sliver icon indicating copy to clipboard operation
sliver copied to clipboard
verified publisher icon BishopFox

DNS C2 Bug

Open steverpm890 opened this issue 1 year ago • 2 comments

Describe the bug Version 1.5.42 cannot work properly in Windows AWS server. The default DNS server is 172.31.0.2. If it is changed to 1.1.1.1, it can work normally.

Version 1.5.39 is normal

generate --dns ns1.xxxx.com. --save /var/www/html/dns.exe --os windows --debug

dns --domains ns1.xxxx.com.

C:\Users\Administrator\Desktop>dns.exe 2024/10/27 11:20:32 sliver.go:97: Hello my name is SLEEPY_POWDER 2024/10/27 11:20:32 limits.go:58: Limit checks completed 2024/10/27 11:20:32 sliver.go:115: Running in session mode 2024/10/27 11:20:32 session.go:64: Starting interactive session connection loop ... 2024/10/27 11:20:32 transports.go:41: Starting c2 url generator () ... 2024/10/27 11:20:32 transports.go:104: Return generator: (chan *url.URL)(0xc00014ade0) 2024/10/27 11:20:32 transports.go:92: Yield c2 uri = 'dns://ns1.xxxx.com.' 2024/10/27 11:20:32 transports.go:92: Yield c2 uri = 'dns://ns1.xxxx.com.' 2024/10/27 11:20:32 session.go:81: Next CC = dns://ns1.xxxx.com. 2024/10/27 11:20:32 session.go:81: Next CC = dns://ns1.xxxx.com. 2024/10/27 11:20:32 transports.go:92: Yield c2 uri = 'dns://ns1.xxxx.com.' 2024/10/27 11:20:32 session.go:171: Attempting to connect via DNS via parent: ns1.xxxx.com. 2024/10/27 11:20:32 dnsclient.go:152: DNS client connecting to 'ns1.xxxx.com.' (timeout: 5s) ... 2024/10/27 11:20:32 conf_windows.go:77: Possible resolver: 172.31.0.2 2024/10/27 11:20:32 dnsclient.go:299: [dns] found resolvers: [172.31.0.2] 2024/10/27 11:20:32 crypto.go:227: TOTP Code: 26855497 2024/10/27 11:20:32 dnsclient.go:724: [dns] Fetching dns session id via 'baakb968ww3a.ns1.xxxx.com.' ... 2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of baakb968ww3a.ns1.xxxx.com. ? 2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 0s (err: ) 2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 87.250.53.246 2024/10/27 11:20:32 dnsclient.go:745: [dns] dns session id: 3537495 2024/10/27 11:20:32 dnsclient.go:307: [dns] dns session id 3537495 2024/10/27 11:20:32 dnsclient.go:311: [dns] fingerprinting resolvers ... 2024/10/27 11:20:32 dnsclient.go:841: [dns] Fingerprinting 1 resolver(s) ... 2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of 1cgzfnrb342hr0zuuwpfxg2n.ns1.xxxx.com. ? 2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 0s (err: ) 2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 177.202.186.229 2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of 1cgzfnrb3421zakackqzh9a0.ns1.xxxx.com. ? 2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 563.2µs (err: ) 2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 52.71.193.224 2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of 1cgzfnrb3425p4vza2cb9vw8.ns1.xxxx.com. ? 2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 2.0821ms (err: ) 2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 220.191.199.92 2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of 1cgzfnrb342evbw1m8ec1c8z.ns1.xxxx.com. ? 2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 518.9µs (err: ) 2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 188.37.192.93 2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of ULDs2tS8jiUN78NHuUPV.ns1.xxxx.com. ? 2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 517.9µs (err: ) 2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 87.132.174.66 2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of ULDs2tS8KabaLjLt9aDZ.ns1.xxxx.com. ? 2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 517.9µs (err: ) 2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 10.168.47.126 2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of ULDs2tS8KeKtx8tPk7nS.ns1.xxxx.com. ? 2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 518µs (err: ) 2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 139.41.18.8 2024/10/27 11:20:32 resolver-generic.go:92: [dns] 172.31.0.2:53->A record of ULDs2tS8jocWyCqqTWsG.ns1.xxxx.com. ? 2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 2.5326ms (err: ) 2024/10/27 11:20:32 resolver-generic.go:109: [dns] answer (a): 120.161.100.3 2024/10/27 11:20:32 dnsclient.go:861: [dns] 172.31.0.2:53: avg rtt 906.325µs, base58: true, errors 0 2024/10/27 11:20:32 dnsclient.go:660: [dns] encoded: 0, subdata space: 233 | stop: 116, len: 264 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:117] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 176 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:118] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 177 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:119] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 179 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:120] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 180 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:121] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 181 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:122] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 183 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:123] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 184 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:124] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 185 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:125] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 187 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:126] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 188 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:127] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 189 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:128] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 192 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:129] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 194 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:130] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 195 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:131] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 196 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:132] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 198 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:133] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 199 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:134] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 200 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:135] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 202 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:136] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 203 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:137] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 204 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:138] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 206 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:139] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 207 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:140] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 209 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:141] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 210 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:142] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 211 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:143] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 213 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:144] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 214 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:145] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 215 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:146] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 217 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:147] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 218 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:148] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 220 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:149] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 221 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:150] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 222 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:151] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 224 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:152] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 225 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:153] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 226 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:154] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 228 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:155] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 229 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:156] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 230 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:157] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 232 (max: 234) 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [0:158] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 233 (max: 234) 2024/10/27 11:20:32 dnsclient.go:660: [dns] encoded: 0, subdata space: 233 | stop: 263, len: 264 2024/10/27 11:20:32 dnsclient.go:666: [dns] shave data [158:264] of 264 2024/10/27 11:20:32 dnsclient.go:672: [dns] encoded length is 165 (max: 234) 2024/10/27 11:20:32 dnsclient.go:701: [dns] subdata 0 (0->158): 158 bytes 2024/10/27 11:20:32 dnsclient.go:701: [dns] subdata 1 (158->264): 106 bytes 2024/10/27 11:20:32 dnsclient.go:704: [dns] original data: 264 bytes 2024/10/27 11:20:32 dnsclient.go:705: [dns] total subdata: 264 bytes 2024/10/27 11:20:32 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 20.2452ms (err: ) 2024/10/27 11:20:32 resolver-generic.go:142: [dns] error response status: 2 2024/10/27 11:20:32 resolver-generic.go:128: [dns] query error: invalid rcode (retry wait: 1s) 2024/10/27 11:20:33 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 952.9µs (err: ) 2024/10/27 11:20:33 resolver-generic.go:142: [dns] error response status: 2 2024/10/27 11:20:33 resolver-generic.go:128: [dns] query error: invalid rcode (retry wait: 1s) 2024/10/27 11:20:34 resolver-generic.go:175: [dns] rtt->172.31.0.2:53 16.0821ms (err: ) 2024/10/27 11:20:34 resolver-generic.go:142: [dns] error response status: 2 2024/10/27 11:20:34 resolver-generic.go:128: [dns] query error: invalid rcode (retry wait: 1s) 2024/10/27 11:20:35 dnsclient.go:402: [dns] init msg failure invalid rcode 2024/10/27 11:20:35 dnsclient.go:346: [dns] init msg send failure invalid rcode 2024/10/27 11:20:35 sliver.go:158: [session] failed to establish connection: invalid rcode 2024/10/27 11:20:35 sliver.go:138: Reconnect sleep: 1m0s

