT:17410 /prefetch:2
Imagebase:	0xb90000
File size:	822536 bytes
MD5 hash:	071277CC2E3DF41EEEA8013E2AB58D5A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Disassembly

Reset < >

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Network device logs, Network intrusion detection system, Packet capture, Process use of network, SSL/TLS inspection, Web proxy
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report https://l.info6.accountonline.com/rts/go2.aspx?h=1006873&tp=i-1NHD-Q4L-FWM-6pIROB-2M-11iUTE-1c-2U96D-6kgs2T-l5Zh59mRxl-2Gp8op&x=%2FRSnextgen%2Fsvc%2Flaunch%2Findex.action%3FsiteId%3DPLCN_BESTBUY%26desc%3dEUZP1BCM0043%26cmp%3dESVC_EUZP1BCM0043%23signon

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

Phishing:

Compliance:

Networking:

System Summary:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

Private

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTPS Packets

Code Manipulations

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: iexplore.exe PID: 5728 Parent PID: 800

General

Chronological Activities

Analysis Process: iexplore.exe PID: 3280 Parent PID: 5728

General

Chronological Activities

Disassembly