Malware Analysis Report

2024-11-30 05:05

Sample ID 240229-fhvh3sdh25
Target 4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809
SHA256 4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809
Tags
dcrat glupteba lumma smokeloader pub1 backdoor bootkit discovery dropper evasion infostealer loader persistence rat spyware stealer trojan upx
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809

Threat Level: Known bad

The file 4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809 was found to be: Known bad.

Malicious Activity Summary

dcrat glupteba lumma smokeloader pub1 backdoor bootkit discovery dropper evasion infostealer loader persistence rat spyware stealer trojan upx

DcRat

Glupteba

Lumma Stealer

Windows security bypass

Glupteba payload

SmokeLoader

Pitou

Downloads MZ/PE file

Contacts a large (802) amount of remote hosts

Contacts a large (760) amount of remote hosts

Modifies Windows Firewall

Executes dropped EXE

Reads user/profile data of web browsers

Loads dropped DLL

Windows security modification

Reads data files stored by FTP clients

Deletes itself

UPX packed file

Writes to the Master Boot Record (MBR)

Accesses cryptocurrency files/wallets, possible credential harvesting

Creates a large amount of network flows

Checks installed software on the system

Adds Run key to start application

Drops file in System32 directory

Suspicious use of SetThreadContext

Drops file in Windows directory

Checks for VirtualBox DLLs, possible anti-VM trick

Program crash

Unsigned PE

Enumerates physical storage devices

Suspicious behavior: EnumeratesProcesses

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Modifies data under HKEY_USERS

Suspicious behavior: MapViewOfSection

Checks processor information in registry

Checks SCSI registry key(s)

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of AdjustPrivilegeToken

Creates scheduled task(s)

Uses Task Scheduler COM API

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-02-29 04:52

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-02-29 04:52

Reported

2024-02-29 04:57

Platform

win10-20240221-en

Max time kernel

248s

Max time network

303s

Command Line

"C:\Users\Admin\AppData\Local\Temp\4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809.exe"

Signatures

DcRat

rat infostealer dcrat
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI C:\Users\Admin\AppData\Local\Temp\4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\CSRSS = "\"C:\\ProgramData\\Drivers\\csrss.exe\"" C:\Users\Admin\AppData\Local\Temp\B8E0.exe N/A
N/A N/A C:\Windows\SysWOW64\schtasks.exe N/A
N/A N/A C:\Windows\SYSTEM32\schtasks.exe N/A

Glupteba

loader dropper glupteba

Glupteba payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Lumma Stealer

stealer lumma

Pitou

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

SmokeLoader

trojan backdoor smokeloader

Windows security bypass

evasion trojan
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\C:\Windows\rss = "0" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\C:\Users\Admin\AppData\Local\Temp\csrss = "0" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\C:\Windows\windefender.exe = "0" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\C:\Windows\System32\drivers = "0" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes\csrss.exe = "0" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes\windefender.exe = "0" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes\288c47bbc1871b439df19ff4df68f076.exe = "0" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A

Contacts a large (802) amount of remote hosts

discovery

Downloads MZ/PE file

Modifies Windows Firewall

evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\netsh.exe N/A

Deletes itself

Description Indicator Process Target
N/A N/A N/A N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\u29o.0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\u29o.0.exe N/A

Reads data files stored by FTP clients

spyware stealer

Reads user/profile data of web browsers

spyware stealer

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Windows security modification

evasion trojan
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\C:\Windows\windefender.exe = "0" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\C:\Windows\System32\drivers = "0" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes\csrss.exe = "0" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes\windefender.exe = "0" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes\288c47bbc1871b439df19ff4df68f076.exe = "0" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\C:\Windows\rss = "0" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\C:\Users\Admin\AppData\Local\Temp\csrss = "0" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A

Accesses cryptocurrency files/wallets, possible credential harvesting

spyware

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\CSRSS = "\"C:\\ProgramData\\Drivers\\csrss.exe\"" C:\Users\Admin\AppData\Local\Temp\B8E0.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1990815831-2007029909-3877453929-1000\Software\Microsoft\Windows\CurrentVersion\Run\csrss = "\"C:\\Windows\\rss\\csrss.exe\"" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A

Checks installed software on the system

discovery

Creates a large amount of network flows

discovery

Writes to the Master Boot Record (MBR)

bootkit persistence
Description Indicator Process Target
File opened for modification \??\PHYSICALDRIVE0 C:\Users\Admin\AppData\Local\Temp\CCC9.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\powershell.exe.log C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A

Suspicious use of SetThreadContext

Description Indicator Process Target
PID 4992 set thread context of 4980 N/A C:\Users\Admin\AppData\Local\Temp\B8E0.exe C:\Users\Admin\AppData\Local\Temp\B8E0.exe

Checks for VirtualBox DLLs, possible anti-VM trick

Description Indicator Process Target
File opened (read-only) \??\VBoxMiniRdrDN C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\rss C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
File created C:\Windows\rss\csrss.exe C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI C:\Users\Admin\AppData\Local\Temp\E6BB.exe N/A
Key enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI C:\Users\Admin\AppData\Local\Temp\E6BB.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI C:\Users\Admin\AppData\Local\Temp\4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809.exe N/A
Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI C:\Users\Admin\AppData\Local\Temp\4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809.exe N/A
Key enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI C:\Users\Admin\AppData\Local\Temp\4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI C:\Users\Admin\AppData\Local\Temp\E6BB.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\u29o.0.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Users\Admin\AppData\Local\Temp\u29o.0.exe N/A

Creates scheduled task(s)

persistence
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\schtasks.exe N/A
N/A N/A C:\Windows\SYSTEM32\schtasks.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-301 = "Romance Daylight Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-2752 = "Tomsk Standard Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-412 = "E. Africa Standard Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-772 = "Montevideo Standard Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-1932 = "Russia TZ 11 Standard Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-532 = "Sri Lanka Standard Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-751 = "Tonga Daylight Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-2001 = "Cabo Verde Daylight Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-334 = "Jordan Daylight Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-2772 = "Omsk Standard Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-561 = "SE Asia Daylight Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-449 = "Azerbaijan Standard Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-281 = "Central Europe Daylight Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-151 = "Central America Daylight Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-2771 = "Omsk Daylight Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-2182 = "Astrakhan Standard Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-931 = "Coordinated Universal Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-282 = "Central Europe Standard Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0" C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-2002 = "Cabo Verde Standard Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-961 = "Paraguay Daylight Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-51 = "Greenland Daylight Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-1862 = "Russia TZ 6 Standard Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-1502 = "Turkey Standard Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-621 = "Korea Daylight Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-672 = "AUS Eastern Standard Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-232 = "Hawaiian Standard Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-401 = "Arabic Daylight Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-2792 = "Novosibirsk Standard Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-451 = "Caucasus Daylight Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-891 = "Morocco Daylight Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-452 = "Caucasus Standard Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-1471 = "Magadan Daylight Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-411 = "E. Africa Daylight Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-731 = "Fiji Daylight Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\C:\Windows\system32\,@tzres.dll,-741 = "New Zealand Daylight Time" C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A N/A N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A N/A N/A
Token: SeCreatePagefilePrivilege N/A N/A N/A
Token: SeShutdownPrivilege N/A N/A N/A
Token: SeCreatePagefilePrivilege N/A N/A N/A
Token: SeShutdownPrivilege N/A N/A N/A
Token: SeCreatePagefilePrivilege N/A N/A N/A
Token: SeShutdownPrivilege N/A N/A N/A
Token: SeCreatePagefilePrivilege N/A N/A N/A
Token: SeShutdownPrivilege N/A N/A N/A
Token: SeCreatePagefilePrivilege N/A N/A N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeShutdownPrivilege N/A N/A N/A
Token: SeCreatePagefilePrivilege N/A N/A N/A
Token: SeShutdownPrivilege N/A N/A N/A
Token: SeCreatePagefilePrivilege N/A N/A N/A
Token: SeShutdownPrivilege N/A N/A N/A
Token: SeCreatePagefilePrivilege N/A N/A N/A
Token: SeShutdownPrivilege N/A N/A N/A
Token: SeCreatePagefilePrivilege N/A N/A N/A
Token: SeShutdownPrivilege N/A N/A N/A
Token: SeCreatePagefilePrivilege N/A N/A N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Token: SeImpersonatePrivilege N/A C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeShutdownPrivilege N/A N/A N/A
Token: SeCreatePagefilePrivilege N/A N/A N/A
Token: SeShutdownPrivilege N/A N/A N/A
Token: SeCreatePagefilePrivilege N/A N/A N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeShutdownPrivilege N/A N/A N/A
Token: SeCreatePagefilePrivilege N/A N/A N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeShutdownPrivilege N/A N/A N/A
Token: SeCreatePagefilePrivilege N/A N/A N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeShutdownPrivilege N/A N/A N/A
Token: SeCreatePagefilePrivilege N/A N/A N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\u29o.1.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3284 wrote to memory of 4992 N/A N/A C:\Users\Admin\AppData\Local\Temp\B8E0.exe
PID 3284 wrote to memory of 4992 N/A N/A C:\Users\Admin\AppData\Local\Temp\B8E0.exe
PID 3284 wrote to memory of 4992 N/A N/A C:\Users\Admin\AppData\Local\Temp\B8E0.exe
PID 4992 wrote to memory of 4980 N/A C:\Users\Admin\AppData\Local\Temp\B8E0.exe C:\Users\Admin\AppData\Local\Temp\B8E0.exe
PID 4992 wrote to memory of 4980 N/A C:\Users\Admin\AppData\Local\Temp\B8E0.exe C:\Users\Admin\AppData\Local\Temp\B8E0.exe
PID 4992 wrote to memory of 4980 N/A C:\Users\Admin\AppData\Local\Temp\B8E0.exe C:\Users\Admin\AppData\Local\Temp\B8E0.exe
PID 4992 wrote to memory of 4980 N/A C:\Users\Admin\AppData\Local\Temp\B8E0.exe C:\Users\Admin\AppData\Local\Temp\B8E0.exe
PID 4992 wrote to memory of 4980 N/A C:\Users\Admin\AppData\Local\Temp\B8E0.exe C:\Users\Admin\AppData\Local\Temp\B8E0.exe
PID 4992 wrote to memory of 4980 N/A C:\Users\Admin\AppData\Local\Temp\B8E0.exe C:\Users\Admin\AppData\Local\Temp\B8E0.exe
PID 4992 wrote to memory of 4980 N/A C:\Users\Admin\AppData\Local\Temp\B8E0.exe C:\Users\Admin\AppData\Local\Temp\B8E0.exe
PID 4992 wrote to memory of 4980 N/A C:\Users\Admin\AppData\Local\Temp\B8E0.exe C:\Users\Admin\AppData\Local\Temp\B8E0.exe
PID 3284 wrote to memory of 3172 N/A N/A C:\Windows\system32\regsvr32.exe
PID 3284 wrote to memory of 3172 N/A N/A C:\Windows\system32\regsvr32.exe
PID 3172 wrote to memory of 1244 N/A C:\Windows\system32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 3172 wrote to memory of 1244 N/A C:\Windows\system32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 3172 wrote to memory of 1244 N/A C:\Windows\system32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 3284 wrote to memory of 2276 N/A N/A C:\Users\Admin\AppData\Local\Temp\C93D.exe
PID 3284 wrote to memory of 2276 N/A N/A C:\Users\Admin\AppData\Local\Temp\C93D.exe
PID 3284 wrote to memory of 2276 N/A N/A C:\Users\Admin\AppData\Local\Temp\C93D.exe
PID 3284 wrote to memory of 3448 N/A N/A C:\Users\Admin\AppData\Local\Temp\CCC9.exe
PID 3284 wrote to memory of 3448 N/A N/A C:\Users\Admin\AppData\Local\Temp\CCC9.exe
PID 3284 wrote to memory of 3448 N/A N/A C:\Users\Admin\AppData\Local\Temp\CCC9.exe
PID 3284 wrote to memory of 592 N/A N/A C:\Users\Admin\AppData\Local\Temp\DC6A.exe
PID 3284 wrote to memory of 592 N/A N/A C:\Users\Admin\AppData\Local\Temp\DC6A.exe
PID 3284 wrote to memory of 592 N/A N/A C:\Users\Admin\AppData\Local\Temp\DC6A.exe
PID 592 wrote to memory of 2940 N/A C:\Users\Admin\AppData\Local\Temp\DC6A.exe C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe
PID 592 wrote to memory of 2940 N/A C:\Users\Admin\AppData\Local\Temp\DC6A.exe C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe
PID 592 wrote to memory of 2940 N/A C:\Users\Admin\AppData\Local\Temp\DC6A.exe C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe
PID 592 wrote to memory of 3780 N/A C:\Users\Admin\AppData\Local\Temp\DC6A.exe C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe
PID 592 wrote to memory of 3780 N/A C:\Users\Admin\AppData\Local\Temp\DC6A.exe C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe
PID 592 wrote to memory of 3780 N/A C:\Users\Admin\AppData\Local\Temp\DC6A.exe C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe
PID 2940 wrote to memory of 2676 N/A C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe C:\Users\Admin\AppData\Local\Temp\u29o.0.exe
PID 2940 wrote to memory of 2676 N/A C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe C:\Users\Admin\AppData\Local\Temp\u29o.0.exe
PID 2940 wrote to memory of 2676 N/A C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe C:\Users\Admin\AppData\Local\Temp\u29o.0.exe
PID 3284 wrote to memory of 1476 N/A N/A C:\Users\Admin\AppData\Local\Temp\E6BB.exe
PID 3284 wrote to memory of 1476 N/A N/A C:\Users\Admin\AppData\Local\Temp\E6BB.exe
PID 3284 wrote to memory of 1476 N/A N/A C:\Users\Admin\AppData\Local\Temp\E6BB.exe
PID 2940 wrote to memory of 3476 N/A C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe C:\Users\Admin\AppData\Local\Temp\u29o.1.exe
PID 2940 wrote to memory of 3476 N/A C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe C:\Users\Admin\AppData\Local\Temp\u29o.1.exe
PID 2940 wrote to memory of 3476 N/A C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe C:\Users\Admin\AppData\Local\Temp\u29o.1.exe
PID 3476 wrote to memory of 4848 N/A C:\Users\Admin\AppData\Local\Temp\u29o.1.exe C:\Windows\SysWOW64\cmd.exe
PID 3476 wrote to memory of 4848 N/A C:\Users\Admin\AppData\Local\Temp\u29o.1.exe C:\Windows\SysWOW64\cmd.exe
PID 3476 wrote to memory of 4848 N/A C:\Users\Admin\AppData\Local\Temp\u29o.1.exe C:\Windows\SysWOW64\cmd.exe
PID 4848 wrote to memory of 2904 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\chcp.com
PID 4848 wrote to memory of 2904 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\chcp.com
PID 4848 wrote to memory of 2904 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\chcp.com
PID 4848 wrote to memory of 2316 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\schtasks.exe
PID 4848 wrote to memory of 2316 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\schtasks.exe
PID 4848 wrote to memory of 2316 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\schtasks.exe
PID 3780 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 3780 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 3780 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2860 wrote to memory of 2220 N/A C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2860 wrote to memory of 2220 N/A C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2860 wrote to memory of 2220 N/A C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2860 wrote to memory of 3972 N/A C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe C:\Windows\System32\cmd.exe
PID 2860 wrote to memory of 3972 N/A C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe C:\Windows\System32\cmd.exe
PID 3972 wrote to memory of 4464 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\netsh.exe
PID 3972 wrote to memory of 4464 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\netsh.exe
PID 2860 wrote to memory of 3556 N/A C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2860 wrote to memory of 3556 N/A C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2860 wrote to memory of 3556 N/A C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2860 wrote to memory of 2476 N/A C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
PID 2860 wrote to memory of 2476 N/A C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Users\Admin\AppData\Local\Temp\4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809.exe

"C:\Users\Admin\AppData\Local\Temp\4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809.exe"

C:\Users\Admin\AppData\Local\Temp\B8E0.exe

C:\Users\Admin\AppData\Local\Temp\B8E0.exe

C:\Users\Admin\AppData\Local\Temp\B8E0.exe

C:\Users\Admin\AppData\Local\Temp\B8E0.exe

C:\Windows\SysWOW64\regsvr32.exe

/s C:\Users\Admin\AppData\Local\Temp\BDA4.dll

C:\Windows\system32\regsvr32.exe

regsvr32 /s C:\Users\Admin\AppData\Local\Temp\BDA4.dll

C:\Users\Admin\AppData\Local\Temp\C93D.exe

C:\Users\Admin\AppData\Local\Temp\C93D.exe

C:\Users\Admin\AppData\Local\Temp\CCC9.exe

C:\Users\Admin\AppData\Local\Temp\CCC9.exe

C:\Users\Admin\AppData\Local\Temp\DC6A.exe

C:\Users\Admin\AppData\Local\Temp\DC6A.exe

C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe

"C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe"

C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe

"C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe"

C:\Users\Admin\AppData\Local\Temp\u29o.0.exe

"C:\Users\Admin\AppData\Local\Temp\u29o.0.exe"

C:\Users\Admin\AppData\Local\Temp\E6BB.exe

C:\Users\Admin\AppData\Local\Temp\E6BB.exe

C:\Users\Admin\AppData\Local\Temp\u29o.1.exe

"C:\Users\Admin\AppData\Local\Temp\u29o.1.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Roaming\Temp\Task.bat" "

C:\Windows\SysWOW64\chcp.com

chcp 1251

C:\Windows\SysWOW64\schtasks.exe

schtasks /create /tn "MalayamaraUpdate" /tr "'C:\Users\Admin\AppData\Local\Temp\Updater.exe'" /sc minute /mo 30 /F

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

powershell -nologo -noprofile

C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe

"C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe"

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

powershell -nologo -noprofile

C:\Windows\System32\cmd.exe

C:\Windows\Sysnative\cmd.exe /C "netsh advfirewall firewall add rule name="csrss" dir=in action=allow program="C:\Windows\rss\csrss.exe" enable=yes"

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="csrss" dir=in action=allow program="C:\Windows\rss\csrss.exe" enable=yes

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

powershell -nologo -noprofile

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

powershell -nologo -noprofile

C:\Windows\rss\csrss.exe

C:\Windows\rss\csrss.exe

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

powershell -nologo -noprofile

C:\Windows\SYSTEM32\schtasks.exe

schtasks /CREATE /SC ONLOGON /RL HIGHEST /TR "C:\Windows\rss\csrss.exe" /TN csrss /F