cat sliver.log

INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'baakb968ww3a.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'baakb968ww3a.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb342hr0zuuwpfxg2n.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb342hr0zuuwpfxg2n.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb3421zakackqzh9a0.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb3421zakackqzh9a0.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb3425p4vza2cb9vw8.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb3425p4vza2cb9vw8.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb342evbw1m8ec1c8z.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] '1cgzfnrb342evbw1m8ec1c8z.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8jiUN78NHuUPV.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8jiUN78NHuUPV.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8KabaLjLt9aDZ.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8KabaLjLt9aDZ.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8KeKtx8tPk7nS.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8KeKtx8tPk7nS.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8jocWyCqqTWsG.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'ULDs2tS8jocWyCqqTWsG.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:32Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:33Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.' INFO[2024-10-27T11:20:34Z] [sliver/server/c2/dns.go:361] 'gTjEHadyYVGXbAM4BatPztAEjFJkkN5asdxUYXBuWMxpmdVcnCEPnhEGu7q4om3.KJNzMzNGzKUQ8ZwKM1THwjfNiDi1rjzm9eQh96hZqCgoPdKAD2ex5zwNRvftyhf.oZiBEgru7e34HazHwAKyBS4hpmuqNKJFNVpa8vnFJAB9zKZYJLMfncnaGpuu24X.Ebw1FQXEmgV56kcyoe557KZ5CruQXGVCmPT4tyr2VX3Q.ns1.xxxx.com.' is subdomain of 'ns1.xxxx.com.'

steverpm890 avatar Oct 27 '24 11:10 steverpm890

Version 1.5.39 works normally, but the session keeps getting disconnected and reconnected.

steverpm890 avatar Oct 27 '24 11:10 steverpm890

I see this behaviour as well when using Comcast's DNS servers with version 1.5.43.

Additionally, there seems to be a bug with handling IPv6 nameservers:

2025/10/17 08:46:03 resolver-generic.go:175: [dns] rtt->2001:558:feed::1:53 0s (err: dial udp: address 2001:558:feed::1:53: too many colons in address)

2001:558:feed::1 is the entry in /etc/resolv.conf, and you can see that something in the code is just concatenating it with the DNS port number :53, and then trying to use the whole thing as an address, which something else in the code is interpreting as an IPv6 address with too many octets.

