#separator \x09
#set_separator	,
#empty_field	(empty)
#unset_field	-
#path	ssl
#open	2019-03-23-14-17-34
#fields	ts	uid	id.orig_h	id.orig_p	id.resp_h	id.resp_p	version	cipher	curve	server_name	resumed	last_alert	next_protocol	established	cert_chain_fuids	client_cert_chain_fuids	subject	issuer	client_subject	client_issuer	validation_status	label	detailedlabel
#types	time	string	addr	port	addr	port	string	string	string	string	bool	string	string	bool	vector[string]	vector[string]	string	string	string	string	string	string	string
129.308776	COp1zHihcqCH3Yy8g	192.168.1.113	49164	78.140.180.43	443	TLSv10	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA	secp256r1	api1.mql5.com	F	-	-	T	FPbBYt2pkz45eSB1ag,FrrxWlMhmek0UA2R,FM5ElG4BZ2g3ePOZul	(empty)	CN=*.mql5.com,OU=COMODO SSL Wildcard,OU=Domain Control Validated	CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	-	-	certificate is not yet valid	Malicious	CC
129.360182	Cwhz5i21UqbkzuLB56	192.168.1.113	49168	185.125.33.242	443	TLSv10	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA	secp384r1	api9.mql5.com	F	-	-	T	F9BW0J2CofRJQubVQg,FkQg5D1Gnbzgkcz2L8,FGx1Fk35nB2rhjPvl	(empty)	CN=*.mql5.com,OU=COMODO SSL Wildcard,OU=Domain Control Validated	CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	-	-	certificate is not yet valid	Malicious	CC
129.312495	C3G31brEHo7Jss8Y7	192.168.1.113	49165	188.42.188.236	443	TLSv10	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA	secp384r1	api13.mql5.com	F	-	-	T	FsLnT8364BCPzKs9kg,FEk3l24BnFtH57lTF5,FvJ8H71TMj8UKpaHW3	(empty)	CN=*.mql5.com,OU=COMODO SSL Wildcard,OU=Domain Control Validated	CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	-	-	certificate is not yet valid	Malicious	CC
129.341385	CD6cal8UopOgEJ0d6	192.168.1.113	49161	88.212.232.100	443	TLSv10	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA	secp384r1	api4.mql5.com	F	-	-	T	FXe3Ib4JviEqi4PxO2,FirovV1lUKTbuBiR3d,FlVcfF1XCsYDNG5oTa	(empty)	CN=*.mql5.com,OU=COMODO SSL Wildcard,OU=Domain Control Validated	CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	-	-	certificate is not yet valid	Malicious	CC
129.393374	CBrtEQ1nX2E9apipBk	192.168.1.113	49160	206.221.189.58	443	TLSv10	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA	secp384r1	api3.mql5.com	F	-	-	T	F4eV6t2zXiDi0uMi38,FZYFN03Y6yM1CjH532,FpGhha4SvmuyIjgYJc	(empty)	CN=*.mql5.com,OU=COMODO SSL Wildcard,OU=Domain Control Validated	CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	-	-	certificate is not yet valid	Malicious	CC
129.447632	CRfA2u3ILHkglN69jd	192.168.1.113	49163	142.0.196.172	443	TLSv10	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA	secp384r1	api11.mql5.com	F	-	-	T	F8burQ1hnjjw6Ezcoi,FxYqmM2FKvb6g5U1i6,FqjCR73WOVc6sdCLzd	(empty)	CN=*.mql5.com,OU=COMODO SSL Wildcard,OU=Domain Control Validated	CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	-	-	certificate is not yet valid	Malicious	CC
129.558812	CBv6W24zRXWy4EQ9hc	192.168.1.113	49169	123.59.75.245	443	TLSv10	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA	secp384r1	api12.mql5.com	F	-	-	T	F3ICXn1guPEwJQGgZ4,Fz1doCiFW1qCr3Jwi,FGyNlo1WqYHKvwgZrd	(empty)	CN=*.mql5.com,OU=COMODO SSL Wildcard,OU=Domain Control Validated	CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	-	-	certificate is not yet valid	Malicious	CC
129.559010	CK8xq5Xb2pmRRvwh6	192.168.1.113	49171	104.41.44.127	443	TLSv10	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA	secp384r1	api8.mql5.com	F	-	-	T	FsCTPDxxdxzvh65bj,FS0LSp2pM1cKpva3Qe,FqhxpQ1eqx2PWY2pBh	(empty)	CN=*.mql5.com,OU=COMODO SSL Wildcard,OU=Domain Control Validated	CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	-	-	certificate is not yet valid	Benign	Microsoft
129.589742	C5zbNx2hphGuvGPpic	192.168.1.113	49166	23.97.72.200	443	TLSv10	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA	secp384r1	api5.mql5.com	F	-	-	T	FNfuGg3CoAzFVQn8mk,FPbodK3yfRActSCpSh,Fd1cZe35JXimA3palh	(empty)	CN=*.mql5.com,OU=COMODO SSL Wildcard,OU=Domain Control Validated	CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	-	-	certificate is not yet valid	Benign	Microsoft
129.589947	CGoDSPVNmfR3aJShh	192.168.1.113	49167	104.41.185.20	443	TLSv10	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA	secp384r1	api6.mql5.com	F	-	-	T	FO0wFk4QFZJBiQRA19,FoYfgsIwWEru4CANl,FCShHy4Ds7RNj05P0k	(empty)	CN=*.mql5.com,OU=COMODO SSL Wildcard,OU=Domain Control Validated	CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	-	-	certificate is not yet valid	Benign	Microsoft