C:\Windows\SYSTEM32\schtasks.exe

schtasks /delete /tn ScheduledUpdate /f

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

powershell -nologo -noprofile

Network

Country Destination Domain Proto
US 8.8.8.8:53 selebration17io.io udp
RU 91.215.85.120:80 selebration17io.io tcp
US 8.8.8.8:53 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.0.8.0.8.0.8.0.ip6.arpa udp
US 8.8.8.8:53 120.85.215.91.in-addr.arpa udp
DE 93.186.202.32:9001 tcp
US 62.216.85.110:34049 tcp
N/A 127.0.0.1:49794 tcp
DE 185.220.101.143:10143 tcp
US 8.8.8.8:53 143.101.220.185.in-addr.arpa udp
DE 185.172.128.19:80 185.172.128.19 tcp
US 8.8.8.8:53 resergvearyinitiani.shop udp
US 104.21.94.2:443 resergvearyinitiani.shop tcp
US 8.8.8.8:53 19.128.172.185.in-addr.arpa udp
US 8.8.8.8:53 2.94.21.104.in-addr.arpa udp
NL 45.66.33.45:443 tcp
US 8.8.8.8:53 trmpc.com udp
DE 185.172.128.90:80 185.172.128.90 tcp
US 185.198.26.149:9001 tcp
IR 2.180.10.7:80 trmpc.com tcp
US 8.8.8.8:53 90.128.172.185.in-addr.arpa udp
US 8.8.8.8:53 149.26.198.185.in-addr.arpa udp
US 8.8.8.8:53 7.10.180.2.in-addr.arpa udp
DE 185.172.128.127:80 185.172.128.127 tcp
DE 185.172.128.127:80 185.172.128.127 tcp
DE 185.172.128.109:80 185.172.128.109 tcp
US 8.8.8.8:53 127.128.172.185.in-addr.arpa udp
US 8.8.8.8:53 109.128.172.185.in-addr.arpa udp
US 8.8.8.8:53 joly.bestsup.su udp
US 172.67.171.112:80 joly.bestsup.su tcp
DE 88.99.94.231:4443 tcp
NL 190.2.154.253:9001 tcp
US 8.8.8.8:53 112.171.67.172.in-addr.arpa udp
US 8.8.8.8:53 231.94.99.88.in-addr.arpa udp
US 8.8.8.8:53 253.154.2.190.in-addr.arpa udp
DE 185.172.128.145:80 185.172.128.145 tcp
DE 88.99.94.231:4443 tcp
NL 190.2.154.253:9001 tcp
US 8.8.8.8:53 145.128.172.185.in-addr.arpa udp
US 135.148.100.233:443 tcp
US 8.8.8.8:53 hilaltech3d.com udp
US 8.8.8.8:53 hilipeeshop.com udp
US 8.8.8.8:53 hilltonmeta.com udp
TR 94.73.150.152:80 hilaltech3d.com tcp
US 8.8.8.8:53 hilton-meta.com udp
US 8.8.8.8:53 233.100.148.135.in-addr.arpa udp
US 8.8.8.8:53 hollywoodrv.com udp
FI 31.217.196.224:443 hilipeeshop.com tcp
US 8.8.8.8:53 inciraagaci.com udp
US 8.8.8.8:53 infinitiuae.com udp
FR 83.229.19.70:443 hilton-meta.com tcp
US 8.8.8.8:53 infodiecast.com udp
US 162.254.39.114:443 hollywoodrv.com tcp
US 8.8.8.8:53 informescyc.com udp
US 8.8.8.8:53 infos-mania.com udp
US 8.8.8.8:53 innov8iveai.com udp
TR 94.73.151.170:80 inciraagaci.com tcp
US 8.8.8.8:53 152.150.73.94.in-addr.arpa udp
US 8.8.8.8:53 224.196.217.31.in-addr.arpa udp
US 8.8.8.8:53 70.19.229.83.in-addr.arpa udp
US 162.241.224.14:443 infinitiuae.com tcp
US 8.8.8.8:53 inrkreation.com udp
US 8.8.8.8:53 itatsupport.com udp
US 204.93.224.104:443 infodiecast.com tcp
US 8.8.8.8:53 www.jhumkakutir.com udp
SG 47.129.15.187:443 innov8iveai.com tcp
FR 78.138.45.207:443 infos-mania.com tcp
US 66.29.143.179:443 informescyc.com tcp
US 8.8.8.8:53 jobnoticeer.com udp
US 8.8.8.8:53 khalipatmsl.com udp
US 162.214.80.21:443 itatsupport.com tcp
US 69.57.162.28:443 jobnoticeer.com tcp
US 192.185.52.144:443 inrkreation.com tcp
US 8.8.8.8:53 jonasjasmin.com udp
US 8.8.8.8:53 khoedep4mua.com udp
CA 23.227.38.74:443 www.jhumkakutir.com tcp
US 8.8.8.8:53 114.39.254.162.in-addr.arpa udp
US 8.8.8.8:53 170.151.73.94.in-addr.arpa udp
US 8.8.8.8:53 14.224.241.162.in-addr.arpa udp
US 8.8.8.8:53 104.224.93.204.in-addr.arpa udp
US 8.8.8.8:53 207.45.138.78.in-addr.arpa udp
US 8.8.8.8:53 179.143.29.66.in-addr.arpa udp
US 8.8.8.8:53 kimbuilding.com udp
US 8.8.8.8:53 koshercargo.com udp
US 8.8.8.8:53 www.kwm-academy.com udp
US 8.8.8.8:53 lampangonly.com udp
US 104.21.0.235:443 jonasjasmin.com tcp
US 131.153.148.98:443 khalipatmsl.com tcp
VN 103.138.88.65:443 khoedep4mua.com tcp
US 8.8.8.8:53 lamphunonly.com udp
US 67.223.118.20:443 kimbuilding.com tcp
US 8.8.8.8:53 www.levigatezza.com udp
US 104.21.31.196:443 www.kwm-academy.com tcp
US 207.244.97.233:443 lampangonly.com tcp
US 68.65.122.217:80 koshercargo.com tcp
US 8.8.8.8:53 loanwisepro.com udp
US 185.186.247.53:443 lamphunonly.com tcp
US 8.8.8.8:53 lopburionly.com udp
US 8.8.8.8:53 manilascape.com udp
NL 198.20.102.164:443 www.levigatezza.com tcp
US 8.8.8.8:53 www.luxeposh247.com udp
US 162.254.39.99:443 loanwisepro.com tcp
US 8.8.8.8:53 187.15.129.47.in-addr.arpa udp
US 69.87.220.60:443 lopburionly.com tcp
US 8.8.8.8:53 144.52.185.192.in-addr.arpa udp
US 216.218.206.61:80 manilascape.com tcp
US 8.8.8.8:53 21.80.214.162.in-addr.arpa udp
GB 91.238.162.87:443 www.luxeposh247.com tcp
US 8.8.8.8:53 28.162.57.69.in-addr.arpa udp
US 8.8.8.8:53 74.38.227.23.in-addr.arpa udp
US 8.8.8.8:53 235.0.21.104.in-addr.arpa udp
US 8.8.8.8:53 98.148.153.131.in-addr.arpa udp
US 8.8.8.8:53 20.118.223.67.in-addr.arpa udp
US 8.8.8.8:53 manisever18.com udp
US 8.8.8.8:53 maxipellets.com udp
US 8.8.8.8:53 mikealthoff.com udp
US 8.8.8.8:53 milyunaboda.com udp
DE 212.95.51.72:443 maxipellets.com tcp
US 8.8.8.8:53 mclassicscc.com udp
IN 103.152.79.182:443 manisever18.com tcp
US 8.8.8.8:53 myroyalfame.com udp
HK 154.31.161.167:80 mikealthoff.com tcp
US 8.8.8.8:53 navigate9ja.com udp
US 104.21.61.192:443 milyunaboda.com tcp
US 8.8.8.8:53 nenacorazon.com udp
US 198.20.92.69:443 mclassicscc.com tcp
US 8.8.8.8:53 nadrabakery.com udp
US 8.8.8.8:53 technologyenterdo.shop udp
GB 109.70.148.51:443 navigate9ja.com tcp
US 8.8.8.8:53 65.88.138.103.in-addr.arpa udp
US 172.67.180.132:443 technologyenterdo.shop tcp
US 8.8.8.8:53 196.31.21.104.in-addr.arpa udp
US 75.102.22.37:443 nenacorazon.com tcp
US 172.67.192.61:443 nadrabakery.com tcp
US 8.8.8.8:53 233.97.244.207.in-addr.arpa udp
ID 103.163.138.44:80 myroyalfame.com tcp
US 8.8.8.8:53 53.247.186.185.in-addr.arpa udp
US 8.8.8.8:53 217.122.65.68.in-addr.arpa udp
US 8.8.8.8:53 164.102.20.198.in-addr.arpa udp
US 8.8.8.8:53 newearthing.com udp
US 8.8.8.8:53 www.npenidatour.com udp
US 8.8.8.8:53 www.nuvefilmllc.com udp
US 8.8.8.8:53 oolaalombok.com udp
US 184.154.206.215:443 newearthing.com tcp
US 8.8.8.8:53 www.parquersoft.com udp
TR 104.247.165.146:443 www.nuvefilmllc.com tcp
SG 103.145.227.149:443 www.npenidatour.com tcp
US 8.8.8.8:53 pingpongkid.com udp
US 8.8.8.8:53 pocketp1xel.com udp
US 8.8.8.8:53 preservebiz.com udp
DE 157.90.212.15:443 www.parquersoft.com tcp
US 8.8.8.8:53 prettybird1.com udp
US 162.241.230.132:443 pingpongkid.com tcp
US 8.8.8.8:53 qashqaishop.com udp
ID 103.234.209.216:443 oolaalombok.com tcp
US 162.0.209.111:443 pocketp1xel.com tcp
US 8.8.8.8:53 99.39.254.162.in-addr.arpa udp
US 192.232.251.140:443 preservebiz.com tcp
US 162.241.225.135:443 prettybird1.com tcp
US 8.8.8.8:53 60.220.87.69.in-addr.arpa udp
US 8.8.8.8:53 87.162.238.91.in-addr.arpa udp
US 8.8.8.8:53 61.206.218.216.in-addr.arpa udp
IR 217.144.104.212:443 qashqaishop.com tcp
US 8.8.8.8:53 rabet777isr.com udp
US 8.8.8.8:53 reficonnect.com udp
US 8.8.8.8:53 rekolligent.com udp
US 8.8.8.8:53 riseoficial.com udp
US 8.8.8.8:53 rickseratte.com udp
US 8.8.8.8:53 rollicknews.com udp
US 8.8.8.8:53 rosarosetum.com udp
US 74.220.219.213:443 reficonnect.com tcp
US 162.144.13.176:443 rabet777isr.com tcp
US 8.8.8.8:53 roseinoxuae.com udp
US 192.243.110.3:443 riseoficial.com tcp
US 8.8.8.8:53 rosetotobet.com udp
US 8.8.8.8:53 rpt1.de udp
GB 94.136.168.3:80 roseinoxuae.com tcp
FI 65.108.75.199:443 rollicknews.com tcp
US 192.254.233.35:443 rickseratte.com tcp
US 38.174.108.182:80 rekolligent.com tcp
US 8.8.8.8:53 72.51.95.212.in-addr.arpa udp
US 104.21.10.211:443 rosetotobet.com tcp
US 103.224.212.211:443 rosarosetum.com tcp
US 8.8.8.8:53 runachannel.com udp
US 8.8.8.8:53 rujalhealth.com udp
US 8.8.8.8:53 sabuntravel.com udp
DE 136.243.166.48:443 rpt1.de tcp
US 8.8.8.8:53 sahuconnect.com udp
US 8.8.8.8:53 saketsweets.com udp
SG 217.21.72.186:443 sabuntravel.com tcp
IN 178.16.136.7:443 rujalhealth.com tcp
US 8.8.8.8:53 salaamahost.com udp
IN 89.117.188.35:443 sahuconnect.com tcp
JP 150.95.59.36:443 runachannel.com tcp
US 8.8.8.8:53 samikshaedu.com udp
US 8.8.8.8:53 samsungeye1.com udp
US 69.49.232.58:443 saketsweets.com tcp
US 66.235.200.147:443 salaamahost.com tcp
US 8.8.8.8:53 www.mikealthoff.com udp
IN 167.71.227.142:80 samikshaedu.com tcp
US 8.8.8.8:53 sansei-kazo.com udp
US 8.8.8.8:53 182.79.152.103.in-addr.arpa udp
US 8.8.8.8:53 192.61.21.104.in-addr.arpa udp
US 8.8.8.8:53 167.161.31.154.in-addr.arpa udp
JP 133.242.220.117:443 sansei-kazo.com tcp
US 8.8.8.8:53 69.92.20.198.in-addr.arpa udp
KR 158.247.246.133:443 samsungeye1.com tcp
US 8.8.8.8:53 51.148.70.109.in-addr.arpa udp
HK 154.31.161.167:80 www.mikealthoff.com tcp
US 8.8.8.8:53 132.180.67.172.in-addr.arpa udp
US 8.8.8.8:53 www.saraemattia.com udp
US 8.8.8.8:53 sarangstone.com udp
US 8.8.8.8:53 sditattaqwa.com udp
US 8.8.8.8:53 savicaterer.com udp
US 8.8.8.8:53 www.seed-broker.com udp
IT 89.46.107.250:443 www.saraemattia.com tcp
IR 87.236.210.22:443 sarangstone.com tcp
US 8.8.8.8:53 semdortotal.com udp
DE 142.132.136.117:443 savicaterer.com tcp
SG 45.143.81.87:443 sditattaqwa.com tcp
DE 212.224.121.194:443 www.seed-broker.com tcp
US 8.8.8.8:53 senaevgreen.com udp
US 8.8.8.8:53 serdarferit.com udp
US 8.8.8.8:53 61.192.67.172.in-addr.arpa udp
TH 147.50.227.16:443 senaevgreen.com tcp
US 8.8.8.8:53 37.22.102.75.in-addr.arpa udp
US 172.67.139.251:443 serdarferit.com tcp
US 8.8.8.8:53 44.138.163.103.in-addr.arpa udp
US 8.8.8.8:53 seriesblogs.com udp
US 8.8.8.8:53 www.shalakaauto.com udp
US 8.8.8.8:53 shamimbaran.com udp
US 8.8.8.8:53 shihostudio.com udp
US 8.8.8.8:53 sharpyandco.com udp
US 104.21.58.172:443 seriesblogs.com tcp
IN 139.5.189.144:80 www.shalakaauto.com tcp
US 8.8.8.8:53 shriedutech.com udp
US 8.8.8.8:53 imunify-alert.com udp
DE 78.46.97.48:80 shamimbaran.com tcp
IN 68.178.155.83:443 sharpyandco.com tcp
US 8.8.8.8:53 www.silvycleans.com udp
KR 141.164.61.232:443 shihostudio.com tcp
US 8.8.8.8:53 simaexotics.com udp
IN 89.117.27.12:443 shriedutech.com tcp
US 8.8.8.8:53 215.206.154.184.in-addr.arpa udp
US 172.67.176.47:443 imunify-alert.com tcp
US 8.8.8.8:53 146.165.247.104.in-addr.arpa udp
US 160.153.0.189:443 simaexotics.com tcp
US 8.8.8.8:53 149.227.145.103.in-addr.arpa udp
US 8.8.8.8:53 simtech-mex.com udp
ID 103.142.21.66:443 www.silvycleans.com tcp
US 8.8.8.8:53 sisaketonly.com udp
US 172.67.176.47:443 imunify-alert.com tcp
US 8.8.8.8:53 sixsmashers.com udp
US 8.8.8.8:53 heluokitchen.com udp
US 204.93.224.136:443 simtech-mex.com tcp
US 8.8.8.8:53 heralbiotics.com udp
FR 94.23.87.136:443 sisaketonly.com tcp
US 8.8.8.8:53 15.212.90.157.in-addr.arpa udp
US 144.126.151.102:80 heluokitchen.com tcp
VN 103.75.187.19:443 heralbiotics.com tcp
US 8.8.8.8:53 111.209.0.162.in-addr.arpa udp
US 8.8.8.8:53 140.251.232.192.in-addr.arpa udp
US 8.8.8.8:53 216.209.234.103.in-addr.arpa udp
US 8.8.8.8:53 135.225.241.162.in-addr.arpa udp
US 8.8.8.8:53 212.104.144.217.in-addr.arpa udp
US 8.8.8.8:53 hikewithkurt.wpengine.com udp
US 8.8.8.8:53 himanshuuiux.com udp
US 8.8.8.8:53 hippie-merch.com udp
US 8.8.8.8:53 hkbeauty2023.com udp
US 8.8.8.8:53 homerunmerch.com udp
US 8.8.8.8:53 hongobusters.com udp
US 8.8.8.8:53 hopetalkshub.com udp
US 8.8.8.8:53 hotelkeliani.com udp
US 8.8.8.8:53 houstonworth.com udp
US 8.8.8.8:53 213.219.220.74.in-addr.arpa udp
US 8.8.8.8:53 176.13.144.162.in-addr.arpa udp
US 8.8.8.8:53 3.110.243.192.in-addr.arpa udp
US 8.8.8.8:53 3.168.136.94.in-addr.arpa udp
US 8.8.8.8:53 199.75.108.65.in-addr.arpa udp
US 8.8.8.8:53 211.10.21.104.in-addr.arpa udp
US 8.8.8.8:53 35.233.254.192.in-addr.arpa udp
US 8.8.8.8:53 182.108.174.38.in-addr.arpa udp
US 8.8.8.8:53 211.212.224.103.in-addr.arpa udp
US 8.8.8.8:53 48.166.243.136.in-addr.arpa udp
US 8.8.8.8:53 www.hrebcambodia.com udp
US 8.8.8.8:53 hughharrison.com udp
US 8.8.8.8:53 rpt1.winterfrucht.de udp
US 8.8.8.8:53 7.136.16.178.in-addr.arpa udp
US 8.8.8.8:53 35.188.117.89.in-addr.arpa udp
US 8.8.8.8:53 186.72.21.217.in-addr.arpa udp
US 8.8.8.8:53 147.200.235.66.in-addr.arpa udp
US 8.8.8.8:53 36.59.95.150.in-addr.arpa udp
US 8.8.8.8:53 58.232.49.69.in-addr.arpa udp
US 8.8.8.8:53 iberoid-shop.com udp
US 8.8.8.8:53 ibrcpedigree.com udp
US 8.8.8.8:53 authorwaleedatrushi.com udp
US 8.8.8.8:53 coffret-de-chantier.com udp
US 8.8.8.8:53 thanhvien-landscape.com udp
US 8.8.8.8:53 dreamerinsightsnews.com udp
US 8.8.8.8:53 lighterepisodeheighte.fun udp
US 8.8.8.8:53 117.220.242.133.in-addr.arpa udp
US 8.8.8.8:53 133.246.247.158.in-addr.arpa udp
US 8.8.8.8:53 250.107.46.89.in-addr.arpa udp
US 8.8.8.8:53 22.210.236.87.in-addr.arpa udp
US 8.8.8.8:53 194.121.224.212.in-addr.arpa udp
US 8.8.8.8:53 117.136.132.142.in-addr.arpa udp
US 8.8.8.8:53 elensaladoargentino.com udp
US 8.8.8.8:53 frankwealthcreation.com udp
US 8.8.8.8:53 greentouchcosmetics.com udp
US 8.8.8.8:53 herbstechnology2000.com udp
US 8.8.8.8:53 fieldguidetoawesome.com udp
US 8.8.8.8:53 hoachatchuyennghiep.com udp
US 8.8.8.8:53 onlinelimbootutorial.com udp
US 8.8.8.8:53 onlineprogramprofits.com udp
US 8.8.8.8:53 orderedenlightenment.com udp
US 8.8.8.8:53 87.81.143.45.in-addr.arpa udp
US 8.8.8.8:53 251.139.67.172.in-addr.arpa udp
US 8.8.8.8:53 16.227.50.147.in-addr.arpa udp
US 8.8.8.8:53 oregonpsilocybinshop.com udp
US 8.8.8.8:53 ortopediaencartagena.com udp
US 8.8.8.8:53 payinitforwardfloors.com udp
US 8.8.8.8:53 personalizewebstudio.com udp
IN 139.5.189.144:443 www.shalakaauto.com tcp
GB 94.136.168.3:443 roseinoxuae.com tcp
US 63.250.38.204:443 authorwaleedatrushi.com tcp
US 172.67.167.27:443 houstonworth.com tcp
FR 92.205.63.25:443 rpt1.winterfrucht.de tcp
FR 15.188.219.54:443 dreamerinsightsnews.com tcp
JP 133.242.220.117:443 hkbeauty2023.com tcp
US 8.8.8.8:53 peshawarikababjubail.com udp
US 66.235.200.145:443 hughharrison.com tcp
SG 31.220.110.126:443 herbstechnology2000.com tcp
US 66.235.200.145:80 hughharrison.com tcp
US 50.87.230.228:80 homerunmerch.com tcp
BR 149.62.37.167:443 ibrcpedigree.com tcp
VN 103.74.116.147:443 thanhvien-landscape.com tcp
DE 138.201.136.117:443 hotelkeliani.com tcp
US 104.21.75.183:443 iberoid-shop.com tcp
US 50.87.168.211:443 orderedenlightenment.com tcp
ES 37.153.90.70:80 elensaladoargentino.com tcp
US 67.205.17.28:443 frankwealthcreation.com tcp
US 216.128.145.238:443 hippie-merch.com tcp
US 173.236.138.92:80 fieldguidetoawesome.com tcp
IN 89.117.157.248:443 onlinelimbootutorial.com tcp
HU 185.111.89.215:443 greentouchcosmetics.com tcp
VN 202.92.4.34:443 hoachatchuyennghiep.com tcp
DE 148.251.116.74:443 ortopediaencartagena.com tcp
US 8.8.8.8:53 172.58.21.104.in-addr.arpa udp
US 185.212.70.180:443 oregonpsilocybinshop.com tcp
US 207.7.95.2:443 hongobusters.com tcp
US 162.213.210.146:443 www.hrebcambodia.com tcp
NL 89.116.53.36:443 himanshuuiux.com tcp
BR 149.100.155.229:443 personalizewebstudio.com tcp
US 107.180.2.108:443 payinitforwardfloors.com tcp
US 35.196.103.36:443 hikewithkurt.wpengine.com tcp
US 8.8.8.8:53 144.189.5.139.in-addr.arpa udp
US 104.21.37.213:80 sixsmashers.com tcp
US 8.8.8.8:53 48.97.46.78.in-addr.arpa udp
US 162.241.85.130:443 peshawarikababjubail.com tcp
US 8.8.8.8:53 12.27.117.89.in-addr.arpa udp
US 8.8.8.8:53 47.176.67.172.in-addr.arpa udp
US 8.8.8.8:53 189.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 www.plantaeldientedeleon.com udp
US 8.8.8.8:53 platinumchauffeursni.com udp
US 8.8.8.8:53 premiumaudiobookclub.com udp
US 8.8.8.8:53 preventflforeclosure.com udp
US 104.21.65.113:80 www.plantaeldientedeleon.com tcp
US 8.8.8.8:53 primedebitconsulting.com udp
US 8.8.8.8:53 problemregardybuiwo.fun udp
US 173.236.214.176:443 platinumchauffeursni.com tcp
US 173.201.183.190:443 premiumaudiobookclub.com tcp
US 8.8.8.8:53 primeledgersolutions.com udp
US 160.153.0.17:443 primedebitconsulting.com tcp
US 45.56.70.131:443 preventflforeclosure.com tcp
US 8.8.8.8:53 66.21.142.103.in-addr.arpa udp
US 8.8.8.8:53 136.87.23.94.in-addr.arpa udp
US 8.8.8.8:53 136.224.93.204.in-addr.arpa udp
US 8.8.8.8:53 102.151.126.144.in-addr.arpa udp
US 208.113.238.135:443 primeledgersolutions.com tcp
US 8.8.8.8:53 19.187.75.103.in-addr.arpa udp
US 8.8.8.8:53 www.serdarferit.com udp
US 8.8.8.8:53 profitableventurelab.com udp
US 8.8.8.8:53 prothomcoxsbazarnews.com udp
US 104.21.49.5:443 www.serdarferit.com tcp
US 8.8.8.8:53 pureandprettycandles.com udp
US 8.8.8.8:53 purchaseyourproducts.com udp
US 144.126.151.102:443 heluokitchen.com tcp
US 104.21.10.178:443 profitableventurelab.com tcp
US 8.8.8.8:53 qbentoluandarentacar.com udp
US 8.8.8.8:53 quesnelriverfrontinn.com udp
US 8.8.8.8:53 redwoodllcproperties.com udp
US 8.8.8.8:53 remediosnaturalesmty.com udp
US 170.39.77.129:443 pureandprettycandles.com tcp
US 192.185.131.78:443 purchaseyourproducts.com tcp
US 8.8.8.8:53 atelier-beaumarchais.com udp
US 162.241.123.75:80 qbentoluandarentacar.com tcp
US 8.8.8.8:53 www.roseinoxuae.com udp
US 170.249.209.242:443 quesnelriverfrontinn.com tcp
US 8.8.8.8:53 rayansetayeshmahdavi.com udp
US 162.241.62.160:80 remediosnaturalesmty.com tcp
US 170.130.38.43:443 redwoodllcproperties.com tcp
FR 87.98.154.146:443 atelier-beaumarchais.com tcp
US 8.8.8.8:53 27.167.67.172.in-addr.arpa udp
GB 94.136.168.3:443 www.roseinoxuae.com tcp
US 8.8.8.8:53 54.219.188.15.in-addr.arpa udp
IR 185.192.114.11:443 rayansetayeshmahdavi.com tcp
US 8.8.8.8:53 204.38.250.63.in-addr.arpa udp
US 8.8.8.8:53 145.200.235.66.in-addr.arpa udp
US 8.8.8.8:53 183.75.21.104.in-addr.arpa udp
US 8.8.8.8:53 117.136.201.138.in-addr.arpa udp
US 8.8.8.8:53 74.116.251.148.in-addr.arpa udp
US 8.8.8.8:53 215.89.111.185.in-addr.arpa udp
US 8.8.8.8:53 36.53.116.89.in-addr.arpa udp
US 8.8.8.8:53 92.138.236.173.in-addr.arpa udp
US 8.8.8.8:53 28.17.205.67.in-addr.arpa udp
US 8.8.8.8:53 228.230.87.50.in-addr.arpa udp
US 8.8.8.8:53 238.145.128.216.in-addr.arpa udp
US 8.8.8.8:53 211.168.87.50.in-addr.arpa udp
US 8.8.8.8:53 248.157.117.89.in-addr.arpa udp
US 8.8.8.8:53 167.37.62.149.in-addr.arpa udp
US 8.8.8.8:53 180.70.212.185.in-addr.arpa udp
US 8.8.8.8:53 36.103.196.35.in-addr.arpa udp
US 8.8.8.8:53 146.210.213.162.in-addr.arpa udp
US 8.8.8.8:53 229.155.100.149.in-addr.arpa udp
US 8.8.8.8:53 213.37.21.104.in-addr.arpa udp
US 8.8.8.8:53 126.110.220.31.in-addr.arpa udp
US 8.8.8.8:53 34.4.92.202.in-addr.arpa udp
US 8.8.8.8:53 147.116.74.103.in-addr.arpa udp
US 8.8.8.8:53 130.85.241.162.in-addr.arpa udp
US 8.8.8.8:53 samuraisuppliesstore.com udp
US 8.8.8.8:53 rideincomecalculator.com udp
US 8.8.8.8:53 www.hongobusters.com udp
US 8.8.8.8:53 santanapuntacanatrip.com udp
US 8.8.8.8:53 shahperfectsolutions.com udp
US 8.8.8.8:53 showercurtainsstores.com udp
US 8.8.8.8:53 hippieregistration.com udp
US 8.8.8.8:53 simplevaluemarketing.com udp
US 8.8.8.8:53 113.65.21.104.in-addr.arpa udp
US 8.8.8.8:53 176.214.236.173.in-addr.arpa udp
US 8.8.8.8:53 skilledfundedtraders.com udp
US 8.8.8.8:53 sonitev-reparaciones.com udp
US 8.8.8.8:53 www.sterlinglandservices.com udp
US 8.8.8.8:53 sparklevisualartists.com udp
US 8.8.8.8:53 sublimeproductioninc.com udp
US 8.8.8.8:53 sukeskinbeautycenter.com udp
US 8.8.8.8:53 summerwaterslidesusa.com udp
US 172.67.176.47:443 imunify-alert.com tcp
US 8.8.8.8:53 portifolio.personalizewebstudio.com udp
US 172.67.218.118:443 shahperfectsolutions.com tcp
US 104.18.27.230:443 skilledfundedtraders.com tcp
US 74.208.107.230:443 rideincomecalculator.com tcp
US 63.250.43.146:80 sparklevisualartists.com tcp
US 86.38.202.21:443 simplevaluemarketing.com tcp
US 208.109.73.131:443 www.sterlinglandservices.com tcp
FR 193.203.171.9:443 sonitev-reparaciones.com tcp
US 172.67.184.143:443 samuraisuppliesstore.com tcp
US 172.67.191.135:80 showercurtainsstores.com tcp
US 207.7.95.2:443 www.hongobusters.com tcp
US 8.8.8.8:53 131.70.56.45.in-addr.arpa udp
TR 78.135.106.170:443 sukeskinbeautycenter.com tcp
US 216.128.145.238:443 hippieregistration.com tcp
US 162.240.40.138:443 sublimeproductioninc.com tcp
US 66.45.244.171:443 santanapuntacanatrip.com tcp
US 8.8.8.8:53 5.49.21.104.in-addr.arpa udp
BR 149.100.155.229:443 portifolio.personalizewebstudio.com tcp
US 8.8.8.8:53 178.10.21.104.in-addr.arpa udp
US 8.8.8.8:53 sunnysidecommodities.com udp
US 8.8.8.8:53 www.primeledgersolutions.com udp
US 8.8.8.8:53 tanwarinfrastructure.com udp
US 67.223.118.146:443 sunnysidecommodities.com tcp
US 8.8.8.8:53 tascbusinesslearning.com udp
US 208.113.238.135:443 www.primeledgersolutions.com tcp
US 8.8.8.8:53 www.tentenbet-headoffice.com udp
US 8.8.8.8:53 themeanderingmartlet.com udp
US 8.8.8.8:53 theofficialiluminati.com udp
IN 89.117.157.217:443 tascbusinesslearning.com tcp
US 8.8.8.8:53 thehappyhandicrafter.com udp
US 82.180.138.77:443 theofficialiluminati.com tcp
KR 112.175.184.9:443 www.tentenbet-headoffice.com tcp
IN 142.93.221.201:443 tanwarinfrastructure.com tcp
GB 154.49.138.94:443 themeanderingmartlet.com tcp
US 8.8.8.8:53 thephilippinesunrise.com udp
US 8.8.8.8:53 thesoftwareinvestors.com udp
US 160.153.0.64:443 thehappyhandicrafter.com tcp
US 8.8.8.8:53 129.77.39.170.in-addr.arpa udp
LT 84.32.84.32:443 thephilippinesunrise.com tcp
US 8.8.8.8:53 78.131.185.192.in-addr.arpa udp
US 8.8.8.8:53 75.123.241.162.in-addr.arpa udp
US 8.8.8.8:53 242.209.249.170.in-addr.arpa udp
NL 165.232.83.180:443 thesoftwareinvestors.com tcp
US 8.8.8.8:53 160.62.241.162.in-addr.arpa udp
US 8.8.8.8:53 43.38.130.170.in-addr.arpa udp
US 8.8.8.8:53 146.154.98.87.in-addr.arpa udp
US 8.8.8.8:53 thewheeloffortune369.com udp
US 8.8.8.8:53 timetoteachwithdrvee.com udp
US 8.8.8.8:53 offgridandprepped.com udp
IN 89.117.188.19:443 thewheeloffortune369.com tcp
US 8.8.8.8:53 toyotalampungterbaik.com udp
US 8.8.8.8:53 uniqgwenfashionworld.com udp
US 173.231.203.103:443 timetoteachwithdrvee.com tcp
US 8.8.8.8:53 kaklotarinternational.com udp
KR 112.175.184.9:443 www.tentenbet-headoffice.com tcp
US 8.8.8.8:53 11.114.192.185.in-addr.arpa udp
US 8.8.8.8:53 detectordiscusser.shop udp
DE 51.68.178.175:443 uniqgwenfashionworld.com tcp
US 8.8.8.8:53 kapatechacmaintenance.com udp
ID 103.241.192.18:443 toyotalampungterbaik.com tcp
US 172.67.195.126:443 detectordiscusser.shop tcp
US 8.8.8.8:53 www.lockedinpropertiesllc.com udp
IN 103.50.163.226:443 kaklotarinternational.com tcp
US 8.8.8.8:53 hikewithkurt.com udp
FR 87.98.154.146:443 atelier-beaumarchais.com tcp
US 160.153.0.93:443 kapatechacmaintenance.com tcp
US 8.8.8.8:53 magicalfamilyvacation.com udp
US 104.21.59.171:443 www.lockedinpropertiesllc.com tcp
US 8.8.8.8:53 marriesharesknowledge.com udp
US 141.193.213.10:443 hikewithkurt.com tcp
US 8.8.8.8:53 maspormenoslafactoria.com udp
US 8.8.8.8:53 ecomstorenetwork.com udp
US 8.8.8.8:53 118.218.67.172.in-addr.arpa udp
US 8.8.8.8:53 230.27.18.104.in-addr.arpa udp
US 8.8.8.8:53 143.184.67.172.in-addr.arpa udp
US 8.8.8.8:53 135.191.67.172.in-addr.arpa udp
US 8.8.8.8:53 9.171.203.193.in-addr.arpa udp
US 8.8.8.8:53 170.106.135.78.in-addr.arpa udp
US 8.8.8.8:53 230.107.208.74.in-addr.arpa udp
US 8.8.8.8:53 21.202.38.86.in-addr.arpa udp
US 8.8.8.8:53 171.244.45.66.in-addr.arpa udp
US 8.8.8.8:53 146.43.250.63.in-addr.arpa udp
US 8.8.8.8:53 138.40.240.162.in-addr.arpa udp
US 8.8.8.8:53 mentoriabetmilionaria.com udp
US 8.8.8.8:53 metalnobremetalurgica.com udp
US 8.8.8.8:53 muntuwarriorsofficial.com udp
US 8.8.8.8:53 northlandpublicschool.com udp
US 8.8.8.8:53 mystoreonlineofficial.com udp
US 8.8.8.8:53 palmerlandscapedesign.com udp
US 8.8.8.8:53 photographespourlavie.com udp
US 8.8.8.8:53 146.118.223.67.in-addr.arpa udp
US 8.8.8.8:53 pkbmattarbiyahcirebon.com udp
US 8.8.8.8:53 portalingenieriacivil.com udp
US 8.8.8.8:53 pravincateringservice.com udp
US 8.8.8.8:53 pthiroengineeringindo.com udp
US 8.8.8.8:53 qualityservice-agency.com udp
US 8.8.8.8:53 217.157.117.89.in-addr.arpa udp
US 8.8.8.8:53 94.138.49.154.in-addr.arpa udp
US 8.8.8.8:53 77.138.180.82.in-addr.arpa udp
US 8.8.8.8:53 201.221.93.142.in-addr.arpa udp
US 8.8.8.8:53 64.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 9.184.175.112.in-addr.arpa udp
US 8.8.8.8:53 32.84.32.84.in-addr.arpa udp
US 8.8.8.8:53 revoca-autoesclusione.com udp
US 8.8.8.8:53 servicecenterinkuwait.com udp
US 8.8.8.8:53 showroomtoyotamampang.com udp
US 8.8.8.8:53 19.188.117.89.in-addr.arpa udp
US 8.8.8.8:53 sidefu-hotel-supplier.com udp
US 8.8.8.8:53 signalinsights.io udp
US 8.8.8.8:53 silverwingasylumevent.com udp
US 63.250.43.146:443 sparklevisualartists.com tcp
US 209.182.196.106:80 magicalfamilyvacation.com tcp
US 104.21.80.5:443 ecomstorenetwork.com tcp
US 104.21.80.5:443 ecomstorenetwork.com tcp
US 154.49.142.43:443 muntuwarriorsofficial.com tcp
US 104.21.88.236:443 mentoriabetmilionaria.com tcp
FR 92.205.60.121:443 photographespourlavie.com tcp
IN 89.117.27.134:443 pravincateringservice.com tcp
US 8.8.8.8:53 sinainonlinesolutions.com udp
US 8.8.8.8:53 103.203.231.173.in-addr.arpa udp
US 8.8.8.8:53 175.178.68.51.in-addr.arpa udp
US 8.8.8.8:53 93.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 226.163.50.103.in-addr.arpa udp
US 8.8.8.8:53 18.192.241.103.in-addr.arpa udp
US 8.8.8.8:53 171.59.21.104.in-addr.arpa udp
US 8.8.8.8:53 10.213.193.141.in-addr.arpa udp
US 74.208.236.97:80 silverwingasylumevent.com tcp
US 104.16.61.97:443 revoca-autoesclusione.com tcp
BR 149.100.155.79:443 metalnobremetalurgica.com tcp
US 141.193.213.11:443 signalinsights.io tcp
US 195.179.236.138:443 mumbaicourierservices.com tcp
US 45.79.18.81:443 sidefu-hotel-supplier.com tcp
US 217.21.76.170:443 mystoreonlineofficial.com tcp
US 23.239.27.53:443 portalingenieriacivil.com tcp
US 82.180.174.164:443 showroomtoyotamampang.com tcp
US 195.179.239.81:443 northlandpublicschool.com tcp
US 64.78.222.175:443 palmerlandscapedesign.com tcp
IN 103.152.79.182:443 servicecenterinkuwait.com tcp
IN 103.146.234.10:443 pthiroengineeringindo.com tcp
ID 103.247.11.86:443 pkbmattarbiyahcirebon.com tcp
NL 20.224.192.153:443 maspormenoslafactoria.com tcp
NL 153.92.220.93:443 marriesharesknowledge.com tcp
US 8.8.8.8:53 126.195.67.172.in-addr.arpa udp
US 8.8.8.8:53 www.frankwealthcreation.com udp
US 8.8.8.8:53 stphilipsparishchurch.com udp
US 8.8.8.8:53 sunsetbeachwatertower.com udp
US 8.8.8.8:53 slotsitesnotongamstop.com udp
US 8.8.8.8:53 www.supersteemerscleaners.com udp
US 8.8.8.8:53 terracotta-renovation.com udp
US 8.8.8.8:53 thaiinteractivestudio.com udp
US 8.8.8.8:53 theactivelifestylehub.com udp
US 8.8.8.8:53 19.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 5.80.21.104.in-addr.arpa udp
US 8.8.8.8:53 236.88.21.104.in-addr.arpa udp
US 8.8.8.8:53 106.196.182.209.in-addr.arpa udp
US 8.8.8.8:53 43.142.49.154.in-addr.arpa udp
US 8.8.8.8:53 thecollectiveprograms.com udp
US 8.8.8.8:53 thesilverliningcareer.com udp
US 8.8.8.8:53 edurestunningcrackyow.fun udp
US 8.8.8.8:53 ultimatedebt.wpengine.com udp
US 8.8.8.8:53 waterfordwebservices.com udp
US 8.8.8.8:53 www.shopbeautyandbeyond.com udp
GB 83.143.116.3:80 sinainonlinesolutions.com tcp
GB 154.49.138.19:443 stphilipsparishchurch.com tcp
FR 89.116.147.62:443 terracotta-renovation.com tcp
US 172.67.168.134:443 slotsitesnotongamstop.com tcp
US 217.21.76.152:443 theactivelifestylehub.com tcp
BE 13.225.239.76:443 www.supersteemerscleaners.com tcp
US 160.153.0.150:443 sunsetbeachwatertower.com tcp
US 67.205.17.28:443 www.frankwealthcreation.com tcp
US 172.67.174.156:443 thaiinteractivestudio.com tcp
US 45.32.133.73:443 thecollectiveprograms.com tcp
US 8.8.8.8:53 www.les-compagnons-du-batiment-78.com udp
US 8.8.8.8:53 luckist4rafflesandcompetition.com udp
US 52.70.244.225:443 waterfordwebservices.com tcp
US 8.8.8.8:53 mariebruguier-psychologuealbi.com udp
US 66.235.200.146:443 thesilverliningcareer.com tcp
US 8.8.8.8:53 134.27.117.89.in-addr.arpa udp
US 8.8.8.8:53 97.61.16.104.in-addr.arpa udp
US 8.8.8.8:53 11.213.193.141.in-addr.arpa udp
US 8.8.8.8:53 97.236.208.74.in-addr.arpa udp
US 8.8.8.8:53 153.192.224.20.in-addr.arpa udp
US 8.8.8.8:53 175.222.78.64.in-addr.arpa udp
US 8.8.8.8:53 81.239.179.195.in-addr.arpa udp
US 8.8.8.8:53 81.18.79.45.in-addr.arpa udp
US 8.8.8.8:53 93.220.92.153.in-addr.arpa udp
US 8.8.8.8:53 53.27.239.23.in-addr.arpa udp
US 8.8.8.8:53 138.236.179.195.in-addr.arpa udp
US 8.8.8.8:53 170.76.21.217.in-addr.arpa udp
US 8.8.8.8:53 164.174.180.82.in-addr.arpa udp
US 8.8.8.8:53 10.234.146.103.in-addr.arpa udp
US 8.8.8.8:53 79.155.100.149.in-addr.arpa udp
US 8.8.8.8:53 86.11.247.103.in-addr.arpa udp
US 130.211.29.77:443 ultimatedebt.wpengine.com tcp
US 5.161.117.192:443 www.shopbeautyandbeyond.com tcp
US 8.8.8.8:53 oostburgbasementwaterproofing.com udp
US 8.8.8.8:53 175.222.78.64.in-addr.arpa tcp
US 8.8.8.8:53 tomahawkbasementwaterproofing.com udp
US 8.8.8.8:53 sanjeevanitraditionalayurvedam.com udp
US 8.8.8.8:53 powellmaintenanceandmanagement.com udp
US 8.8.8.8:53 pooreveningfuseor.pw udp
GB 153.92.6.163:443 luckist4rafflesandcompetition.com tcp
FR 109.234.165.184:443 www.les-compagnons-du-batiment-78.com tcp
FR 89.117.169.249:443 mariebruguier-psychologuealbi.com tcp
US 8.8.8.8:53 stellainternationalpublication.com udp
US 8.8.8.8:53 alaskamotorsportcyclecenterltd.com udp
US 8.8.8.8:53 bergencountyprobatespecialists.com udp
US 8.8.8.8:53 handymanservicemilwaukieoregon.com udp
US 104.21.73.29:443 oostburgbasementwaterproofing.com tcp
US 8.8.8.8:53 promenade-des-anglais-front-sea.com udp
US 8.8.8.8:53 3.116.143.83.in-addr.arpa udp
US 8.8.8.8:53 150.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 156.174.67.172.in-addr.arpa udp
US 8.8.8.8:53 19.138.49.154.in-addr.arpa udp
US 8.8.8.8:53 62.147.116.89.in-addr.arpa udp
US 8.8.8.8:53 76.239.225.13.in-addr.arpa udp
US 8.8.8.8:53 225.244.70.52.in-addr.arpa udp
US 8.8.8.8:53 152.76.21.217.in-addr.arpa udp
US 8.8.8.8:53 73.133.32.45.in-addr.arpa udp
US 8.8.8.8:53 146.200.235.66.in-addr.arpa udp
US 8.8.8.8:53 77.29.211.130.in-addr.arpa udp