Full output:

2025/10/17 08:46:03 sliver.go:97: Hello my name is GROSS_CHOP
2025/10/17 08:46:03 limits.go:58: Limit checks completed
2025/10/17 08:46:03 sliver.go:115: Running in session mode
2025/10/17 08:46:03 session.go:64: Starting interactive session connection loop ...
2025/10/17 08:46:03 transports.go:41: Starting c2 url generator () ...
2025/10/17 08:46:03 transports.go:104: Return generator: (chan *url.URL)(0xc00008a6c0)
2025/10/17 08:46:03 transports.go:92: Yield c2 uri = 'dns://[REDACTED].'
2025/10/17 08:46:03 transports.go:92: Yield c2 uri = 'dns://[REDACTED].'
2025/10/17 08:46:03 session.go:81: Next CC = dns://[REDACTED].
2025/10/17 08:46:03 session.go:81: Next CC = dns://[REDACTED].
2025/10/17 08:46:03 transports.go:92: Yield c2 uri = 'dns://[REDACTED].'
2025/10/17 08:46:03 session.go:171: Attempting to connect via DNS via parent: [REDACTED].
2025/10/17 08:46:03 dnsclient.go:152: DNS client connecting to '[REDACTED].' (timeout: 5s) ...
2025/10/17 08:46:03 dnsclient.go:299: [dns] found resolvers: [75.75.75.75 75.75.76.76 2001:558:feed::1 2001:558:feed::2 2603:3023:600:ae00:3a17:e1ff:fedf:3d91]
2025/10/17 08:46:03 crypto.go:227: TOTP Code: 15236093
2025/10/17 08:46:03 dnsclient.go:724: [dns] Fetching dns session id via 'baakbzjq02c8.[REDACTED].' ...
2025/10/17 08:46:03 resolver-generic.go:92: [dns] 75.75.75.75:53->A record of baakbzjq02c8.[REDACTED]. ?
2025/10/17 08:46:03 resolver-generic.go:175: [dns] rtt->75.75.75.75:53 106.483678ms (err: <nil>)
2025/10/17 08:46:03 resolver-generic.go:109: [dns] answer (a): 157.233.66.176
2025/10/17 08:46:03 dnsclient.go:745: [dns] dns session id: 4385181
2025/10/17 08:46:03 dnsclient.go:307: [dns] dns session id 4385181
2025/10/17 08:46:03 dnsclient.go:311: [dns] fingerprinting resolvers ...
2025/10/17 08:46:03 dnsclient.go:841: [dns] Fingerprinting 5 resolver(s) ...
2025/10/17 08:46:03 resolver-generic.go:92: [dns] 75.75.75.75:53->A record of 117xe1r13424mkbb626hu9b1.[REDACTED]. ?
2025/10/17 08:46:03 resolver-generic.go:92: [dns] 2001:558:feed::1:53->A record of 117xe1r9342gzb99d7ga331v.[REDACTED]. ?
2025/10/17 08:46:03 resolver-generic.go:175: [dns] rtt->2001:558:feed::1:53 0s (err: dial udp: address 2001:558:feed::1:53: too many colons in address)
2025/10/17 08:46:03 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::1:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:03 resolver-generic.go:92: [dns] 75.75.76.76:53->A record of 117xe1r5342dqyxkgrpgnj6q.[REDACTED]. ?
2025/10/17 08:46:03 resolver-generic.go:92: [dns] 2001:558:feed::2:53->A record of 117xe1ru342cnnja8dcw5qrd.[REDACTED]. ?
2025/10/17 08:46:03 resolver-generic.go:92: [dns] 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53->A record of 117xe1t1342f3tx0mpjzuwvu.[REDACTED]. ?
2025/10/17 08:46:04 resolver-generic.go:175: [dns] rtt->2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53 0s (err: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address)
2025/10/17 08:46:04 resolver-generic.go:83: [dns] query error: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:04 resolver-generic.go:175: [dns] rtt->2001:558:feed::2:53 0s (err: dial udp: address 2001:558:feed::2:53: too many colons in address)
2025/10/17 08:46:04 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::2:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:04 resolver-generic.go:175: [dns] rtt->75.75.75.75:53 37.107992ms (err: <nil>)
2025/10/17 08:46:04 resolver-generic.go:109: [dns] answer (a): 26.51.255.170
2025/10/17 08:46:04 resolver-generic.go:92: [dns] 75.75.75.75:53->A record of 117xe1r1342acb1jtjn5n57v.[REDACTED]. ?
2025/10/17 08:46:04 resolver-generic.go:175: [dns] rtt->75.75.76.76:53 77.264583ms (err: <nil>)
2025/10/17 08:46:04 resolver-generic.go:109: [dns] answer (a): 57.175.41.212
2025/10/17 08:46:04 resolver-generic.go:175: [dns] rtt->75.75.75.75:53 40.218691ms (err: <nil>)
2025/10/17 08:46:04 resolver-generic.go:109: [dns] answer (a): 253.25.150.152
2025/10/17 08:46:04 resolver-generic.go:92: [dns] 75.75.75.75:53->A record of 117xe1r1342h15t5qkz1x9u6.[REDACTED]. ?
2025/10/17 08:46:04 resolver-generic.go:92: [dns] 75.75.76.76:53->A record of 117xe1r5342630xkv7yjpmzj.[REDACTED]. ?
2025/10/17 08:46:04 resolver-generic.go:175: [dns] rtt->75.75.75.75:53 31.510294ms (err: <nil>)
2025/10/17 08:46:04 resolver-generic.go:109: [dns] answer (a): 61.164.29.209
2025/10/17 08:46:04 resolver-generic.go:92: [dns] 75.75.75.75:53->A record of 117xe1r1342h4x04bgmn85ga.[REDACTED]. ?
2025/10/17 08:46:04 resolver-generic.go:175: [dns] rtt->75.75.76.76:53 70.682284ms (err: <nil>)
2025/10/17 08:46:04 resolver-generic.go:109: [dns] answer (a): 244.222.66.145
2025/10/17 08:46:04 resolver-generic.go:92: [dns] 75.75.76.76:53->A record of 117xe1r534241p5k2nw8xeue.[REDACTED]. ?
2025/10/17 08:46:04 resolver-generic.go:175: [dns] rtt->75.75.75.75:53 101.546079ms (err: <nil>)
2025/10/17 08:46:04 resolver-generic.go:109: [dns] answer (a): 62.40.8.222
