Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

DNS C2 Bug #1801

Open
steverpm890 opened this issue Oct 27, 2024 · 1 comment
Open

DNS C2 Bug #1801

steverpm890 opened this issue Oct 27, 2024 · 1 comment

Comments

@steverpm890
Copy link

Describe the bug
Version 1.5.42 cannot work properly in Windows AWS server. The default DNS server is 172.31.0.2. If it is changed to 1.1.1.1, it can work normally.

Version 1.5.39 is normal

generate --dns ns1.xxxx.com. --save /var/www/html/dns.exe --os windows --debug

dns --domains ns1.xxxx.com.

C:\Users\Administrator\Desktop>dns.exe
2024/10/27 11:20:32 sliver.go:97: Hello my name is SLEEPY_POWDER
2024/10/27 11:20:32 limits.go:58: Limit checks completed
2024/10/27 11:20:32 sliver.go:115: Running in session mode
2024/10/27 11:20:32 session.go:64: Starting interactive session connection loop ...
2024/10/27 11:20:32 transports.go:41: Starting c2 url generator () ...
2024/10/27 11:20:32 transports.go:104: Return generator: (chan *url.URL)(0xc00014ade0)
2024/10/27 11:20:32 transports.go:92: Yield c2 uri = 'dns://ns1.xxxx.com.'
2024/10/27 11:20:32 transports.go:92: Yield c2 uri = 'dns://ns1.xxxx.com.'
2024/10/27 11:20:32 session.go:81: Next CC = dns://ns1.xxxx.com.
2024/10/27 11:20:32 session.go:81: Next CC = dns://ns1.xxxx.com.
2024/10/27 11:20:32 transports.go:92: Yield c2 uri = 'dns://ns1.xxxx.com.'
2024/10/27 11:20:32 session.go:171: Attempting to connect via DNS via parent: ns1.xxxx.com.
2024/10/27 11:20:32 dnsclient.go:152: DNS client connecting to 'ns1.xxxx.com.' (timeout: 5s) ...
2024/10/27 11:20:32 conf_windows.go:77: Possible resolver: 172.31.0.2
2024/10/27 11:20:32 dnsclient.go:299: [dns] found resolvers: [172.31.0.2]
2024/10/27 11:20:32 crypto.go:227: TOTP Code: 26855497
2024/10/27 11:20:32 dnsclient.go:724: [dns] Fetching dns session id via 'baakb968ww3a.ns1.xxxx.com.' ...
2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of baakb968ww3a.ns1.xxxx.com. ?
2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 0s (err: )
2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 87.250.53.246
2024/10/27 11:20:32 dnsclient.go:745: [dns] dns session id: 3537495
2024/10/27 11:20:32 dnsclient.go:307: [dns] dns session id 3537495
2024/10/27 11:20:32 dnsclient.go:311: [dns] fingerprinting resolvers ...
2024/10/27 11:20:32 dnsclient.go:841: [dns] Fingerprinting 1 resolver(s) ...
2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of 1cgzfnrb342hr0zuuwpfxg2n.ns1.xxxx.com. ?
2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 0s (err: )
2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 177.202.186.229
2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of 1cgzfnrb3421zakackqzh9a0.ns1.xxxx.com. ?
2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 563.2µs (err: )
2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 52.71.193.224
2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of 1cgzfnrb3425p4vza2cb9vw8.ns1.xxxx.com. ?
2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 2.0821ms (err: )
2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 220.191.199.92
2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of 1cgzfnrb342evbw1m8ec1c8z.ns1.xxxx.com. ?
2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 518.9µs (err: )
2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 188.37.192.93
2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of ULDs2tS8jiUN78NHuUPV.ns1.xxxx.com. ?
2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 517.9µs (err: )
2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 87.132.174.66
2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of ULDs2tS8KabaLjLt9aDZ.ns1.xxxx.com. ?
2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 517.9µs (err: )
2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 10.168.47.126
2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of ULDs2tS8KeKtx8tPk7nS.ns1.xxxx.com. ?
2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 518µs (err: )
2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 139.41.18.8
2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of ULDs2tS8jocWyCqqTWsG.ns1.xxxx.com. ?
2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 2.5326ms (err: )
2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 120.161.100.3
2024/10/27 11:20:32 dnsclient.go:861: [dns] 172.31.0.2:53: avg rtt 906.325µs, base58: true, errors 0
2024/10/27 11:20:32 dnsclient.go:660: [dns] encoded: 0, subdata space: 233 | stop: 116, len: 264
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:117] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 176 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:118] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 177 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:119] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 179 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:120] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 180 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:121] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 181 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:122] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 183 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:123] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 184 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:124] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 185 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:125] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 187 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:126] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 188 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:127] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 189 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:128] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 192 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:129] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 194 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:130] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 195 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:131] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 196 