US 8.8.8.8:53 192.117.161.5.in-addr.arpa udp
US 8.8.8.8:53 www.dowerhouse.co.uk udp
US 8.8.8.8:53 impressiveconstructionsolutions.com udp
US 8.8.8.8:53 gentlemenashortviewbacktothepast.com udp
US 8.8.8.8:53 grupodetelecomunicacionesedwardo.com udp
US 8.8.8.8:53 www.sidefu-hotel-supplier.com udp
US 8.8.8.8:53 wrightstownbasementwaterproofing.com udp
US 8.8.8.8:53 marlineenglishbulldogpuppieshome.com udp
CA 208.94.107.101:443 powellmaintenanceandmanagement.com tcp
IN 89.117.27.124:443 sanjeevanitraditionalayurvedam.com tcp
US 172.67.132.170:443 tomahawkbasementwaterproofing.com tcp
US 8.8.8.8:53 najmatkhairinformationtechnology.com udp
US 8.8.8.8:53 chipfixerandwindshieldreplacement.com udp
US 8.8.8.8:53 cogentlanguageinstituteofscholars.com udp
US 8.8.8.8:53 psilocybinmushroomchocolatebarshop.com udp
US 8.8.8.8:53 asociaciondereciclajesdelatlantico.com udp
SG 82.180.152.155:443 stellainternationalpublication.com tcp
US 208.118.244.13:443 bergencountyprobatespecialists.com tcp
US 8.8.8.8:53 turkeyunlikelyofw.shop udp
US 8.8.8.8:53 bangkokregenerativeaestheticclinic.com udp
US 154.56.47.20:443 alaskamotorsportcyclecenterltd.com tcp
US 172.67.176.47:443 imunify-alert.com tcp
US 104.21.80.119:443 wrightstownbasementwaterproofing.com tcp
US 8.8.8.8:53 theunofficialguidetosurvivingcollege.com udp
US 195.35.33.140:443 impressiveconstructionsolutions.com tcp
GB 78.129.146.75:443 www.dowerhouse.co.uk tcp
US 195.35.33.234:443 marlineenglishbulldogpuppieshome.com tcp
US 149.100.151.139:443 gentlemenashortviewbacktothepast.com tcp
US 72.167.241.195:443 grupodetelecomunicacionesedwardo.com tcp
US 8.8.8.8:53 249.169.117.89.in-addr.arpa udp
US 8.8.8.8:53 184.165.234.109.in-addr.arpa udp
US 8.8.8.8:53 29.73.21.104.in-addr.arpa udp
US 8.8.8.8:53 170.132.67.172.in-addr.arpa udp
US 8.8.8.8:53 101.107.94.208.in-addr.arpa udp
US 8.8.8.8:53 163.6.92.153.in-addr.arpa udp
US 97.74.191.15:80 alljerseymasonryandconstruction.com tcp
DE 217.160.0.248:443 promenade-des-anglais-front-sea.com tcp
US 8.8.8.8:53 rsoa.net udp
US 8.8.8.8:53 3muz.net udp
US 8.8.8.8:53 zum3.net udp
US 104.21.76.253:443 turkeyunlikelyofw.shop tcp
GB 145.14.152.84:443 psilocybinmushroomchocolatebarshop.com tcp
US 157.230.222.51:443 chipfixerandwindshieldreplacement.com tcp
IN 52.66.255.67:80 cogentlanguageinstituteofscholars.com tcp
US 8.8.8.8:53 afiaz.net udp
US 8.8.8.8:53 euluc.net udp
US 45.79.18.81:443 www.sidefu-hotel-supplier.com tcp
US 66.235.200.112:443 najmatkhairinformationtechnology.com tcp
US 8.8.8.8:53 nsani.net udp
US 173.201.189.217:443 theunofficialguidetosurvivingcollege.com tcp
US 8.8.8.8:53 www.qqszz.net udp
US 89.117.139.97:443 asociaciondereciclajesdelatlantico.com tcp
US 8.8.8.8:53 comm7.net udp
US 8.8.8.8:53 idsat.net udp
US 8.8.8.8:53 dokuw.net udp
US 8.8.8.8:53 124.27.117.89.in-addr.arpa udp
US 8.8.8.8:53 13.244.118.208.in-addr.arpa udp
US 8.8.8.8:53 119.80.21.104.in-addr.arpa udp
US 8.8.8.8:53 75.146.129.78.in-addr.arpa udp
US 8.8.8.8:53 20.47.56.154.in-addr.arpa udp
US 8.8.8.8:53 140.33.35.195.in-addr.arpa udp
US 8.8.8.8:53 248.0.160.217.in-addr.arpa udp
US 8.8.8.8:53 234.33.35.195.in-addr.arpa udp
US 8.8.8.8:53 139.151.100.149.in-addr.arpa udp
US 8.8.8.8:53 155.152.180.82.in-addr.arpa udp
US 8.8.8.8:53 www.duaet.net udp
US 104.21.32.249:443 bangkokregenerativeaestheticclinic.com tcp
US 159.223.144.62:443 euluc.net tcp
US 8.8.8.8:53 winpku.net udp
US 104.21.42.220:443 rsoa.net tcp
US 66.235.200.113:443 bmm-bmp-bmr-bm3y-zihyd-hydraulic-motor.com tcp
JP 153.127.141.167:443 idsat.net tcp
US 8.8.8.8:53 isasph.net udp
US 74.208.236.213:80 afiaz.net tcp
US 8.8.8.8:53 bet928.net udp
US 8.8.8.8:53 shopmb.net udp
US 8.8.8.8:53 pgk888.net udp
TR 89.252.168.200:443 www.duaet.net tcp
US 63.250.43.3:443 dokuw.net tcp
BR 149.100.155.236:443 comm7.net tcp
HK 43.154.155.9:443 www.qqszz.net tcp
FR 193.203.239.68:443 nsani.net tcp
US 8.8.8.8:53 www.shazit.net udp
US 204.197.172.26:443 winpku.net tcp
IN 52.66.255.67:443 cogentlanguageinstituteofscholars.com tcp
US 172.67.152.74:443 pgk888.net tcp
US 8.8.8.8:53 253.76.21.104.in-addr.arpa udp
US 8.8.8.8:53 84.152.14.145.in-addr.arpa udp
HK 156.232.225.212:80 shopmb.net tcp
DE 168.119.5.246:443 www.shazit.net tcp
US 8.8.8.8:53 51.222.230.157.in-addr.arpa udp
VN 103.48.193.28:443 vijako.net tcp
US 8.8.8.8:53 112.200.235.66.in-addr.arpa udp
US 8.8.8.8:53 67.255.66.52.in-addr.arpa udp
US 8.8.8.8:53 249.32.21.104.in-addr.arpa udp
US 8.8.8.8:53 97.139.117.89.in-addr.arpa udp
US 8.8.8.8:53 riziki.org udp
US 8.8.8.8:53 vidira.net udp
US 8.8.8.8:53 maadeva.net udp
US 50.87.195.38:80 riziki.org tcp
US 8.8.8.8:53 associationokeo.shop udp
US 8.8.8.8:53 35joker.net udp
US 172.67.147.18:443 associationokeo.shop tcp
IN 68.178.158.76:443 vidira.net tcp
US 8.8.8.8:53 888kiki.net udp
US 8.8.8.8:53 888loki.net udp
FR 89.117.169.125:443 maadeva.net tcp
US 8.8.8.8:53 kai-lan.net udp
US 104.21.22.60:443 35joker.net tcp
US 8.8.8.8:53 prodish.net udp
US 8.8.8.8:53 hxgjzl.top udp
US 172.67.206.148:443 888kiki.net tcp
US 104.21.61.70:443 888loki.net tcp
FR 164.132.235.17:443 kai-lan.net tcp
US 8.8.8.8:53 113.200.235.66.in-addr.arpa udp
US 8.8.8.8:53 213.236.208.74.in-addr.arpa udp
US 198.54.126.242:443 prodish.net tcp
US 8.8.8.8:53 68.239.203.193.in-addr.arpa udp
US 8.8.8.8:53 167.141.127.153.in-addr.arpa udp
US 8.8.8.8:53 200.168.252.89.in-addr.arpa udp
CN 106.15.56.155:80 hxgjzl.top tcp
US 8.8.8.8:53 3.43.250.63.in-addr.arpa udp
US 8.8.8.8:53 236.155.100.149.in-addr.arpa udp
US 8.8.8.8:53 74.152.67.172.in-addr.arpa udp
US 8.8.8.8:53 26.172.197.204.in-addr.arpa udp
US 8.8.8.8:53 9.155.154.43.in-addr.arpa udp
US 8.8.8.8:53 220.42.21.104.in-addr.arpa udp
US 8.8.8.8:53 tiezgz.top udp
US 8.8.8.8:53 devo88.top udp
US 8.8.8.8:53 guinely.top udp
US 8.8.8.8:53 suniaun.top udp
US 8.8.8.8:53 biblitzi.top udp
US 8.8.8.8:53 hi88gift.top udp
US 8.8.8.8:53 iwingift.top udp
US 8.8.8.8:53 anamaya.tech udp
US 8.8.8.8:53 baconec.tech udp
US 8.8.8.8:53 listgame.top udp
US 8.8.8.8:53 cybleai.tech udp
US 8.8.8.8:53 246.5.119.168.in-addr.arpa udp
US 8.8.8.8:53 212.225.232.156.in-addr.arpa udp
US 8.8.8.8:53 28.193.48.103.in-addr.arpa udp
US 8.8.8.8:53 www.weekly10.com udp
US 8.8.8.8:53 www.shopmb.net udp
US 8.8.8.8:53 oluyinka.tech udp
US 8.8.8.8:53 ai-money.tech udp
US 8.8.8.8:53 datamash.tech udp
US 8.8.8.8:53 38.195.87.50.in-addr.arpa udp
US 8.8.8.8:53 18.147.67.172.in-addr.arpa udp
US 8.8.8.8:53 125.169.117.89.in-addr.arpa udp
US 8.8.8.8:53 60.22.21.104.in-addr.arpa udp
US 8.8.8.8:53 148.206.67.172.in-addr.arpa udp
US 8.8.8.8:53 bromacil.tech udp
US 8.8.8.8:53 ai-chain.tech udp
LT 84.32.84.32:443 baconec.tech tcp
US 162.241.252.221:443 ai-money.tech tcp
IN 89.117.157.167:443 anamaya.tech tcp
SG 156.67.222.102:443 devo88.top tcp
US 172.67.151.83:443 listgame.top tcp
US 172.67.142.88:443 iwingift.top tcp
IN 217.21.82.38:443 bromacil.tech tcp
US 86.38.202.217:443 datamash.tech tcp
US 141.193.213.10:443 www.weekly10.com tcp
US 104.21.11.51:443 hi88gift.top tcp
FI 65.109.23.226:443 oluyinka.tech tcp
DE 81.169.145.88:80 ai-chain.tech tcp
HK 156.232.225.212:80 www.shopmb.net tcp
US 172.67.207.73:443 guinely.top tcp
US 8.8.8.8:53 actuclub.tech udp
CN 101.34.213.154:443 tiezgz.top tcp
GR 185.25.23.20:443 biblitzi.top tcp
HK 154.12.20.112:443 suniaun.top tcp
US 8.8.8.8:53 aimarine.tech udp
IN 192.46.210.122:443 cybleai.tech tcp
US 8.8.8.8:53 70.61.21.104.in-addr.arpa udp
US 8.8.8.8:53 17.235.132.164.in-addr.arpa udp
US 8.8.8.8:53 242.126.54.198.in-addr.arpa udp
US 8.8.8.8:53 skillpool.tech udp
US 8.8.8.8:53 officehub.tech udp
US 66.81.203.198:443 aimarine.tech tcp
US 162.241.218.229:443 actuclub.tech tcp
US 8.8.8.8:53 metacurso.tech udp
US 104.21.84.135:443 condensat.tech tcp
US 8.8.8.8:53 binarycore.tech udp
US 3.22.9.121:443 skillpool.tech tcp
US 8.8.8.8:53 playhacker.tech udp
US 8.8.8.8:53 repairology.tech udp
ZA 169.239.217.11:80 officehub.tech tcp
US 8.8.8.8:53 winnerstech.tech udp
US 8.8.8.8:53 83.151.67.172.in-addr.arpa udp
US 8.8.8.8:53 88.142.67.172.in-addr.arpa udp
US 8.8.8.8:53 221.252.241.162.in-addr.arpa udp
US 8.8.8.8:53 167.157.117.89.in-addr.arpa udp
US 8.8.8.8:53 73.207.67.172.in-addr.arpa udp
US 8.8.8.8:53 88.145.169.81.in-addr.arpa udp
US 8.8.8.8:53 226.23.109.65.in-addr.arpa udp
US 8.8.8.8:53 20.23.25.185.in-addr.arpa udp
US 8.8.8.8:53 102.222.67.156.in-addr.arpa udp
US 8.8.8.8:53 38.82.21.217.in-addr.arpa udp
US 8.8.8.8:53 217.202.38.86.in-addr.arpa udp
US 8.8.8.8:53 122.210.46.192.in-addr.arpa udp
US 8.8.8.8:53 servicedepc.tech udp
BR 149.100.155.8:443 metacurso.tech tcp
US 8.8.8.8:53 techyoscope.tech udp
US 8.8.8.8:53 profit-plus.tech udp
US 8.8.8.8:53 floorboards.tech udp
US 8.8.8.8:53 multiplasma.tech udp
US 8.8.8.8:53 newsforword.tech udp
IE 52.48.25.105:80 binarycore.tech tcp
US 162.241.230.119:443 repairology.tech tcp
US 8.8.8.8:53 zsmsmrakotin.cz udp
CA 192.99.245.124:80 winnerstech.tech tcp
US 8.8.8.8:53 futurodigital.tech udp
US 8.8.8.8:53 chatexclusivo.tech udp
US 8.8.8.8:53 vortexofficial.tech udp
IN 217.21.82.38:443 floorboards.tech tcp
IN 89.117.157.232:443 newsforword.tech tcp
US 8.8.8.8:53 229.218.241.162.in-addr.arpa udp
US 8.8.8.8:53 135.84.21.104.in-addr.arpa udp
US 8.8.8.8:53 121.9.22.3.in-addr.arpa udp
US 8.8.8.8:53 8.155.100.149.in-addr.arpa udp
BR 154.49.247.81:443 profit-plus.tech tcp
US 8.8.8.8:53 snippetsoflife.tech udp
CZ 46.28.106.189:443 zsmsmrakotin.cz tcp
US 162.241.225.15:80 multiplasma.tech tcp
US 8.8.8.8:53 chautalamukesh.tech udp
US 8.8.8.8:53 junipersolutions.tech udp
US 8.8.8.8:53 serumafricanooficial.tech udp
US 8.8.8.8:53 lovemark-elsistema.tech udp
N/A 127.0.0.1:45454 tcp
US 104.21.84.135:80 condensat.tech tcp
US 8.8.8.8:53 bg9.space udp
US 8.8.8.8:53 innovativemanagement.tech udp
US 8.8.8.8:53 accsmarketplace.com udp
US 8.8.8.8:53 acniengineering.com udp
BR 149.100.155.122:443 chatexclusivo.tech tcp
US 174.138.182.157:443 futurodigital.tech tcp
US 162.241.216.32:443 snippetsoflife.tech tcp
US 8.8.8.8:53 105.25.48.52.in-addr.arpa udp
US 8.8.8.8:53 232.157.117.89.in-addr.arpa udp
US 8.8.8.8:53 81.247.49.154.in-addr.arpa udp
US 8.8.8.8:53 goldmountainbeauty.com udp
FR 154.49.245.39:443 lovemark-elsistema.tech tcp
US 50.116.65.110:80 tupelomarketing.tech tcp
US 31.170.161.106:443 chautalamukesh.tech tcp
US 162.241.225.48:443 junipersolutions.tech tcp
US 8.8.8.8:53 doformy.info udp
US 8.8.8.8:53 linkkkr.info udp
US 8.8.8.8:53 linkokb.info udp
US 8.8.8.8:53 linkskr.info udp
US 50.87.177.163:443 bg9.space tcp
US 162.241.252.230:443 innovativemanagement.tech tcp
US 162.0.215.33:443 acniengineering.com tcp
US 67.223.118.124:443 accsmarketplace.com tcp
US 8.8.8.8:53 cajadepaso.com udp
US 8.8.8.8:53 getjobzzgulf.com udp
US 8.8.8.8:53 globaloxigen.com udp
US 8.8.8.8:53 ki-freie-musik.de udp
US 8.8.8.8:53 vanessa-sonntag.com udp
US 8.8.8.8:53 vapescartridges.com udp
US 199.188.200.206:443 linkskr.info tcp
US 199.188.200.197:443 adomconsultants.com tcp
US 8.8.8.8:53 15.225.241.162.in-addr.arpa udp
US 8.8.8.8:53 157.182.138.174.in-addr.arpa udp
US 8.8.8.8:53 39.245.49.154.in-addr.arpa udp
US 8.8.8.8:53 32.216.241.162.in-addr.arpa udp
US 8.8.8.8:53 110.65.116.50.in-addr.arpa udp
US 172.67.180.64:443 goldmountainbeauty.com tcp
US 8.8.8.8:53 vendaonlineplus.com udp
US 8.8.8.8:53 vheatingcooling.com udp
US 8.8.8.8:53 vibrantvisluals.com udp
US 199.188.200.206:443 linkskr.info tcp
US 199.188.200.229:443 getjobzzgulf.com tcp
US 66.29.141.46:443 globaloxigen.com tcp
US 199.188.200.206:443 linkskr.info tcp
US 198.187.29.184:443 doformy.info tcp
DE 81.169.145.151:80 ki-freie-musik.de tcp
US 8.8.8.8:53 virtualaprendiz.com udp
US 63.250.38.71:443 cajadepaso.com tcp
US 104.21.26.21:443 vapescartridges.com tcp
DE 81.169.145.157:80 vanessa-sonntag.com tcp
US 160.153.0.171:443 vheatingcooling.com tcp
DE 81.169.145.84:80 vibrantvisluals.com tcp
US 8.8.8.8:53 vitalitymartial.com udp
BR 154.49.247.93:443 vendaonlineplus.com tcp
US 8.8.8.8:53 vnnailssaltlake.com udp
US 8.8.8.8:53 warmfertileland.com udp
US 8.8.8.8:53 106.161.170.31.in-addr.arpa udp
US 8.8.8.8:53 48.225.241.162.in-addr.arpa udp
US 8.8.8.8:53 163.177.87.50.in-addr.arpa udp
US 8.8.8.8:53 230.252.241.162.in-addr.arpa udp
US 8.8.8.8:53 33.215.0.162.in-addr.arpa udp
US 8.8.8.8:53 124.118.223.67.in-addr.arpa udp
US 8.8.8.8:53 64.180.67.172.in-addr.arpa udp
US 8.8.8.8:53 197.200.188.199.in-addr.arpa udp
US 8.8.8.8:53 206.200.188.199.in-addr.arpa udp
US 8.8.8.8:53 151.145.169.81.in-addr.arpa udp
US 8.8.8.8:53 229.200.188.199.in-addr.arpa udp
US 8.8.8.8:53 46.141.29.66.in-addr.arpa udp
US 8.8.8.8:53 184.29.187.198.in-addr.arpa udp
US 8.8.8.8:53 21.26.21.104.in-addr.arpa udp
BR 154.49.247.53:443 virtualaprendiz.com tcp
US 8.8.8.8:53 p2sekar4d.com udp
US 8.8.8.8:53 webdigitallinks.com udp
US 8.8.8.8:53 webridgeroofing.com udp
DE 173.212.208.47:443 wateroutspeaker.com tcp
US 8.8.8.8:53 wayne-locksmith.com udp
US 104.21.34.21:443 vitalitymartial.com tcp
US 8.8.8.8:53 wellbeingloan91.com udp
US 198.58.101.74:443 vnnailssaltlake.com tcp
US 8.8.8.8:53 whynotchemicals.com udp
US 199.188.200.206:443 p2sekar4d.com tcp
SG 156.67.222.30:443 webridgeroofing.com tcp
US 191.101.13.37:443 webdigitallinks.com tcp
KR 183.111.183.107:80 warmfertileland.com tcp
US 172.67.153.203:443 wayne-locksmith.com tcp
US 8.8.8.8:53 71.38.250.63.in-addr.arpa udp
US 8.8.8.8:53 157.145.169.81.in-addr.arpa udp
US 8.8.8.8:53 171.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 84.145.169.81.in-addr.arpa udp
US 8.8.8.8:53 93.247.49.154.in-addr.arpa udp
US 8.8.8.8:53 53.247.49.154.in-addr.arpa udp
US 8.8.8.8:53 21.34.21.104.in-addr.arpa udp
KR 183.111.183.106:80 wellbeingloan91.com tcp
US 8.8.8.8:53 willsonadvocate.com udp
US 8.8.8.8:53 wilckensgeorgia.com udp
US 8.8.8.8:53 sashimi-sp.com udp
ZA 129.232.138.199:443 whynotchemicals.com tcp
US 172.67.191.105:443 sashimi-sp.com tcp
US 8.8.8.8:53 wing4umember789.com udp
US 8.8.8.8:53 p2kekar4d.com udp
US 8.8.8.8:53 withonesolution.com udp
US 8.8.8.8:53 p2okbos86.com udp
US 8.8.8.8:53 www.woodrumconcrete.com udp
FR 89.117.169.207:443 wilckensgeorgia.com tcp
US 8.8.8.8:53 work-and-vision.de udp
US 8.8.8.8:53 worldinfodigest.com udp
US 8.8.8.8:53 74.101.58.198.in-addr.arpa udp
US 8.8.8.8:53 203.153.67.172.in-addr.arpa udp
US 8.8.8.8:53 37.13.101.191.in-addr.arpa udp
US 8.8.8.8:53 107.183.111.183.in-addr.arpa udp
US 8.8.8.8:53 30.222.67.156.in-addr.arpa udp
US 8.8.8.8:53 199.138.232.129.in-addr.arpa udp
US 8.8.8.8:53 106.183.111.183.in-addr.arpa udp
US 8.8.8.8:53 105.191.67.172.in-addr.arpa udp
US 8.8.8.8:53 yahoraqueopinas.com udp
US 8.8.8.8:53 yolunsonuneresi.com udp
US 8.8.8.8:53 zenithironworks.com udp
US 8.8.8.8:53 ziloohandicraft.com udp
US 8.8.8.8:53 10xlizardkiller.com udp
US 8.8.8.8:53 3dshowforschool.com udp
US 199.188.200.206:443 p2okbos86.com tcp
US 104.21.77.119:443 wing4umember789.com tcp
US 8.8.8.8:53 aalochanadainik.com udp
US 8.8.8.8:53 abdoumbackendao.com udp
US 8.8.8.8:53 audrhks910.mycafe24.com udp
US 8.8.8.8:53 abzargostarshop.com udp
US 199.188.200.206:443 p2okbos86.com tcp
US 8.8.8.8:53 acaotrazclareza.com udp
KR 158.247.246.133:443 withonesolution.com tcp
GB 154.49.138.162:443 worldinfodigest.com tcp
FR 154.49.245.102:443 yahoraqueopinas.com tcp
US 8.8.8.8:53 aestheticatrium.com udp
DE 94.186.184.11:443 work-and-vision.de tcp
US 8.8.8.8:53 agenciacentrico.com udp
TR 185.216.114.20:443 yolunsonuneresi.com tcp
US 8.8.8.8:53 agenciarecobros.com udp
US 8.8.8.8:53 207.169.117.89.in-addr.arpa udp
IN 89.117.157.14:443 zenithironworks.com tcp
DE 5.9.98.226:443 ziloohandicraft.com tcp
US 104.21.51.208:443 3dshowforschool.com tcp
ID 203.175.8.48:443 wulingbalimurah.com tcp
US 8.8.8.8:53 agendadaffaires.com udp
US 174.138.190.150:443 aalochanadainik.com tcp
US 8.8.8.8:53 aidesignsprints.com udp
IR 185.10.74.87:443 abzargostarshop.com tcp
FR 51.159.106.88:443 abdoumbackendao.com tcp
US 104.21.94.230:443 acaotrazclareza.com tcp
MY 113.23.169.115:443 10xlizardkiller.com tcp
US 8.8.8.8:53 aiolamanagement.com udp
US 8.8.8.8:53 albertobeguerie.com udp
US 8.8.8.8:53 allstarswikibio.com udp
FR 91.234.195.109:443 agendadaffaires.com tcp
US 68.178.207.174:443 agenciarecobros.com tcp
US 89.117.139.54:443 agenciacentrico.com tcp
KR 183.111.183.106:80 audrhks910.mycafe24.com tcp
US 23.105.170.102:443 aestheticatrium.com tcp
US 8.8.8.8:53 ambartourbintan.com udp
US 8.8.8.8:53 altcoineveryday.com udp
US 8.8.8.8:53 anapa-grandotel.com udp
US 8.8.8.8:53 ammandajewllery.com udp
US 8.8.8.8:53 119.77.21.104.in-addr.arpa udp
US 8.8.8.8:53 162.138.49.154.in-addr.arpa udp
US 8.8.8.8:53 102.245.49.154.in-addr.arpa udp
US 8.8.8.8:53 11.184.186.94.in-addr.arpa udp
US 8.8.8.8:53 208.51.21.104.in-addr.arpa udp
US 8.8.8.8:53 226.98.9.5.in-addr.arpa udp
US 8.8.8.8:53 20.114.216.185.in-addr.arpa udp
US 8.8.8.8:53 150.190.138.174.in-addr.arpa udp
US 8.8.8.8:53 14.157.117.89.in-addr.arpa udp
US 8.8.8.8:53 48.8.175.203.in-addr.arpa udp
NL 206.189.98.196:443 aidesignsprints.com tcp
US 8.8.8.8:53 anbarfurnitures.com udp
ID 154.41.240.48:443 aiolamanagement.com tcp
US 82.180.138.55:443 allstarswikibio.com tcp
ID 103.247.11.164:443 ambartourbintan.com tcp
US 8.8.8.8:53 android-catalog.com udp
GB 185.77.97.82:443 alphadreamgames.com tcp
US 173.236.138.193:443 albertobeguerie.com tcp
US 8.8.8.8:53 androidcodingbd.com udp
IN 68.178.148.238:443 anbarfurnitures.com tcp
US 172.67.201.22:443 anapa-grandotel.com tcp
LT 45.88.197.59:443 altcoineveryday.com tcp
US 8.8.8.8:53 anti-agingfacts.com udp
US 8.8.8.8:53 apartments-news.com udp
US 8.8.8.8:53 apexcustomboats.com udp
DE 164.90.222.122:443 android-catalog.com tcp
GB 185.77.97.7:443 anti-agingfacts.com tcp
US 8.8.8.8:53 88.106.159.51.in-addr.arpa udp
US 8.8.8.8:53 87.74.10.185.in-addr.arpa udp
US 8.8.8.8:53 230.94.21.104.in-addr.arpa udp
US 8.8.8.8:53 109.195.234.91.in-addr.arpa udp
US 8.8.8.8:53 102.170.105.23.in-addr.arpa udp
US 8.8.8.8:53 54.139.117.89.in-addr.arpa udp
US 8.8.8.8:53 196.98.189.206.in-addr.arpa udp
US 8.8.8.8:53 115.169.23.113.in-addr.arpa udp
US 8.8.8.8:53 55.138.180.82.in-addr.arpa udp
US 8.8.8.8:53 22.201.67.172.in-addr.arpa udp
US 8.8.8.8:53 82.97.77.185.in-addr.arpa udp
US 8.8.8.8:53 59.197.88.45.in-addr.arpa udp
US 8.8.8.8:53 193.138.236.173.in-addr.arpa udp
US 8.8.8.8:53 48.240.41.154.in-addr.arpa udp
US 8.8.8.8:53 164.11.247.103.in-addr.arpa udp
US 8.8.8.8:53 aplusaccesories.com udp
US 8.8.8.8:53 apollovoltparks.com udp
DE 213.136.93.171:443 apexcustomboats.com tcp
BD 103.191.240.250:443 androidcodingbd.com tcp
US 8.8.8.8:53 arasiyalsuriyan.com udp
KR 183.111.183.108:80 apartments-news.com tcp
US 8.8.8.8:53 aprendizdelvino.com udp
DE 217.160.0.57:80 apollovoltparks.com tcp
US 8.8.8.8:53 www.axoc-technology.com udp
US 8.8.8.8:53 azuldanismanlik.com udp
FR 89.116.147.131:443 aprendizdelvino.com tcp
FR 87.98.184.98:443 aplusaccesories.com tcp
IN 89.117.27.155:443 arasiyalsuriyan.com tcp
FR 94.247.178.33:443 www.axoc-technology.com tcp
US 208.113.191.76:443 awizardslibrary.com tcp
DE 185.192.96.75:443 azuldanismanlik.com tcp
US 8.8.8.8:53 balivillaresort.com udp
US 8.8.8.8:53 www.bangladeshkagoj.com udp
US 8.8.8.8:53 122.222.90.164.in-addr.arpa udp
US 8.8.8.8:53 7.97.77.185.in-addr.arpa udp
US 8.8.8.8:53 171.93.136.213.in-addr.arpa udp
US 8.8.8.8:53 250.240.191.103.in-addr.arpa udp
US 8.8.8.8:53 57.0.160.217.in-addr.arpa udp
US 8.8.8.8:53 108.183.111.183.in-addr.arpa udp
US 8.8.8.8:53 twistmushroombars.com udp
US 198.187.29.143:443 twistmushroombars.com tcp
US 8.8.8.8:53 mindfulmamarevival.com udp
US 8.8.8.8:53 shandaarrestaurant.com udp
US 3.33.130.190:80 balivillaresort.com tcp
US 8.8.8.8:53 constructwithpurpose.com udp
US 8.8.8.8:53 paloza.shop udp
US 8.8.8.8:53 fbodek.shop udp
US 8.8.8.8:53 zedlabz.shop udp
US 66.29.141.129:443 shandaarrestaurant.com tcp
US 8.8.8.8:53 131.147.116.89.in-addr.arpa udp
US 8.8.8.8:53 98.184.98.87.in-addr.arpa udp
US 8.8.8.8:53 155.27.117.89.in-addr.arpa udp
US 8.8.8.8:53 75.96.192.185.in-addr.arpa udp
US 8.8.8.8:53 76.191.113.208.in-addr.arpa udp
US 8.8.8.8:53 190.130.33.3.in-addr.arpa udp
US 8.8.8.8:53 143.29.187.198.in-addr.arpa udp
US 66.29.153.243:443 paloza.shop tcp
US 45.40.155.32:443 mindfulmamarevival.com tcp
US 8.8.8.8:53 motobilt.shop udp
US 8.8.8.8:53 fidami.shop udp
US 8.8.8.8:53 sehatjaya.shop udp
US 198.187.31.236:80 fidami.shop tcp
US 8.8.8.8:53 www.albertobeguerie.com udp
US 8.8.8.8:53 asainsmart.shop udp
US 141.193.213.10:443 constructwithpurpose.com tcp
US 8.8.8.8:53 bijibijian.shop udp
US 162.213.251.245:443 jobspk.shop tcp
US 172.67.164.208:80 zedlabz.shop tcp
US 172.67.220.74:80 motobilt.shop tcp
US 198.187.31.236:80 fidami.shop tcp
US 3.33.130.190:443 balivillaresort.com tcp
US 172.67.135.37:80 asainsmart.shop tcp
US 8.8.8.8:53 casadecore.shop udp
US 8.8.8.8:53 www.trainingwarehouse.ca udp
US 8.8.8.8:53 243.153.29.66.in-addr.arpa udp
US 8.8.8.8:53 wbaas.store udp
SG 185.237.144.224:443 sehatjaya.shop tcp
SG 156.67.213.172:443 bijibijian.shop tcp
US 8.8.8.8:53 dpsmembers.online udp
US 8.8.8.8:53 qbaas.store udp
US 8.8.8.8:53 bra-penty.store udp
US 8.8.8.8:53 shanlu.store udp
US 8.8.8.8:53 finecc.store udp
US 173.236.138.193:443 www.albertobeguerie.com tcp
US 8.8.8.8:53 artgv.com udp
US 8.8.8.8:53 arwxn.com udp
US 8.8.8.8:53 www.jobspk.shop udp
US 8.8.8.8:53 tlomf.com udp
IN 3.108.154.143:80 casadecore.shop tcp
US 132.148.237.163:443 www.trainingwarehouse.ca tcp
US 104.21.31.36:80 dpsmembers.online tcp
US 172.67.176.47:443 imunify-alert.com tcp
US 8.8.8.8:53 236.31.187.198.in-addr.arpa udp
US 8.8.8.8:53 208.164.67.172.in-addr.arpa udp
US 8.8.8.8:53 245.251.213.162.in-addr.arpa udp
US 8.8.8.8:53 74.220.67.172.in-addr.arpa udp
US 8.8.8.8:53 37.135.67.172.in-addr.arpa udp
US 3.33.130.190:443 qbaas.store tcp
US 8.8.8.8:53 tv18x.com udp
DE 195.201.179.80:80 shanlu.store tcp
US 50.87.253.50:443 apzgh.com tcp
CA 23.227.38.65:443 bra-penty.store tcp
US 162.213.251.245:443 www.jobspk.shop tcp
US 8.8.8.8:53 vgend.com udp
US 66.29.141.197:443 finecc.store tcp
US 3.33.130.190:443 qbaas.store tcp
US 104.21.31.36:80 dpsmembers.online tcp
US 162.241.123.139:80 tlomf.com tcp
HK 45.125.48.141:443 arwxn.com tcp
US 160.153.0.119:443 vgend.com tcp
US 8.8.8.8:53 vynfu.com udp
US 8.8.8.8:53 chicstyle.info udp
US 8.8.8.8:53 prosoftwarecracks.com udp
US 172.67.128.221:443 tv18x.com tcp
US 8.8.8.8:53 224.144.237.185.in-addr.arpa udp
US 8.8.8.8:53 172.213.67.156.in-addr.arpa udp
US 8.8.8.8:53 143.154.108.3.in-addr.arpa udp
US 8.8.8.8:53 80.179.201.195.in-addr.arpa udp
US 8.8.8.8:53 65.38.227.23.in-addr.arpa udp
US 8.8.8.8:53 50.253.87.50.in-addr.arpa udp
US 8.8.8.8:53 197.141.29.66.in-addr.arpa udp
US 8.8.8.8:53 iptvhmt.tech udp
IN 3.108.154.143:443 casadecore.shop tcp
US 8.8.8.8:53 sitelaunch.space udp
US 195.179.239.63:443 vynfu.com tcp
US 8.8.8.8:53 omaster.tech udp
US 8.8.8.8:53 hikari-kaisen-guide.space udp
US 8.8.8.8:53 rental-server-guide.space udp
US 8.8.8.8:53 omaster.pro udp
US 8.8.8.8:53 learnfivem.dev udp
US 8.8.8.8:53 nyschub.com udp
US 8.8.8.8:53 goetterfunke.com udp
US 104.21.31.36:443 dpsmembers.online tcp
US 8.8.8.8:53 byjossie.com udp
GB 185.151.30.132:443 chicstyle.info tcp
US 198.54.125.151:443 prosoftwarecracks.com tcp
US 104.21.31.36:443 dpsmembers.online tcp
US 8.8.8.8:53 bellamaretrade.com udp
US 8.8.8.8:53 119.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 139.123.241.162.in-addr.arpa udp
US 8.8.8.8:53 221.128.67.172.in-addr.arpa udp
US 8.8.8.8:53 betblissful168.com udp
US 8.8.8.8:53 betblissful888.com udp
US 8.8.8.8:53 bluebirdckwtec.com udp
US 8.8.8.8:53 bihariclothing.com udp
US 198.54.115.46:443 nyschub.com tcp
US 45.79.74.208:80 sitelaunch.space tcp
BR 45.224.131.211:443 omaster.pro tcp
BR 45.224.131.211:443 omaster.pro tcp
JP 183.90.182.103:443 rental-server-guide.space tcp
US 8.8.8.8:53 botaksbackyard.com udp
US 8.8.8.8:53 chakuerokyonyu.com udp
US 8.8.8.8:53 www.changeattravel.com udp
US 8.8.8.8:53 chatgptinchina.com udp
DE 84.16.249.34:443 bellamaretrade.com tcp
US 8.8.8.8:53 chavesecretapp.com udp
US 108.179.232.151:443 learnfivem.dev tcp
US 68.65.122.98:443 byjossie.com tcp
US 8.8.8.8:53 ihyaainstitute.com udp
US 8.8.8.8:53 realityof-life.com udp
US 8.8.8.8:53 rithmsandlinks.com udp
US 8.8.8.8:53 samson-pacaric.com udp
US 8.8.8.8:53 spinprizepulse.com udp
US 8.8.8.8:53 63.239.179.195.in-addr.arpa udp
US 8.8.8.8:53 132.30.151.185.in-addr.arpa udp
US 8.8.8.8:53 151.125.54.198.in-addr.arpa udp
US 8.8.8.8:53 statuscreation.com udp
US 198.54.115.83:443 ohiohobbyplus.com tcp
DE 81.169.145.83:443 goetterfunke.com tcp
TH 27.254.86.109:443 spinprizepulse.com tcp
IN 172.104.207.158:443 bihariclothing.com tcp
RO 89.42.218.74:443 bluebirdckwtec.com tcp
JP 183.90.181.102:443 hikari-kaisen-guide.space tcp
TH 27.254.86.109:443 spinprizepulse.com tcp
US 142.171.100.13:443 chatgptinchina.com tcp
TR 94.199.206.20:443 www.changeattravel.com tcp
DE 81.169.145.92:443 samson-pacaric.com tcp
US 106.0.62.70:443 realityof-life.com tcp
US 198.54.116.155:443 botaksbackyard.com tcp
US 8.8.8.8:53 stylehomestead.com udp
US 8.8.8.8:53 sweetysdigital.com udp
BR 45.224.131.211:443 chavesecretapp.com tcp
JP 183.90.183.165:443 chakuerokyonyu.com tcp
DE 141.95.97.31:80 ihyaainstitute.com tcp
US 104.225.208.26:443 rithmsandlinks.com tcp
IN 103.117.180.2:443 statuscreation.com tcp
US 8.8.8.8:53 46.115.54.198.in-addr.arpa udp
US 8.8.8.8:53 34.249.16.84.in-addr.arpa udp
US 8.8.8.8:53 208.74.79.45.in-addr.arpa udp
US 8.8.8.8:53 151.232.179.108.in-addr.arpa udp
US 8.8.8.8:53 98.122.65.68.in-addr.arpa udp
US 8.8.8.8:53 211.131.224.45.in-addr.arpa udp
US 8.8.8.8:53 103.182.90.183.in-addr.arpa udp
US 8.8.8.8:53 83.145.169.81.in-addr.arpa udp
US 8.8.8.8:53 83.115.54.198.in-addr.arpa udp
US 8.8.8.8:53 158.207.104.172.in-addr.arpa udp
US 8.8.8.8:53 74.218.42.89.in-addr.arpa udp
US 8.8.8.8:53 www.syaifuladvisor.com udp
US 8.8.8.8:53 tajurkatineung.com udp
US 8.8.8.8:53 jumpingplayzone.com udp
US 8.8.8.8:53 kawaiidriftteam.com udp
US 8.8.8.8:53 wed-webs.com udp
TH 27.254.86.109:443 spinprizepulse.com tcp
US 209.182.203.21:443 stylehomestead.com tcp
US 8.8.8.8:53 kipleykagan2025.com udp
IN 103.14.121.240:443 sweetysdigital.com tcp
MY 103.28.91.20:443 www.syaifuladvisor.com tcp
US 8.8.8.8:53 knockdownshorts.com udp
US 8.8.8.8:53 leanintothepain.com udp
US 8.8.8.8:53 lhommemarketing.com udp
US 8.8.8.8:53 lunchboxtrading.com udp
US 8.8.8.8:53 luxstudiomexico.com udp
US 8.8.8.8:53 majnunmarketing.com udp
SG 109.106.252.82:80 tajurkatineung.com tcp
SG 151.106.119.71:443 wed-webs.com tcp
US 50.87.217.79:443 jumpingplayzone.com tcp
US 162.241.230.55:443 kawaiidriftteam.com tcp
US 8.8.8.8:53 31.97.95.141.in-addr.arpa udp
US 8.8.8.8:53 70.62.0.106.in-addr.arpa udp
US 8.8.8.8:53 13.100.171.142.in-addr.arpa udp
US 8.8.8.8:53 26.208.225.104.in-addr.arpa udp
US 8.8.8.8:53 102.181.90.183.in-addr.arpa udp
US 8.8.8.8:53 165.183.90.183.in-addr.arpa udp
US 8.8.8.8:53 141.48.125.45.in-addr.arpa udp
US 8.8.8.8:53 2.180.117.103.in-addr.arpa udp
US 8.8.8.8:53 155.116.54.198.in-addr.arpa udp
US 162.241.244.139:443 kipleykagan2025.com tcp
US 192.185.131.33:443 luxstudiomexico.com tcp
US 162.241.24.245:443 lhommemarketing.com tcp
US 8.8.8.8:53 manzel-7kayahsa.com udp
US 8.8.8.8:53 meetexhibitions.com udp
US 8.8.8.8:53 metasmilionaria.com udp
US 8.8.8.8:53 misitiofavorito.com udp
US 8.8.8.8:53 mkrincmarketing.com udp
US 185.230.63.186:443 lunchboxtrading.com tcp
US 162.241.225.69:443 majnunmarketing.com tcp
US 8.8.8.8:53 typingcompanion.com udp
US 8.8.8.8:53 theregenexperts.com udp
US 8.8.8.8:53 walkwithbrother.com udp
US 8.8.8.8:53 xintechnologybd.com udp
US 8.8.8.8:53 webshopespecial.com udp
US 162.241.216.179:443 knockdownshorts.com tcp
US 162.241.224.248:443 leftylucydesign.com tcp
US 162.241.244.106:443 leanintothepain.com tcp
US 8.8.8.8:53 anythingmerchant.com udp
US 8.8.8.8:53 21.203.182.209.in-addr.arpa udp
US 8.8.8.8:53 240.121.14.103.in-addr.arpa udp
US 8.8.8.8:53 79.217.87.50.in-addr.arpa udp
US 8.8.8.8:53 55.230.241.162.in-addr.arpa udp
US 8.8.8.8:53 20.91.28.103.in-addr.arpa udp
US 8.8.8.8:53 82.252.106.109.in-addr.arpa udp
US 8.8.8.8:53 71.119.106.151.in-addr.arpa udp
US 8.8.8.8:53 traffickingsucks.com udp
US 8.8.8.8:53 invisionautoparlourltd.com udp
US 8.8.8.8:53 kellysmainecooncattery.com udp
US 8.8.8.8:53 clinicaveterinariacifuentes.es udp
US 8.8.8.8:53 oliverbui.net udp
US 8.8.8.8:53 logotyme.net udp
US 8.8.8.8:53 midwesthealthlawyers.net udp
US 68.65.122.100:443 kellysmainecooncattery.com tcp
US 162.241.216.86:443 manzel-7kayahsa.com tcp
US 162.0.232.30:443 meetexhibitions.com tcp
US 50.62.220.22:443 theregenexperts.com tcp
US 208.109.30.225:443 typingcompanion.com tcp
US 8.8.8.8:53 outoftheashesorganization.net udp
US 8.8.8.8:53 njminorityalliance.org udp
US 8.8.8.8:53 100fishermenproject.org udp
US 8.8.8.8:53 reason315.com udp
US 8.8.8.8:53 www.e-cd.us udp
US 50.6.138.175:443 metasmilionaria.com tcp
US 64.31.22.34:443 anythingmerchant.com tcp
US 50.116.93.190:443 traffickingsucks.com tcp
US 50.87.249.216:443 midwesthealthlawyers.net tcp
US 8.8.8.8:53 139.244.241.162.in-addr.arpa udp
US 8.8.8.8:53 33.131.185.192.in-addr.arpa udp
US 8.8.8.8:53 245.24.241.162.in-addr.arpa udp
US 8.8.8.8:53 186.63.230.185.in-addr.arpa udp
US 8.8.8.8:53 69.225.241.162.in-addr.arpa udp
US 8.8.8.8:53 179.216.241.162.in-addr.arpa udp
US 8.8.8.8:53 248.224.241.162.in-addr.arpa udp
US 8.8.8.8:53 106.244.241.162.in-addr.arpa udp
US 50.6.138.159:443 logotyme.net tcp
US 162.241.252.179:443 oliverbui.net tcp
LU 198.251.84.200:443 invisionautoparlourltd.com tcp