2025/10/17 08:46:04 resolver-generic.go:92: [dns] 75.75.75.75:53->A record of TxrNMEF6UsvRLbyP6ayz.[REDACTED]. ?
2025/10/17 08:46:04 resolver-generic.go:175: [dns] rtt->75.75.76.76:53 84.860082ms (err: <nil>)
2025/10/17 08:46:04 resolver-generic.go:109: [dns] answer (a): 94.240.99.20
2025/10/17 08:46:04 resolver-generic.go:92: [dns] 75.75.76.76:53->A record of 117xe1r53421rtxe3mm9yk03.[REDACTED]. ?
2025/10/17 08:46:04 resolver-generic.go:175: [dns] rtt->75.75.75.75:53 34.881492ms (err: <nil>)
2025/10/17 08:46:04 resolver-generic.go:109: [dns] answer (a): 191.93.175.76
2025/10/17 08:46:04 resolver-generic.go:92: [dns] 75.75.75.75:53->A record of TxrNMEF6UsBw7wnzcpFd.[REDACTED]. ?
2025/10/17 08:46:04 resolver-generic.go:175: [dns] rtt->75.75.76.76:53 67.676186ms (err: <nil>)
2025/10/17 08:46:04 resolver-generic.go:109: [dns] answer (a): 10.174.181.155
2025/10/17 08:46:04 resolver-generic.go:92: [dns] 75.75.76.76:53->A record of TxrNMGe8ypvLwhcDujcs.[REDACTED]. ?
2025/10/17 08:46:04 resolver-generic.go:175: [dns] rtt->75.75.75.75:53 41.210392ms (err: <nil>)
2025/10/17 08:46:04 resolver-generic.go:109: [dns] answer (a): 39.158.135.165
2025/10/17 08:46:04 resolver-generic.go:92: [dns] 75.75.75.75:53->A record of TxrNMEF6UmvavXrnNMeK.[REDACTED]. ?
2025/10/17 08:46:04 resolver-generic.go:175: [dns] rtt->75.75.76.76:53 70.809184ms (err: <nil>)
2025/10/17 08:46:04 resolver-generic.go:109: [dns] answer (a): 105.206.156.29
2025/10/17 08:46:04 resolver-generic.go:92: [dns] 75.75.76.76:53->A record of TxrNMGe8ySJ5zWNtwJu7.[REDACTED]. ?
2025/10/17 08:46:04 resolver-generic.go:175: [dns] rtt->75.75.75.75:53 105.282978ms (err: <nil>)
2025/10/17 08:46:04 resolver-generic.go:109: [dns] answer (a): 181.232.206.121
2025/10/17 08:46:04 resolver-generic.go:92: [dns] 75.75.75.75:53->A record of TxrNMEF6UunW3TWajFjc.[REDACTED]. ?
2025/10/17 08:46:04 resolver-generic.go:175: [dns] rtt->75.75.76.76:53 88.52968ms (err: <nil>)
2025/10/17 08:46:04 resolver-generic.go:109: [dns] answer (a): 88.55.163.225
2025/10/17 08:46:04 resolver-generic.go:92: [dns] 75.75.76.76:53->A record of TxrNMGe8yzuxtoFL2ahR.[REDACTED]. ?
2025/10/17 08:46:04 resolver-generic.go:175: [dns] rtt->75.75.75.75:53 52.616988ms (err: <nil>)
2025/10/17 08:46:04 resolver-generic.go:109: [dns] answer (a): 27.165.92.231
2025/10/17 08:46:04 resolver-generic.go:175: [dns] rtt->75.75.76.76:53 65.140487ms (err: <nil>)
2025/10/17 08:46:04 resolver-generic.go:109: [dns] answer (a): 136.47.157.96
2025/10/17 08:46:04 resolver-generic.go:92: [dns] 75.75.76.76:53->A record of TxrNMGe8yzX8xXfBd41m.[REDACTED]. ?
2025/10/17 08:46:04 resolver-generic.go:175: [dns] rtt->75.75.76.76:53 75.122285ms (err: <nil>)
2025/10/17 08:46:04 resolver-generic.go:109: [dns] answer (a): 169.209.49.100
2025/10/17 08:46:05 resolver-generic.go:92: [dns] 2001:558:feed::1:53->A record of 117xe1r9342gzb99d7ga331v.[REDACTED]. ?
2025/10/17 08:46:05 resolver-generic.go:175: [dns] rtt->2001:558:feed::1:53 0s (err: dial udp: address 2001:558:feed::1:53: too many colons in address)
2025/10/17 08:46:05 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::1:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:05 resolver-generic.go:92: [dns] 2001:558:feed::2:53->A record of 117xe1ru342cnnja8dcw5qrd.[REDACTED]. ?
2025/10/17 08:46:05 resolver-generic.go:175: [dns] rtt->2001:558:feed::2:53 0s (err: dial udp: address 2001:558:feed::2:53: too many colons in address)
2025/10/17 08:46:05 resolver-generic.go:92: [dns] 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53->A record of 117xe1t1342f3tx0mpjzuwvu.[REDACTED]. ?
2025/10/17 08:46:05 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::2:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:05 resolver-generic.go:175: [dns] rtt->2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53 0s (err: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address)
2025/10/17 08:46:05 resolver-generic.go:83: [dns] query error: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:06 resolver-generic.go:92: [dns] 2001:558:feed::1:53->A record of 117xe1r9342gzb99d7ga331v.[REDACTED]. ?
2025/10/17 08:46:06 resolver-generic.go:175: [dns] rtt->2001:558:feed::1:53 0s (err: dial udp: address 2001:558:feed::1:53: too many colons in address)
2025/10/17 08:46:06 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::1:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:06 resolver-generic.go:92: [dns] 2001:558:feed::2:53->A record of 117xe1ru342cnnja8dcw5qrd.[REDACTED]. ?
2025/10/17 08:46:06 resolver-generic.go:175: [dns] rtt->2001:558:feed::2:53 0s (err: dial udp: address 2001:558:feed::2:53: too many colons in address)
2025/10/17 08:46:06 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::2:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:06 resolver-generic.go:92: [dns] 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53->A record of 117xe1t1342f3tx0mpjzuwvu.[REDACTED]. ?