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:132] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 198 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:133] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 199 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:134] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 200 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:135] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 202 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:136] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 203 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:137] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 204 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:138] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 206 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:139] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 207 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:140] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 209 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:141] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 210 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:142] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 211 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:143] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 213 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:144] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 214 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:145] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 215 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:146] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 217 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:147] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 218 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:148] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 220 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:149] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 221 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:150] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 222 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:151] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 224 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:152] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 225 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:153] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 226 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:154] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 228 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:155] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 229 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:156] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 230 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:157] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 232 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:158] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 233 (max: 234)
2024/10/27 11:20:32 dnsclient.go:660: [dns] encoded: 0, subdata space: 233 | stop: 263, len: 264
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [158:264] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 165 (max: 234)
2024/10/27 11:20:32 dnsclient.go:701: [dns] subdata 0 (0->158): 158 bytes
2024/10/27 11:20:32 dnsclient.go:701: [dns] subdata 1 (158->264): 106 bytes
2024/10/27 11:20:32 dnsclient.go:704: [dns] original data: 264 bytes
2024/10/27 11:20:32 dnsclient.go:705: [dns] total subdata: 264 bytes
2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 20.2452ms (err: )
2024/10/27 11:20:32 resolver-generic.go:142: [dns] error response status: 2
2024/10/27 11:20:32 resolver-generic.go:128: [dns] query error: invalid rcode (retry wait: 1s)
2024/10/27 11:20:33 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 952.9µs (err: )
2024/10/27 11:20:33 resolver-generic.go:142: [dns] error response status: 2
2024/10/27 11:20:33 resolver-generic.go:128: [dns] query error: invalid rcode (retry wait: 1s)
2024/10/27 11:20:34 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 16.0821ms (err: )
2024/10/27 11:20:34 resolver-generic.go:142: [dns] error response status: 2
2024/10/27 11:20:34 resolver-generic.go:128: [dns] query error: invalid rcode (retry wait: 1s)
2024/10/27 11:20:35 dnsclient.go:402: [dns] init msg failure invalid rcode
2024/10/27 11:20:35 dnsclient.go:346: [dns] init msg send failure invalid rcode
2024/10/27 11:20:35 sliver.go:158: [session] failed to establish connection: invalid rcode
2024/10/27 11:20:35 sliver.go:138: Reconnect sleep: 1m0s

cat sliver.log

INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'baakb968ww3a.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'baakb968ww3a.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb342hr0zuuwpfxg2n.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb342hr0zuuwpfxg2n.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb3421zakackqzh9a0.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb3421zakackqzh9a0.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb3425p4vza2cb9vw8.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb3425p4vza2cb9vw8.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb342evbw1m8ec1c8z.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb342evbw1m8ec1c8z.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8jiUN78NHuUPV.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8jiUN78NHuUPV.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8KabaLjLt9aDZ.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8KabaLjLt9aDZ.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8KeKtx8tPk7nS.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8KeKtx8tPk7nS.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8jocWyCqqTWsG.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8jocWyCqqTWsG.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'
@steverpm890
Copy link
Author

Version 1.5.39 works normally, but the session keeps getting disconnected and reconnected.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@steverpm890