US 162.241.63.92:443 misitiofavorito.com tcp
US 67.20.113.211:443 walkwithbrother.com tcp
US 108.179.193.89:443 webshopespecial.com tcp
FR 178.33.161.194:443 clinicaveterinariacifuentes.es tcp
US 68.65.122.97:80 xintechnologybd.com tcp
US 162.241.217.63:443 mkrincmarketing.com tcp
US 8.8.8.8:53 www.statuscreation.com udp
US 8.8.8.8:53 petoskeybaseballclub.org udp
US 198.185.159.145:443 100fishermenproject.org tcp
US 8.8.8.8:53 thronetempleministry.org udp
US 8.8.8.8:53 domonku.shop udp
US 8.8.8.8:53 www.tusojamarineservices.org udp
US 8.8.8.8:53 linssenhomes.online udp
US 8.8.8.8:53 www.daunnursery.shop udp
US 162.144.1.188:443 myntraskintagremover.org tcp
US 173.254.29.237:443 www.e-cd.us tcp
US 162.241.216.41:443 njminorityalliance.org tcp
US 162.241.224.146:443 reason315.com tcp
US 162.241.226.169:443 outoftheashesorganization.net tcp
US 8.8.8.8:53 100.122.65.68.in-addr.arpa udp
US 8.8.8.8:53 194.161.33.178.in-addr.arpa udp
US 8.8.8.8:53 86.216.241.162.in-addr.arpa udp
US 8.8.8.8:53 175.138.6.50.in-addr.arpa udp
US 8.8.8.8:53 200.84.251.198.in-addr.arpa udp
US 8.8.8.8:53 34.22.31.64.in-addr.arpa udp
US 8.8.8.8:53 216.249.87.50.in-addr.arpa udp
US 8.8.8.8:53 190.93.116.50.in-addr.arpa udp
US 8.8.8.8:53 159.138.6.50.in-addr.arpa udp
US 8.8.8.8:53 92.63.241.162.in-addr.arpa udp
US 8.8.8.8:53 89.193.179.108.in-addr.arpa udp
US 8.8.8.8:53 30.232.0.162.in-addr.arpa udp
US 8.8.8.8:53 211.113.20.67.in-addr.arpa udp
US 8.8.8.8:53 179.252.241.162.in-addr.arpa udp
US 8.8.8.8:53 97.122.65.68.in-addr.arpa udp
US 8.8.8.8:53 megaelectro.shop udp
US 8.8.8.8:53 galpradigital.shop udp
IN 103.117.180.2:443 www.statuscreation.com tcp
US 8.8.8.8:53 supremabeleza.shop udp
US 8.8.8.8:53 pay-myservice.store udp
US 8.8.8.8:53 orabellajoias.store udp
US 8.8.8.8:53 universo-iptv.store udp
US 8.8.8.8:53 produtofisico.store udp
US 8.8.8.8:53 utilidadesvip.store udp
US 8.8.8.8:53 vipluxurygift.store udp
US 8.8.8.8:53 ultimatedesign.store udp
US 8.8.8.8:53 calidadpacatus.store udp
US 8.8.8.8:53 medidareducida.store udp
US 8.8.8.8:53 vintageaccents.store udp
US 104.16.222.243:443 petoskeybaseballclub.org tcp
US 8.8.8.8:53 yaceesboutique.store udp
US 8.8.8.8:53 145.159.185.198.in-addr.arpa udp
US 8.8.8.8:53 filaussieonline.store udp
US 162.241.24.50:443 www.tusojamarineservices.org tcp
US 8.8.8.8:53 www.xintechnologybd.com udp
SG 109.106.253.182:443 www.daunnursery.shop tcp
US 162.241.85.212:443 domonku.shop tcp
US 8.8.8.8:53 hmtenterprises.store udp
US 131.153.147.186:443 linssenhomes.online tcp
US 65.181.111.122:443 thronetempleministry.org tcp
US 8.8.8.8:53 recaptcha.cloud udp
US 8.8.8.8:53 www.pasargadinsurance.life udp
US 8.8.8.8:53 boxswin.website udp
FR 162.19.86.115:80 megaelectro.shop tcp
US 8.8.8.8:53 skeeyee.website udp
NL 89.116.53.18:443 ultimatedesign.store tcp
BR 82.180.153.110:443 utilidadesvip.store tcp
US 154.56.44.146:443 vipluxurygift.store tcp
GB 153.92.6.146:443 universo-iptv.store tcp
BR 149.100.155.70:443 orabellajoias.store tcp
US 8.8.8.8:53 188.1.144.162.in-addr.arpa udp
US 8.8.8.8:53 237.29.254.173.in-addr.arpa udp
US 8.8.8.8:53 41.216.241.162.in-addr.arpa udp
US 8.8.8.8:53 146.224.241.162.in-addr.arpa udp
US 8.8.8.8:53 169.226.241.162.in-addr.arpa udp
US 8.8.8.8:53 243.222.16.104.in-addr.arpa udp
US 8.8.8.8:53 hoppyerc404.website udp
US 8.8.8.8:53 discountsales.website udp
US 8.8.8.8:53 sinataoficial.website udp
US 8.8.8.8:53 www.petoskeybaseballclub.org udp
US 8.8.8.8:53 33ride.com udp
US 8.8.8.8:53 fastshoponline.website udp
US 8.8.8.8:53 constructabuild.com udp
US 50.6.138.34:443 galpradigital.shop tcp
US 154.49.142.78:443 calidadpacatus.store tcp
GB 145.14.153.134:443 yaceesboutique.store tcp
US 195.35.39.227:443 supremabeleza.shop tcp
US 172.67.154.174:443 pay-myservice.store tcp
US 172.67.162.71:443 heillentwixtor.store tcp
GB 31.170.164.134:443 hmtenterprises.store tcp
BR 62.72.62.145:443 produtofisico.store tcp
FI 95.217.5.229:443 recaptcha.cloud tcp
FR 162.19.4.1:443 www.pasargadinsurance.life tcp
US 68.65.122.97:80 www.xintechnologybd.com tcp
US 172.241.26.27:443 filaussieonline.store tcp
US 8.8.8.8:53 cronos-thailand.com udp
US 8.8.8.8:53 cursosmaduramos.com udp
US 8.8.8.8:53 50.24.241.162.in-addr.arpa udp
US 8.8.8.8:53 212.85.241.162.in-addr.arpa udp
US 8.8.8.8:53 122.111.181.65.in-addr.arpa udp
US 8.8.8.8:53 186.147.153.131.in-addr.arpa udp
US 8.8.8.8:53 182.253.106.109.in-addr.arpa udp
US 8.8.8.8:53 115.86.19.162.in-addr.arpa udp
US 8.8.8.8:53 146.6.92.153.in-addr.arpa udp
US 8.8.8.8:53 134.153.14.145.in-addr.arpa udp
US 8.8.8.8:53 crypto24notizie.com udp
US 8.8.8.8:53 174.154.67.172.in-addr.arpa udp
US 8.8.8.8:53 71.162.67.172.in-addr.arpa udp
US 8.8.8.8:53 134.164.170.31.in-addr.arpa udp
US 8.8.8.8:53 34.138.6.50.in-addr.arpa udp
US 104.16.222.243:443 www.petoskeybaseballclub.org tcp
US 162.241.216.125:443 constructabuild.com tcp
US 192.185.217.38:443 boxswin.website tcp
US 162.241.203.231:80 discountsales.website tcp
US 192.185.213.151:443 sinataoficial.website tcp
US 50.87.146.234:443 33ride.com tcp
US 8.8.8.8:53 dangersuperhero.com udp
US 8.8.8.8:53 datawithkabshah.com udp
US 8.8.8.8:53 developersoruve.com udp
US 8.8.8.8:53 digismartglobal.com udp
US 192.254.186.133:443 hoppyerc404.website tcp
US 198.57.247.246:443 skeeyee.website tcp
US 8.8.8.8:53 digitalmarketta.com udp
US 8.8.8.8:53 digitalwebbytes.com udp
NL 209.124.66.13:443 crypto24notizie.com tcp
US 108.167.151.94:443 cursosmaduramos.com tcp
US 162.0.215.195:443 datawithkabshah.com tcp
US 162.241.253.108:443 developersoruve.com tcp
ZA 156.155.252.11:443 dangersuperhero.com tcp
US 8.8.8.8:53 domineainternet.com udp
US 8.8.8.8:53 146.44.56.154.in-addr.arpa udp
US 8.8.8.8:53 78.142.49.154.in-addr.arpa udp
US 8.8.8.8:53 110.153.180.82.in-addr.arpa udp
US 8.8.8.8:53 70.155.100.149.in-addr.arpa udp
US 8.8.8.8:53 145.62.72.62.in-addr.arpa udp
US 8.8.8.8:53 227.39.35.195.in-addr.arpa udp
US 8.8.8.8:53 229.5.217.95.in-addr.arpa udp
US 8.8.8.8:53 1.4.19.162.in-addr.arpa udp
US 8.8.8.8:53 27.26.241.172.in-addr.arpa udp
US 8.8.8.8:53 38.217.185.192.in-addr.arpa udp
US 8.8.8.8:53 231.203.241.162.in-addr.arpa udp
US 8.8.8.8:53 125.216.241.162.in-addr.arpa udp
US 8.8.8.8:53 234.146.87.50.in-addr.arpa udp
US 8.8.8.8:53 133.186.254.192.in-addr.arpa udp
US 8.8.8.8:53 246.247.57.198.in-addr.arpa udp
US 8.8.8.8:53 doorenzcreative.com udp
US 8.8.8.8:53 dottiusigaetano.com udp
US 162.241.216.155:443 digitalmarketta.com tcp
US 162.144.6.0:443 digismartglobal.com tcp
SG 18.143.6.155:443 cronos-thailand.com tcp
US 8.8.8.8:53 login.sportngin.com udp
US 8.8.8.8:53 dracintialisboa.com udp
US 8.8.8.8:53 drmervecavildak.com udp
US 8.8.8.8:53 www.dudhagrafashion.com udp
US 8.8.8.8:53 www.transcend-limits.com udp
US 8.8.8.8:53 translatekurdish.com udp
US 8.8.8.8:53 ultrabreathevzla.com udp
US 8.8.8.8:53 travelingalaskan.com udp
US 8.8.8.8:53 vendeemediagroup.com udp
US 8.8.8.8:53 vadiparkrestoran.com udp
US 8.8.8.8:53 vigilamostuhogar.com udp
US 8.8.8.8:53 13.66.124.209.in-addr.arpa udp
US 8.8.8.8:53 108.253.241.162.in-addr.arpa udp
US 8.8.8.8:53 195.215.0.162.in-addr.arpa udp
US 8.8.8.8:53 94.151.167.108.in-addr.arpa udp
US 8.8.8.8:53 155.216.241.162.in-addr.arpa udp
US 8.8.8.8:53 0.6.144.162.in-addr.arpa udp
US 8.8.8.8:53 11.252.155.156.in-addr.arpa udp
US 207.174.214.171:443 digitalwebbytes.com tcp
US 170.39.76.160:443 dirtprosoftexas.com tcp
US 108.167.169.56:443 domineainternet.com tcp
IT 185.31.66.228:80 dottiusigaetano.com tcp
SG 151.106.119.221:443 doorenzcreative.com tcp
US 104.16.222.243:443 login.sportngin.com tcp
US 8.8.8.8:53 duelingcrickets.com udp
US 8.8.8.8:53 wanderlust-story.com udp
US 8.8.8.8:53 walnuthillfarmtx.com udp
US 8.8.8.8:53 brillianthomeworktutors.com udp
US 8.8.8.8:53 cancunviptransportation.com udp
TR 104.247.162.35:443 drmervecavildak.com tcp
US 8.8.8.8:53 chiba-kameyama-glamping.com udp
US 173.252.167.20:443 vetdigitalagency.com tcp
US 216.246.46.101:443 ultrabreathevzla.com tcp
TR 45.84.190.82:443 vadiparkrestoran.com tcp
US 50.87.172.103:443 travelingalaskan.com tcp
US 45.79.171.66:443 www.dudhagrafashion.com tcp
US 8.8.8.8:53 civpetrolpumpconsultant.com udp
US 8.8.8.8:53 155.6.143.18.in-addr.arpa udp
US 162.0.215.188:443 vendeemediagroup.com tcp
US 66.235.200.147:443 translatekurdish.com tcp
US 8.8.8.8:53 casasruralesevandeabajo.com udp
US 8.8.8.8:53 celebrationkristiansand.com udp
US 8.8.8.8:53 cognitivamentecomgloria.com udp
US 8.8.8.8:53 constructorayanezguerra.com udp
US 15.197.142.173:443 duelingcrickets.com tcp
NL 209.124.66.13:443 crypto24notizie.com tcp
US 162.241.226.25:443 walnuthillfarmtx.com tcp
US 106.0.62.81:443 wanderlust-story.com tcp
US 8.8.8.8:53 abundantlifeworshipcenterny.com udp
US 8.8.8.8:53 consultoriodentalmontesinos.com udp
US 8.8.8.8:53 altunsoymuhendislikmimarlik.com udp
US 162.241.63.92:443 vigilamostuhogar.com tcp
US 8.8.8.8:53 danbridgerealestatealliance.com udp
US 172.67.147.41:443 brillianthomeworktutors.com tcp
RU 91.215.85.65:443 cancunviptransportation.com tcp
JP 163.43.140.172:443 chiba-kameyama-glamping.com tcp
NO 194.63.249.234:443 celebrationkristiansand.com tcp
ES 82.98.176.50:443 casasruralesevandeabajo.com tcp
US 8.8.8.8:53 eligarelectricsubestaciones.com udp
US 8.8.8.8:53 globalultralogisticsservice.com udp
US 8.8.8.8:53 fivestarcleaningandsupplies.com udp
US 8.8.8.8:53 apartmentsmediterraneanswing.com udp
US 8.8.8.8:53 56.169.167.108.in-addr.arpa udp
US 8.8.8.8:53 160.76.39.170.in-addr.arpa udp
US 8.8.8.8:53 171.214.174.207.in-addr.arpa udp
US 8.8.8.8:53 221.119.106.151.in-addr.arpa udp
US 8.8.8.8:53 35.162.247.104.in-addr.arpa udp
US 8.8.8.8:53 82.190.84.45.in-addr.arpa udp
US 8.8.8.8:53 66.171.79.45.in-addr.arpa udp
US 8.8.8.8:53 101.46.246.216.in-addr.arpa udp
US 8.8.8.8:53 20.167.252.173.in-addr.arpa udp
US 8.8.8.8:53 103.172.87.50.in-addr.arpa udp
US 8.8.8.8:53 188.215.0.162.in-addr.arpa udp
US 8.8.8.8:53 deertreestationeryjournaling.com udp
SG 217.21.74.62:443 civpetrolpumpconsultant.com tcp
US 8.8.8.8:53 www.djayurvedacollege-admissions.com udp
US 8.8.8.8:53 assistances-auto.fr udp
BR 154.49.247.89:443 cognitivamentecomgloria.com tcp
US 208.113.221.127:443 constructorayanezguerra.com tcp
N/A 127.0.0.1:45454 tcp
US 8.8.8.8:53 forevertogethervironandmizia.com udp
US 8.8.8.8:53 garudoverseasexportandimport.com udp
US 8.8.8.8:53 influential-writing-workshop.com udp
US 8.8.8.8:53 livingwithmentalhealthissues.com udp
US 8.8.8.8:53 www.mountwashingtonplumbingdrain.com udp
US 8.8.8.8:53 oficinajuridicacarlosmorales.com udp
US 149.100.151.13:443 abundantlifeworshipcenterny.com tcp
US 8.8.8.8:53 ouffsonadvisoryinternational.com udp
US 192.196.159.200:443 fivestarcleaningandsupplies.com tcp
US 82.180.172.83:443 globalultralogisticsservice.com tcp
TR 185.33.233.42:443 altunsoymuhendislikmimarlik.com tcp
DE 217.160.0.2:443 apartmentsmediterraneanswing.com tcp
US 198.12.219.217:80 consorcioempresarialdiamante.com tcp
US 15.197.142.173:443 danbridgerealestatealliance.com tcp
US 8.8.8.8:53 25.226.241.162.in-addr.arpa udp
US 8.8.8.8:53 81.62.0.106.in-addr.arpa udp
US 8.8.8.8:53 41.147.67.172.in-addr.arpa udp
US 8.8.8.8:53 50.176.98.82.in-addr.arpa udp
US 8.8.8.8:53 234.249.63.194.in-addr.arpa udp
US 8.8.8.8:53 65.85.215.91.in-addr.arpa udp
US 74.208.19.156:443 consultoriodentalmontesinos.com tcp
US 8.8.8.8:53 paydonconstructionmanagement.com udp
US 8.8.8.8:53 savenigeriaoilandgasindustry.com udp
ES 82.223.122.37:443 eligarelectricsubestaciones.com tcp
US 8.8.8.8:53 simplesolutionsmanagementllc.com udp
US 8.8.8.8:53 carolinaspsychiatricinstitute.com udp
FI 65.108.255.71:443 forevertogethervironandmizia.com tcp
US 207.246.109.224:443 deertreestationeryjournaling.com tcp
US 151.101.130.159:443 www.mountwashingtonplumbingdrain.com tcp
FR 51.75.96.150:443 assistances-auto.fr tcp
SG 194.163.33.125:443 garudoverseasexportandimport.com tcp
DE 217.160.0.50:443 ouffsonadvisoryinternational.com tcp
US 173.236.216.112:443 oficinajuridicacarlosmorales.com tcp
US 8.8.8.8:53 haninilimoservicesanfrancisco.com udp
US 63.250.43.138:80 influential-writing-workshop.com tcp
US 66.235.200.145:80 livingwithmentalhealthissues.com tcp
US 66.235.200.147:443 paydonconstructionmanagement.com tcp
US 162.213.253.15:443 savenigeriaoilandgasindustry.com tcp
US 8.8.8.8:53 boucherierestaurantdelamairie.com udp
US 149.100.151.215:443 carolinaspsychiatricinstitute.com tcp
US 208.109.21.124:443 haninilimoservicesanfrancisco.com tcp
DE 157.90.222.24:443 simplesolutionsmanagementllc.com tcp
US 8.8.8.8:53 mgquality-serviciosdelimpieza.com udp
FR 109.234.165.181:443 boucherierestaurantdelamairie.com tcp
US 8.8.8.8:53 172.140.43.163.in-addr.arpa udp
US 172.67.176.47:443 imunify-alert.com tcp
US 8.8.8.8:53 62.74.21.217.in-addr.arpa udp
US 8.8.8.8:53 89.247.49.154.in-addr.arpa udp
ES 217.148.136.218:443 mgquality-serviciosdelimpieza.com tcp
US 8.8.8.8:53 127.221.113.208.in-addr.arpa udp
US 8.8.8.8:53 13.151.100.149.in-addr.arpa udp
US 8.8.8.8:53 2.0.160.217.in-addr.arpa udp
US 8.8.8.8:53 200.159.196.192.in-addr.arpa udp
US 8.8.8.8:53 42.233.33.185.in-addr.arpa udp
N/A 127.0.0.1:45454 tcp
US 8.8.8.8:53 mirawallphotoboothrentals.com udp
US 8.8.8.8:53 www.phillyfivestar.comwp-login.php udp
US 8.8.8.8:53 www.lifetimemasonryandconstruction.com udp
US 8.8.8.8:53 lynncanalcleanupandrestoration.com udp
US 8.8.8.8:53 83.172.180.82.in-addr.arpa udp
US 8.8.8.8:53 156.19.208.74.in-addr.arpa udp
US 8.8.8.8:53 37.122.223.82.in-addr.arpa udp
US 8.8.8.8:53 71.255.108.65.in-addr.arpa udp
US 8.8.8.8:53 159.130.101.151.in-addr.arpa udp
US 8.8.8.8:53 150.96.75.51.in-addr.arpa udp
US 8.8.8.8:53 50.0.160.217.in-addr.arpa udp
US 8.8.8.8:53 112.216.236.173.in-addr.arpa udp
US 8.8.8.8:53 138.43.250.63.in-addr.arpa udp
US 8.8.8.8:53 125.33.163.194.in-addr.arpa udp
US 8.8.8.8:53 15.253.213.162.in-addr.arpa udp
US 8.8.8.8:53 nutricionistadayanebittencourt.com udp
US 8.8.8.8:53 professionaldependableservices.com udp
US 8.8.8.8:53 odontologiapacientesespeciales.com udp
US 8.8.8.8:53 www.oficinajuridicacarlosmorales.com udp
US 8.8.8.8:53 www.altunsoymuhendislikmimarlik.com udp
US 8.8.8.8:53 sexuelle-entwicklung.de udp
US 8.8.8.8:53 pixelvision.es udp
US 8.8.8.8:53 automatisch-einkommen-erzielen.com udp
US 8.8.8.8:53 diabetesnutritionalinformation.com udp
US 8.8.8.8:53 215.151.100.149.in-addr.arpa udp
US 8.8.8.8:53 24.222.90.157.in-addr.arpa udp
US 8.8.8.8:53 181.165.234.109.in-addr.arpa udp
US 8.8.8.8:53 218.136.148.217.in-addr.arpa udp
US 8.8.8.8:53 www.chiba-kameyama-glamping.com udp
US 137.184.148.206:443 mirawallphotoboothrentals.com tcp
US 8.8.8.8:53 affordablelocksmithstpetersburg.com udp
US 149.100.151.218:443 lynncanalcleanupandrestoration.com tcp
US 8.8.8.8:53 aljabalalaswadtechnicalservices.com udp
US 8.8.8.8:53 fredrickslawncareandsnowplowing.com udp
US 8.8.8.8:53 multitaskbusinessconsultantsltd.com udp
ES 154.56.134.174:443 proyectosdigitalesycontenidos.com tcp
JP 163.43.140.172:443 www.chiba-kameyama-glamping.com tcp
SG 45.130.228.86:443 signaturefinediningrestaurant.com tcp
US 160.153.0.181:443 professionaldependableservices.com tcp
NL 89.34.18.79:443 www.lifetimemasonryandconstruction.com tcp
ES 31.200.246.160:443 odontologiapacientesespeciales.com tcp
DE 217.160.0.90:443 pixelvision.es tcp
TR 185.33.233.42:443 www.altunsoymuhendislikmimarlik.com tcp
US 173.236.216.112:443 www.oficinajuridicacarlosmorales.com tcp
US 8.8.8.8:53 rachelseclerholisticfamilycoach.com udp
US 8.8.8.8:53 digitally-driven-ei-technologies.com udp
US 8.8.8.8:53 nisv-zertifizierungsstelle.de udp
US 8.8.8.8:53 www.celebrationkristiansand.com udp
US 8.8.8.8:53 marakinternationalstudysolutions.com udp
DE 85.13.157.218:443 sexuelle-entwicklung.de tcp
US 160.153.0.166:443 affordablelocksmithstpetersburg.com tcp
US 8.8.8.8:53 princetonfoundationrepairexperts.com udp
US 8.8.8.8:53 rivertrailcounseling4abetterlife.com udp
US 8.8.8.8:53 croquembouche-wedding-cake-israel.com udp
US 8.8.8.8:53 buildingenergyefficiencyconsulting.com udp
US 8.8.8.8:53 condominiocaminhomorrodosconventos.com udp
US 8.8.8.8:53 estudiosambientalesbloquellanos122.com udp
NO 194.63.249.234:443 www.celebrationkristiansand.com tcp
US 3.33.130.190:443 rachelseclerholisticfamilycoach.com tcp
US 148.72.122.110:80 fredrickslawncareandsnowplowing.com tcp
US 208.115.219.166:443 marakinternationalstudysolutions.com tcp
US 160.153.0.95:443 aljabalalaswadtechnicalservices.com tcp
US 8.8.8.8:53 206.148.184.137.in-addr.arpa udp
US 8.8.8.8:53 218.151.100.149.in-addr.arpa udp
US 8.8.8.8:53 181.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 79.18.34.89.in-addr.arpa udp
US 8.8.8.8:53 174.134.56.154.in-addr.arpa udp
US 8.8.8.8:53 90.0.160.217.in-addr.arpa udp
US 8.8.8.8:53 160.246.200.31.in-addr.arpa udp
US 8.8.8.8:53 218.157.13.85.in-addr.arpa udp
US 8.8.8.8:53 lexiconcertifiedtranslationcompany.com udp
US 8.8.8.8:53 www.ordineromanodimariareginadifrancia.com udp
SG 45.130.228.206:443 multitaskbusinessconsultantsltd.com tcp
US 8.8.8.8:53 to-shankelhealthcarestaffingagency.com udp
US 104.21.88.245:443 nisv-zertifizierungsstelle.de tcp
US 104.21.88.245:443 nisv-zertifizierungsstelle.de tcp
US 8.8.8.8:53 facturation-electronique-immobilier.com udp
FR 51.38.54.213:443 digitally-driven-ei-technologies.com tcp
US 8.8.8.8:53 www.constructorayanezguerra.com udp
US 8.8.8.8:53 injurypreventionexpertbonitasprings.com udp
US 8.8.8.8:53 pennmanagementhowardstowingsettlement.com udp
US 104.21.67.170:443 princetonfoundationrepairexperts.com tcp
US 31.170.166.115:443 estudiosambientalesbloquellanos122.com tcp
US 173.205.126.215:80 rivertrailcounseling4abetterlife.com tcp
CH 83.166.138.113:443 croquembouche-wedding-cake-israel.com tcp
IT 89.46.109.53:443 www.ordineromanodimariareginadifrancia.com tcp
US 160.153.0.167:443 to-shankelhealthcarestaffingagency.com tcp
GB 167.71.139.82:443 lexiconcertifiedtranslationcompany.com tcp
US 8.8.8.8:53 www.cooperativaintegralagricola-lascruces-rl.com udp
FR 46.105.73.81:443 facturation-electronique-immobilier.com tcp
ES 185.186.170.104:443 buildingenergyefficiencyconsulting.com tcp
US 8.8.8.8:53 86.228.130.45.in-addr.arpa udp
US 8.8.8.8:53 95.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 245.88.21.104.in-addr.arpa udp
US 8.8.8.8:53 166.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 166.219.115.208.in-addr.arpa udp
US 8.8.8.8:53 213.54.38.51.in-addr.arpa udp
US 8.8.8.8:53 206.228.130.45.in-addr.arpa udp
FR 92.205.146.84:443 injurypreventionexpertbonitasprings.com tcp
US 141.193.213.11:443 pennmanagementhowardstowingsettlement.com tcp
US 8.8.8.8:53 lacadosypinturasindustrialeshermanosolmedo.com udp
US 8.8.8.8:53 chatgptgenerativeaipromptengineeringcourses.com udp
US 8.8.8.8:53 davidestesdesigns.com udp
US 8.8.8.8:53 www.dazzlingfireworks.com udp
US 208.113.221.127:443 www.constructorayanezguerra.com tcp
US 8.8.8.8:53 deluxegemsfactory.com udp
US 8.8.8.8:53 diactiveconstruct.com udp
US 8.8.8.8:53 digitalshetkari11.com udp
FR 51.38.21.102:443 www.cooperativaintegralagricola-lascruces-rl.com tcp
US 8.8.8.8:53 diplom-officiallo.com udp
US 8.8.8.8:53 discountdealshere.com udp
US 8.8.8.8:53 demoraesadvogados.com udp
US 8.8.8.8:53 divyadrishtitours.com udp
US 104.21.90.44:443 www.dazzlingfireworks.com tcp
ES 134.0.10.189:443 lacadosypinturasindustrialeshermanosolmedo.com tcp
N/A 127.0.0.1:45454 tcp
US 132.148.75.197:80 chatgptgenerativeaipromptengineeringcourses.com tcp
US 8.8.8.8:53 170.67.21.104.in-addr.arpa udp
US 8.8.8.8:53 115.166.170.31.in-addr.arpa udp
US 8.8.8.8:53 215.126.205.173.in-addr.arpa udp
US 8.8.8.8:53 113.138.166.83.in-addr.arpa udp
US 8.8.8.8:53 167.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 82.139.71.167.in-addr.arpa udp
US 8.8.8.8:53 53.109.46.89.in-addr.arpa udp
US 8.8.8.8:53 81.73.105.46.in-addr.arpa udp
US 8.8.8.8:53 104.170.186.185.in-addr.arpa udp
US 8.8.8.8:53 102.21.38.51.in-addr.arpa udp
NL 5.61.51.60:80 diplom-officiallo.com tcp
NL 109.106.243.37:443 diactiveconstruct.com tcp
US 8.8.8.8:53 dominiqueandjones.com udp
US 8.8.8.8:53 dmvlicenciasegura.com udp
US 8.8.8.8:53 doncroquettemedia.com udp
IN 89.117.157.242:443 digitalshetkari11.com tcp
US 108.167.169.250:443 demoraesadvogados.com tcp
US 8.8.8.8:53 douglasilvastudio.com udp
US 8.8.8.8:53 duffeylandscaping.com udp
NL 89.116.153.90:443 deluxegemsfactory.com tcp
US 50.87.253.20:443 davidestesdesigns.com tcp
US 104.21.62.139:443 distortionstudioz.com tcp
US 192.185.129.44:80 divyadrishtitours.com tcp
US 8.8.8.8:53 domagoj-starcevic.com udp
US 8.8.8.8:53 eagleelectricalwa.com udp
US 8.8.8.8:53 elherreratatuador.com udp
US 8.8.8.8:53 electrohqlighting.com udp
US 8.8.8.8:53 ellevateandthrive.com udp
US 8.8.8.8:53 encoreeventrental.com udp
US 8.8.8.8:53 epoxytechsolution.com udp
US 8.8.8.8:53 epreuvescorrigees.com udp
US 8.8.8.8:53 44.90.21.104.in-addr.arpa udp
US 8.8.8.8:53 189.10.0.134.in-addr.arpa udp
US 8.8.8.8:53 prakashutsavmedia.com udp
US 8.8.8.8:53 profgeovaneklipel.com udp
US 50.115.46.18:443 dominiqueandjones.com tcp
US 162.241.216.161:443 electrohqlighting.com tcp
US 44.224.220.114:443 duffeylandscaping.com tcp
US 92.204.129.123:443 eagleelectricalwa.com tcp
US 217.196.54.153:443 dmvlicenciasegura.com tcp
US 162.241.226.109:443 ellevateandthrive.com tcp
US 108.167.142.231:443 elherreratatuador.com tcp
US 194.195.84.74:443 douglasilvastudio.com tcp
US 162.241.217.207:443 encoreeventrental.com tcp
US 8.8.8.8:53 powergreen-france.com udp
FR 154.49.245.38:443 epreuvescorrigees.com tcp
US 70.40.220.182:443 domagoj-starcevic.com tcp
US 8.8.8.8:53 propfieldrealtors.com udp
US 8.8.8.8:53 www.proporreeproporsi.com udp
IN 103.152.79.182:443 doncroquettemedia.com tcp
FI 65.108.122.245:443 epoxytechsolution.com tcp
US 8.8.8.8:53 60.51.61.5.in-addr.arpa udp
US 8.8.8.8:53 37.243.106.109.in-addr.arpa udp
US 8.8.8.8:53 242.157.117.89.in-addr.arpa udp
US 8.8.8.8:53 250.169.167.108.in-addr.arpa udp
US 8.8.8.8:53 139.62.21.104.in-addr.arpa udp
US 8.8.8.8:53 90.153.116.89.in-addr.arpa udp
US 8.8.8.8:53 20.253.87.50.in-addr.arpa udp
US 8.8.8.8:53 44.129.185.192.in-addr.arpa udp
US 8.8.8.8:53 18.46.115.50.in-addr.arpa udp
US 8.8.8.8:53 protocolozbarriga.com udp
US 8.8.8.8:53 pumiceautoparking.com udp
US 8.8.8.8:53 www.quiropraxiamanaus.com udp
US 8.8.8.8:53 www.lacadosypinturasindustrialeshermanosolmedo.com udp
US 64.251.1.115:443 profgeovaneklipel.com tcp
FI 95.217.5.229:443 recaptcha.cloud tcp
FR 213.186.33.5:443 www.proporreeproporsi.com tcp
US 173.236.192.115:443 prakashutsavmedia.com tcp
SG 194.233.69.85:443 propfieldrealtors.com tcp
US 154.49.142.29:443 powergreen-france.com tcp
US 8.8.8.8:53 rakinteriordesign.com udp
US 8.8.8.8:53 crucialpointagency.com udp
US 8.8.8.8:53 recoverywalletbtc.com udp
US 31.170.163.96:443 www.quiropraxiamanaus.com tcp
US 8.8.8.8:53 redmondhousepaint.com udp
US 8.8.8.8:53 renouvelleestetic.com udp
US 8.8.8.8:53 respirofragrances.com udp
US 8.8.8.8:53 rentassistprogram.com udp
US 8.8.8.8:53 revealerhighspeed.com udp
US 8.8.8.8:53 rhc80267inhibitor.com udp
US 8.8.8.8:53 roddesignandbuild.com udp
US 8.8.8.8:53 ronanmartindesign.com udp
US 8.8.8.8:53 reedelitetraining.com udp
US 8.8.8.8:53 rootedsoulscircle.com udp
US 8.8.8.8:53 123.129.204.92.in-addr.arpa udp
US 8.8.8.8:53 161.216.241.162.in-addr.arpa udp
US 8.8.8.8:53 109.226.241.162.in-addr.arpa udp
US 8.8.8.8:53 231.142.167.108.in-addr.arpa udp
US 8.8.8.8:53 207.217.241.162.in-addr.arpa udp
US 8.8.8.8:53 153.54.196.217.in-addr.arpa udp
US 8.8.8.8:53 74.84.195.194.in-addr.arpa udp
US 8.8.8.8:53 114.220.224.44.in-addr.arpa udp
US 8.8.8.8:53 38.245.49.154.in-addr.arpa udp
US 8.8.8.8:53 182.220.40.70.in-addr.arpa udp
US 8.8.8.8:53 245.122.108.65.in-addr.arpa udp
US 8.8.8.8:53 115.1.251.64.in-addr.arpa udp
ES 134.0.10.189:443 www.lacadosypinturasindustrialeshermanosolmedo.com tcp
IN 69.57.172.21:443 pumiceautoparking.com tcp
US 104.21.33.93:443 protocolozbarriga.com tcp
US 160.153.0.144:443 crucialpointagency.com tcp
DE 116.203.126.233:443 rakinteriordesign.com tcp
US 8.8.8.8:53 rosane-de-andrade.com udp
US 8.8.8.8:53 royalbruckeenergy.com udp
US 8.8.8.8:53 royaltilesjodhpur.com udp
GB 145.14.152.147:443 rootedsoulscircle.com tcp
US 173.236.154.175:443 renouvelleestetic.com tcp
US 8.8.8.8:53 rudymelendezforla.com udp
US 8.8.8.8:53 safaristaholidays.com udp
US 154.56.45.32:443 respirofragrances.com tcp
GB 154.49.138.35:443 roddesignandbuild.com tcp
DE 217.160.238.60:443 ronanmartindesign.com tcp
US 104.21.6.21:443 rhc80267inhibitor.com tcp
US 45.84.120.170:443 rentassistprogram.com tcp
US 72.167.100.57:443 redmondhousepaint.com tcp
US 47.88.55.141:443 revealerhighspeed.com tcp
US 8.8.8.8:53 sahelfootballclub.com udp
US 8.8.8.8:53 satyadentalclinic.com udp
US 8.8.8.8:53 sansanacreaciones.com udp
US 172.67.176.47:443 imunify-alert.com tcp
US 8.8.8.8:53 115.192.236.173.in-addr.arpa udp
US 8.8.8.8:53 29.142.49.154.in-addr.arpa udp
US 8.8.8.8:53 85.69.233.194.in-addr.arpa udp
US 8.8.8.8:53 96.163.170.31.in-addr.arpa udp
US 8.8.8.8:53 93.33.21.104.in-addr.arpa udp
US 8.8.8.8:53 21.172.57.69.in-addr.arpa udp
US 160.153.0.123:443 reedelitetraining.com tcp
US 8.8.8.8:53 www.aprettycoolhoteltour.com udp
US 8.8.8.8:53 www.scholaraeducation.com udp
US 8.8.8.8:53 schoolgirlsplanet.com udp
US 162.240.74.112:443 rudymelendezforla.com tcp
FR 83.229.19.78:443 rosane-de-andrade.com tcp
US 8.8.8.8:53 sculptingbydesign.com udp
US 8.8.8.8:53 segurodentalpymes.com udp
US 160.153.0.30:443 sansanacreaciones.com tcp
US 160.153.0.41:443 safaristaholidays.com tcp
US 185.212.71.188:443 royalbruckeenergy.com tcp
US 8.8.8.8:53 segurodentalsalud.com udp
US 8.8.8.8:53 selfishclothingco.com udp
DE 142.132.255.53:443 royaltilesjodhpur.com tcp
IN 86.38.243.162:443 satyadentalclinic.com tcp
US 8.8.8.8:53 www.seminariocatering.com udp
US 8.8.8.8:53 shahzadtradersllc.com udp
US 8.8.8.8:53 shakilaguesthouse.com udp
US 8.8.8.8:53 shantanuchemicals.com udp
US 8.8.8.8:53 shirine-livraison.com udp
FR 185.221.182.133:443 sahelfootballclub.com tcp
US 193.160.64.79:443 www.aprettycoolhoteltour.com tcp
FR 212.83.171.70:443 segurodentalsalud.com tcp
US 8.8.8.8:53 144.0.153.160.in-addr.arpa udp
US 151.101.194.159:443 sculptingbydesign.com tcp
US 104.21.45.44:443 schoolgirlsplanet.com tcp
DE 162.55.100.32:443 shantanuchemicals.com tcp
US 185.28.21.126:443 shakilaguesthouse.com tcp
FR 212.83.171.70:443 segurodentalsalud.com tcp
US 216.246.47.149:443 www.seminariocatering.com tcp
FR 154.49.245.160:443 shirine-livraison.com tcp
US 3.133.181.81:443 selfishclothingco.com tcp
US 8.8.8.8:53 233.126.203.116.in-addr.arpa udp
US 170.39.76.102:443 www.scholaraeducation.com tcp
US 86.38.202.111:443 shahzadtradersllc.com tcp
US 8.8.8.8:53 147.152.14.145.in-addr.arpa udp
US 8.8.8.8:53 21.6.21.104.in-addr.arpa udp
US 8.8.8.8:53 35.138.49.154.in-addr.arpa udp
US 8.8.8.8:53 60.238.160.217.in-addr.arpa udp
US 8.8.8.8:53 175.154.236.173.in-addr.arpa udp
US 8.8.8.8:53 170.120.84.45.in-addr.arpa udp
US 8.8.8.8:53 32.45.56.154.in-addr.arpa udp
US 8.8.8.8:53 141.55.88.47.in-addr.arpa udp
US 8.8.8.8:53 123.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 www.roddesignandbuild.com udp
US 8.8.8.8:53 shlprodutodigital.com udp
US 8.8.8.8:53 showmastersglobal.com udp
US 8.8.8.8:53 shrikunjcomputers.com udp
US 8.8.8.8:53 sitiofacilyrapido.com udp
US 8.8.8.8:53 slayingboundaries.com udp
US 8.8.8.8:53 slumbersoftpillow.com udp
US 8.8.8.8:53 smartaquaservices.com udp
US 8.8.8.8:53 smart-premiumiptv.com udp
US 8.8.8.8:53 socaloceanfishing.com udp
US 8.8.8.8:53 www.snackberryvending.com udp
US 8.8.8.8:53 www.revealerhighspeed.com udp
US 8.8.8.8:53 78.19.229.83.in-addr.arpa udp
US 8.8.8.8:53 30.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 41.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 53.255.132.142.in-addr.arpa udp
US 8.8.8.8:53 133.182.221.185.in-addr.arpa udp
US 8.8.8.8:53 188.71.212.185.in-addr.arpa udp
US 8.8.8.8:53 162.243.38.86.in-addr.arpa udp
US 8.8.8.8:53 soluciones-sofiwp.com udp
US 8.8.8.8:53 sotabosccalarenys.com udp
US 8.8.8.8:53 southernsoireechs.com udp
US 8.8.8.8:53 southossetiaworld.com udp
US 8.8.8.8:53 sparklingtreasurs.com udp
US 8.8.8.8:53 spiceislerealtors.com udp
US 8.8.8.8:53 staffingdelivered.com udp
US 8.8.8.8:53 79.64.160.193.in-addr.arpa udp
US 8.8.8.8:53 70.171.83.212.in-addr.arpa udp
US 8.8.8.8:53 159.194.101.151.in-addr.arpa udp
US 8.8.8.8:53 44.45.21.104.in-addr.arpa udp
US 8.8.8.8:53 160.245.49.154.in-addr.arpa udp
US 8.8.8.8:53 32.100.55.162.in-addr.arpa udp
US 8.8.8.8:53 102.76.39.170.in-addr.arpa udp
US 8.8.8.8:53 111.202.38.86.in-addr.arpa udp
US 8.8.8.8:53 www.statesidemangoods.com udp
US 172.67.176.47:443 imunify-alert.com tcp
US 8.8.8.8:53 www.stmichaelslegione.com udp
US 8.8.8.8:53 aprettycoolhoteltour.com udp
US 172.67.176.47:443 imunify-alert.com tcp
US 160.153.0.144:443 crucialpointagency.com tcp
US 104.21.15.3:443 slumbersoftpillow.com tcp
GB 145.14.152.64:443 smart-premiumiptv.com tcp
US 198.252.106.172:443 soluciones-sofiwp.com tcp
US 162.159.137.9:443 sotabosccalarenys.com tcp
FR 92.205.14.36:443 www.snackberryvending.com tcp
LT 84.32.84.32:443 shrikunjcomputers.com tcp
GB 154.49.138.161:443 www.roddesignandbuild.com tcp
US 151.106.106.140:443 showmastersglobal.com tcp
US 86.38.202.187:443 sitiofacilyrapido.com tcp
GB 185.77.97.217:443 smartaquaservices.com tcp
BR 154.49.247.139:443 shlprodutodigital.com tcp
US 47.88.55.141:443 www.revealerhighspeed.com tcp
US 198.143.128.25:443 socaloceanfishing.com tcp
US 149.100.151.101:443 spiceislerealtors.com tcp