129.645226	C7W87A4zC7kHdWl6K7	192.168.1.113	49170	120.132.7.97	443	TLSv10	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA	secp256r1	api14.mql5.com	F	-	-	T	FLPfaV3oDpxbu9UO31,F5UBVY1RvlocBZTaok,FqW5lP1HzdI0issOTk	(empty)	CN=*.mql5.com,OU=COMODO SSL Wildcard,OU=Domain Control Validated	CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	-	-	certificate is not yet valid	Malicious	CC
129.680466	CrQQzE2rQ7T65DXWz	192.168.1.113	49172	223.25.233.126	443	TLSv10	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA	secp384r1	api2.mql5.com	F	-	-	T	FHqpyL2DLiS6RsfU5b,Fkz8mm4BjMD30Hbm2h,FjBcLr4tkpJ8Nigag	(empty)	CN=*.mql5.com,OU=COMODO SSL Wildcard,OU=Domain Control Validated	CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	-	-	certificate is not yet valid	Malicious	CC
187.289395	C0KU2jMjLR8AauVl	192.168.1.113	49173	78.140.180.100	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	www.mql5.com	F	-	-	T	F9hADz3cmEdXogpdhb,F3ORvn5L8uunggOi5,FfX2Zw1vX7pn9kd3Od	(empty)	CN=*.mql5.com,OU=COMODO SSL Wildcard,OU=Domain Control Validated	CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	-	-	certificate is not yet valid	Malicious	CC
190.001197	CLeT7I1V5dfSYv4BDb	192.168.1.113	49174	78.140.180.100	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	c.mql5.com	F	-	-	T	Fyu6CSmsB1b9rD50e,FiYcP04AdGDDFw3mu8,Fyl5ID2Oy618qNfgzf	(empty)	CN=*.mql5.com,OU=COMODO SSL Wildcard,OU=Domain Control Validated	CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	-	-	certificate is not yet valid	Malicious	CC
190.042099	CB5LIY1P3Ei1VU25Nk	192.168.1.113	49175	78.140.180.100	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	c.mql5.com	F	-	-	T	FXHpjqlgfDtZYIMRd,F0Vauu1Jp3uQ0l37U2,FUhKAl3F6D2E5FU7c3	(empty)	CN=*.mql5.com,OU=COMODO SSL Wildcard,OU=Domain Control Validated	CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	-	-	certificate is not yet valid	Malicious	CC
190.042287	CXIpxt1vCuO7RYfHi5	192.168.1.113	49176	78.140.180.100	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	c.mql5.com	F	-	-	T	FT7WP51rvyeAEXrjDf,FFHsDVTDraL8Y2g,FLPNDh3eafv5y0qDIi	(empty)	CN=*.mql5.com,OU=COMODO SSL Wildcard,OU=Domain Control Validated	CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	-	-	certificate is not yet valid	Malicious	CC
192.285240	CRA0PC2AwnGis5Yyki	192.168.1.113	49178	78.140.180.100	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	-	c.mql5.com	T	-	-	T	-	-	-	-	-	-	-	Malicious	CC
192.319023	C20Izg3gWXMCL35LK5	192.168.1.113	49177	78.140.180.100	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	-	c.mql5.com	T	-	-	T	-	-	-	-	-	-	-	Malicious	CC
194.329990	CYFdSq1YG0cBVlzcq	192.168.1.113	49179	78.140.180.86	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	content.mql5.com	F	-	-	T	Fisxhu1RgJBoOmbZ79,FR2iwH15IAf2D6LcP4,FVqsuo4sURxRP5utB8	(empty)	CN=*.mql5.com,OU=COMODO SSL Wildcard,OU=Domain Control Validated	CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	-	-	certificate is not yet valid	Malicious	CC
194.655200	C23aEI2SROkUIE1TSl	192.168.1.113	49180	78.140.180.100	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	-	www.mql5.com	T	-	-	T	-	-	-	-	-	-	-	Malicious	CC
195.194335	CRNSl71HSbuDFvY3yk	192.168.1.113	49181	78.140.180.100	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	-	c.mql5.com	T	-	-	T	-	-	-	-	-	-	-	Malicious	CC
200.244072	CvGC32ankirxsjHha	192.168.1.113	49182	188.42.188.236	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA	secp384r1	stat.mql5.com	F	-	-	T	FoPLoH3cT8hziDSa3l,FgOCDk4DGmx3MG9mDa,FhzpSf1jwDVg7oVdp3	(empty)	CN=*.mql5.com,OU=COMODO SSL Wildcard,OU=Domain Control Validated	CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	-	-	certificate is not yet valid	Malicious	CC
287.318681	C4qGeq2YqySQrArUQ9	192.168.1.113	49354	78.140.180.43	443	TLSv10	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA	secp256r1	api1.mql5.com	F	-	-	T	FMBIeO1panGybjR85i,FhWNQc2r55YusI1uta,F6kGG94z2u9wiaP16j	(empty)	CN=*.mql5.com,OU=COMODO SSL Wildcard,OU=Domain Control Validated	CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	-	-	certificate is not yet valid	Malicious	CC
287.800891	CjvBc81FAvcueaJ2Mj	192.168.1.113	49355	78.140.180.43	443	TLSv10	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA	-	api1.mql5.com	T	-	-	T	-	-	-	-	-	-	-	Malicious	CC