Is this a PHISHING IP?
Via my network monitor I see a connection out to 131.253.61.84.
Re: https://www.virustotal.com/nl/url/27bd26cb7162750c549c652b7afda8734383ca681419ed87b5eff75345e65c57/analysis/#additional-info
Re: https://sitecheck.sucuri.net/results/131.253.61.84
Site not safe according to Bitdefender’s TrafficLight. Site says Microdoft account unavailable.
Risk rating 9 red out of 10: http://toolbar.netcraft.com/site_report?url=http://131.253.61.84
Is this connection made after a BSOD?
polonus