US 141.193.213.10:443 staffingdelivered.com tcp
US 104.21.42.185:443 southossetiaworld.com tcp
US 172.67.151.82:443 sparklingtreasurs.com tcp
US 8.8.8.8:53 studiotechmasters.com udp
US 8.8.8.8:53 stylecraftbarbers.com udp
US 146.190.78.211:443 southernsoireechs.com tcp
US 8.8.8.8:53 sunshinefloristry.com udp
US 8.8.8.8:53 126.21.28.185.in-addr.arpa udp
US 8.8.8.8:53 81.181.133.3.in-addr.arpa udp
US 8.8.8.8:53 149.47.246.216.in-addr.arpa udp
US 8.8.8.8:53 3.173.189.20.in-addr.arpa udp
NO 104.37.38.114:443 www.stmichaelslegione.com tcp
US 8.8.8.8:53 surronbikeforsale.com udp
US 193.160.64.79:443 aprettycoolhoteltour.com tcp
US 8.8.8.8:53 tadbirsazan-group.com udp
US 8.8.8.8:53 www.tatianasantamaria.com udp
US 8.8.8.8:53 techtrendsexplore.com udp
US 104.21.79.179:443 stylecraftbarbers.com tcp
GB 154.49.138.214:443 studiotechmasters.com tcp
JP 133.167.86.244:80 www.statesidemangoods.com tcp
US 8.8.8.8:53 taxidienmientrung.vn udp
US 44.208.201.167:443 sunshinefloristry.com tcp
US 8.8.8.8:53 thairednewsonline.com udp
US 8.8.8.8:53 thebestpriceboxes.com udp
US 8.8.8.8:53 thebesttennisever.com udp
US 8.8.8.8:53 thecreatorstalent.com udp
US 8.8.8.8:53 thecybervalkyries.com udp
US 8.8.8.8:53 theempireindustry.com udp
IR 45.149.76.60:443 tadbirsazan-group.com tcp
FR 154.56.32.99:443 surronbikeforsale.com tcp
US 8.8.8.8:53 3.15.21.104.in-addr.arpa udp
US 8.8.8.8:53 9.137.159.162.in-addr.arpa udp
US 8.8.8.8:53 185.42.21.104.in-addr.arpa udp
US 8.8.8.8:53 82.151.67.172.in-addr.arpa udp
US 8.8.8.8:53 64.152.14.145.in-addr.arpa udp
US 8.8.8.8:53 161.138.49.154.in-addr.arpa udp
US 8.8.8.8:53 217.97.77.185.in-addr.arpa udp
US 8.8.8.8:53 140.106.106.151.in-addr.arpa udp
US 8.8.8.8:53 187.202.38.86.in-addr.arpa udp
US 8.8.8.8:53 172.106.252.198.in-addr.arpa udp
US 8.8.8.8:53 101.151.100.149.in-addr.arpa udp
US 8.8.8.8:53 25.128.143.198.in-addr.arpa udp
US 8.8.8.8:53 139.247.49.154.in-addr.arpa udp
US 8.8.8.8:53 211.78.190.146.in-addr.arpa udp
US 8.8.8.8:53 114.38.37.104.in-addr.arpa udp
US 8.8.8.8:53 179.79.21.104.in-addr.arpa udp
US 8.8.8.8:53 214.138.49.154.in-addr.arpa udp
US 8.8.8.8:53 www.slumbersoftpillow.com udp
US 170.39.76.102:443 www.scholaraeducation.com tcp
GB 206.189.16.19:443 techtrendsexplore.com tcp
ES 31.214.178.62:80 www.tatianasantamaria.com tcp
US 8.8.8.8:53 therealrenovation.com udp
US 8.8.8.8:53 theexpatcommunity.com udp
CZ 46.28.106.192:443 thecybervalkyries.com tcp
US 205.251.137.90:443 thebestpriceboxes.com tcp
US 107.180.41.154:443 thebesttennisever.com tcp
US 172.67.188.42:443 thairednewsonline.com tcp
IN 139.59.75.56:443 thecreatorstalent.com tcp
IN 62.72.28.59:80 theempireindustry.com tcp
US 8.8.8.8:53 bcbcompagnie.com udp
US 104.21.15.3:443 www.slumbersoftpillow.com tcp
US 8.8.8.8:53 besttop5to15.com udp
US 8.8.8.8:53 biharkavikas.com udp
US 8.8.8.8:53 bikelifeclub.com udp
SG 165.232.167.213:443 taxidienmientrung.vn tcp
US 199.189.224.82:443 therealrenovation.com tcp
US 8.8.8.8:53 bildtolkning.com udp
US 8.8.8.8:53 bisnisplanmu.com udp
US 104.18.153.16:443 theexpatcommunity.com tcp
US 8.8.8.8:53 167.201.208.44.in-addr.arpa udp
US 8.8.8.8:53 244.86.167.133.in-addr.arpa udp
US 8.8.8.8:53 99.32.56.154.in-addr.arpa udp
US 8.8.8.8:53 19.16.189.206.in-addr.arpa udp
US 8.8.8.8:53 60.76.149.45.in-addr.arpa udp
US 8.8.8.8:53 90.137.251.205.in-addr.arpa udp
US 8.8.8.8:53 62.178.214.31.in-addr.arpa udp
US 8.8.8.8:53 42.188.67.172.in-addr.arpa udp
US 154.56.47.114:443 bcbcompagnie.com tcp
US 3.33.152.147:443 danbridgerealestatealliance.com tcp
US 217.196.54.107:443 biharkavikas.com tcp
US 149.100.151.218:443 besttop5to15.com tcp
US 8.8.8.8:53 bmasouthside.com udp
US 8.8.8.8:53 bobtherabbit.com udp
US 8.8.8.8:53 boutiqbeauty.com udp
US 34.120.137.41:443 bikelifeclub.com tcp
US 8.8.8.8:53 www.boxes-of-joy.com udp
US 8.8.8.8:53 buildabartop.com udp
US 8.8.8.8:53 breathingrio.com udp
US 8.8.8.8:53 cenarioativo.com udp
US 8.8.8.8:53 chancreators.com udp
NL 195.245.112.239:443 bildtolkning.com tcp
US 8.8.8.8:53 chartsamurai.com udp
US 8.8.8.8:53 chicagoviral.com udp
US 8.8.8.8:53 www.chrisgovella.me udp
US 104.21.20.11:443 bisnisplanmu.com tcp
US 8.8.8.8:53 56.75.59.139.in-addr.arpa udp
US 8.8.8.8:53 59.28.72.62.in-addr.arpa udp
US 8.8.8.8:53 16.153.18.104.in-addr.arpa udp
US 8.8.8.8:53 213.167.232.165.in-addr.arpa udp
US 8.8.8.8:53 41.137.120.34.in-addr.arpa udp
US 8.8.8.8:53 114.47.56.154.in-addr.arpa udp
US 8.8.8.8:53 82.224.189.199.in-addr.arpa udp
US 8.8.8.8:53 107.54.196.217.in-addr.arpa udp
US 172.67.199.224:443 cenarioativo.com tcp
AT 81.19.159.75:443 www.boxes-of-joy.com tcp
GB 185.77.97.123:443 bmasouthside.com tcp
IN 62.72.28.59:443 theempireindustry.com tcp
US 108.179.253.239:443 breathingrio.com tcp
IN 154.41.233.156:443 chancreators.com tcp
US 170.249.202.58:443 burntmuffins.com tcp
US 104.21.80.69:443 boutiqbeauty.com tcp
US 104.21.3.89:443 bobtherabbit.com tcp
US 172.67.179.241:443 chicagoviral.com tcp
US 192.185.93.106:443 buildabartop.com tcp
US 173.255.215.92:443 www.chrisgovella.me tcp
US 8.8.8.8:53 www.renouvelleestetic.com udp
US 8.8.8.8:53 ciremaistore.com udp
US 8.8.8.8:53 www.thecreatorstalent.com udp
US 63.250.43.7:443 chartsamurai.com tcp
US 8.8.8.8:53 www.compareitpro.com udp
US 8.8.8.8:53 compra0nline.com udp
IN 139.59.75.56:443 www.thecreatorstalent.com tcp
US 8.8.8.8:53 convert-webp.com udp
US 8.8.8.8:53 content4blog.com udp
US 8.8.8.8:53 www.costeconcept.com udp
US 8.8.8.8:53 11.20.21.104.in-addr.arpa udp
US 8.8.8.8:53 224.199.67.172.in-addr.arpa udp
US 8.8.8.8:53 123.97.77.185.in-addr.arpa udp
US 8.8.8.8:53 75.159.19.81.in-addr.arpa udp
US 8.8.8.8:53 69.80.21.104.in-addr.arpa udp
US 8.8.8.8:53 89.3.21.104.in-addr.arpa udp
US 8.8.8.8:53 241.179.67.172.in-addr.arpa udp
US 8.8.8.8:53 58.202.249.170.in-addr.arpa udp
US 8.8.8.8:53 239.253.179.108.in-addr.arpa udp
US 8.8.8.8:53 156.233.41.154.in-addr.arpa udp
US 8.8.8.8:53 106.93.185.192.in-addr.arpa udp
SG 156.67.222.36:443 ciremaistore.com tcp
US 3.33.152.147:443 danbridgerealestatealliance.com tcp
US 173.236.154.175:443 www.renouvelleestetic.com tcp
US 8.8.8.8:53 creating-ads.com udp
US 8.8.8.8:53 creativanpad.com udp
US 8.8.8.8:53 creative-sun.com udp
US 8.8.8.8:53 crossfitplum.com udp
US 8.8.8.8:53 curtainsidea.com udp
US 8.8.8.8:53 cutepetsinfo.com udp
US 8.8.8.8:53 dadsdailywow.com udp
US 8.8.8.8:53 danimalscave.com udp
US 8.8.8.8:53 dalatberries.com udp
US 8.8.8.8:53 darkrmschool.com udp
FR 109.234.164.92:443 www.costeconcept.com tcp
US 160.153.0.143:443 www.compareitpro.com tcp
BR 154.49.247.238:443 compra0nline.com tcp
US 172.67.212.40:443 content4blog.com tcp
US 172.67.168.2:443 convert-webp.com tcp
GB 145.14.153.172:443 creative-sun.com tcp
US 74.208.224.142:443 creating-ads.com tcp
US 154.56.47.29:443 curtainsidea.com tcp
FR 51.91.236.193:443 crossfitplum.com tcp
US 8.8.8.8:53 7.43.250.63.in-addr.arpa udp
US 8.8.8.8:53 crazecarcare.com udp
IN 154.41.233.188:443 creativanpad.com tcp
US 8.8.8.8:53 darmanehdard.com udp
US 8.8.8.8:53 dayboi-hanoi.com udp
US 8.8.8.8:53 dekoshonline.com udp
US 8.8.8.8:53 depotterhead.com udp
US 195.179.238.66:443 cutepetsinfo.com tcp
US 50.6.138.149:443 darkrmschool.com tcp
US 8.8.8.8:53 derekbuccasi.com udp
US 172.67.168.200:443 dadsdailywow.com tcp
IN 89.117.157.151:443 danimalscave.com tcp
SG 217.21.73.243:443 dalatberries.com tcp
US 8.8.8.8:53 digitalneetu.com udp
IN 217.21.94.189:443 crazecarcare.com tcp
IR 194.147.142.116:80 darmanehdard.com tcp
US 8.8.8.8:53 dukungbisnis.com udp
LT 84.32.84.32:443 derekbuccasi.com tcp
GB 154.49.138.174:443 digitalcinta.com tcp
SG 156.67.222.6:443 dekoshonline.com tcp
VN 103.74.118.169:443 dayboi-hanoi.com tcp
US 8.8.8.8:53 djdownloader.com udp
IN 154.41.233.142:443 digitalneetu.com tcp
ID 153.92.13.212:443 dukungbisnis.com tcp
US 8.8.8.8:53 36.222.67.156.in-addr.arpa udp
US 104.21.33.213:443 djdownloader.com tcp
US 8.8.8.8:53 143.0.153.160.in-addr.arpa udp
DE 94.130.223.106:443 earnwithjitu.com tcp
US 8.8.8.8:53 2.168.67.172.in-addr.arpa udp
DE 148.251.106.20:443 www.ecom-booster.com tcp
US 8.8.8.8:53 40.212.67.172.in-addr.arpa udp
US 8.8.8.8:53 172.153.14.145.in-addr.arpa udp
US 8.8.8.8:53 193.236.91.51.in-addr.arpa udp
US 8.8.8.8:53 142.224.208.74.in-addr.arpa udp
US 8.8.8.8:53 188.233.41.154.in-addr.arpa udp
US 8.8.8.8:53 29.47.56.154.in-addr.arpa udp
US 8.8.8.8:53 200.168.67.172.in-addr.arpa udp
US 8.8.8.8:53 238.247.49.154.in-addr.arpa udp
US 8.8.8.8:53 66.238.179.195.in-addr.arpa udp
US 8.8.8.8:53 149.138.6.50.in-addr.arpa udp
US 8.8.8.8:53 151.157.117.89.in-addr.arpa udp
US 8.8.8.8:53 economaxshop.com udp
US 8.8.8.8:53 edensgiftbox.com udp
US 8.8.8.8:53 edybutikhali.com udp
US 8.8.8.8:53 elektrikci06.com udp
US 8.8.8.8:53 elitecodesom.com udp
US 8.8.8.8:53 elmadamarble.com udp
US 8.8.8.8:53 emilicensing.com udp
US 8.8.8.8:53 enrvacations.com udp
US 8.8.8.8:53 expatstories.lu udp
US 8.8.8.8:53 243.73.21.217.in-addr.arpa udp
US 8.8.8.8:53 174.138.49.154.in-addr.arpa udp
US 8.8.8.8:53 116.142.147.194.in-addr.arpa udp
US 8.8.8.8:53 169.118.74.103.in-addr.arpa udp
US 8.8.8.8:53 famousscenes.com udp
US 8.8.8.8:53 fashionhub01.com udp
US 8.8.8.8:53 famevolution.com udp
US 8.8.8.8:53 fitnessigolf.com udp
US 8.8.8.8:53 fleximaderas.com udp
US 8.8.8.8:53 fullbilletes.com udp
US 8.8.8.8:53 fmovieswatch.com udp
US 8.8.8.8:53 gadzetwizard.com udp
US 8.8.8.8:53 fundamantial.com udp
US 8.8.8.8:53 gangaarcadia.com udp
US 8.8.8.8:53 geodetaradom.com udp
US 8.8.8.8:53 getsmarthubs.com udp
US 8.8.8.8:53 213.33.21.104.in-addr.arpa udp
US 8.8.8.8:53 212.13.92.153.in-addr.arpa udp
US 8.8.8.8:53 106.223.130.94.in-addr.arpa udp
US 8.8.8.8:53 20.106.251.148.in-addr.arpa udp
US 8.8.8.8:53 gfirstglobal.com udp
FR 92.222.85.231:443 expatstories.lu tcp
US 172.67.176.47:443 imunify-alert.com tcp
US 8.8.8.8:53 ghccargoperu.com udp
US 63.250.43.4:443 elitecodesom.com tcp
US 172.67.131.174:443 famewhispers.com tcp
US 172.67.186.222:443 firelucky999.com tcp
US 104.21.55.154:443 famousscenes.com tcp
SG 139.59.249.98:443 fitnessigolf.com tcp
DE 217.160.0.100:443 edensgiftbox.com tcp
US 63.250.43.16:443 imanifestloa.com tcp
DE 148.251.91.91:443 elmadamarble.com tcp
US 8.8.8.8:53 gkyjobresult.com udp
US 8.8.8.8:53 glamoravogue.com udp
ES 86.109.178.114:443 fleximaderas.com tcp
LT 84.32.84.32:443 famevolution.com tcp
IN 89.117.157.40:443 fmovieswatch.com tcp
FR 89.117.169.83:443 fullbilletes.com tcp
US 149.100.151.222:443 gadzetwizard.com tcp
IN 154.41.233.75:443 fashionhub01.com tcp
NL 191.96.63.147:443 economaxshop.com tcp
US 89.117.139.91:443 fundamantial.com tcp
US 23.231.1.8:443 enrvacations.com tcp
CA 216.170.124.5:443 emilicensing.com tcp
PL 185.208.164.37:443 geodetaradom.com tcp
TR 104.247.167.67:80 edybutikhali.com tcp
IN 43.230.201.142:443 gangaarcadia.com tcp
GB 185.77.97.33:443 getsmarthubs.com tcp
US 8.8.8.8:53 globberindia.com udp
TR 194.87.188.227:443 elektrikci06.com tcp
DE 135.125.230.200:443 gfirstglobal.com tcp
US 8.8.8.8:53 globeofmedia.com udp
US 104.21.13.108:443 ghccargoperu.com tcp
US 8.8.8.8:53 gloridigital.com udp
US 8.8.8.8:53 goweddingday.com udp
US 216.239.34.21:443 gkyjobresult.com tcp
IN 178.16.136.241:443 globberindia.com tcp
US 89.117.139.96:443 glamoravogue.com tcp
US 8.8.8.8:53 graphicashop.com udp
US 8.8.8.8:53 grupodelfran.com udp
US 8.8.8.8:53 gtrendingnow.com udp
PL 146.59.70.127:443 globeofmedia.com tcp
US 8.8.8.8:53 h-l-projects.com udp
US 8.8.8.8:53 231.85.222.92.in-addr.arpa udp
US 8.8.8.8:53 174.131.67.172.in-addr.arpa udp
US 8.8.8.8:53 222.186.67.172.in-addr.arpa udp
US 8.8.8.8:53 154.55.21.104.in-addr.arpa udp
US 8.8.8.8:53 83.169.117.89.in-addr.arpa udp
US 8.8.8.8:53 33.97.77.185.in-addr.arpa udp
US 8.8.8.8:53 147.63.96.191.in-addr.arpa udp
US 8.8.8.8:53 100.0.160.217.in-addr.arpa udp
US 8.8.8.8:53 114.178.109.86.in-addr.arpa udp
US 8.8.8.8:53 37.164.208.185.in-addr.arpa udp
US 8.8.8.8:53 67.167.247.104.in-addr.arpa udp
US 8.8.8.8:53 227.188.87.194.in-addr.arpa udp
US 8.8.8.8:53 5.124.170.216.in-addr.arpa udp
US 8.8.8.8:53 8.1.231.23.in-addr.arpa udp
US 8.8.8.8:53 75.233.41.154.in-addr.arpa udp
US 8.8.8.8:53 40.157.117.89.in-addr.arpa udp
US 8.8.8.8:53 91.139.117.89.in-addr.arpa udp
US 8.8.8.8:53 222.151.100.149.in-addr.arpa udp
US 8.8.8.8:53 142.201.230.43.in-addr.arpa udp
US 8.8.8.8:53 16.43.250.63.in-addr.arpa udp
US 8.8.8.8:53 4.43.250.63.in-addr.arpa udp
US 8.8.8.8:53 98.249.59.139.in-addr.arpa udp
US 8.8.8.8:53 200.230.125.135.in-addr.arpa udp
BR 154.49.247.172:443 grupodelfran.com tcp
US 104.21.57.223:80 www.gorrioncomun.com tcp
RU 5.42.64.63:80 golentovskij.com tcp
US 8.8.8.8:53 hanahdiamond.com udp
US 8.8.8.8:53 hanahjewelry.com udp
US 8.8.8.8:53 harmonicidea.com udp
US 8.8.8.8:53 www.gkyjobresult.com udp
SG 156.67.222.70:443 gloridigital.com tcp
US 44.217.216.136:443 goweddingday.com tcp
SG 103.231.191.46:443 graphicashop.com tcp
FR 89.117.169.4:443 h-l-projects.com tcp
LT 84.32.84.32:443 gtrendingnow.com tcp
US 8.8.8.8:53 hockeyglider.com udp
US 8.8.8.8:53 hornerracing.com udp
US 8.8.8.8:53 www.fleximaderas.com udp
US 198.23.48.24:80 hanahdiamond.com tcp
US 162.210.96.118:80 hanahjewelry.com tcp
US 8.8.8.8:53 www.huellasbrand.com udp
US 8.8.8.8:53 21.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 127.70.59.146.in-addr.arpa udp
US 8.8.8.8:53 241.136.16.178.in-addr.arpa udp
US 8.8.8.8:53 96.139.117.89.in-addr.arpa udp
US 8.8.8.8:53 223.57.21.104.in-addr.arpa udp
US 8.8.8.8:53 4.169.117.89.in-addr.arpa udp
US 8.8.8.8:53 63.64.42.5.in-addr.arpa udp
IR 185.159.153.58:80 harmonicidea.com tcp
IE 74.125.193.121:443 www.gkyjobresult.com tcp
ES 86.109.178.114:443 www.fleximaderas.com tcp
SG 139.59.226.216:443 harrychoblog.com tcp
US 104.21.12.164:443 hockeyglider.com tcp
US 8.8.8.8:53 idialsociety.com udp
US 8.8.8.8:53 iftysfashion.com udp
US 8.8.8.8:53 imacodezilla.com udp
US 8.8.8.8:53 indiasunchem.com udp
AU 103.16.129.85:80 hornerracing.com tcp
US 8.8.8.8:53 indonewsline.com udp
FR 176.31.1.233:443 www.huellasbrand.com tcp
US 217.196.55.114:443 housevarious.com tcp
US 8.8.8.8:53 innsofafrica.com udp
US 66.235.200.113:443 iftysfashion.com tcp
IN 154.41.233.20:443 indiasunchem.com tcp
IN 154.41.233.130:443 idialsociety.com tcp
GB 18.170.183.255:80 imacodezilla.com tcp
US 8.8.8.8:53 172.247.49.154.in-addr.arpa udp
US 8.8.8.8:53 46.191.231.103.in-addr.arpa udp
US 8.8.8.8:53 70.222.67.156.in-addr.arpa udp
US 8.8.8.8:53 164.12.21.104.in-addr.arpa udp
US 8.8.8.8:53 24.48.23.198.in-addr.arpa udp
US 8.8.8.8:53 118.96.210.162.in-addr.arpa udp
US 8.8.8.8:53 58.153.159.185.in-addr.arpa udp
US 8.8.8.8:53 216.226.59.139.in-addr.arpa udp
US 8.8.8.8:53 www.ghccargoperu.com udp
US 63.250.43.16:80 imanifestloa.com tcp
US 8.8.8.8:53 www.firelucky999.com udp
ID 153.92.13.250:443 indonewsline.com tcp
US 172.67.191.105:443 sashimi-sp.com tcp
US 172.67.155.63:443 innsofafrica.com tcp
US 172.67.199.215:443 www.ghccargoperu.com tcp
US 104.21.68.52:443 www.firelucky999.com tcp
US 8.8.8.8:53 239.112.245.195.in-addr.arpa udp
US 8.8.8.8:53 233.1.31.176.in-addr.arpa udp
US 8.8.8.8:53 114.55.196.217.in-addr.arpa udp
US 8.8.8.8:53 85.129.16.103.in-addr.arpa udp
US 8.8.8.8:53 20.233.41.154.in-addr.arpa udp
US 8.8.8.8:53 130.233.41.154.in-addr.arpa udp
US 8.8.8.8:53 63.155.67.172.in-addr.arpa udp
US 8.8.8.8:53 215.199.67.172.in-addr.arpa udp
US 63.250.43.16:443 imanifestloa.com tcp
US 8.8.8.8:53 52.68.21.104.in-addr.arpa udp
US 8.8.8.8:53 250.13.92.153.in-addr.arpa udp
N/A 127.0.0.1:50012 tcp
N/A 127.0.0.1:50018 tcp
N/A 127.0.0.1:50022 tcp
N/A 127.0.0.1:50026 tcp
N/A 127.0.0.1:50033 tcp
N/A 127.0.0.1:50040 tcp
N/A 127.0.0.1:50045 tcp
N/A 127.0.0.1:50048 tcp
N/A 127.0.0.1:50054 tcp
N/A 127.0.0.1:50056 tcp
N/A 127.0.0.1:50060 tcp
N/A 127.0.0.1:50068 tcp
N/A 127.0.0.1:50070 tcp
N/A 127.0.0.1:50077 tcp
N/A 127.0.0.1:50083 tcp
N/A 127.0.0.1:50085 tcp
N/A 127.0.0.1:50094 tcp
N/A 127.0.0.1:50102 tcp
N/A 127.0.0.1:50107 tcp
N/A 127.0.0.1:50115 tcp
N/A 127.0.0.1:50117 tcp
N/A 127.0.0.1:50120 tcp
N/A 127.0.0.1:50127 tcp
N/A 127.0.0.1:50133 tcp
N/A 127.0.0.1:50136 tcp
N/A 127.0.0.1:50144 tcp
N/A 127.0.0.1:50148 tcp
N/A 127.0.0.1:50150 tcp
N/A 127.0.0.1:50163 tcp
N/A 127.0.0.1:50171 tcp
N/A 127.0.0.1:50173 tcp
N/A 127.0.0.1:50175 tcp
N/A 127.0.0.1:50177 tcp
N/A 127.0.0.1:50179 tcp
N/A 127.0.0.1:50189 tcp
N/A 127.0.0.1:50192 tcp
N/A 127.0.0.1:50197 tcp
N/A 127.0.0.1:50212 tcp
N/A 127.0.0.1:50217 tcp
N/A 127.0.0.1:50219 tcp
N/A 127.0.0.1:50222 tcp
N/A 127.0.0.1:50231 tcp
N/A 127.0.0.1:50235 tcp
N/A 127.0.0.1:50238 tcp
N/A 127.0.0.1:50240 tcp
N/A 127.0.0.1:50242 tcp
N/A 127.0.0.1:50245 tcp
N/A 127.0.0.1:50253 tcp
N/A 127.0.0.1:50255 tcp
N/A 127.0.0.1:50260 tcp
N/A 127.0.0.1:50264 tcp
N/A 127.0.0.1:50266 tcp
N/A 127.0.0.1:50268 tcp
N/A 127.0.0.1:50270 tcp
N/A 127.0.0.1:50277 tcp
N/A 127.0.0.1:50280 tcp
N/A 127.0.0.1:50286 tcp
N/A 127.0.0.1:50291 tcp
N/A 127.0.0.1:50294 tcp
N/A 127.0.0.1:50302 tcp
N/A 127.0.0.1:50308 tcp
N/A 127.0.0.1:50310 tcp
N/A 127.0.0.1:50316 tcp
N/A 127.0.0.1:50322 tcp
N/A 127.0.0.1:50327 tcp
N/A 127.0.0.1:50329 tcp
N/A 127.0.0.1:50334 tcp
N/A 127.0.0.1:50337 tcp
N/A 127.0.0.1:50343 tcp
N/A 127.0.0.1:50347 tcp
N/A 127.0.0.1:50353 tcp
N/A 127.0.0.1:50357 tcp
N/A 127.0.0.1:50360 tcp
N/A 127.0.0.1:50364 tcp
N/A 127.0.0.1:50368 tcp
N/A 127.0.0.1:50371 tcp
N/A 127.0.0.1:50375 tcp
N/A 127.0.0.1:50378 tcp
N/A 127.0.0.1:50383 tcp
N/A 127.0.0.1:50386 tcp
N/A 127.0.0.1:50397 tcp
N/A 127.0.0.1:50399 tcp
N/A 127.0.0.1:50406 tcp
N/A 127.0.0.1:50409 tcp
N/A 127.0.0.1:50414 tcp
N/A 127.0.0.1:50418 tcp
N/A 127.0.0.1:50426 tcp
N/A 127.0.0.1:50433 tcp
N/A 127.0.0.1:50441 tcp
N/A 127.0.0.1:50446 tcp
N/A 127.0.0.1:50449 tcp
N/A 127.0.0.1:50453 tcp
N/A 127.0.0.1:50457 tcp
N/A 127.0.0.1:50466 tcp
N/A 127.0.0.1:50485 tcp
N/A 127.0.0.1:50490 tcp
N/A 127.0.0.1:50494 tcp
N/A 127.0.0.1:50496 tcp
N/A 127.0.0.1:50498 tcp
N/A 127.0.0.1:50501 tcp
N/A 127.0.0.1:50509 tcp
N/A 127.0.0.1:50520 tcp
N/A 127.0.0.1:50534 tcp
N/A 127.0.0.1:50537 tcp
N/A 127.0.0.1:50548 tcp
N/A 127.0.0.1:50550 tcp
N/A 127.0.0.1:50554 tcp
N/A 127.0.0.1:50556 tcp
N/A 127.0.0.1:50560 tcp
N/A 127.0.0.1:50577 tcp
N/A 127.0.0.1:50579 tcp
N/A 127.0.0.1:50582 tcp
N/A 127.0.0.1:50585 tcp
N/A 127.0.0.1:50588 tcp
N/A 127.0.0.1:50592 tcp
N/A 127.0.0.1:50596 tcp
N/A 127.0.0.1:50608 tcp
N/A 127.0.0.1:50611 tcp
N/A 127.0.0.1:50630 tcp
N/A 127.0.0.1:50635 tcp
N/A 127.0.0.1:50641 tcp
N/A 127.0.0.1:50646 tcp
N/A 127.0.0.1:50648 tcp
N/A 127.0.0.1:50650 tcp
N/A 127.0.0.1:50661 tcp
N/A 127.0.0.1:50664 tcp
N/A 127.0.0.1:50673 tcp
N/A 127.0.0.1:50684 tcp
N/A 127.0.0.1:50686 tcp
N/A 127.0.0.1:50688 tcp
N/A 127.0.0.1:50695 tcp
N/A 127.0.0.1:50697 tcp
N/A 127.0.0.1:50699 tcp
N/A 127.0.0.1:50736 tcp
N/A 127.0.0.1:50748 tcp
N/A 127.0.0.1:50760 tcp
N/A 127.0.0.1:50764 tcp
N/A 127.0.0.1:50784 tcp
N/A 127.0.0.1:50791 tcp
N/A 127.0.0.1:50793 tcp
N/A 127.0.0.1:50795 tcp
N/A 127.0.0.1:50797 tcp
N/A 127.0.0.1:50799 tcp
N/A 127.0.0.1:50807 tcp
N/A 127.0.0.1:50809 tcp
N/A 127.0.0.1:50811 tcp
N/A 127.0.0.1:50817 tcp
N/A 127.0.0.1:50819 tcp
N/A 127.0.0.1:50827 tcp
N/A 127.0.0.1:50831 tcp
N/A 127.0.0.1:50838 tcp
N/A 127.0.0.1:50841 tcp
N/A 127.0.0.1:50843 tcp
N/A 127.0.0.1:50846 tcp
N/A 127.0.0.1:50848 tcp
N/A 127.0.0.1:50850 tcp
N/A 127.0.0.1:50853 tcp
N/A 127.0.0.1:50858 tcp
N/A 127.0.0.1:50869 tcp
N/A 127.0.0.1:50871 tcp
N/A 127.0.0.1:50877 tcp
N/A 127.0.0.1:50881 tcp
N/A 127.0.0.1:50883 tcp
N/A 127.0.0.1:50890 tcp
N/A 127.0.0.1:50898 tcp
N/A 127.0.0.1:50902 tcp
N/A 127.0.0.1:50905 tcp
N/A 127.0.0.1:50908 tcp
N/A 127.0.0.1:50916 tcp
N/A 127.0.0.1:50919 tcp
N/A 127.0.0.1:50924 tcp
N/A 127.0.0.1:50926 tcp
N/A 127.0.0.1:50929 tcp
N/A 127.0.0.1:50931 tcp
N/A 127.0.0.1:50933 tcp
N/A 127.0.0.1:50942 tcp
N/A 127.0.0.1:50945 tcp
N/A 127.0.0.1:50947 tcp
N/A 127.0.0.1:50949 tcp
N/A 127.0.0.1:50967 tcp
N/A 127.0.0.1:50969 tcp
N/A 127.0.0.1:50984 tcp
N/A 127.0.0.1:50995 tcp
N/A 127.0.0.1:51000 tcp
N/A 127.0.0.1:51002 tcp
N/A 127.0.0.1:51004 tcp
N/A 127.0.0.1:51006 tcp
N/A 127.0.0.1:51014 tcp
N/A 127.0.0.1:51016 tcp
N/A 127.0.0.1:51018 tcp
N/A 127.0.0.1:51020 tcp
N/A 127.0.0.1:51028 tcp
N/A 127.0.0.1:51036 tcp
N/A 127.0.0.1:51039 tcp
N/A 127.0.0.1:51041 tcp
N/A 127.0.0.1:51043 tcp
N/A 127.0.0.1:51047 tcp
US 8.8.8.8:53 kamsmad.com udp
KR 175.120.254.9:80 kamsmad.com tcp
N/A 127.0.0.1:51073 tcp
N/A 127.0.0.1:51075 tcp
N/A 127.0.0.1:51090 tcp
N/A 127.0.0.1:51093 tcp
N/A 127.0.0.1:51099 tcp
N/A 127.0.0.1:51108 tcp
N/A 127.0.0.1:51113 tcp
N/A 127.0.0.1:51131 tcp
N/A 127.0.0.1:51138 tcp
N/A 127.0.0.1:51142 tcp
N/A 127.0.0.1:51145 tcp
N/A 127.0.0.1:51160 tcp
N/A 127.0.0.1:51166 tcp
N/A 127.0.0.1:51170 tcp
N/A 127.0.0.1:51172 tcp
N/A 127.0.0.1:51177 tcp
N/A 127.0.0.1:51181 tcp
N/A 127.0.0.1:51193 tcp
N/A 127.0.0.1:51196 tcp
N/A 127.0.0.1:51198 tcp
N/A 127.0.0.1:51207 tcp
N/A 127.0.0.1:51225 tcp
N/A 127.0.0.1:51234 tcp
N/A 127.0.0.1:51236 tcp
N/A 127.0.0.1:51238 tcp
N/A 127.0.0.1:51255 tcp
N/A 127.0.0.1:51267 tcp
N/A 127.0.0.1:51274 tcp
N/A 127.0.0.1:51276 tcp
N/A 127.0.0.1:51278 tcp
N/A 127.0.0.1:51287 tcp
N/A 127.0.0.1:51291 tcp
N/A 127.0.0.1:51294 tcp
N/A 127.0.0.1:60154 tcp
N/A 127.0.0.1:60157 tcp
N/A 127.0.0.1:60159 tcp
N/A 127.0.0.1:60161 tcp
N/A 127.0.0.1:60163 tcp
N/A 127.0.0.1:60165 tcp
N/A 127.0.0.1:60167 tcp
N/A 127.0.0.1:60169 tcp
N/A 127.0.0.1:60171 tcp
N/A 127.0.0.1:60179 tcp
N/A 127.0.0.1:60181 tcp
N/A 127.0.0.1:60183 tcp
N/A 127.0.0.1:60189 tcp
N/A 127.0.0.1:60195 tcp
N/A 127.0.0.1:60199 tcp
N/A 127.0.0.1:60206 tcp
N/A 127.0.0.1:60213 tcp
N/A 127.0.0.1:60219 tcp
N/A 127.0.0.1:60224 tcp
N/A 127.0.0.1:60228 tcp
N/A 127.0.0.1:60230 tcp
N/A 127.0.0.1:60236 tcp
N/A 127.0.0.1:60239 tcp
N/A 127.0.0.1:60267 tcp
N/A 127.0.0.1:60271 tcp
N/A 127.0.0.1:60275 tcp
N/A 127.0.0.1:60277 tcp
N/A 127.0.0.1:60279 tcp
N/A 127.0.0.1:60283 tcp
N/A 127.0.0.1:60293 tcp
N/A 127.0.0.1:60302 tcp
N/A 127.0.0.1:60308 tcp
N/A 127.0.0.1:60310 tcp
N/A 127.0.0.1:60312 tcp
N/A 127.0.0.1:60315 tcp
N/A 127.0.0.1:60318 tcp
N/A 127.0.0.1:60324 tcp
N/A 127.0.0.1:60331 tcp
N/A 127.0.0.1:60340 tcp
N/A 127.0.0.1:60352 tcp
N/A 127.0.0.1:60365 tcp
N/A 127.0.0.1:60374 tcp
N/A 127.0.0.1:60376 tcp
N/A 127.0.0.1:60378 tcp
N/A 127.0.0.1:60380 tcp
N/A 127.0.0.1:60384 tcp
N/A 127.0.0.1:60398 tcp
N/A 127.0.0.1:60401 tcp
N/A 127.0.0.1:60403 tcp
N/A 127.0.0.1:60405 tcp
N/A 127.0.0.1:60407 tcp
N/A 127.0.0.1:60415 tcp
N/A 127.0.0.1:60419 tcp
N/A 127.0.0.1:60421 tcp
N/A 127.0.0.1:60423 tcp
N/A 127.0.0.1:60425 tcp
N/A 127.0.0.1:60431 tcp
N/A 127.0.0.1:60439 tcp
N/A 127.0.0.1:60445 tcp
N/A 127.0.0.1:60452 tcp
N/A 127.0.0.1:60454 tcp
N/A 127.0.0.1:60456 tcp
N/A 127.0.0.1:60477 tcp
N/A 127.0.0.1:60482 tcp
N/A 127.0.0.1:60490 tcp
N/A 127.0.0.1:60492 tcp
N/A 127.0.0.1:60502 tcp
N/A 127.0.0.1:60511 tcp
N/A 127.0.0.1:60530 tcp
N/A 127.0.0.1:60544 tcp
N/A 127.0.0.1:60548 tcp
N/A 127.0.0.1:60553 tcp
N/A 127.0.0.1:60555 tcp
N/A 127.0.0.1:60560 tcp
N/A 127.0.0.1:60571 tcp
N/A 127.0.0.1:60574 tcp
N/A 127.0.0.1:60576 tcp
N/A 127.0.0.1:60578 tcp
N/A 127.0.0.1:60580 tcp
N/A 127.0.0.1:60582 tcp
N/A 127.0.0.1:60593 tcp
N/A 127.0.0.1:60600 tcp
N/A 127.0.0.1:60605 tcp
N/A 127.0.0.1:60607 tcp
N/A 127.0.0.1:60609 tcp
N/A 127.0.0.1:60615 tcp
N/A 127.0.0.1:60617 tcp
N/A 127.0.0.1:60627 tcp
N/A 127.0.0.1:60631 tcp
N/A 127.0.0.1:60634 tcp
N/A 127.0.0.1:60636 tcp
N/A 127.0.0.1:60639 tcp
N/A 127.0.0.1:60641 tcp
N/A 127.0.0.1:60647 tcp
N/A 127.0.0.1:60649 tcp
N/A 127.0.0.1:60664 tcp
N/A 127.0.0.1:60669 tcp
N/A 127.0.0.1:60671 tcp
N/A 127.0.0.1:60677 tcp
N/A 127.0.0.1:60679 tcp
N/A 127.0.0.1:60681 tcp
N/A 127.0.0.1:60690 tcp
N/A 127.0.0.1:60693 tcp
N/A 127.0.0.1:60702 tcp
N/A 127.0.0.1:60706 tcp
N/A 127.0.0.1:60708 tcp
N/A 127.0.0.1:60710 tcp
N/A 127.0.0.1:60726 tcp
N/A 127.0.0.1:60732 tcp
N/A 127.0.0.1:60734 tcp
N/A 127.0.0.1:60739 tcp
N/A 127.0.0.1:60764 tcp
N/A 127.0.0.1:60769 tcp
N/A 127.0.0.1:60772 tcp
N/A 127.0.0.1:60774 tcp
N/A 127.0.0.1:60788 tcp
N/A 127.0.0.1:60790 tcp
N/A 127.0.0.1:60792 tcp
N/A 127.0.0.1:60794 tcp
N/A 127.0.0.1:60802 tcp
N/A 127.0.0.1:60805 tcp
N/A 127.0.0.1:60829 tcp
N/A 127.0.0.1:60831 tcp
N/A 127.0.0.1:60833 tcp
N/A 127.0.0.1:60843 tcp
N/A 127.0.0.1:60845 tcp
N/A 127.0.0.1:60848 tcp
N/A 127.0.0.1:60850 tcp
N/A 127.0.0.1:60852 tcp
N/A 127.0.0.1:60859 tcp
N/A 127.0.0.1:60864 tcp
N/A 127.0.0.1:60866 tcp
N/A 127.0.0.1:60869 tcp
N/A 127.0.0.1:60872 tcp
N/A 127.0.0.1:60876 tcp
N/A 127.0.0.1:60878 tcp
N/A 127.0.0.1:60880 tcp
N/A 127.0.0.1:60882 tcp
N/A 127.0.0.1:60884 tcp
N/A 127.0.0.1:60888 tcp
N/A 127.0.0.1:60890 tcp
N/A 127.0.0.1:60892 tcp
N/A 127.0.0.1:60897 tcp
N/A 127.0.0.1:60904 tcp
N/A 127.0.0.1:60912 tcp
N/A 127.0.0.1:60917 tcp
N/A 127.0.0.1:60923 tcp
N/A 127.0.0.1:60929 tcp
N/A 127.0.0.1:60940 tcp
N/A 127.0.0.1:60942 tcp
N/A 127.0.0.1:60944 tcp
N/A 127.0.0.1:60958 tcp
N/A 127.0.0.1:60963 tcp
N/A 127.0.0.1:60965 tcp
N/A 127.0.0.1:60967 tcp
N/A 127.0.0.1:60969 tcp
N/A 127.0.0.1:60973 tcp
N/A 127.0.0.1:60995 tcp
N/A 127.0.0.1:60999 tcp
N/A 127.0.0.1:61010 tcp
N/A 127.0.0.1:61014 tcp
N/A 127.0.0.1:61024 tcp
N/A 127.0.0.1:61030 tcp
N/A 127.0.0.1:61033 tcp
N/A 127.0.0.1:61036 tcp
N/A 127.0.0.1:61038 tcp
N/A 127.0.0.1:61049 tcp
N/A 127.0.0.1:61052 tcp
N/A 127.0.0.1:61059 tcp
N/A 127.0.0.1:61069 tcp
N/A 127.0.0.1:61071 tcp
N/A 127.0.0.1:61075 tcp
N/A 127.0.0.1:61084 tcp
N/A 127.0.0.1:61086 tcp
N/A 127.0.0.1:61092 tcp
N/A 127.0.0.1:61097 tcp
N/A 127.0.0.1:61101 tcp
N/A 127.0.0.1:61106 tcp
N/A 127.0.0.1:61109 tcp
N/A 127.0.0.1:61111 tcp
N/A 127.0.0.1:61113 tcp
N/A 127.0.0.1:61117 tcp
N/A 127.0.0.1:61119 tcp
N/A 127.0.0.1:61127 tcp
N/A 127.0.0.1:61129 tcp
N/A 127.0.0.1:61141 tcp
N/A 127.0.0.1:61151 tcp
N/A 127.0.0.1:61153 tcp
N/A 127.0.0.1:61156 tcp
N/A 127.0.0.1:61165 tcp
N/A 127.0.0.1:61168 tcp
N/A 127.0.0.1:61170 tcp
N/A 127.0.0.1:61172 tcp
N/A 127.0.0.1:61174 tcp
N/A 127.0.0.1:61176 tcp
N/A 127.0.0.1:61178 tcp
N/A 127.0.0.1:61189 tcp
N/A 127.0.0.1:61191 tcp
N/A 127.0.0.1:61194 tcp
N/A 127.0.0.1:61196 tcp
N/A 127.0.0.1:61206 tcp
N/A 127.0.0.1:61214 tcp
N/A 127.0.0.1:61221 tcp
N/A 127.0.0.1:61251 tcp
N/A 127.0.0.1:61253 tcp
N/A 127.0.0.1:61255 tcp
N/A 127.0.0.1:61257 tcp
N/A 127.0.0.1:61259 tcp
N/A 127.0.0.1:61266 tcp
N/A 127.0.0.1:61275 tcp
N/A 127.0.0.1:61277 tcp
N/A 127.0.0.1:61281 tcp
N/A 127.0.0.1:61283 tcp
N/A 127.0.0.1:61285 tcp
N/A 127.0.0.1:61287 tcp
N/A 127.0.0.1:61289 tcp
N/A 127.0.0.1:61291 tcp
N/A 127.0.0.1:61293 tcp
N/A 127.0.0.1:61295 tcp
N/A 127.0.0.1:61302 tcp
N/A 127.0.0.1:61306 tcp
N/A 127.0.0.1:61315 tcp
N/A 127.0.0.1:61320 tcp
N/A 127.0.0.1:61324 tcp
N/A 127.0.0.1:61326 tcp
N/A 127.0.0.1:61328 tcp
N/A 127.0.0.1:61345 tcp
N/A 127.0.0.1:61348 tcp
N/A 127.0.0.1:61351 tcp
N/A 127.0.0.1:61353 tcp
N/A 127.0.0.1:61355 tcp
N/A 127.0.0.1:61358 tcp
N/A 127.0.0.1:61360 tcp
N/A 127.0.0.1:61362 tcp
N/A 127.0.0.1:61364 tcp
N/A 127.0.0.1:61366 tcp
N/A 127.0.0.1:61372 tcp
N/A 127.0.0.1:61402 tcp
N/A 127.0.0.1:61406 tcp
N/A 127.0.0.1:61437 tcp
N/A 127.0.0.1:61439 tcp
N/A 127.0.0.1:61441 tcp
N/A 127.0.0.1:61443 tcp
N/A 127.0.0.1:61445 tcp
N/A 127.0.0.1:61450 tcp
N/A 127.0.0.1:61464 tcp
N/A 127.0.0.1:61466 tcp
N/A 127.0.0.1:61468 tcp
N/A 127.0.0.1:61470 tcp
N/A 127.0.0.1:61472 tcp
N/A 127.0.0.1:61474 tcp
N/A 127.0.0.1:61476 tcp
N/A 127.0.0.1:61499 tcp
N/A 127.0.0.1:61502 tcp
N/A 127.0.0.1:61504 tcp
N/A 127.0.0.1:61506 tcp
N/A 127.0.0.1:61508 tcp
N/A 127.0.0.1:61511 tcp
N/A 127.0.0.1:61513 tcp
N/A 127.0.0.1:61515 tcp
N/A 127.0.0.1:61517 tcp
N/A 127.0.0.1:61519 tcp
N/A 127.0.0.1:61521 tcp
N/A 127.0.0.1:61527 tcp
N/A 127.0.0.1:61531 tcp
N/A 127.0.0.1:61533 tcp
N/A 127.0.0.1:61535 tcp
N/A 127.0.0.1:61537 tcp
N/A 127.0.0.1:61539 tcp
N/A 127.0.0.1:61553 tcp
N/A 127.0.0.1:61574 tcp
N/A 127.0.0.1:61576 tcp
N/A 127.0.0.1:61578 tcp
N/A 127.0.0.1:61580 tcp
N/A 127.0.0.1:61582 tcp
N/A 127.0.0.1:61585 tcp
N/A 127.0.0.1:61604 tcp
N/A 127.0.0.1:61633 tcp
N/A 127.0.0.1:61637 tcp
N/A 127.0.0.1:61639 tcp
N/A 127.0.0.1:61641 tcp
N/A 127.0.0.1:61643 tcp
N/A 127.0.0.1:61645 tcp
N/A 127.0.0.1:61647 tcp
N/A 127.0.0.1:61659 tcp
N/A 127.0.0.1:61664 tcp
N/A 127.0.0.1:61667 tcp
N/A 127.0.0.1:61669 tcp
N/A 127.0.0.1:61671 tcp
N/A 127.0.0.1:61673 tcp
N/A 127.0.0.1:61675 tcp
N/A 127.0.0.1:61677 tcp
N/A 127.0.0.1:61679 tcp
N/A 127.0.0.1:61681 tcp
N/A 127.0.0.1:61683 tcp
N/A 127.0.0.1:61685 tcp
N/A 127.0.0.1:61687 tcp
N/A 127.0.0.1:61689 tcp
N/A 127.0.0.1:61701 tcp
N/A 127.0.0.1:61708 tcp
N/A 127.0.0.1:61712 tcp
N/A 127.0.0.1:61722 tcp
N/A 127.0.0.1:61724 tcp
N/A 127.0.0.1:61726 tcp
N/A 127.0.0.1:61738 tcp
N/A 127.0.0.1:61744 tcp
N/A 127.0.0.1:61746 tcp
N/A 127.0.0.1:61748 tcp
N/A 127.0.0.1:61750 tcp
N/A 127.0.0.1:61752 tcp
N/A 127.0.0.1:61754 tcp
N/A 127.0.0.1:61756 tcp
N/A 127.0.0.1:61791 tcp
N/A 127.0.0.1:61793 tcp
N/A 127.0.0.1:61804 tcp
N/A 127.0.0.1:61814 tcp
N/A 127.0.0.1:61816 tcp
N/A 127.0.0.1:61818 tcp
N/A 127.0.0.1:61820 tcp
N/A 127.0.0.1:61824 tcp
N/A 127.0.0.1:61856 tcp
N/A 127.0.0.1:61858 tcp
N/A 127.0.0.1:61865 tcp
N/A 127.0.0.1:61867 tcp
N/A 127.0.0.1:61869 tcp
N/A 127.0.0.1:61873 tcp
N/A 127.0.0.1:61875 tcp
N/A 127.0.0.1:61878 tcp
N/A 127.0.0.1:61887 tcp
N/A 127.0.0.1:61902 tcp
N/A 127.0.0.1:61907 tcp
N/A 127.0.0.1:61909 tcp
N/A 127.0.0.1:61911 tcp
N/A 127.0.0.1:61913 tcp
N/A 127.0.0.1:61915 tcp
N/A 127.0.0.1:61917 tcp
N/A 127.0.0.1:61919 tcp
N/A 127.0.0.1:61922 tcp
N/A 127.0.0.1:61925 tcp
N/A 127.0.0.1:61939 tcp
N/A 127.0.0.1:61941 tcp
N/A 127.0.0.1:61943 tcp
N/A 127.0.0.1:61950 tcp
N/A 127.0.0.1:61953 tcp
N/A 127.0.0.1:61955 tcp
N/A 127.0.0.1:61958 tcp
N/A 127.0.0.1:61960 tcp
N/A 127.0.0.1:61979 tcp
N/A 127.0.0.1:61984 tcp
