steverpm890
commented
2 hours ago Version 1.5.39 works normally, but the session keeps getting disconnected and reconnected.
Open steverpm890 opened 2 hours ago
steverpm890
commented
2 hours ago Version 1.5.39 works normally, but the session keeps getting disconnected and reconnected.
Describe the bug Version 1.5.42 cannot work properly in Windows AWS server. The default DNS server is 172.31.0.2. If it is changed to 1.1.1.1, it can work normally.
Version 1.5.39 is normal
generate --dns ns1.xxxx.com. --save /var/www/html/dns.exe --os windows --debug
dns --domains ns1.xxxx.com.
C:\Users\Administrator\Desktop>dns.exe 2024/10/27 11:20:32 sliver.go:97: Hello my name is SLEEPY_POWDER 2024/10/27 11:20:32 limits.go:58: Limit checks completed 2024/10/27 11:20:32 sliver.go:115: Running in session mode 2024/10/27 11:20:32 session.go:64: Starting interactive session connection loop ... 2024/10/27 11:20:32 transports.go:41: Starting c2 url generator () ... 2024/10/27 11:20:32 transports.go:104: Return generator: (chan *url.URL)(0xc00014ade0) 2024/10/27 11:20:32 transports.go:92: Yield c2 uri = 'dns://ns1.xxxx.com.' 2024/10/27 11:20:32 transports.go:92: Yield c2 uri = 'dns://ns1.xxxx.com.' 2024/10/27 11:20:32 session.go:81: Next CC = dns://ns1.xxxx.com. 2024/10/27 11:20:32 session.go:81: Next CC = dns://ns1.xxxx.com. 2024/10/27 11:20:32 transports.go:92: Yield c2 uri = 'dns://ns1.xxxx.com.' 2024/10/27 11:20:32 session.go:171: Attempting to connect via DNS via parent: ns1.xxxx.com. 2024/10/27 11:20:32 dnsclient.go:152: DNS client connecting to 'ns1.xxxx.com.' (timeout: 5s) ... 2024/10/27 11:20:32 conf_windows.go:77: Possible resolver: 172.31.0.2 2024/10/27 11:20:32 dnsclient.go:299: [dns] found resolvers: [172.31.0.2] 2024/10/27 11:20:32 crypto.go:227: TOTP Code: 26855497 2024/10/27 11:20:32 dnsclient.go:724: [dns] Fetching dns session id via 'baakb968ww3a.ns1.xxxx.com.' ... 2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of baakb968ww3a.ns1.xxxx.com. ? 2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 0s (err:)
2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 87.250.53.246
2024/10/27 11:20:32 dnsclient.go:745: [dns] dns session id: 3537495
2024/10/27 11:20:32 dnsclient.go:307: [dns] dns session id 3537495
2024/10/27 11:20:32 dnsclient.go:311: [dns] fingerprinting resolvers ...
2024/10/27 11:20:32 dnsclient.go:841: [dns] Fingerprinting 1 resolver(s) ...
2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of 1cgzfnrb342hr0zuuwpfxg2n.ns1.xxxx.com. ?
2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 0s (err: )
2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 177.202.186.229
2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of 1cgzfnrb3421zakackqzh9a0.ns1.xxxx.com. ?
2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 563.2µs (err: )
2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 52.71.193.224
2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of 1cgzfnrb3425p4vza2cb9vw8.ns1.xxxx.com. ?
2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 2.0821ms (err: )
2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 220.191.199.92
2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of 1cgzfnrb342evbw1m8ec1c8z.ns1.xxxx.com. ?
2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 518.9µs (err: )
2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 188.37.192.93
2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of ULDs2tS8jiUN78NHuUPV.ns1.xxxx.com. ?
2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 517.9µs (err: )
2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 87.132.174.66
2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of ULDs2tS8KabaLjLt9aDZ.ns1.xxxx.com. ?
2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 517.9µs (err: )
2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 10.168.47.126
2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of ULDs2tS8KeKtx8tPk7nS.ns1.xxxx.com. ?