2025/10/17 08:46:06 resolver-generic.go:175: [dns] rtt->2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53 0s (err: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address)
2025/10/17 08:46:06 resolver-generic.go:83: [dns] query error: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:07 dnsclient.go:934: [dns (2)] resolver failed: dial udp: address 2001:558:feed::1:53: too many colons in address
2025/10/17 08:46:07 resolver-generic.go:92: [dns] 2001:558:feed::1:53->A record of 117xe1r9342b2ar652xmemx3.[REDACTED]. ?
2025/10/17 08:46:07 resolver-generic.go:175: [dns] rtt->2001:558:feed::1:53 0s (err: dial udp: address 2001:558:feed::1:53: too many colons in address)
2025/10/17 08:46:07 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::1:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:07 dnsclient.go:934: [dns (4)] resolver failed: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address
2025/10/17 08:46:07 resolver-generic.go:92: [dns] 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53->A record of 117xe1t13422jjxqddgd8mfp.[REDACTED]. ?
2025/10/17 08:46:07 resolver-generic.go:175: [dns] rtt->2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53 0s (err: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address)
2025/10/17 08:46:07 resolver-generic.go:83: [dns] query error: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:07 dnsclient.go:934: [dns (3)] resolver failed: dial udp: address 2001:558:feed::2:53: too many colons in address
2025/10/17 08:46:07 resolver-generic.go:92: [dns] 2001:558:feed::2:53->A record of 117xe1ru3425deyktv317x99.[REDACTED]. ?
2025/10/17 08:46:07 resolver-generic.go:175: [dns] rtt->2001:558:feed::2:53 0s (err: dial udp: address 2001:558:feed::2:53: too many colons in address)
2025/10/17 08:46:07 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::2:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:08 resolver-generic.go:92: [dns] 2001:558:feed::1:53->A record of 117xe1r9342b2ar652xmemx3.[REDACTED]. ?
2025/10/17 08:46:08 resolver-generic.go:175: [dns] rtt->2001:558:feed::1:53 0s (err: dial udp: address 2001:558:feed::1:53: too many colons in address)
2025/10/17 08:46:08 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::1:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:08 resolver-generic.go:92: [dns] 2001:558:feed::2:53->A record of 117xe1ru3425deyktv317x99.[REDACTED]. ?
2025/10/17 08:46:08 resolver-generic.go:175: [dns] rtt->2001:558:feed::2:53 0s (err: dial udp: address 2001:558:feed::2:53: too many colons in address)
2025/10/17 08:46:08 resolver-generic.go:92: [dns] 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53->A record of 117xe1t13422jjxqddgd8mfp.[REDACTED]. ?
2025/10/17 08:46:08 resolver-generic.go:175: [dns] rtt->2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53 0s (err: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address)
2025/10/17 08:46:08 resolver-generic.go:83: [dns] query error: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:08 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::2:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:09 resolver-generic.go:92: [dns] 2001:558:feed::1:53->A record of 117xe1r9342b2ar652xmemx3.[REDACTED]. ?
2025/10/17 08:46:09 resolver-generic.go:175: [dns] rtt->2001:558:feed::1:53 0s (err: dial udp: address 2001:558:feed::1:53: too many colons in address)
2025/10/17 08:46:09 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::1:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:09 resolver-generic.go:92: [dns] 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53->A record of 117xe1t13422jjxqddgd8mfp.[REDACTED]. ?
2025/10/17 08:46:09 resolver-generic.go:175: [dns] rtt->2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53 0s (err: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address)
2025/10/17 08:46:09 resolver-generic.go:83: [dns] query error: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:09 resolver-generic.go:92: [dns] 2001:558:feed::2:53->A record of 117xe1ru3425deyktv317x99.[REDACTED]. ?
2025/10/17 08:46:09 resolver-generic.go:175: [dns] rtt->2001:558:feed::2:53 0s (err: dial udp: address 2001:558:feed::2:53: too many colons in address)
2025/10/17 08:46:09 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::2:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:10 dnsclient.go:934: [dns (2)] resolver failed: dial udp: address 2001:558:feed::1:53: too many colons in address
2025/10/17 08:46:10 resolver-generic.go:92: [dns] 2001:558:feed::1:53->A record of 117xe1r9342bzq2vdw10hffb.[REDACTED]. ?
2025/10/17 08:46:10 resolver-generic.go:175: [dns] rtt->2001:558:feed::1:53 0s (err: dial udp: address 2001:558:feed::1:53: too many colons in address)
2025/10/17 08:46:10 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::1:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:10 dnsclient.go:934: [dns (3)] resolver failed: dial udp: address 2001:558:feed::2:53: too many colons in address