N/A 127.0.0.1:61991 tcp
N/A 127.0.0.1:61993 tcp
N/A 127.0.0.1:61996 tcp
N/A 127.0.0.1:62006 tcp
N/A 127.0.0.1:62016 tcp
N/A 127.0.0.1:62018 tcp
N/A 127.0.0.1:62020 tcp
N/A 127.0.0.1:62022 tcp
N/A 127.0.0.1:62024 tcp
N/A 127.0.0.1:62026 tcp
N/A 127.0.0.1:62032 tcp
N/A 127.0.0.1:62046 tcp
N/A 127.0.0.1:62054 tcp
N/A 127.0.0.1:62056 tcp
N/A 127.0.0.1:62058 tcp
N/A 127.0.0.1:62060 tcp
N/A 127.0.0.1:62062 tcp
N/A 127.0.0.1:62064 tcp
N/A 127.0.0.1:62066 tcp
N/A 127.0.0.1:62085 tcp
N/A 127.0.0.1:62087 tcp
N/A 127.0.0.1:62089 tcp
N/A 127.0.0.1:62095 tcp
N/A 127.0.0.1:62097 tcp
N/A 127.0.0.1:62099 tcp
N/A 127.0.0.1:62101 tcp
N/A 127.0.0.1:62114 tcp
N/A 127.0.0.1:62130 tcp
N/A 127.0.0.1:62142 tcp
N/A 127.0.0.1:62144 tcp
N/A 127.0.0.1:62152 tcp
N/A 127.0.0.1:62169 tcp
N/A 127.0.0.1:62175 tcp
N/A 127.0.0.1:62183 tcp
N/A 127.0.0.1:62185 tcp
N/A 127.0.0.1:62188 tcp
N/A 127.0.0.1:62197 tcp
N/A 127.0.0.1:62206 tcp
N/A 127.0.0.1:62208 tcp
N/A 127.0.0.1:62214 tcp
N/A 127.0.0.1:62220 tcp
N/A 127.0.0.1:62223 tcp
N/A 127.0.0.1:62225 tcp
N/A 127.0.0.1:62233 tcp
N/A 127.0.0.1:62240 tcp
N/A 127.0.0.1:62245 tcp
N/A 127.0.0.1:62247 tcp
N/A 127.0.0.1:62249 tcp
N/A 127.0.0.1:62254 tcp
N/A 127.0.0.1:62256 tcp
N/A 127.0.0.1:62258 tcp
N/A 127.0.0.1:62260 tcp
N/A 127.0.0.1:62262 tcp
N/A 127.0.0.1:62264 tcp
N/A 127.0.0.1:62293 tcp
N/A 127.0.0.1:62302 tcp
N/A 127.0.0.1:62305 tcp
N/A 127.0.0.1:62308 tcp
N/A 127.0.0.1:62310 tcp
N/A 127.0.0.1:62316 tcp
N/A 127.0.0.1:62318 tcp
N/A 127.0.0.1:62322 tcp
N/A 127.0.0.1:62325 tcp
N/A 127.0.0.1:62327 tcp
N/A 127.0.0.1:62332 tcp
N/A 127.0.0.1:62336 tcp
N/A 127.0.0.1:62338 tcp
N/A 127.0.0.1:62368 tcp
N/A 127.0.0.1:62376 tcp
N/A 127.0.0.1:62380 tcp
N/A 127.0.0.1:62383 tcp
N/A 127.0.0.1:62388 tcp
N/A 127.0.0.1:62391 tcp
N/A 127.0.0.1:62396 tcp
N/A 127.0.0.1:62405 tcp
N/A 127.0.0.1:62413 tcp
N/A 127.0.0.1:62415 tcp
N/A 127.0.0.1:62419 tcp
N/A 127.0.0.1:62426 tcp
N/A 127.0.0.1:62430 tcp
N/A 127.0.0.1:62444 tcp
N/A 127.0.0.1:62446 tcp
N/A 127.0.0.1:62448 tcp
N/A 127.0.0.1:62450 tcp
N/A 127.0.0.1:62453 tcp
N/A 127.0.0.1:62455 tcp
N/A 127.0.0.1:62465 tcp
N/A 127.0.0.1:62469 tcp
N/A 127.0.0.1:62471 tcp
N/A 127.0.0.1:62473 tcp
N/A 127.0.0.1:62476 tcp
N/A 127.0.0.1:62478 tcp
N/A 127.0.0.1:62484 tcp
N/A 127.0.0.1:62499 tcp
N/A 127.0.0.1:62501 tcp
N/A 127.0.0.1:62504 tcp
US 8.8.8.8:53 9.254.120.175.in-addr.arpa udp
KR 175.120.254.9:80 kamsmad.com tcp
KR 175.120.254.9:80 kamsmad.com tcp
N/A 127.0.0.1:62515 tcp
N/A 127.0.0.1:62518 tcp
N/A 127.0.0.1:62522 tcp
N/A 127.0.0.1:62546 tcp
N/A 127.0.0.1:62548 tcp
N/A 127.0.0.1:62550 tcp
N/A 127.0.0.1:62552 tcp
N/A 127.0.0.1:62561 tcp
N/A 127.0.0.1:62563 tcp
N/A 127.0.0.1:62570 tcp
N/A 127.0.0.1:62573 tcp
N/A 127.0.0.1:62584 tcp
N/A 127.0.0.1:62586 tcp
N/A 127.0.0.1:62588 tcp
N/A 127.0.0.1:62590 tcp
N/A 127.0.0.1:62592 tcp
N/A 127.0.0.1:62594 tcp
N/A 127.0.0.1:62596 tcp
N/A 127.0.0.1:62598 tcp
N/A 127.0.0.1:62600 tcp
N/A 127.0.0.1:62614 tcp
N/A 127.0.0.1:62616 tcp
N/A 127.0.0.1:62621 tcp
N/A 127.0.0.1:62632 tcp
N/A 127.0.0.1:62638 tcp
N/A 127.0.0.1:62643 tcp
N/A 127.0.0.1:62645 tcp
N/A 127.0.0.1:62647 tcp
N/A 127.0.0.1:62649 tcp
N/A 127.0.0.1:62669 tcp
N/A 127.0.0.1:62675 tcp
N/A 127.0.0.1:62683 tcp
N/A 127.0.0.1:62689 tcp
N/A 127.0.0.1:62691 tcp
N/A 127.0.0.1:62695 tcp
N/A 127.0.0.1:62697 tcp
N/A 127.0.0.1:62699 tcp
N/A 127.0.0.1:62701 tcp
N/A 127.0.0.1:62703 tcp
N/A 127.0.0.1:62705 tcp
N/A 127.0.0.1:62707 tcp
N/A 127.0.0.1:62716 tcp
N/A 127.0.0.1:62726 tcp
N/A 127.0.0.1:62732 tcp
N/A 127.0.0.1:62739 tcp
N/A 127.0.0.1:62741 tcp
N/A 127.0.0.1:62743 tcp
N/A 127.0.0.1:62745 tcp
N/A 127.0.0.1:62758 tcp
N/A 127.0.0.1:62760 tcp
N/A 127.0.0.1:62762 tcp
N/A 127.0.0.1:62764 tcp
N/A 127.0.0.1:62766 tcp
N/A 127.0.0.1:62769 tcp
N/A 127.0.0.1:62791 tcp
N/A 127.0.0.1:62804 tcp
N/A 127.0.0.1:62810 tcp
N/A 127.0.0.1:62815 tcp
N/A 127.0.0.1:62818 tcp
N/A 127.0.0.1:62820 tcp
N/A 127.0.0.1:62822 tcp
N/A 127.0.0.1:62824 tcp
N/A 127.0.0.1:62832 tcp
N/A 127.0.0.1:62837 tcp
N/A 127.0.0.1:62841 tcp
N/A 127.0.0.1:62843 tcp
N/A 127.0.0.1:62846 tcp
N/A 127.0.0.1:62850 tcp
N/A 127.0.0.1:62852 tcp
N/A 127.0.0.1:62899 tcp
N/A 127.0.0.1:62901 tcp
N/A 127.0.0.1:62903 tcp
N/A 127.0.0.1:62905 tcp
N/A 127.0.0.1:62907 tcp
N/A 127.0.0.1:62921 tcp
N/A 127.0.0.1:62923 tcp
N/A 127.0.0.1:62925 tcp
N/A 127.0.0.1:62927 tcp
N/A 127.0.0.1:62929 tcp
N/A 127.0.0.1:62931 tcp
N/A 127.0.0.1:62933 tcp
N/A 127.0.0.1:62951 tcp
N/A 127.0.0.1:62954 tcp
N/A 127.0.0.1:62963 tcp
N/A 127.0.0.1:62965 tcp
N/A 127.0.0.1:62968 tcp
N/A 127.0.0.1:62971 tcp
N/A 127.0.0.1:62989 tcp
N/A 127.0.0.1:62994 tcp
N/A 127.0.0.1:63000 tcp
N/A 127.0.0.1:63002 tcp
N/A 127.0.0.1:63005 tcp
N/A 127.0.0.1:63013 tcp
N/A 127.0.0.1:63016 tcp
N/A 127.0.0.1:63018 tcp
N/A 127.0.0.1:63020 tcp
N/A 127.0.0.1:63022 tcp
N/A 127.0.0.1:63024 tcp
N/A 127.0.0.1:63026 tcp
N/A 127.0.0.1:63034 tcp
N/A 127.0.0.1:63044 tcp
N/A 127.0.0.1:63046 tcp
N/A 127.0.0.1:63061 tcp
N/A 127.0.0.1:63063 tcp
N/A 127.0.0.1:63066 tcp
N/A 127.0.0.1:63101 tcp
N/A 127.0.0.1:63103 tcp
N/A 127.0.0.1:63107 tcp
N/A 127.0.0.1:63109 tcp
N/A 127.0.0.1:63111 tcp
N/A 127.0.0.1:63113 tcp
N/A 127.0.0.1:63118 tcp
N/A 127.0.0.1:63121 tcp
N/A 127.0.0.1:63123 tcp
N/A 127.0.0.1:63125 tcp
N/A 127.0.0.1:63127 tcp
N/A 127.0.0.1:63131 tcp
N/A 127.0.0.1:63134 tcp
N/A 127.0.0.1:63138 tcp
N/A 127.0.0.1:63140 tcp
N/A 127.0.0.1:63142 tcp
N/A 127.0.0.1:63151 tcp
N/A 127.0.0.1:63163 tcp
N/A 127.0.0.1:63166 tcp
N/A 127.0.0.1:63172 tcp
N/A 127.0.0.1:63184 tcp
N/A 127.0.0.1:63186 tcp
N/A 127.0.0.1:63205 tcp
N/A 127.0.0.1:63211 tcp
N/A 127.0.0.1:63213 tcp
N/A 127.0.0.1:63215 tcp
N/A 127.0.0.1:63217 tcp
N/A 127.0.0.1:63222 tcp
N/A 127.0.0.1:63224 tcp
N/A 127.0.0.1:63226 tcp
N/A 127.0.0.1:63249 tcp
N/A 127.0.0.1:63252 tcp
N/A 127.0.0.1:63255 tcp
N/A 127.0.0.1:63261 tcp
N/A 127.0.0.1:63263 tcp
N/A 127.0.0.1:63265 tcp
N/A 127.0.0.1:63273 tcp
N/A 127.0.0.1:63279 tcp
N/A 127.0.0.1:63282 tcp
N/A 127.0.0.1:63284 tcp
N/A 127.0.0.1:63287 tcp
N/A 127.0.0.1:63289 tcp
N/A 127.0.0.1:63301 tcp
N/A 127.0.0.1:63303 tcp
N/A 127.0.0.1:63305 tcp
N/A 127.0.0.1:63307 tcp
N/A 127.0.0.1:63309 tcp
N/A 127.0.0.1:63317 tcp
N/A 127.0.0.1:63319 tcp
N/A 127.0.0.1:63321 tcp
N/A 127.0.0.1:63324 tcp
N/A 127.0.0.1:63326 tcp
N/A 127.0.0.1:63333 tcp
N/A 127.0.0.1:63336 tcp
N/A 127.0.0.1:63338 tcp
N/A 127.0.0.1:63340 tcp
N/A 127.0.0.1:63342 tcp
N/A 127.0.0.1:63376 tcp
N/A 127.0.0.1:63405 tcp
N/A 127.0.0.1:63407 tcp
N/A 127.0.0.1:63409 tcp
N/A 127.0.0.1:63411 tcp
N/A 127.0.0.1:63416 tcp
N/A 127.0.0.1:63418 tcp
N/A 127.0.0.1:63420 tcp
N/A 127.0.0.1:63424 tcp
N/A 127.0.0.1:63441 tcp
N/A 127.0.0.1:63443 tcp
N/A 127.0.0.1:63445 tcp
N/A 127.0.0.1:63447 tcp
N/A 127.0.0.1:63449 tcp
N/A 127.0.0.1:63452 tcp
N/A 127.0.0.1:63456 tcp
N/A 127.0.0.1:63460 tcp
N/A 127.0.0.1:63473 tcp
N/A 127.0.0.1:63484 tcp
N/A 127.0.0.1:63486 tcp
N/A 127.0.0.1:63488 tcp
N/A 127.0.0.1:63490 tcp
N/A 127.0.0.1:63492 tcp
N/A 127.0.0.1:63498 tcp
N/A 127.0.0.1:63503 tcp
N/A 127.0.0.1:63520 tcp
N/A 127.0.0.1:63523 tcp
N/A 127.0.0.1:63530 tcp
N/A 127.0.0.1:63532 tcp
N/A 127.0.0.1:63545 tcp
N/A 127.0.0.1:63574 tcp
US 8.8.8.8:53 www.shantanuchemicals.com udp
DE 162.55.100.32:443 www.shantanuchemicals.com tcp
KR 175.120.254.9:80 kamsmad.com tcp
N/A 127.0.0.1:63901 tcp
KR 175.120.254.9:80 kamsmad.com tcp
KR 175.120.254.9:80 kamsmad.com tcp
N/A 127.0.0.1:45454 tcp
KR 175.120.254.9:80 kamsmad.com tcp
KR 175.120.254.9:80 kamsmad.com tcp
US 8.8.8.8:53 9f3ba8fa-33dc-473f-bb9c-485cb9d9b4fb.uuid.localstats.org udp
KR 175.120.254.9:80 kamsmad.com tcp
N/A 127.0.0.1:45454 tcp
N/A 127.0.0.1:45454 tcp
US 8.8.8.8:53 gtpsecurecard.com udp
US 8.8.8.8:53 services.nidw.gov.bd udp
US 8.8.8.8:53 gtpsecurecard.com udp
US 205.220.248.12:22 gtpsecurecard.com tcp
US 8.8.8.8:53 nhentai.net udp
US 205.220.248.12:21 gtpsecurecard.com tcp
US 8.8.8.8:53 nhentai.net udp
US 8.8.8.8:53 n3plcpnl0270.prod.ams3.secureserver.net udp
US 8.8.8.8:53 n3plcpnl0270.prod.ams3.secureserver.net udp
US 205.220.248.12:443 gtpsecurecard.com tcp
BD 180.211.213.37:21 services.nidw.gov.bd tcp
BD 180.211.213.37:443 services.nidw.gov.bd tcp
US 8.8.8.8:53 baslaboratory.com udp
BD 180.211.213.37:22 services.nidw.gov.bd tcp
NL 160.153.155.26:21 n3plcpnl0270.prod.ams3.secureserver.net tcp
NL 160.153.155.26:22 n3plcpnl0270.prod.ams3.secureserver.net tcp
US 172.67.159.231:22 nhentai.net tcp
US 172.67.159.231:21 nhentai.net tcp
US 205.220.248.12:143 gtpsecurecard.com tcp
US 8.8.8.8:53 ingresso.eear.aer.mil.br udp
US 8.8.8.8:53 iris.fbr.gov.pk udp
US 172.67.159.231:443 nhentai.net tcp
US 205.220.248.12:465 gtpsecurecard.com tcp
US 205.220.248.12:80 gtpsecurecard.com tcp
US 8.8.8.8:53 aspmx.l.google.com udp
US 8.8.8.8:53 iris.fbr.gov.pk udp
US 8.8.8.8:53 12.248.220.205.in-addr.arpa udp
US 8.8.8.8:53 37.213.211.180.in-addr.arpa udp
N/A 127.0.0.1:64690 tcp
N/A 127.0.0.1:64694 tcp
N/A 127.0.0.1:64698 tcp
N/A 127.0.0.1:64701 tcp
N/A 127.0.0.1:64707 tcp
N/A 127.0.0.1:64710 tcp
N/A 127.0.0.1:64718 tcp
NL 160.153.155.26:443 n3plcpnl0270.prod.ams3.secureserver.net tcp
US 8.8.8.8:53 altyazilifilm.live udp
US 8.8.8.8:53 ingresso.eear.aer.mil.br udp
BD 180.211.213.37:143 services.nidw.gov.bd tcp
US 8.8.8.8:53 altyazilifilm.live udp
US 8.8.8.8:53 231.159.67.172.in-addr.arpa udp
BD 180.211.213.37:465 services.nidw.gov.bd tcp
BD 180.211.213.37:80 services.nidw.gov.bd tcp
US 205.220.248.12:995 gtpsecurecard.com tcp
BE 64.233.167.26:143 aspmx.l.google.com tcp
US 8.8.8.8:53 ag60.cc udp
US 8.8.8.8:53 old.ppy.sh udp
NL 160.153.155.26:143 n3plcpnl0270.prod.ams3.secureserver.net tcp
US 205.220.248.12:80 gtpsecurecard.com tcp
BE 64.233.167.26:465 aspmx.l.google.com tcp
BD 180.211.213.37:80 services.nidw.gov.bd tcp
US 8.8.8.8:53 ag60.cc udp
PK 103.125.60.77:22 iris.fbr.gov.pk tcp
BD 180.211.213.37:995 services.nidw.gov.bd tcp
US 172.67.159.231:80 nhentai.net tcp
US 8.8.8.8:53 old.ppy.sh udp
US 104.21.43.171:22 altyazilifilm.live tcp
NL 160.153.155.26:465 n3plcpnl0270.prod.ams3.secureserver.net tcp
NL 160.153.155.26:80 n3plcpnl0270.prod.ams3.secureserver.net tcp
US 172.67.159.231:80 nhentai.net tcp
PK 103.125.60.77:443 iris.fbr.gov.pk tcp
BE 64.233.167.26:995 aspmx.l.google.com tcp
BR 177.152.121.228:21 ingresso.eear.aer.mil.br tcp
BR 177.152.121.228:22 ingresso.eear.aer.mil.br tcp
BR 177.152.121.228:443 ingresso.eear.aer.mil.br tcp
PK 103.125.60.77:21 iris.fbr.gov.pk tcp
US 104.21.43.171:21 altyazilifilm.live tcp
US 8.8.8.8:53 kip-kuliah.kemdikbud.go.id udp
US 8.8.8.8:53 kip-kuliah.kemdikbud.go.id udp
US 104.21.66.123:22 nhentai.net tcp
US 8.8.8.8:53 portal.eightcap.com udp
US 104.21.66.123:21 nhentai.net tcp
US 104.22.74.180:22 old.ppy.sh tcp
US 103.224.212.213:22 ag60.cc tcp
US 205.220.248.12:443 gtpsecurecard.com tcp
US 104.21.43.171:443 altyazilifilm.live tcp
US 8.8.8.8:53 portal.eightcap.com udp
NL 160.153.155.26:995 n3plcpnl0270.prod.ams3.secureserver.net tcp
US 8.8.8.8:53 baslaboratory.com udp
PK 103.125.60.77:143 iris.fbr.gov.pk tcp
US 103.224.212.213:21 ag60.cc tcp
BR 177.152.121.228:143 ingresso.eear.aer.mil.br tcp
US 104.22.74.180:21 old.ppy.sh tcp
US 8.8.8.8:53 77.60.125.103.in-addr.arpa udp
US 8.8.8.8:53 228.121.152.177.in-addr.arpa udp
US 8.8.8.8:53 subscribe.free.fr udp
US 8.8.8.8:53 krunker.io udp
US 8.8.8.8:53 krunker.io udp
PK 103.125.60.77:465 iris.fbr.gov.pk tcp
PK 103.125.60.77:80 iris.fbr.gov.pk tcp
US 103.224.212.213:443 ag60.cc tcp
BR 177.152.121.228:465 ingresso.eear.aer.mil.br tcp
US 104.22.74.180:443 old.ppy.sh tcp
US 172.67.159.231:443 nhentai.net tcp
BR 177.152.121.228:80 ingresso.eear.aer.mil.br tcp
US 8.8.8.8:53 subscribe.free.fr udp
US 172.67.159.231:443 nhentai.net tcp
US 104.21.43.171:143 altyazilifilm.live tcp
US 8.8.8.8:53 yemenia.sita.aero udp
US 8.8.8.8:53 park-mx.above.com udp
US 8.8.8.8:53 bettingent.com udp
PK 103.125.60.77:995 iris.fbr.gov.pk tcp
US 205.220.248.12:443 gtpsecurecard.com tcp
US 172.67.159.231:443 nhentai.net tcp
BR 177.152.121.228:995 ingresso.eear.aer.mil.br tcp
BD 180.211.213.37:443 services.nidw.gov.bd tcp
ID 103.6.34.222:21 kip-kuliah.kemdikbud.go.id tcp
ID 103.6.34.222:22 kip-kuliah.kemdikbud.go.id tcp
US 172.67.182.138:22 altyazilifilm.live tcp
BE 13.225.239.38:21 portal.eightcap.com tcp
BE 13.225.239.38:22 portal.eightcap.com tcp
US 104.21.43.171:465 altyazilifilm.live tcp
US 8.8.8.8:53 yemenia.sita.aero udp
US 8.8.8.8:53 icetorrent.org udp
US 8.8.8.8:53 171.43.21.104.in-addr.arpa udp
US 8.8.8.8:53 ingresso.eear.fab.mil.br udp
US 104.18.8.28:22 krunker.io tcp
PK 103.125.60.77:80 iris.fbr.gov.pk tcp
US 104.22.74.180:143 old.ppy.sh tcp
ID 103.6.34.222:443 kip-kuliah.kemdikbud.go.id tcp
US 172.67.182.138:21 altyazilifilm.live tcp
BE 13.225.239.38:443 portal.eightcap.com tcp
FR 212.27.48.11:22 subscribe.free.fr tcp
BD 180.211.213.37:443 services.nidw.gov.bd tcp
US 104.21.43.171:995 altyazilifilm.live tcp
US 8.8.8.8:53 retail.sc.com udp
US 172.67.14.100:22 old.ppy.sh tcp
US 8.8.8.8:53 180.74.22.104.in-addr.arpa udp
US 8.8.8.8:53 213.212.224.103.in-addr.arpa udp
US 8.8.8.8:53 ww25.ag60.cc udp
US 8.8.8.8:53 osu.ppy.sh udp
US 172.67.204.186:443 bettingent.com tcp
US 104.22.74.180:80 osu.ppy.sh tcp
US 104.22.74.180:465 osu.ppy.sh tcp
FR 212.27.48.11:21 subscribe.free.fr tcp
US 8.8.8.8:53 retail.sc.com udp
US 8.8.8.8:53 cpanel56.fastsecurehost.com udp
US 103.224.212.34:143 park-mx.above.com tcp
US 104.18.8.28:21 krunker.io tcp
US 103.224.212.34:465 park-mx.above.com tcp
US 103.224.212.213:80 ag60.cc tcp
US 172.67.14.100:21 osu.ppy.sh tcp
BE 13.225.239.38:143 portal.eightcap.com tcp
US 172.67.182.138:143 altyazilifilm.live tcp
BD 180.211.213.37:443 services.nidw.gov.bd tcp
US 8.8.8.8:53 mx1.privateemail.com udp
US 8.8.8.8:53 baslaboratory.com udp
US 205.220.248.12:80 gtpsecurecard.com tcp
US 104.22.74.180:995 osu.ppy.sh tcp
FR 212.27.48.11:443 subscribe.free.fr tcp
US 172.67.213.14:22 icetorrent.org tcp
PK 103.125.60.77:443 iris.fbr.gov.pk tcp
US 8.8.8.8:53 cpanel56.fastsecurehost.com udp
N/A 127.0.0.1:64724 tcp
N/A 127.0.0.1:64729 tcp
N/A 127.0.0.1:64733 tcp
N/A 127.0.0.1:64740 tcp
N/A 127.0.0.1:64744 tcp
N/A 127.0.0.1:64748 tcp
N/A 127.0.0.1:64753 tcp
N/A 127.0.0.1:64757 tcp
N/A 127.0.0.1:64764 tcp
N/A 127.0.0.1:64768 tcp
N/A 127.0.0.1:64772 tcp
N/A 127.0.0.1:64777 tcp
BE 13.225.239.94:21 portal.eightcap.com tcp
BE 13.225.239.94:22 portal.eightcap.com tcp
US 172.67.182.138:465 altyazilifilm.live tcp
US 104.22.75.180:22 osu.ppy.sh tcp
US 104.18.8.28:443 krunker.io tcp
US 172.67.159.231:80 nhentai.net tcp
US 104.21.43.171:80 altyazilifilm.live tcp
US 103.224.212.34:995 park-mx.above.com tcp
ID 103.6.34.222:143 kip-kuliah.kemdikbud.go.id tcp
US 172.67.159.231:22 nhentai.net tcp
BE 13.225.239.38:465 portal.eightcap.com tcp
BE 13.225.239.38:80 portal.eightcap.com tcp
US 104.18.9.28:22 krunker.io tcp
US 104.22.75.180:443 osu.ppy.sh tcp
US 172.67.14.100:143 osu.ppy.sh tcp
US 8.8.8.8:53 38.239.225.13.in-addr.arpa udp
US 8.8.8.8:53 222.34.6.103.in-addr.arpa udp
US 8.8.8.8:53 186.204.67.172.in-addr.arpa udp
US 172.67.159.231:21 nhentai.net tcp
US 199.59.243.225:80 ww25.ag60.cc tcp
US 172.67.159.231:80 nhentai.net tcp
US 172.67.213.14:21 icetorrent.org tcp
GB 92.123.128.175:21 retail.sc.com tcp
GB 92.123.128.175:22 retail.sc.com tcp
US 172.67.182.138:995 altyazilifilm.live tcp
US 8.8.8.8:53 boards.naruto-arena.net udp
BR 177.152.121.228:443 ingresso.eear.fab.mil.br tcp
US 8.8.8.8:53 cmemes.com udp
US 172.67.14.100:465 osu.ppy.sh tcp
ID 103.6.34.222:465 kip-kuliah.kemdikbud.go.id tcp
US 205.220.248.12:21 gtpsecurecard.com tcp
ID 103.6.34.222:80 kip-kuliah.kemdikbud.go.id tcp
BE 13.225.239.38:995 portal.eightcap.com tcp
US 8.8.8.8:53 mta1.mail.speedapp.io udp
US 8.8.8.8:53 aspmx.l.google.com udp
US 8.8.8.8:53 yemenia.sita.aero udp
US 104.18.9.28:21 krunker.io tcp
BE 13.225.239.94:143 portal.eightcap.com tcp
US 205.220.248.12:22 gtpsecurecard.com tcp
US 8.8.8.8:53 11.48.27.212.in-addr.arpa udp
US 8.8.8.8:53 28.8.18.104.in-addr.arpa udp
US 172.67.213.14:443 icetorrent.org tcp
US 8.8.8.8:53 boards.naruto-arena.net udp
US 8.8.8.8:53 cmemes.com udp
US 8.8.8.8:53 guestportal2.dchft.nhs.uk udp
US 172.67.14.100:995 osu.ppy.sh tcp
US 104.21.61.189:22 icetorrent.org tcp
US 198.54.122.240:143 mx1.privateemail.com tcp
ID 103.6.34.222:995 kip-kuliah.kemdikbud.go.id tcp
BD 180.211.213.37:22 services.nidw.gov.bd tcp
FR 212.27.48.11:143 subscribe.free.fr tcp
BD 180.211.213.37:21 services.nidw.gov.bd tcp
BD 180.211.213.37:80 services.nidw.gov.bd tcp
US 198.54.122.240:465 mx1.privateemail.com tcp
US 104.18.8.28:80 krunker.io tcp
BE 13.225.239.94:465 portal.eightcap.com tcp
US 104.21.66.123:22 nhentai.net tcp
NL 160.153.155.26:22 n3plcpnl0270.prod.ams3.secureserver.net tcp
GB 92.123.128.175:443 retail.sc.com tcp
IE 185.224.198.56:22 cpanel56.fastsecurehost.com tcp
IE 185.224.198.56:21 cpanel56.fastsecurehost.com tcp
US 104.21.66.123:21 nhentai.net tcp
US 205.220.248.12:143 gtpsecurecard.com tcp
US 8.8.8.8:53 180.75.22.104.in-addr.arpa udp
US 8.8.8.8:53 225.243.59.199.in-addr.arpa udp
NL 160.153.155.26:80 n3plcpnl0270.prod.ams3.secureserver.net tcp
PK 103.125.60.77:22 iris.fbr.gov.pk tcp
US 205.220.248.12:80 gtpsecurecard.com tcp
US 104.21.61.189:21 icetorrent.org tcp
GB 92.123.128.172:22 retail.sc.com tcp
US 8.8.8.8:53 guestportal2.dchft.nhs.uk udp
US 8.8.8.8:53 account.riotgames.com udp
BD 180.211.213.37:143 services.nidw.gov.bd tcp
US 104.21.43.171:22 altyazilifilm.live tcp
GB 92.123.128.172:21 retail.sc.com tcp
FR 212.27.48.11:465 subscribe.free.fr tcp
FR 212.27.48.11:80 subscribe.free.fr tcp
US 205.220.248.12:465 gtpsecurecard.com tcp
BR 177.152.121.228:21 ingresso.eear.fab.mil.br tcp
PK 103.125.60.77:21 iris.fbr.gov.pk tcp
US 104.21.43.171:21 altyazilifilm.live tcp
FR 54.38.18.129:143 mta1.mail.speedapp.io tcp
US 199.59.243.225:80 ww25.ag60.cc tcp
US 198.54.122.240:995 mx1.privateemail.com tcp
US 205.220.248.12:995 gtpsecurecard.com tcp
BD 180.211.213.37:465 services.nidw.gov.bd tcp
US 103.224.212.213:80 ag60.cc tcp
BE 13.225.239.94:995 portal.eightcap.com tcp
BR 177.152.121.228:80 ingresso.eear.fab.mil.br tcp
US 8.8.8.8:53 baslaboratory.com udp
US 8.8.8.8:53 ftp.baslaboratory.com udp
BE 13.225.239.38:80 portal.eightcap.com tcp
US 205.220.248.12:443 gtpsecurecard.com tcp
US 104.22.75.180:443 osu.ppy.sh tcp
FR 212.27.48.11:80 subscribe.free.fr tcp
IE 185.224.198.56:443 cpanel56.fastsecurehost.com tcp
US 8.8.8.8:53 speedapp.io udp
NL 160.153.155.26:143 n3plcpnl0270.prod.ams3.secureserver.net tcp
NL 160.153.155.26:21 n3plcpnl0270.prod.ams3.secureserver.net tcp
US 8.8.8.8:53 14.213.67.172.in-addr.arpa udp
US 8.8.8.8:53 account.riotgames.com udp
US 8.8.8.8:53 gestiona3.madrid.org udp
FR 54.38.18.129:465 mta1.mail.speedapp.io tcp
BE 66.102.1.27:143 aspmx.l.google.com tcp
US 162.213.251.220:21 cmemes.com tcp
US 172.67.213.14:80 icetorrent.org tcp
FR 212.27.48.11:995 subscribe.free.fr tcp
US 172.67.182.138:22 altyazilifilm.live tcp
BE 66.102.1.27:465 aspmx.l.google.com tcp
BD 180.211.213.37:995 services.nidw.gov.bd tcp
US 172.67.182.138:21 altyazilifilm.live tcp
US 172.67.159.231:443 nhentai.net tcp
GB 92.123.128.175:143 retail.sc.com tcp
US 103.224.212.34:143 park-mx.above.com tcp
US 104.21.43.171:443 altyazilifilm.live tcp
BE 13.225.239.38:443 portal.eightcap.com tcp
US 103.224.212.34:465 park-mx.above.com tcp
NL 160.153.155.26:465 n3plcpnl0270.prod.ams3.secureserver.net tcp
BR 177.152.121.228:22 ingresso.eear.fab.mil.br tcp
US 104.18.8.28:80 krunker.io tcp
US 104.22.74.180:80 osu.ppy.sh tcp
ID 103.6.34.222:80 kip-kuliah.kemdikbud.go.id tcp
BD 180.211.213.37:80 services.nidw.gov.bd tcp
BR 177.152.121.228:80 ingresso.eear.fab.mil.br tcp
BE 66.102.1.27:995 aspmx.l.google.com tcp
US 172.67.159.231:443 nhentai.net tcp
PK 103.125.60.77:80 iris.fbr.gov.pk tcp
US 103.224.212.213:80 ag60.cc tcp
US 8.8.8.8:53 yemenia.sita.aero udp
FR 212.27.48.11:21 subscribe.free.fr tcp
US 104.22.74.180:21 osu.ppy.sh tcp
NL 160.153.155.26:995 n3plcpnl0270.prod.ams3.secureserver.net tcp
US 103.224.212.213:21 ag60.cc tcp
US 8.8.8.8:53 mx3-hosting.jellyfish.systems udp
US 8.8.8.8:53 gestiona3.madrid.org udp
US 8.8.8.8:53 175.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 56.198.224.185.in-addr.arpa udp
GB 92.123.128.172:143 retail.sc.com tcp
US 104.22.74.180:22 osu.ppy.sh tcp
ID 103.6.34.222:21 kip-kuliah.kemdikbud.go.id tcp
FR 54.38.18.129:995 mta1.mail.speedapp.io tcp
GB 92.123.128.175:80 retail.sc.com tcp
ID 103.6.34.222:22 kip-kuliah.kemdikbud.go.id tcp
BE 13.225.239.38:22 portal.eightcap.com tcp
GB 92.123.128.175:465 retail.sc.com tcp
BE 13.225.239.38:21 portal.eightcap.com tcp
US 104.21.43.171:465 altyazilifilm.live tcp
US 103.224.212.213:22 ag60.cc tcp
PK 103.125.60.77:465 iris.fbr.gov.pk tcp
US 104.18.8.28:22 krunker.io tcp
BR 177.152.121.228:465 ingresso.eear.fab.mil.br tcp
IE 185.224.198.56:143 cpanel56.fastsecurehost.com tcp
US 104.21.43.171:143 altyazilifilm.live tcp
N/A 127.0.0.1:64789 tcp
N/A 127.0.0.1:64791 tcp
N/A 127.0.0.1:64795 tcp
N/A 127.0.0.1:64798 tcp
N/A 127.0.0.1:64801 tcp
N/A 127.0.0.1:64804 tcp
N/A 127.0.0.1:64811 tcp
US 172.67.14.100:21 osu.ppy.sh tcp
BR 177.152.121.228:143 ingresso.eear.fab.mil.br tcp
US 162.213.251.220:443 cmemes.com tcp
PK 103.125.60.77:80 iris.fbr.gov.pk tcp
PK 103.125.60.77:995 iris.fbr.gov.pk tcp
FR 212.27.48.11:22 subscribe.free.fr tcp
PK 103.125.60.77:143 iris.fbr.gov.pk tcp
US 104.18.185.38:22 account.riotgames.com tcp
US 8.8.8.8:53 boards.naruto-arena.net udp
US 8.8.8.8:53 cernerhealth.com udp
GB 92.123.128.175:995 retail.sc.com tcp
BR 177.152.121.228:995 ingresso.eear.fab.mil.br tcp
US 103.224.212.34:995 park-mx.above.com tcp
US 104.21.43.171:995 altyazilifilm.live tcp
US 104.18.8.28:443 krunker.io tcp
US 104.18.9.28:22 krunker.io tcp
US 104.22.74.180:465 osu.ppy.sh tcp
BE 13.225.239.38:465 portal.eightcap.com tcp
IE 185.224.198.56:465 cpanel56.fastsecurehost.com tcp
IE 185.224.198.56:80 cpanel56.fastsecurehost.com tcp
US 104.18.185.38:21 account.riotgames.com tcp
US 104.18.8.28:21 krunker.io tcp
BE 13.225.239.38:143 portal.eightcap.com tcp
US 8.8.8.8:53 mail.nhs.uk udp
US 8.8.8.8:53 cernerhealth.com udp
US 8.8.8.8:53 tradingview.com udp
US 8.8.8.8:53 tradingview.com udp
ES 195.77.128.33:22 gestiona3.madrid.org tcp
US 198.54.122.240:465 mx1.privateemail.com tcp
FR 212.27.48.11:443 subscribe.free.fr tcp
US 104.22.74.180:995 osu.ppy.sh tcp
ID 103.6.34.222:443 kip-kuliah.kemdikbud.go.id tcp
US 172.67.213.14:22 icetorrent.org tcp
IE 185.224.198.56:995 cpanel56.fastsecurehost.com tcp
ID 103.6.34.222:465 kip-kuliah.kemdikbud.go.id tcp
FR 212.27.48.11:80 subscribe.free.fr tcp
US 8.8.8.8:53 baslaboratory.com udp
US 8.8.8.8:53 ftp.baslaboratory.com udp
NL 160.153.155.26:80 n3plcpnl0270.prod.ams3.secureserver.net tcp
US 205.220.248.12:990 gtpsecurecard.com tcp
US 172.67.159.231:222 nhentai.net tcp
BE 13.225.239.94:465 portal.eightcap.com tcp
BR 177.152.121.228:80 ingresso.eear.fab.mil.br tcp
IE 185.224.198.56:22 cpanel56.fastsecurehost.com tcp
US 104.18.185.38:443 account.riotgames.com tcp
IE 185.224.198.56:80 cpanel56.fastsecurehost.com tcp
US 8.8.8.8:53 boards.naruto-arena.net udp
US 162.255.118.13:465 mx3-hosting.jellyfish.systems tcp
ID 103.6.34.222:143 kip-kuliah.kemdikbud.go.id tcp
US 162.213.251.220:80 cmemes.com tcp
US 172.67.159.231:990 nhentai.net tcp
ES 195.77.128.33:21 gestiona3.madrid.org tcp
US 205.220.248.12:80 gtpsecurecard.com tcp
US 104.22.74.180:80 osu.ppy.sh tcp
US 172.67.213.14:21 icetorrent.org tcp
GB 92.123.128.175:22 retail.sc.com tcp
US 8.8.8.8:53 guestportal2.dchft.nhs.uk udp
US 8.8.8.8:53 web.facebook.com udp
US 8.8.8.8:53 dossier.parcoursup.fr udp
US 8.8.8.8:53 web.facebook.com udp
BD 180.211.213.37:80 services.nidw.gov.bd tcp
N/A 127.0.0.1:64820 tcp
FR 212.27.48.11:143 subscribe.free.fr tcp
US 205.220.248.12:222 gtpsecurecard.com tcp
US 103.224.212.213:80 ag60.cc tcp
US 172.67.189.60:80 speedapp.io tcp
GB 92.123.128.175:21 retail.sc.com tcp
BE 13.225.239.38:995 portal.eightcap.com tcp
US 172.67.159.231:80 nhentai.net tcp
US 172.67.204.186:443 bettingent.com tcp
BD 180.211.213.37:443 services.nidw.gov.bd tcp
US 172.67.159.231:80 nhentai.net tcp
GB 92.123.128.175:80 retail.sc.com tcp
US 198.54.122.240:143 mx1.privateemail.com tcp
ID 103.6.34.222:995 kip-kuliah.kemdikbud.go.id tcp
US 8.8.8.8:53 mail.baslaboratory.com udp
N/A 127.0.0.1:64828 tcp
PK 103.125.60.77:443 iris.fbr.gov.pk tcp
BD 180.211.213.37:222 services.nidw.gov.bd tcp
BD 180.211.213.37:990 services.nidw.gov.bd tcp
ES 195.77.128.33:443 gestiona3.madrid.org tcp
US 162.255.118.13:995 mx3-hosting.jellyfish.systems tcp
US 205.220.248.12:80 gtpsecurecard.com tcp
IE 185.224.198.56:21 cpanel56.fastsecurehost.com tcp
DE 150.70.226.147:143 mail.nhs.uk tcp
NL 160.153.155.26:990 n3plcpnl0270.prod.ams3.secureserver.net tcp
NL 160.153.155.26:222 n3plcpnl0270.prod.ams3.secureserver.net tcp
FR 212.27.48.11:465 subscribe.free.fr tcp
US 8.8.8.8:53 dossier.parcoursup.fr udp
US 8.8.8.8:53 bemarts.com udp
US 103.224.212.213:80 ag60.cc tcp
FR 54.38.18.129:143 mta1.mail.speedapp.io tcp
BD 180.211.213.37:993 services.nidw.gov.bd tcp
US 8.8.8.8:53 retail.sc.com udp
US 8.8.8.8:53 yemenia.sita.aero udp
US 8.8.8.8:53 38.185.18.104.in-addr.arpa udp
US 8.8.8.8:53 60.189.67.172.in-addr.arpa udp
US 8.8.8.8:53 auth.riotgames.com udp
US 8.8.8.8:53 bemarts.com udp
US 8.8.8.8:53 boards.naruto-arena.net udp
US 8.8.8.8:53 cuadrosmedicos.com udp
US 103.224.212.213:990 ag60.cc tcp
US 8.8.8.8:53 ms5.cernerasp.com udp
US 104.18.185.38:80 account.riotgames.com tcp
BE 13.225.239.38:80 portal.eightcap.com tcp
BD 180.211.213.37:443 services.nidw.gov.bd tcp
US 104.18.8.28:80 krunker.io tcp
IE 185.224.198.56:80 cpanel56.fastsecurehost.com tcp
N/A 127.0.0.1:64833 tcp
N/A 127.0.0.1:64836 tcp
N/A 127.0.0.1:64838 tcp
N/A 127.0.0.1:64841 tcp
N/A 127.0.0.1:64844 tcp
US 8.8.8.8:53 cuadrosmedicos.com udp
US 8.8.8.8:53 vivaylien.com udp
US 8.8.8.8:53 33.128.77.195.in-addr.arpa udp
US 8.8.8.8:53 yemenia.sita.aero udp
GB 92.123.128.172:443 retail.sc.com tcp
FR 212.27.48.11:80 subscribe.free.fr tcp
N/A 127.0.0.1:64850 tcp
N/A 127.0.0.1:64857 tcp
N/A 127.0.0.1:64862 tcp
N/A 127.0.0.1:64867 tcp
N/A 127.0.0.1:64870 tcp
N/A 127.0.0.1:64872 tcp
N/A 127.0.0.1:64878 tcp
N/A 127.0.0.1:64882 tcp
N/A 127.0.0.1:64888 tcp
N/A 127.0.0.1:64894 tcp
N/A 127.0.0.1:64897 tcp
N/A 127.0.0.1:64899 tcp
N/A 127.0.0.1:64903 tcp
N/A 127.0.0.1:64908 tcp
FR 193.54.151.193:443 dossier.parcoursup.fr tcp
ES 195.77.128.33:80 gestiona3.madrid.org tcp
US 162.213.251.220:443 cmemes.com tcp
US 172.67.189.60:443 speedapp.io tcp
US 172.67.159.231:443 nhentai.net tcp
US 104.22.75.180:443 osu.ppy.sh tcp
US 159.140.6.121:80 cernerhealth.com tcp
N/A 127.0.0.1:64917 tcp
PK 103.125.60.77:80 iris.fbr.gov.pk tcp
N/A 127.0.0.1:64920 tcp
N/A 127.0.0.1:64926 tcp
N/A 127.0.0.1:64928 tcp
N/A 127.0.0.1:64933 tcp
N/A 127.0.0.1:64939 tcp
N/A 127.0.0.1:64944 tcp
N/A 127.0.0.1:64955 tcp
N/A 127.0.0.1:64960 tcp
N/A 127.0.0.1:64963 tcp
N/A 127.0.0.1:64966 tcp
N/A 127.0.0.1:64986 tcp
N/A 127.0.0.1:64990 tcp
N/A 127.0.0.1:64999 tcp
N/A 127.0.0.1:65004 tcp
US 8.8.8.8:53 boards.naruto-arena.net udp
N/A 127.0.0.1:65006 tcp
N/A 127.0.0.1:65008 tcp
N/A 127.0.0.1:65012 tcp
N/A 127.0.0.1:65015 tcp
N/A 127.0.0.1:65018 tcp
N/A 127.0.0.1:65023 tcp
N/A 127.0.0.1:65032 tcp
N/A 127.0.0.1:65036 tcp
N/A 127.0.0.1:65041 tcp
N/A 127.0.0.1:65050 tcp
N/A 127.0.0.1:65055 tcp
N/A 127.0.0.1:65057 tcp
N/A 127.0.0.1:65067 tcp
N/A 127.0.0.1:65071 tcp
N/A 127.0.0.1:65075 tcp
N/A 127.0.0.1:65080 tcp
N/A 127.0.0.1:65084 tcp
N/A 127.0.0.1:65088 tcp
N/A 127.0.0.1:65090 tcp
N/A 127.0.0.1:65099 tcp
N/A 127.0.0.1:65106 tcp
N/A 127.0.0.1:65111 tcp
N/A 127.0.0.1:65115 tcp
N/A 127.0.0.1:65118 tcp
N/A 127.0.0.1:65120 tcp
N/A 127.0.0.1:65126 tcp
N/A 127.0.0.1:65131 tcp
N/A 127.0.0.1:65135 tcp
BR 177.152.121.228:443 ingresso.eear.fab.mil.br tcp
US 8.8.8.8:53 kucoin.com udp
BR 177.152.121.228:80 ingresso.eear.fab.mil.br tcp
N/A 127.0.0.1:65140 tcp
N/A 127.0.0.1:65147 tcp
N/A 127.0.0.1:65159 tcp
N/A 127.0.0.1:65163 tcp
N/A 127.0.0.1:65167 tcp
N/A 127.0.0.1:65172 tcp
N/A 127.0.0.1:65177 tcp
N/A 127.0.0.1:65184 tcp
N/A 127.0.0.1:65188 tcp
N/A 127.0.0.1:65192 tcp
N/A 127.0.0.1:65191 tcp
N/A 127.0.0.1:65195 tcp
N/A 127.0.0.1:65202 tcp
N/A 127.0.0.1:65216 tcp
N/A 127.0.0.1:65222 tcp
N/A 127.0.0.1:65225 tcp
N/A 127.0.0.1:65227 tcp
N/A 127.0.0.1:65232 tcp
N/A 127.0.0.1:65236 tcp
N/A 127.0.0.1:65239 tcp
N/A 127.0.0.1:65242 tcp
N/A 127.0.0.1:65247 tcp
N/A 127.0.0.1:65256 tcp
N/A 127.0.0.1:65259 tcp
N/A 127.0.0.1:65261 tcp
N/A 127.0.0.1:65264 tcp
N/A 127.0.0.1:65267 tcp
N/A 127.0.0.1:65277 tcp
N/A 127.0.0.1:65280 tcp
N/A 127.0.0.1:65289 tcp
N/A 127.0.0.1:65295 tcp
N/A 127.0.0.1:65299 tcp
N/A 127.0.0.1:65302 tcp
N/A 127.0.0.1:65312 tcp
N/A 127.0.0.1:65316 tcp
N/A 127.0.0.1:65327 tcp
N/A 127.0.0.1:65330 tcp
N/A 127.0.0.1:65332 tcp
N/A 127.0.0.1:65336 tcp
N/A 127.0.0.1:65339 tcp
N/A 127.0.0.1:65341 tcp
N/A 127.0.0.1:65364 tcp
N/A 127.0.0.1:65366 tcp
N/A 127.0.0.1:65369 tcp
N/A 127.0.0.1:65371 tcp
N/A 127.0.0.1:65376 tcp
N/A 127.0.0.1:65378 tcp
N/A 127.0.0.1:65380 tcp
N/A 127.0.0.1:65384 tcp
N/A 127.0.0.1:65386 tcp
N/A 127.0.0.1:65389 tcp
N/A 127.0.0.1:65393 tcp
N/A 127.0.0.1:65397 tcp
N/A 127.0.0.1:65411 tcp
N/A 127.0.0.1:65413 tcp
N/A 127.0.0.1:65416 tcp
N/A 127.0.0.1:65418 tcp
N/A 127.0.0.1:65420 tcp
US 8.8.8.8:53 guestportal2.dchft.nhs.uk udp
N/A 127.0.0.1:65434 tcp
N/A 127.0.0.1:65438 tcp
N/A 127.0.0.1:65439 tcp
N/A 127.0.0.1:65444 tcp
N/A 127.0.0.1:65446 tcp
N/A 127.0.0.1:65453 tcp
N/A 127.0.0.1:65455 tcp