2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 518µs (err: )
2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 139.41.18.8
2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of ULDs2tS8jocWyCqqTWsG.ns1.xxxx.com. ?
2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 2.5326ms (err: )
2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 120.161.100.3
2024/10/27 11:20:32 dnsclient.go:861: [dns] 172.31.0.2:53: avg rtt 906.325µs, base58: true, errors 0
2024/10/27 11:20:32 dnsclient.go:660: [dns] encoded: 0, subdata space: 233 | stop: 116, len: 264
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:117] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 176 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:118] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 177 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:119] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 179 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:120] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 180 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:121] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 181 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:122] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 183 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:123] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 184 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:124] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 185 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:125] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 187 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:126] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 188 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:127] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 189 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:128] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 192 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:129] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 194 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:130] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 195 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:131] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 196 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:132] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 198 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:133] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 199 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:134] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 200 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:135] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 202 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:136] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 203 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:137] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 204 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:138] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 206 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:139] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 207 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:140] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 209 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:141] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 210 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:142] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 211 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:143] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 213 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:144] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 214 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:145] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 215 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:146] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 217 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:147] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 218 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:148] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 220 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:149] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 221 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:150] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 222 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:151] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 224 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:152] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 225 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:153] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 226 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:154] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 228 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:155] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 229 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:156] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 230 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:157] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 232 (max: 234)
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:158] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 233 (max: 234)
2024/10/27 11:20:32 dnsclient.go:660: [dns] encoded: 0, subdata space: 233 | stop: 263, len: 264
2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [158:264] of 264
2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 165 (max: 234)
2024/10/27 11:20:32 dnsclient.go:701: [dns] subdata 0 (0->158): 158 bytes
2024/10/27 11:20:32 dnsclient.go:701: [dns] subdata 1 (158->264): 106 bytes
2024/10/27 11:20:32 dnsclient.go:704: [dns] original data: 264 bytes
2024/10/27 11:20:32 dnsclient.go:705: [dns] total subdata: 264 bytes
2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 20.2452ms (err: )
2024/10/27 11:20:32 resolver-generic.go:142: [dns] error response status: 2
2024/10/27 11:20:32 resolver-generic.go:128: [dns] query error: invalid rcode (retry wait: 1s)
2024/10/27 11:20:33 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 952.9µs (err: )
2024/10/27 11:20:33 resolver-generic.go:142: [dns] error response status: 2
2024/10/27 11:20:33 resolver-generic.go:128: [dns] query error: invalid rcode (retry wait: 1s)
2024/10/27 11:20:34 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 16.0821ms (err: )
2024/10/27 11:20:34 resolver-generic.go:142: [dns] error response status: 2
2024/10/27 11:20:34 resolver-generic.go:128: [dns] query error: invalid rcode (retry wait: 1s)
2024/10/27 11:20:35 dnsclient.go:402: [dns] init msg failure invalid rcode
2024/10/27 11:20:35 dnsclient.go:346: [dns] init msg send failure invalid rcode
2024/10/27 11:20:35 sliver.go:158: [session] failed to establish connection: invalid rcode
2024/10/27 11:20:35 sliver.go:138: Reconnect sleep: 1m0s
cat sliver.log
INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'baakb968ww3a.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'baakb968ww3a.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb342hr0zuuwpfxg2n.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb342hr0zuuwpfxg2n.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb3421zakackqzh9a0.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb3421zakackqzh9a0.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb3425p4vza2cb9vw8.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb3425p4vza2cb9vw8.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb342evbw1m8ec1c8z.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb342evbw1m8ec1c8z.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8jiUN78NHuUPV.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8jiUN78NHuUPV.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8KabaLjLt9aDZ.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8KabaLjLt9aDZ.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8KeKtx8tPk7nS.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8KeKtx8tPk7nS.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8jocWyCqqTWsG.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8jocWyCqqTWsG.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'