2025/10/17 08:46:10 resolver-generic.go:92: [dns] 2001:558:feed::2:53->A record of 117xe1ru3427559ma7kkjkak.[REDACTED]. ?
2025/10/17 08:46:10 dnsclient.go:934: [dns (4)] resolver failed: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address
2025/10/17 08:46:10 resolver-generic.go:92: [dns] 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53->A record of 117xe1t1342d5r9quq4xa3hg.[REDACTED]. ?
2025/10/17 08:46:10 resolver-generic.go:175: [dns] rtt->2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53 0s (err: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address)
2025/10/17 08:46:10 resolver-generic.go:83: [dns] query error: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:10 resolver-generic.go:175: [dns] rtt->2001:558:feed::2:53 0s (err: dial udp: address 2001:558:feed::2:53: too many colons in address)
2025/10/17 08:46:10 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::2:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:11 resolver-generic.go:92: [dns] 2001:558:feed::1:53->A record of 117xe1r9342bzq2vdw10hffb.[REDACTED]. ?
2025/10/17 08:46:11 resolver-generic.go:175: [dns] rtt->2001:558:feed::1:53 0s (err: dial udp: address 2001:558:feed::1:53: too many colons in address)
2025/10/17 08:46:11 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::1:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:11 resolver-generic.go:92: [dns] 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53->A record of 117xe1t1342d5r9quq4xa3hg.[REDACTED]. ?
2025/10/17 08:46:11 resolver-generic.go:92: [dns] 2001:558:feed::2:53->A record of 117xe1ru3427559ma7kkjkak.[REDACTED]. ?
2025/10/17 08:46:11 resolver-generic.go:175: [dns] rtt->2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53 0s (err: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address)
2025/10/17 08:46:11 resolver-generic.go:83: [dns] query error: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:11 resolver-generic.go:175: [dns] rtt->2001:558:feed::2:53 0s (err: dial udp: address 2001:558:feed::2:53: too many colons in address)
2025/10/17 08:46:11 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::2:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:12 resolver-generic.go:92: [dns] 2001:558:feed::1:53->A record of 117xe1r9342bzq2vdw10hffb.[REDACTED]. ?
2025/10/17 08:46:12 resolver-generic.go:175: [dns] rtt->2001:558:feed::1:53 0s (err: dial udp: address 2001:558:feed::1:53: too many colons in address)
2025/10/17 08:46:12 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::1:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:12 resolver-generic.go:92: [dns] 2001:558:feed::2:53->A record of 117xe1ru3427559ma7kkjkak.[REDACTED]. ?
2025/10/17 08:46:12 resolver-generic.go:175: [dns] rtt->2001:558:feed::2:53 0s (err: dial udp: address 2001:558:feed::2:53: too many colons in address)
2025/10/17 08:46:12 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::2:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:12 resolver-generic.go:92: [dns] 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53->A record of 117xe1t1342d5r9quq4xa3hg.[REDACTED]. ?
2025/10/17 08:46:12 resolver-generic.go:175: [dns] rtt->2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53 0s (err: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address)
2025/10/17 08:46:12 resolver-generic.go:83: [dns] query error: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:13 dnsclient.go:934: [dns (2)] resolver failed: dial udp: address 2001:558:feed::1:53: too many colons in address
2025/10/17 08:46:13 resolver-generic.go:92: [dns] 2001:558:feed::1:53->A record of 117xe1r93421gfvdfk0d2qhx.[REDACTED]. ?
2025/10/17 08:46:13 resolver-generic.go:175: [dns] rtt->2001:558:feed::1:53 0s (err: dial udp: address 2001:558:feed::1:53: too many colons in address)
2025/10/17 08:46:13 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::1:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:13 dnsclient.go:934: [dns (3)] resolver failed: dial udp: address 2001:558:feed::2:53: too many colons in address
2025/10/17 08:46:13 resolver-generic.go:92: [dns] 2001:558:feed::2:53->A record of 117xe1ru342h8vyrfrnbn06n.[REDACTED]. ?
2025/10/17 08:46:13 resolver-generic.go:175: [dns] rtt->2001:558:feed::2:53 0s (err: dial udp: address 2001:558:feed::2:53: too many colons in address)
2025/10/17 08:46:13 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::2:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:13 dnsclient.go:934: [dns (4)] resolver failed: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address
2025/10/17 08:46:13 resolver-generic.go:92: [dns] 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53->A record of 117xe1t1342apwa41gmhptk2.[REDACTED]. ?
2025/10/17 08:46:13 resolver-generic.go:175: [dns] rtt->2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53 0s (err: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address)
2025/10/17 08:46:13 resolver-generic.go:83: [dns] query error: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:14 resolver-generic.go:92: [dns] 2001:558:feed::1:53->A record of 117xe1r93421gfvdfk0d2qhx.[REDACTED]. ?