N/A 127.0.0.1:65459 tcp
N/A 127.0.0.1:65461 tcp
N/A 127.0.0.1:65465 tcp
N/A 127.0.0.1:65467 tcp
N/A 127.0.0.1:65471 tcp
N/A 127.0.0.1:65476 tcp
N/A 127.0.0.1:65479 tcp
N/A 127.0.0.1:65484 tcp
US 205.220.248.12:443 gtpsecurecard.com tcp
ID 103.6.34.222:80 kip-kuliah.kemdikbud.go.id tcp
N/A 127.0.0.1:65501 tcp
N/A 127.0.0.1:65504 tcp
N/A 127.0.0.1:65506 tcp
N/A 127.0.0.1:65508 tcp
N/A 127.0.0.1:65510 tcp
N/A 127.0.0.1:65512 tcp
N/A 127.0.0.1:65516 tcp
N/A 127.0.0.1:65518 tcp
N/A 127.0.0.1:65520 tcp
N/A 127.0.0.1:65524 tcp
N/A 127.0.0.1:65528 tcp
N/A 127.0.0.1:49153 tcp
N/A 127.0.0.1:49157 tcp
N/A 127.0.0.1:49164 tcp
N/A 127.0.0.1:49166 tcp
N/A 127.0.0.1:49168 tcp
N/A 127.0.0.1:49170 tcp
N/A 127.0.0.1:49176 tcp
US 199.59.243.225:80 ww25.ag60.cc tcp
US 8.8.8.8:53 baslaboratory.com udp
US 8.8.8.8:53 ssh.baslaboratory.com udp
N/A 127.0.0.1:49186 tcp
N/A 127.0.0.1:49190 tcp
N/A 127.0.0.1:49197 tcp
N/A 127.0.0.1:49200 tcp
N/A 127.0.0.1:49203 tcp
N/A 127.0.0.1:49205 tcp
N/A 127.0.0.1:49207 tcp
N/A 127.0.0.1:49209 tcp
N/A 127.0.0.1:49214 tcp
N/A 127.0.0.1:49225 tcp
N/A 127.0.0.1:49227 tcp
N/A 127.0.0.1:49231 tcp
N/A 127.0.0.1:49233 tcp
N/A 127.0.0.1:49235 tcp
N/A 127.0.0.1:49239 tcp
N/A 127.0.0.1:49243 tcp
N/A 127.0.0.1:49249 tcp
N/A 127.0.0.1:49251 tcp
N/A 127.0.0.1:49253 tcp
N/A 127.0.0.1:49259 tcp
N/A 127.0.0.1:49262 tcp
N/A 127.0.0.1:49267 tcp
N/A 127.0.0.1:49271 tcp
N/A 127.0.0.1:49274 tcp
N/A 127.0.0.1:49277 tcp
N/A 127.0.0.1:49279 tcp
N/A 127.0.0.1:49283 tcp
N/A 127.0.0.1:49285 tcp
N/A 127.0.0.1:49295 tcp
N/A 127.0.0.1:49300 tcp
N/A 127.0.0.1:49302 tcp
N/A 127.0.0.1:49305 tcp
N/A 127.0.0.1:49308 tcp
N/A 127.0.0.1:49312 tcp
N/A 127.0.0.1:49320 tcp
N/A 127.0.0.1:49322 tcp
N/A 127.0.0.1:49324 tcp
N/A 127.0.0.1:49328 tcp
N/A 127.0.0.1:49332 tcp
N/A 127.0.0.1:49337 tcp
N/A 127.0.0.1:49340 tcp
N/A 127.0.0.1:49343 tcp
N/A 127.0.0.1:49346 tcp
N/A 127.0.0.1:49363 tcp
N/A 127.0.0.1:49370 tcp
N/A 127.0.0.1:49373 tcp
N/A 127.0.0.1:49381 tcp
US 8.8.8.8:53 retail.sc.com udp
N/A 127.0.0.1:49384 tcp
N/A 127.0.0.1:49386 tcp
N/A 127.0.0.1:49389 tcp
N/A 127.0.0.1:49398 tcp
N/A 127.0.0.1:49401 tcp
N/A 127.0.0.1:49408 tcp
N/A 127.0.0.1:49415 tcp
N/A 127.0.0.1:49418 tcp
N/A 127.0.0.1:49421 tcp
N/A 127.0.0.1:49423 tcp
N/A 127.0.0.1:49427 tcp
N/A 127.0.0.1:49429 tcp
N/A 127.0.0.1:49432 tcp
BE 13.225.239.38:443 portal.eightcap.com tcp
N/A 127.0.0.1:49440 tcp
N/A 127.0.0.1:49443 tcp
N/A 127.0.0.1:49447 tcp
N/A 127.0.0.1:49458 tcp
N/A 127.0.0.1:49461 tcp
N/A 127.0.0.1:49465 tcp
N/A 127.0.0.1:49469 tcp
N/A 127.0.0.1:49479 tcp
N/A 127.0.0.1:49495 tcp
US 8.8.8.8:53 mail.baslaboratory.com udp
N/A 127.0.0.1:49500 tcp
N/A 127.0.0.1:49506 tcp
N/A 127.0.0.1:49518 tcp
N/A 127.0.0.1:49521 tcp
N/A 127.0.0.1:49524 tcp
N/A 127.0.0.1:49536 tcp
N/A 127.0.0.1:49539 tcp
N/A 127.0.0.1:49542 tcp
N/A 127.0.0.1:49545 tcp
N/A 127.0.0.1:49549 tcp
US 104.18.8.28:443 krunker.io tcp
BD 180.211.213.37:80 services.nidw.gov.bd tcp
N/A 127.0.0.1:49558 tcp
N/A 127.0.0.1:49560 tcp
N/A 127.0.0.1:49579 tcp
N/A 127.0.0.1:49593 tcp
N/A 127.0.0.1:49598 tcp
N/A 127.0.0.1:49602 tcp
US 8.8.8.8:53 vivaylien.com udp
IE 185.224.198.56:80 cpanel56.fastsecurehost.com tcp
US 104.18.185.38:80 account.riotgames.com tcp
US 8.8.8.8:53 kucoin.com udp
US 8.8.8.8:53 web.facebook.com udp
N/A 127.0.0.1:49610 tcp
N/A 127.0.0.1:49618 tcp
N/A 127.0.0.1:49636 tcp
N/A 127.0.0.1:49640 tcp
N/A 127.0.0.1:49643 tcp
N/A 127.0.0.1:49646 tcp
N/A 127.0.0.1:49648 tcp
N/A 127.0.0.1:49651 tcp
N/A 127.0.0.1:49653 tcp
N/A 127.0.0.1:49655 tcp
N/A 127.0.0.1:49660 tcp
N/A 127.0.0.1:49662 tcp
N/A 127.0.0.1:49673 tcp
N/A 127.0.0.1:49675 tcp
N/A 127.0.0.1:49678 tcp
N/A 127.0.0.1:49682 tcp
N/A 127.0.0.1:49686 tcp
N/A 127.0.0.1:49688 tcp
N/A 127.0.0.1:49691 tcp
N/A 127.0.0.1:49694 tcp
N/A 127.0.0.1:49697 tcp
N/A 127.0.0.1:49699 tcp
N/A 127.0.0.1:49703 tcp
N/A 127.0.0.1:49708 tcp
N/A 127.0.0.1:49714 tcp
N/A 127.0.0.1:49717 tcp
N/A 127.0.0.1:49719 tcp
N/A 127.0.0.1:49721 tcp
N/A 127.0.0.1:49724 tcp
GB 163.70.147.22:80 web.facebook.com tcp
US 8.8.8.8:53 guestportal2.dchft.nhs.uk udp
US 8.8.8.8:53 iris.fbr.gov.pk udp
US 8.8.8.8:53 gestiona3.madrid.org udp
N/A 127.0.0.1:49738 tcp
N/A 127.0.0.1:49739 tcp
N/A 127.0.0.1:49748 tcp
N/A 127.0.0.1:45454 tcp
N/A 127.0.0.1:49758 tcp
N/A 127.0.0.1:49763 tcp
N/A 127.0.0.1:49768 tcp
N/A 127.0.0.1:49770 tcp
N/A 127.0.0.1:49773 tcp
N/A 127.0.0.1:49775 tcp
N/A 127.0.0.1:49781 tcp
N/A 127.0.0.1:49791 tcp
N/A 127.0.0.1:49793 tcp
N/A 127.0.0.1:49797 tcp
N/A 127.0.0.1:49800 tcp
N/A 127.0.0.1:49805 tcp
N/A 127.0.0.1:49816 tcp
N/A 127.0.0.1:49819 tcp
N/A 127.0.0.1:49821 tcp
N/A 127.0.0.1:49823 tcp
N/A 127.0.0.1:49825 tcp
N/A 127.0.0.1:49830 tcp
N/A 127.0.0.1:49840 tcp
N/A 127.0.0.1:49849 tcp
N/A 127.0.0.1:49853 tcp
N/A 127.0.0.1:49858 tcp
N/A 127.0.0.1:49860 tcp
N/A 127.0.0.1:49864 tcp
N/A 127.0.0.1:49869 tcp
N/A 127.0.0.1:49880 tcp
N/A 127.0.0.1:49885 tcp
N/A 127.0.0.1:49889 tcp
N/A 127.0.0.1:49897 tcp
N/A 127.0.0.1:49899 tcp
US 8.8.8.8:53 boards.naruto-arena.net udp
US 8.8.8.8:53 172.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 193.151.54.193.in-addr.arpa udp
N/A 127.0.0.1:49906 tcp
N/A 127.0.0.1:49910 tcp
N/A 127.0.0.1:49913 tcp
N/A 127.0.0.1:49919 tcp
N/A 127.0.0.1:49921 tcp
N/A 127.0.0.1:49931 tcp
N/A 127.0.0.1:49930 tcp
N/A 127.0.0.1:49946 tcp
N/A 127.0.0.1:49949 tcp
N/A 127.0.0.1:49953 tcp
N/A 127.0.0.1:49955 tcp
N/A 127.0.0.1:49958 tcp
N/A 127.0.0.1:49962 tcp
N/A 127.0.0.1:49965 tcp
N/A 127.0.0.1:49967 tcp
N/A 127.0.0.1:49974 tcp
N/A 127.0.0.1:49977 tcp
N/A 127.0.0.1:49981 tcp
N/A 127.0.0.1:49985 tcp
N/A 127.0.0.1:49988 tcp
N/A 127.0.0.1:49990 tcp
N/A 127.0.0.1:49992 tcp
N/A 127.0.0.1:49994 tcp
N/A 127.0.0.1:49998 tcp
N/A 127.0.0.1:50005 tcp
N/A 127.0.0.1:50009 tcp
N/A 127.0.0.1:50013 tcp
N/A 127.0.0.1:50016 tcp
N/A 127.0.0.1:50028 tcp
N/A 127.0.0.1:50032 tcp
N/A 127.0.0.1:50043 tcp
N/A 127.0.0.1:50051 tcp
N/A 127.0.0.1:50055 tcp
N/A 127.0.0.1:50057 tcp
N/A 127.0.0.1:50059 tcp
N/A 127.0.0.1:50062 tcp
N/A 127.0.0.1:50065 tcp
N/A 127.0.0.1:50072 tcp
N/A 127.0.0.1:50080 tcp
N/A 127.0.0.1:50082 tcp
N/A 127.0.0.1:50084 tcp
N/A 127.0.0.1:50086 tcp
N/A 127.0.0.1:50088 tcp
N/A 127.0.0.1:50093 tcp
N/A 127.0.0.1:50096 tcp
N/A 127.0.0.1:50098 tcp
N/A 127.0.0.1:50100 tcp
N/A 127.0.0.1:50104 tcp
N/A 127.0.0.1:50108 tcp
N/A 127.0.0.1:50110 tcp
N/A 127.0.0.1:50112 tcp
N/A 127.0.0.1:50130 tcp
N/A 127.0.0.1:50134 tcp
BE 13.225.239.113:80 tradingview.com tcp
US 8.8.8.8:53 baslaboratory.com udp
N/A 127.0.0.1:50142 tcp
N/A 127.0.0.1:50156 tcp
N/A 127.0.0.1:50159 tcp
N/A 127.0.0.1:50166 tcp
N/A 127.0.0.1:50170 tcp
N/A 127.0.0.1:50174 tcp
N/A 127.0.0.1:50182 tcp
N/A 127.0.0.1:50184 tcp
N/A 127.0.0.1:50187 tcp
N/A 127.0.0.1:50191 tcp
N/A 127.0.0.1:50195 tcp
N/A 127.0.0.1:50199 tcp
N/A 127.0.0.1:50201 tcp
N/A 127.0.0.1:50203 tcp
N/A 127.0.0.1:50209 tcp
N/A 127.0.0.1:50229 tcp
US 8.8.8.8:53 yemenia.sita.aero udp
FR 212.27.48.11:80 subscribe.free.fr tcp
N/A 127.0.0.1:50248 tcp
N/A 127.0.0.1:50251 tcp
N/A 127.0.0.1:50269 tcp
N/A 127.0.0.1:50272 tcp
N/A 127.0.0.1:50283 tcp
N/A 127.0.0.1:50290 tcp
N/A 127.0.0.1:50298 tcp
N/A 127.0.0.1:50304 tcp
N/A 127.0.0.1:50315 tcp
N/A 127.0.0.1:50317 tcp
N/A 127.0.0.1:50319 tcp
N/A 127.0.0.1:50323 tcp
N/A 127.0.0.1:50325 tcp
N/A 127.0.0.1:50336 tcp
US 8.8.8.8:53 vivaylien.com udp
US 8.8.8.8:53 ssl-sso.orange.fr udp
US 8.8.8.8:53 login.mailchimp.com udp
US 8.8.8.8:53 ssl-sso.orange.fr udp
N/A 127.0.0.1:50350 tcp
N/A 127.0.0.1:50354 tcp
N/A 127.0.0.1:50356 tcp
N/A 127.0.0.1:50366 tcp
N/A 127.0.0.1:50369 tcp
N/A 127.0.0.1:50374 tcp
N/A 127.0.0.1:50376 tcp
N/A 127.0.0.1:50380 tcp
N/A 127.0.0.1:50393 tcp
N/A 127.0.0.1:50395 tcp
N/A 127.0.0.1:50400 tcp
N/A 127.0.0.1:50422 tcp
N/A 127.0.0.1:50430 tcp
N/A 127.0.0.1:50436 tcp
N/A 127.0.0.1:50439 tcp
N/A 127.0.0.1:50443 tcp
N/A 127.0.0.1:50452 tcp
N/A 127.0.0.1:50456 tcp
N/A 127.0.0.1:50458 tcp
N/A 127.0.0.1:50461 tcp
N/A 127.0.0.1:50472 tcp
N/A 127.0.0.1:50475 tcp
N/A 127.0.0.1:50484 tcp
N/A 127.0.0.1:50497 tcp
N/A 127.0.0.1:50500 tcp
N/A 127.0.0.1:50503 tcp
N/A 127.0.0.1:50510 tcp
N/A 127.0.0.1:50515 tcp
N/A 127.0.0.1:50519 tcp
N/A 127.0.0.1:50522 tcp
N/A 127.0.0.1:50525 tcp
N/A 127.0.0.1:50530 tcp
N/A 127.0.0.1:50539 tcp
N/A 127.0.0.1:50547 tcp
N/A 127.0.0.1:50549 tcp
FR 193.54.151.193:80 dossier.parcoursup.fr tcp
US 8.8.8.8:53 boards.naruto-arena.net udp
US 8.8.8.8:53 _dc-mx.765df0a08d67.cuadrosmedicos.com udp
US 8.8.8.8:53 ftp.yemenia.sita.aero udp
ES 195.77.128.33:80 gestiona3.madrid.org tcp
N/A 127.0.0.1:50558 tcp
N/A 127.0.0.1:50561 tcp
N/A 127.0.0.1:50563 tcp
N/A 127.0.0.1:50565 tcp
N/A 127.0.0.1:50567 tcp
N/A 127.0.0.1:50569 tcp
N/A 127.0.0.1:50578 tcp
N/A 127.0.0.1:50580 tcp
N/A 127.0.0.1:50590 tcp
N/A 127.0.0.1:50593 tcp
N/A 127.0.0.1:50597 tcp
N/A 127.0.0.1:50602 tcp
N/A 127.0.0.1:50604 tcp
N/A 127.0.0.1:50614 tcp
N/A 127.0.0.1:50616 tcp
N/A 127.0.0.1:50618 tcp
N/A 127.0.0.1:50620 tcp
N/A 127.0.0.1:50623 tcp
N/A 127.0.0.1:50625 tcp
N/A 127.0.0.1:50627 tcp
N/A 127.0.0.1:50629 tcp
N/A 127.0.0.1:50633 tcp
N/A 127.0.0.1:50637 tcp
N/A 127.0.0.1:50639 tcp
N/A 127.0.0.1:50643 tcp
N/A 127.0.0.1:50660 tcp
N/A 127.0.0.1:50685 tcp
N/A 127.0.0.1:50690 tcp
US 3.140.13.188:80 bemarts.com tcp
US 8.8.8.8:53 ftp.gtpsecurecard.com udp
US 172.67.159.231:80 nhentai.net tcp
US 104.21.43.171:80 altyazilifilm.live tcp
US 8.8.8.8:53 web.facebook.com udp
US 8.8.8.8:53 login.mailchimp.com udp
US 172.67.213.14:80 icetorrent.org tcp
US 8.8.8.8:53 tube.bixson.com udp
US 162.213.251.220:80 cmemes.com tcp
N/A 127.0.0.1:50692 tcp
N/A 127.0.0.1:50694 tcp
N/A 127.0.0.1:50703 tcp
N/A 127.0.0.1:50705 tcp
N/A 127.0.0.1:50708 tcp
N/A 127.0.0.1:50710 tcp
N/A 127.0.0.1:50718 tcp
N/A 127.0.0.1:50721 tcp
N/A 127.0.0.1:50724 tcp
N/A 127.0.0.1:50731 tcp
N/A 127.0.0.1:50741 tcp
N/A 127.0.0.1:50745 tcp
N/A 127.0.0.1:50747 tcp
N/A 127.0.0.1:50749 tcp
N/A 127.0.0.1:50751 tcp
N/A 127.0.0.1:50753 tcp
N/A 127.0.0.1:50755 tcp
N/A 127.0.0.1:50758 tcp
US 172.67.135.248:80 cuadrosmedicos.com tcp
US 8.8.8.8:53 ftp.nhentai.net udp
US 8.8.8.8:53 retail.sc.com udp
GB 92.123.128.172:80 retail.sc.com tcp
US 8.8.8.8:53 vivaylien.com udp
US 8.8.8.8:53 yemenia.sita.aero udp
N/A 127.0.0.1:50762 tcp
N/A 127.0.0.1:50767 tcp
N/A 127.0.0.1:50780 tcp
N/A 127.0.0.1:50783 tcp
N/A 127.0.0.1:50789 tcp
N/A 127.0.0.1:50813 tcp
N/A 127.0.0.1:50823 tcp
N/A 127.0.0.1:50825 tcp
N/A 127.0.0.1:50829 tcp
N/A 127.0.0.1:50833 tcp
N/A 127.0.0.1:50835 tcp
N/A 127.0.0.1:50837 tcp
N/A 127.0.0.1:50838 tcp
N/A 127.0.0.1:50844 tcp
N/A 127.0.0.1:50847 tcp
N/A 127.0.0.1:50849 tcp
N/A 127.0.0.1:50852 tcp
N/A 127.0.0.1:50854 tcp
N/A 127.0.0.1:50856 tcp
N/A 127.0.0.1:50860 tcp
N/A 127.0.0.1:50862 tcp
N/A 127.0.0.1:50864 tcp
N/A 127.0.0.1:50866 tcp
N/A 127.0.0.1:50868 tcp
N/A 127.0.0.1:50870 tcp
N/A 127.0.0.1:50872 tcp
N/A 127.0.0.1:50874 tcp
N/A 127.0.0.1:50879 tcp
N/A 127.0.0.1:50885 tcp
N/A 127.0.0.1:50900 tcp
N/A 127.0.0.1:50904 tcp
N/A 127.0.0.1:50907 tcp
N/A 127.0.0.1:50930 tcp
N/A 127.0.0.1:50935 tcp
N/A 127.0.0.1:50940 tcp
N/A 127.0.0.1:50943 tcp
N/A 127.0.0.1:50946 tcp
N/A 127.0.0.1:50743 tcp
N/A 127.0.0.1:50963 tcp
N/A 127.0.0.1:50966 tcp
N/A 127.0.0.1:50970 tcp
N/A 127.0.0.1:50972 tcp
N/A 127.0.0.1:50974 tcp
N/A 127.0.0.1:50976 tcp
N/A 127.0.0.1:50978 tcp
N/A 127.0.0.1:50980 tcp
N/A 127.0.0.1:50983 tcp
N/A 127.0.0.1:50985 tcp
N/A 127.0.0.1:50989 tcp
N/A 127.0.0.1:50991 tcp
N/A 127.0.0.1:50993 tcp
N/A 127.0.0.1:50997 tcp
N/A 127.0.0.1:50999 tcp
N/A 127.0.0.1:51017 tcp
N/A 127.0.0.1:51022 tcp
N/A 127.0.0.1:51026 tcp
N/A 127.0.0.1:51060 tcp
N/A 127.0.0.1:51064 tcp
N/A 127.0.0.1:51066 tcp
N/A 127.0.0.1:51068 tcp
N/A 127.0.0.1:51070 tcp
N/A 127.0.0.1:51077 tcp
N/A 127.0.0.1:51079 tcp
N/A 127.0.0.1:51081 tcp
N/A 127.0.0.1:51102 tcp
N/A 127.0.0.1:51107 tcp
N/A 127.0.0.1:51109 tcp
N/A 127.0.0.1:51111 tcp
N/A 127.0.0.1:51115 tcp
N/A 127.0.0.1:51117 tcp
N/A 127.0.0.1:51126 tcp
N/A 127.0.0.1:51136 tcp
N/A 127.0.0.1:51143 tcp
N/A 127.0.0.1:51148 tcp
N/A 127.0.0.1:51151 tcp
N/A 127.0.0.1:51153 tcp
N/A 127.0.0.1:51155 tcp
N/A 127.0.0.1:51174 tcp
N/A 127.0.0.1:51176 tcp
N/A 127.0.0.1:51178 tcp
N/A 127.0.0.1:51183 tcp
N/A 127.0.0.1:51185 tcp
N/A 127.0.0.1:51187 tcp
N/A 127.0.0.1:51189 tcp
N/A 127.0.0.1:51191 tcp
US 8.8.8.8:53 iris.fbr.gov.pk udp
US 8.8.8.8:53 retail.sc.com udp
US 8.8.8.8:53 121.6.140.159.in-addr.arpa udp
N/A 127.0.0.1:51195 tcp
N/A 127.0.0.1:51197 tcp
N/A 127.0.0.1:51199 tcp
N/A 127.0.0.1:51220 tcp
N/A 127.0.0.1:51222 tcp
N/A 127.0.0.1:51228 tcp
N/A 127.0.0.1:51231 tcp
N/A 127.0.0.1:51235 tcp
N/A 127.0.0.1:51237 tcp
N/A 127.0.0.1:51247 tcp
N/A 127.0.0.1:51250 tcp
N/A 127.0.0.1:51252 tcp
N/A 127.0.0.1:51254 tcp
N/A 127.0.0.1:51256 tcp
N/A 127.0.0.1:51258 tcp
N/A 127.0.0.1:51262 tcp
N/A 127.0.0.1:51264 tcp
N/A 127.0.0.1:51266 tcp
N/A 127.0.0.1:51268 tcp
N/A 127.0.0.1:51279 tcp
N/A 127.0.0.1:51285 tcp
N/A 127.0.0.1:51289 tcp
N/A 127.0.0.1:51300 tcp
N/A 127.0.0.1:51301 tcp
N/A 127.0.0.1:51304 tcp
N/A 127.0.0.1:51306 tcp
N/A 127.0.0.1:51309 tcp
N/A 127.0.0.1:51313 tcp
N/A 127.0.0.1:51317 tcp
N/A 127.0.0.1:51320 tcp
N/A 127.0.0.1:51322 tcp
N/A 127.0.0.1:51327 tcp
US 8.8.8.8:53 qwerty.maweb.eu udp
US 8.8.8.8:53 accounts.paytm.com udp
US 8.8.8.8:53 ftp.altyazilifilm.live udp
US 8.8.8.8:53 qwerty.maweb.eu udp
US 8.8.8.8:53 autoempartes.pt udp
US 8.8.8.8:53 autoempartes.pt udp
N/A 127.0.0.1:51345 tcp
N/A 127.0.0.1:51349 tcp
N/A 127.0.0.1:51351 tcp
N/A 127.0.0.1:51353 tcp
N/A 127.0.0.1:51355 tcp
N/A 127.0.0.1:51357 tcp
N/A 127.0.0.1:51359 tcp
N/A 127.0.0.1:51361 tcp
N/A 127.0.0.1:51363 tcp
N/A 127.0.0.1:51365 tcp
N/A 127.0.0.1:51368 tcp
N/A 127.0.0.1:51370 tcp
N/A 127.0.0.1:51372 tcp
N/A 127.0.0.1:51374 tcp
N/A 127.0.0.1:51377 tcp
N/A 127.0.0.1:51379 tcp
N/A 127.0.0.1:51388 tcp
N/A 127.0.0.1:51401 tcp
N/A 127.0.0.1:51403 tcp
N/A 127.0.0.1:51405 tcp
N/A 127.0.0.1:51407 tcp
N/A 127.0.0.1:51409 tcp
N/A 127.0.0.1:51411 tcp
N/A 127.0.0.1:51413 tcp
N/A 127.0.0.1:51416 tcp
US 8.8.8.8:53 campusvirtual.sciedtec.com udp
US 8.8.8.8:53 campusvirtual.sciedtec.com udp
US 8.8.8.8:53 wyylde.com udp
US 8.8.8.8:53 wyylde.com udp
US 8.8.8.8:53 mashalacademy.com udp
US 8.8.8.8:53 ftp.ingresso.eear.aer.mil.br udp
US 8.8.8.8:53 mashalacademy.com udp
N/A 127.0.0.1:51418 tcp
N/A 127.0.0.1:51420 tcp
N/A 127.0.0.1:51422 tcp
N/A 127.0.0.1:51424 tcp
N/A 127.0.0.1:51428 tcp
N/A 127.0.0.1:51431 tcp
N/A 127.0.0.1:51440 tcp
N/A 127.0.0.1:51446 tcp
N/A 127.0.0.1:51448 tcp
N/A 127.0.0.1:51455 tcp
N/A 127.0.0.1:51473 tcp
N/A 127.0.0.1:51477 tcp
N/A 127.0.0.1:51481 tcp
US 8.8.8.8:53 store.cherryaudio.com udp
US 8.8.8.8:53 paineldoinstabrasil.com udp
US 8.8.8.8:53 ftp.iris.fbr.gov.pk udp
US 8.8.8.8:53 paineldoinstabrasil.com udp
US 8.8.8.8:53 store.cherryaudio.com udp
US 8.8.8.8:53 passport.twitch.tv udp
US 8.8.8.8:53 mail.gtpsecurecard.com udp
US 8.8.8.8:53 passport.twitch.tv udp
US 8.8.8.8:53 dikdin-daftar.bkn.go.id udp
US 8.8.8.8:53 dikdin-daftar.bkn.go.id udp
N/A 127.0.0.1:51496 tcp
N/A 127.0.0.1:51499 tcp
N/A 127.0.0.1:51503 tcp
N/A 127.0.0.1:51507 tcp
N/A 127.0.0.1:51510 tcp
N/A 127.0.0.1:51512 tcp
N/A 127.0.0.1:51514 tcp
N/A 127.0.0.1:51523 tcp
N/A 127.0.0.1:51529 tcp
N/A 127.0.0.1:51536 tcp
N/A 127.0.0.1:51539 tcp
N/A 127.0.0.1:51543 tcp
N/A 127.0.0.1:51550 tcp
N/A 127.0.0.1:51556 tcp
N/A 127.0.0.1:51559 tcp
N/A 127.0.0.1:51565 tcp
N/A 127.0.0.1:51570 tcp
N/A 127.0.0.1:51573 tcp
N/A 127.0.0.1:51576 tcp
N/A 127.0.0.1:51579 tcp
N/A 127.0.0.1:51588 tcp
N/A 127.0.0.1:51594 tcp
N/A 127.0.0.1:51596 tcp
N/A 127.0.0.1:51599 tcp
N/A 127.0.0.1:51605 tcp
N/A 127.0.0.1:51613 tcp
N/A 127.0.0.1:51615 tcp
N/A 127.0.0.1:51618 tcp
N/A 127.0.0.1:51625 tcp
N/A 127.0.0.1:51631 tcp
N/A 127.0.0.1:51633 tcp
N/A 127.0.0.1:51639 tcp
N/A 127.0.0.1:51643 tcp
N/A 127.0.0.1:51649 tcp
N/A 127.0.0.1:51651 tcp
N/A 127.0.0.1:51657 tcp
N/A 127.0.0.1:51661 tcp
N/A 127.0.0.1:51668 tcp
N/A 127.0.0.1:51671 tcp
N/A 127.0.0.1:51675 tcp
N/A 127.0.0.1:51685 tcp
N/A 127.0.0.1:51687 tcp
N/A 127.0.0.1:51691 tcp
N/A 127.0.0.1:51697 tcp
N/A 127.0.0.1:51700 tcp
N/A 127.0.0.1:51703 tcp
N/A 127.0.0.1:51706 tcp
N/A 127.0.0.1:51709 tcp
N/A 127.0.0.1:51718 tcp
N/A 127.0.0.1:51724 tcp
N/A 127.0.0.1:51726 tcp
N/A 127.0.0.1:51733 tcp
N/A 127.0.0.1:51739 tcp
N/A 127.0.0.1:51742 tcp
N/A 127.0.0.1:51751 tcp
N/A 127.0.0.1:51755 tcp
N/A 127.0.0.1:51758 tcp
N/A 127.0.0.1:51761 tcp
N/A 127.0.0.1:51770 tcp
N/A 127.0.0.1:51774 tcp
N/A 127.0.0.1:51781 tcp
N/A 127.0.0.1:51785 tcp
N/A 127.0.0.1:51790 tcp
N/A 127.0.0.1:51793 tcp
N/A 127.0.0.1:51798 tcp
N/A 127.0.0.1:51802 tcp
N/A 127.0.0.1:51807 tcp
N/A 127.0.0.1:51810 tcp
N/A 127.0.0.1:51814 tcp
N/A 127.0.0.1:51819 tcp
N/A 127.0.0.1:51823 tcp
N/A 127.0.0.1:51826 tcp
N/A 127.0.0.1:45454 tcp
N/A 127.0.0.1:51831 tcp
US 8.8.8.8:53 boards.naruto-arena.net udp
US 8.8.8.8:53 login.nvgs.nvidia.com udp
US 8.8.8.8:53 filmovisaprevodomonline.com udp
US 8.8.8.8:53 filmovisaprevodomonline.com udp
US 8.8.8.8:53 onkeldd.mooo.com udp
US 8.8.8.8:53 onkeldd.mooo.com udp
US 8.8.8.8:53 host71.registrar-servers.com udp
US 8.8.8.8:53 rajaneservices.com udp
US 8.8.8.8:53 host71.registrar-servers.com udp
N/A 127.0.0.1:51836 tcp
N/A 127.0.0.1:51843 tcp
N/A 127.0.0.1:51848 tcp
N/A 127.0.0.1:51852 tcp
N/A 127.0.0.1:51855 tcp
N/A 127.0.0.1:51862 tcp
N/A 127.0.0.1:51866 tcp
N/A 127.0.0.1:51868 tcp
N/A 127.0.0.1:51871 tcp
N/A 127.0.0.1:51874 tcp
N/A 127.0.0.1:51878 tcp
N/A 127.0.0.1:51881 tcp
N/A 127.0.0.1:51888 tcp
N/A 127.0.0.1:51893 tcp
N/A 127.0.0.1:51897 tcp
N/A 127.0.0.1:51900 tcp
N/A 127.0.0.1:51903 tcp
N/A 127.0.0.1:51907 tcp
N/A 127.0.0.1:51912 tcp
N/A 127.0.0.1:51918 tcp
N/A 127.0.0.1:51922 tcp
N/A 127.0.0.1:51927 tcp
N/A 127.0.0.1:51932 tcp
N/A 127.0.0.1:51938 tcp
N/A 127.0.0.1:51940 tcp
N/A 127.0.0.1:51944 tcp
N/A 127.0.0.1:51951 tcp
N/A 127.0.0.1:51956 tcp
N/A 127.0.0.1:51960 tcp
N/A 127.0.0.1:51962 tcp
N/A 127.0.0.1:51964 tcp
N/A 127.0.0.1:51974 tcp
N/A 127.0.0.1:51978 tcp
N/A 127.0.0.1:51981 tcp
N/A 127.0.0.1:51985 tcp
N/A 127.0.0.1:51995 tcp
N/A 127.0.0.1:51996 tcp
N/A 127.0.0.1:52002 tcp
N/A 127.0.0.1:52007 tcp
N/A 127.0.0.1:52011 tcp
N/A 127.0.0.1:52015 tcp
N/A 127.0.0.1:52022 tcp
N/A 127.0.0.1:52025 tcp
N/A 127.0.0.1:52033 tcp
N/A 127.0.0.1:52035 tcp
N/A 127.0.0.1:52039 tcp
N/A 127.0.0.1:52042 tcp
N/A 127.0.0.1:52046 tcp
N/A 127.0.0.1:52048 tcp
N/A 127.0.0.1:52061 tcp
N/A 127.0.0.1:52063 tcp
N/A 127.0.0.1:52067 tcp
N/A 127.0.0.1:52073 tcp
N/A 127.0.0.1:52078 tcp
N/A 127.0.0.1:52083 tcp
N/A 127.0.0.1:52087 tcp
N/A 127.0.0.1:52091 tcp
N/A 127.0.0.1:52093 tcp
N/A 127.0.0.1:52095 tcp
N/A 127.0.0.1:52097 tcp
N/A 127.0.0.1:52105 tcp
N/A 127.0.0.1:52108 tcp
N/A 127.0.0.1:52110 tcp
N/A 127.0.0.1:52116 tcp
N/A 127.0.0.1:52124 tcp
N/A 127.0.0.1:52129 tcp
N/A 127.0.0.1:52132 tcp
N/A 127.0.0.1:52134 tcp
N/A 127.0.0.1:52142 tcp
N/A 127.0.0.1:52148 tcp
N/A 127.0.0.1:52150 tcp
N/A 127.0.0.1:52152 tcp
N/A 127.0.0.1:52164 tcp
N/A 127.0.0.1:52166 tcp
N/A 127.0.0.1:52170 tcp
N/A 127.0.0.1:52173 tcp
N/A 127.0.0.1:52180 tcp
N/A 127.0.0.1:52182 tcp
N/A 127.0.0.1:52186 tcp
N/A 127.0.0.1:52189 tcp
N/A 127.0.0.1:52199 tcp
N/A 127.0.0.1:52203 tcp
N/A 127.0.0.1:52209 tcp
N/A 127.0.0.1:52213 tcp
N/A 127.0.0.1:52216 tcp
N/A 127.0.0.1:52220 tcp
N/A 127.0.0.1:52226 tcp
N/A 127.0.0.1:52229 tcp
N/A 127.0.0.1:52233 tcp
US 8.8.8.8:53 rajaneservices.com udp
US 8.8.8.8:53 web.facebook.com udp
US 8.8.8.8:53 vivaylien.com udp
US 8.8.8.8:53 faucetcrypto.com udp
US 8.8.8.8:53 signup.las.leagueoflegends.com udp
US 8.8.8.8:53 signup.las.leagueoflegends.com udp
N/A 127.0.0.1:52236 tcp
N/A 127.0.0.1:52244 tcp
N/A 127.0.0.1:52250 tcp
N/A 127.0.0.1:52252 tcp
N/A 127.0.0.1:52256 tcp
N/A 127.0.0.1:52264 tcp
N/A 127.0.0.1:52267 tcp
N/A 127.0.0.1:52272 tcp
N/A 127.0.0.1:52280 tcp
N/A 127.0.0.1:52283 tcp
N/A 127.0.0.1:52286 tcp
N/A 127.0.0.1:52289 tcp
N/A 127.0.0.1:52293 tcp
N/A 127.0.0.1:52297 tcp
N/A 127.0.0.1:52300 tcp
N/A 127.0.0.1:52303 tcp
N/A 127.0.0.1:52307 tcp
N/A 127.0.0.1:52309 tcp
N/A 127.0.0.1:52314 tcp
N/A 127.0.0.1:52318 tcp
N/A 127.0.0.1:52326 tcp
N/A 127.0.0.1:52329 tcp
N/A 127.0.0.1:52334 tcp
N/A 127.0.0.1:52343 tcp
N/A 127.0.0.1:52350 tcp
N/A 127.0.0.1:52352 tcp
N/A 127.0.0.1:52356 tcp
N/A 127.0.0.1:52360 tcp
N/A 127.0.0.1:52366 tcp
N/A 127.0.0.1:52371 tcp
N/A 127.0.0.1:52377 tcp
N/A 127.0.0.1:52382 tcp
N/A 127.0.0.1:52386 tcp
N/A 127.0.0.1:52389 tcp
N/A 127.0.0.1:52393 tcp
N/A 127.0.0.1:52395 tcp
US 8.8.8.8:53 kucoin-com.mail.protection.outlook.com udp
US 8.8.8.8:53 faucetcrypto.com udp
US 8.8.8.8:53 passport.twitch.tv udp
US 8.8.8.8:53 mail.nhs.uk udp
US 8.8.8.8:53 mercadopago.com udp
US 8.8.8.8:53 mercadopago.com udp
US 8.8.8.8:53 nsc-security.com udp
US 8.8.8.8:53 apsense.com udp
N/A 127.0.0.1:52399 tcp
N/A 127.0.0.1:52405 tcp
N/A 127.0.0.1:52408 tcp
N/A 127.0.0.1:52412 tcp
N/A 127.0.0.1:52414 tcp
N/A 127.0.0.1:52418 tcp
N/A 127.0.0.1:52423 tcp
N/A 127.0.0.1:52433 tcp
N/A 127.0.0.1:52437 tcp
N/A 127.0.0.1:52441 tcp
N/A 127.0.0.1:52445 tcp
N/A 127.0.0.1:52452 tcp
N/A 127.0.0.1:52455 tcp
N/A 127.0.0.1:52458 tcp
N/A 127.0.0.1:52465 tcp
N/A 127.0.0.1:52470 tcp
N/A 127.0.0.1:52473 tcp
N/A 127.0.0.1:52475 tcp
N/A 127.0.0.1:52486 tcp
N/A 127.0.0.1:52489 tcp
N/A 127.0.0.1:52497 tcp
N/A 127.0.0.1:52501 tcp
N/A 127.0.0.1:52506 tcp
N/A 127.0.0.1:52508 tcp
N/A 127.0.0.1:52510 tcp
N/A 127.0.0.1:52522 tcp
N/A 127.0.0.1:52524 tcp
N/A 127.0.0.1:52528 tcp
N/A 127.0.0.1:52531 tcp
N/A 127.0.0.1:52537 tcp
N/A 127.0.0.1:52541 tcp
N/A 127.0.0.1:52546 tcp
N/A 127.0.0.1:52549 tcp
N/A 127.0.0.1:52553 tcp
N/A 127.0.0.1:52559 tcp
US 8.8.8.8:53 guestportal2.dchft.nhs.uk udp
US 8.8.8.8:53 obmenochka.com udp
US 8.8.8.8:53 ayuda.amena.com udp
US 8.8.8.8:53 ayuda.amena.com udp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 ident.familysearch.org udp
US 8.8.8.8:53 ftp.n3plcpnl0270.prod.ams3.secureserver.net udp
US 8.8.8.8:53 ident.familysearch.org udp
N/A 127.0.0.1:52565 tcp
N/A 127.0.0.1:52567 tcp
N/A 127.0.0.1:52570 tcp
N/A 127.0.0.1:52575 tcp
N/A 127.0.0.1:52583 tcp
N/A 127.0.0.1:52587 tcp
N/A 127.0.0.1:52589 tcp
N/A 127.0.0.1:52591 tcp
N/A 127.0.0.1:52601 tcp
N/A 127.0.0.1:52604 tcp
N/A 127.0.0.1:52607 tcp
N/A 127.0.0.1:52611 tcp
N/A 127.0.0.1:52613 tcp
N/A 127.0.0.1:52615 tcp
N/A 127.0.0.1:52627 tcp
N/A 127.0.0.1:52631 tcp
N/A 127.0.0.1:52634 tcp
N/A 127.0.0.1:52641 tcp
N/A 127.0.0.1:52644 tcp
N/A 127.0.0.1:52648 tcp
N/A 127.0.0.1:52651 tcp
N/A 127.0.0.1:52661 tcp
N/A 127.0.0.1:52665 tcp
N/A 127.0.0.1:52668 tcp
N/A 127.0.0.1:52671 tcp
N/A 127.0.0.1:52675 tcp
N/A 127.0.0.1:52680 tcp
N/A 127.0.0.1:52682 tcp
N/A 127.0.0.1:52686 tcp
N/A 127.0.0.1:52688 tcp
N/A 127.0.0.1:52691 tcp
N/A 127.0.0.1:52699 tcp
N/A 127.0.0.1:52704 tcp
N/A 127.0.0.1:52706 tcp
N/A 127.0.0.1:52711 tcp
N/A 127.0.0.1:52718 tcp
N/A 127.0.0.1:52722 tcp
US 8.8.8.8:53 subscribe.quipper.com udp
US 8.8.8.8:53 subscribe.quipper.com udp
US 8.8.8.8:53 auth.netcombo.com.br udp
US 8.8.8.8:53 leoniehanekephotography.de udp
US 8.8.8.8:53 webmail.pyea.ph udp
US 8.8.8.8:53 leoniehanekephotography.de udp
US 8.8.8.8:53 webmail.pyea.ph udp
N/A 127.0.0.1:52727 tcp
N/A 127.0.0.1:52729 tcp
US 8.8.8.8:53 accounts.chaosgroup.com udp
US 8.8.8.8:53 pwm.unirazak.edu.my udp
US 8.8.8.8:53 pwm.unirazak.edu.my udp
US 8.8.8.8:53 event.co.99.com udp
N/A 127.0.0.1:52734 tcp
N/A 127.0.0.1:52741 tcp
US 8.8.8.8:53 event.co.99.com udp
US 8.8.8.8:53 uplibra.io udp
US 8.8.8.8:53 baslaboratory.com udp
US 8.8.8.8:53 uplibra.io udp
US 8.8.8.8:53 auth.myminifactory.com udp
US 8.8.8.8:53 ssh.baslaboratory.com udp
US 8.8.8.8:53 mail.baslaboratory.com udp
US 8.8.8.8:53 server.nitrado.net udp
US 8.8.8.8:53 ai-ap.com udp
US 8.8.8.8:53 pantielove.com udp
US 8.8.8.8:53 ai-ap.com udp
US 8.8.8.8:53 pantielove.com udp
US 8.8.8.8:53 worldoftanks.eu udp
US 8.8.8.8:53 auth.myminifactory.com udp
US 8.8.8.8:53 worldoftanks.eu udp
US 8.8.8.8:53 ftp.baslaboratory.com udp
US 8.8.8.8:53 eservices.hec.gov.pk udp
US 8.8.8.8:53 belladonna.foroactivo.com udp
US 8.8.8.8:53 eservices.hec.gov.pk udp
US 8.8.8.8:53 ftp.kip-kuliah.kemdikbud.go.id udp
US 8.8.8.8:53 retail.sc.com udp
US 8.8.8.8:53 belladonna.foroactivo.com udp
US 8.8.8.8:53 paspor.siap-online.com udp
US 8.8.8.8:53 teules.es udp
US 8.8.8.8:53 paspor.siap-online.com udp
US 8.8.8.8:53 teules.es udp
US 8.8.8.8:53 library-gva.un.org udp
N/A 127.0.0.1:52744 tcp
N/A 127.0.0.1:52748 tcp
N/A 127.0.0.1:52754 tcp
N/A 127.0.0.1:52759 tcp
N/A 127.0.0.1:52762 tcp
N/A 127.0.0.1:52767 tcp
N/A 127.0.0.1:52771 tcp
N/A 127.0.0.1:52774 tcp
US 8.8.8.8:53 paspor.siap-online.com udp
US 8.8.8.8:53 mail.services.nidw.gov.bd udp
US 8.8.8.8:53 library-gva.un.org udp
US 8.8.8.8:53 employer.sss.gov.ph udp
US 8.8.8.8:53 employer.sss.gov.ph udp
N/A 127.0.0.1:52779 tcp
N/A 127.0.0.1:52782 tcp
N/A 127.0.0.1:52786 tcp
N/A 127.0.0.1:52790 tcp
N/A 127.0.0.1:52797 tcp
N/A 127.0.0.1:52801 tcp
N/A 127.0.0.1:52805 tcp
N/A 127.0.0.1:52809 tcp
US 8.8.8.8:53 auxmoney.xyz udp
US 8.8.8.8:53 auxmoney.xyz udp
US 8.8.8.8:53 connekt.com.br udp
US 8.8.8.8:53 connekt.com.br udp
US 8.8.8.8:53 igfollower.net udp
US 8.8.8.8:53 cybeautyskincare.com.ng udp
US 8.8.8.8:53 igfollower.net udp
US 8.8.8.8:53 cybeautyskincare.com.ng udp
US 8.8.8.8:53 ftp.portal.eightcap.com udp
US 8.8.8.8:53 cc7.jasperwireless.com udp
US 8.8.8.8:53 sharespace.inchar.me udp
US 8.8.8.8:53 sharespace.inchar.me udp
US 8.8.8.8:53 cc7.jasperwireless.com udp
US 8.8.8.8:53 xshemale.tv udp
US 8.8.8.8:53 elearning.usm.ac.id udp
US 8.8.8.8:53 elearning.usm.ac.id udp
US 8.8.8.8:53 twinspace.etwinning.net udp
US 8.8.8.8:53 twinspace.etwinning.net udp
US 8.8.8.8:53 sanalpos2.ziraatbank.com.tr udp
US 8.8.8.8:53 ftp.subscribe.free.fr udp
US 8.8.8.8:53 sanalpos2.ziraatbank.com.tr udp
US 8.8.8.8:53 mpay.co.th udp
US 8.8.8.8:53 mpay.co.th udp
US 8.8.8.8:53 udin.icai.org udp
US 8.8.8.8:53 aspmx2.googlemail.com udp
US 8.8.8.8:53 udin.icai.org udp
US 8.8.8.8:53 login.onverse.com udp
US 8.8.8.8:53 signup.br.leagueoflegends.com udp
US 8.8.8.8:53 login.onverse.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 e-payment.jne.co.id udp
US 8.8.8.8:53 vivaylien.com udp
US 8.8.8.8:53 e-payment.jne.co.id udp
US 8.8.8.8:53 pfms.nic.in udp
US 8.8.8.8:53 pfms.nic.in udp
US 8.8.8.8:53 gametwist.pl udp
US 8.8.8.8:53 zonegfx.com udp
US 8.8.8.8:53 zonegfx.com udp
US 8.8.8.8:53 techbookmarks.com udp
US 8.8.8.8:53 ftp.old.ppy.sh udp
US 8.8.8.8:53 22.147.70.163.in-addr.arpa udp
US 8.8.8.8:53 techbookmarks.com udp
US 8.8.8.8:53 dbo.smartschool.be udp
US 8.8.8.8:53 dbo.smartschool.be udp
US 8.8.8.8:53 guestportal2.dchft.nhs.uk udp
US 8.8.8.8:53 casino.bet365.com udp
US 8.8.8.8:53 casino.bet365.com udp
US 8.8.8.8:53 pakrail.gov.pk udp
US 8.8.8.8:53 pakrail.gov.pk udp
US 8.8.8.8:53 mail.iris.fbr.gov.pk udp
US 8.8.8.8:53 boards.naruto-arena.net udp
US 8.8.8.8:53 truvideon.xyz udp
US 8.8.8.8:53 truvideon.xyz udp
US 8.8.8.8:53 tradingview.com udp
US 8.8.8.8:53 web.roblox.com udp
US 8.8.8.8:53 mail.n3plcpnl0270.prod.ams3.secureserver.net udp
US 8.8.8.8:53 web.roblox.com udp
US 8.8.8.8:53 secure.imvu.com udp
US 8.8.8.8:53 secure.imvu.com udp
US 8.8.8.8:53 manicomio-share.com udp
US 8.8.8.8:53 mandis-home.gr udp
US 8.8.8.8:53 manicomio-share.com udp
US 8.8.8.8:53 bimbingan-ta.radenfatah.ac.id udp
US 8.8.8.8:53 apps.naturgy.com.ar udp
US 8.8.8.8:53 bimbingan-ta.radenfatah.ac.id udp
US 8.8.8.8:53 bemarts.com udp
US 8.8.8.8:53 apps.naturgy.com.ar udp
US 8.8.8.8:53 login.sakuralive.com udp
US 8.8.8.8:53 mail.ingresso.eear.aer.mil.br udp
US 8.8.8.8:53 login.sakuralive.com udp
US 8.8.8.8:53 mail.altyazilifilm.live udp
US 8.8.8.8:53 113.239.225.13.in-addr.arpa udp
US 8.8.8.8:53 dashboard.twitch.tv udp
US 8.8.8.8:53 baslaboratory.com udp
US 8.8.8.8:53 dashboard.twitch.tv udp
US 8.8.8.8:53 servizi.anpal.gov.it udp
US 8.8.8.8:53 servizi.anpal.gov.it udp
US 8.8.8.8:53 cav.receita.fazenda.gov.br udp
US 8.8.8.8:53 cav.receita.fazenda.gov.br udp
US 8.8.8.8:53 new.oasis.gov.in udp
US 8.8.8.8:53 new.oasis.gov.in udp
US 8.8.8.8:53 ltheme.com udp
US 8.8.8.8:53 gunnylau2020.com udp
US 8.8.8.8:53 yemenia.sita.aero udp
US 8.8.8.8:53 gunnylau2020.com udp
US 8.8.8.8:53 login.fyers.in udp
US 8.8.8.8:53 login.fyers.in udp
US 8.8.8.8:53 tdccomunica.octadesk.com udp
US 8.8.8.8:53 tdccomunica.octadesk.com udp
US 8.8.8.8:53 macs.mjc.ac.kr udp
US 8.8.8.8:53 macs.mjc.ac.kr udp
US 8.8.8.8:53 mybell.bell.ca udp
US 8.8.8.8:53 automoney.club udp
US 8.8.8.8:53 cms-autoria2-staging.k8s-tienda-virtual-d4fa2262c61265a03678a9a8bfbdc84a-0000.us-south.containers.appdomain.cloud udp
US 8.8.8.8:53 cms-autoria2-staging.k8s-tienda-virtual-d4fa2262c61265a03678a9a8bfbdc84a-0000.us-south.containers.appdomain.cloud udp
US 8.8.8.8:53 ftp.krunker.io udp
US 8.8.8.8:53 mail.yemenia.sita.aero udp
US 8.8.8.8:53 ftp.yemenia.sita.aero udp
US 8.8.8.8:53 188.13.140.3.in-addr.arpa udp
US 8.8.8.8:53 ftp.boards.naruto-arena.net udp
US 8.8.8.8:53 tube.bixson.com udp
US 8.8.8.8:53 248.135.67.172.in-addr.arpa udp
US 8.8.8.8:53 ftp.nhentai.net udp
US 8.8.8.8:53 ftp.cpanel56.fastsecurehost.com udp
US 8.8.8.8:53 ftp.retail.sc.com udp
US 8.8.8.8:53 mail.portal.eightcap.com udp
US 8.8.8.8:53 ftp.cmemes.com udp
US 8.8.8.8:53 accounts.paytm.com udp
US 8.8.8.8:53 ftp.altyazilifilm.live udp
US 8.8.8.8:53 autoempartes.pt udp
US 8.8.8.8:53 mail.kip-kuliah.kemdikbud.go.id udp
US 8.8.8.8:53 mashalacademy.com udp
US 8.8.8.8:53 ftp.ingresso.eear.aer.mil.br udp
US 8.8.8.8:53 ftp.iris.fbr.gov.pk udp
US 8.8.8.8:53 mail.gtpsecurecard.com udp
US 8.8.8.8:53 mx2.privateemail.com udp
US 8.8.8.8:53 boards.naruto-arena.net udp
US 8.8.8.8:53 ftp.services.nidw.gov.bd udp