2025/10/17 08:46:14 resolver-generic.go:175: [dns] rtt->2001:558:feed::1:53 0s (err: dial udp: address 2001:558:feed::1:53: too many colons in address)
2025/10/17 08:46:14 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::1:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:14 resolver-generic.go:92: [dns] 2001:558:feed::2:53->A record of 117xe1ru342h8vyrfrnbn06n.[REDACTED]. ?
2025/10/17 08:46:14 resolver-generic.go:175: [dns] rtt->2001:558:feed::2:53 0s (err: dial udp: address 2001:558:feed::2:53: too many colons in address)
2025/10/17 08:46:14 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::2:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:14 resolver-generic.go:92: [dns] 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53->A record of 117xe1t1342apwa41gmhptk2.[REDACTED]. ?
2025/10/17 08:46:14 resolver-generic.go:175: [dns] rtt->2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53 0s (err: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address)
2025/10/17 08:46:14 resolver-generic.go:83: [dns] query error: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:15 resolver-generic.go:92: [dns] 2001:558:feed::1:53->A record of 117xe1r93421gfvdfk0d2qhx.[REDACTED]. ?
2025/10/17 08:46:15 resolver-generic.go:175: [dns] rtt->2001:558:feed::1:53 0s (err: dial udp: address 2001:558:feed::1:53: too many colons in address)
2025/10/17 08:46:15 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::1:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:15 resolver-generic.go:92: [dns] 2001:558:feed::2:53->A record of 117xe1ru342h8vyrfrnbn06n.[REDACTED]. ?
2025/10/17 08:46:15 resolver-generic.go:175: [dns] rtt->2001:558:feed::2:53 0s (err: dial udp: address 2001:558:feed::2:53: too many colons in address)
2025/10/17 08:46:15 resolver-generic.go:83: [dns] query error: dial udp: address 2001:558:feed::2:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:15 resolver-generic.go:92: [dns] 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53->A record of 117xe1t1342apwa41gmhptk2.[REDACTED]. ?
2025/10/17 08:46:15 resolver-generic.go:175: [dns] rtt->2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53 0s (err: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address)
2025/10/17 08:46:15 resolver-generic.go:83: [dns] query error: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address (retry wait: 1s)
2025/10/17 08:46:16 dnsclient.go:934: [dns (2)] resolver failed: dial udp: address 2001:558:feed::1:53: too many colons in address
2025/10/17 08:46:16 dnsclient.go:934: [dns (3)] resolver failed: dial udp: address 2001:558:feed::2:53: too many colons in address
2025/10/17 08:46:16 dnsclient.go:934: [dns (4)] resolver failed: dial udp: address 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: too many colons in address
2025/10/17 08:46:16 dnsclient.go:861: [dns] 75.75.75.75:53: avg rtt 55.546863ms, base58: true, errors 0
2025/10/17 08:46:16 dnsclient.go:861: [dns] 75.75.76.76:53: avg rtt 75.010596ms, base58: true, errors 0
2025/10/17 08:46:16 dnsclient.go:861: [dns] 2001:558:feed::1:53: avg rtt 0s, base58: false, errors 4
2025/10/17 08:46:16 dnsclient.go:861: [dns] 2001:558:feed::2:53: avg rtt 0s, base58: false, errors 4
2025/10/17 08:46:16 dnsclient.go:861: [dns] 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53: avg rtt 0s, base58: false, errors 4
2025/10/17 08:46:16 dnsclient.go:874: [dns] WARNING: removing resolver 2001:558:feed::1:53 (too many errors)
2025/10/17 08:46:16 dnsclient.go:874: [dns] WARNING: removing resolver 2001:558:feed::2:53 (too many errors)
2025/10/17 08:46:16 dnsclient.go:874: [dns] WARNING: removing resolver 2603:3023:600:ae00:3a17:e1ff:fedf:3d91:53 (too many errors)
2025/10/17 08:46:16 dnsclient.go:660: [dns] encoded: 0, subdata space: 213 | stop: 106, len: 264
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:107] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 162 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:108] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 164 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:109] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 165 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:110] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 166 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:111] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 168 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:112] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 169 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:113] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 170 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:114] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 172 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:115] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 173 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:116] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 174 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:117] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 176 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:118] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 177 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:119] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 179 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:120] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 180 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:121] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 181 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:122] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 183 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:123] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 184 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:124] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 185 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:125] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 187 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:126] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 188 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:127] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 189 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:128] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 192 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:129] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 194 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:130] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 195 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:131] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 196 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:132] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 198 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:133] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 199 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:134] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 200 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:135] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 202 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:136] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 203 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:137] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 204 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:138] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 206 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:139] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 207 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:140] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 209 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:141] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 210 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:142] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 211 (max: 214)
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [0:143] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 213 (max: 214)
2025/10/17 08:46:16 dnsclient.go:660: [dns] encoded: 0, subdata space: 213 | stop: 263, len: 264
2025/10/17 08:46:16 dnsclient.go:666: [dns] shave data [143:264] of 264
2025/10/17 08:46:16 dnsclient.go:672: [dns] encoded length is 185 (max: 214)
2025/10/17 08:46:16 dnsclient.go:701: [dns] subdata 0 (0->143): 143 bytes
2025/10/17 08:46:16 dnsclient.go:701: [dns] subdata 1 (143->264): 121 bytes
2025/10/17 08:46:16 dnsclient.go:704: [dns] original data: 264 bytes
2025/10/17 08:46:16 dnsclient.go:705: [dns] total subdata: 264 bytes
2025/10/17 08:46:16 resolver-generic.go:175: [dns] rtt->75.75.76.76:53 149.857975ms (err: <nil>)
2025/10/17 08:46:16 resolver-generic.go:142: [dns] error response status: 2
2025/10/17 08:46:16 resolver-generic.go:128: [dns] query error: invalid rcode (retry wait: 1s)
2025/10/17 08:46:17 resolver-generic.go:175: [dns] rtt->75.75.76.76:53 131.915678ms (err: <nil>)
2025/10/17 08:46:17 resolver-generic.go:142: [dns] error response status: 2
2025/10/17 08:46:17 resolver-generic.go:128: [dns] query error: invalid rcode (retry wait: 1s)
2025/10/17 08:46:18 resolver-generic.go:175: [dns] rtt->75.75.76.76:53 205.342168ms (err: <nil>)
2025/10/17 08:46:18 resolver-generic.go:142: [dns] error response status: 2
2025/10/17 08:46:18 resolver-generic.go:128: [dns] query error: invalid rcode (retry wait: 1s)
2025/10/17 08:46:19 dnsclient.go:402: [dns] init msg failure invalid rcode
2025/10/17 08:46:19 dnsclient.go:346: [dns] init msg send failure invalid rcode
2025/10/17 08:46:19 sliver.go:158: [session] failed to establish connection: invalid rcode
2025/10/17 08:46:19 sliver.go:138: Reconnect sleep: 1m0s

blincoln-bf avatar Oct 17 '25 16:10 blincoln-bf