Files

memory/220-1-0x0000000001CA0000-0x0000000001DA0000-memory.dmp

memory/220-2-0x0000000001A90000-0x0000000001A9B000-memory.dmp

memory/220-3-0x0000000000400000-0x0000000001A2C000-memory.dmp

memory/3284-4-0x0000000001350000-0x0000000001366000-memory.dmp

memory/220-5-0x0000000000400000-0x0000000001A2C000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\B8E0.exe

MD5 456b354d5e8c6878153b049029ff525f
SHA1 c19f2bbc256cbf84ea42a92d67acd43c5a10049c
SHA256 2de73207a4c392f09d68297ff27823c4d71f8a6890720e7fd9f4f02a9c521ba0
SHA512 aaae6e5e470030b6271bd41206721330c67f77de1d0bcc573965100352f93c7a0ee639785fce7edda945d1916f4c50cdedf712cb103ef4f4a4bd345bf21dc601

C:\Users\Admin\AppData\Local\Temp\B8E0.exe

MD5 b1180e185a79557228f0f56cf5f1b3a2
SHA1 4b0c8ff9b3bba533590d3af68740d50d4d4b27ae
SHA256 0f92f4c916be8be26cad13d5796520feb05a3fe995d925d216aadc32d88e653c
SHA512 3bf7db653a5a15e57ba92327a5e3fd114d6080a098ee5b9c4b7028ea9a71c7e2c17d131d6740df66ebdaf0e8553ab572fa49ca37325abb92f8d4836075fb0136

memory/4992-16-0x0000000003890000-0x0000000003A53000-memory.dmp

memory/4992-18-0x0000000003A60000-0x0000000003C17000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\B8E0.exe

MD5 ae0babe3721e80fca691a802cfdad7e9
SHA1 4ae412df2b4eeaca951b0cf223eb4fa11c1193b7
SHA256 78ec67d3d89e94d9d77cc577b2c0c10fa8a1bf16f5be7ce01eb4b05a74532fe5
SHA512 5b924a7f22d45aa2c4667a2be22f6c9ed0ea15a31827c6f2ceb55e8f2dac6dbfbc762f1686f74f588c50ac123926c61a8269f34355ff1cde7c30249f30a02053

memory/4980-17-0x0000000000400000-0x0000000000848000-memory.dmp

memory/4980-21-0x0000000000400000-0x0000000000848000-memory.dmp

memory/4980-20-0x0000000000400000-0x0000000000848000-memory.dmp

memory/4980-22-0x0000000000400000-0x0000000000848000-memory.dmp

memory/4980-23-0x0000000000400000-0x0000000000848000-memory.dmp

memory/4980-24-0x0000000000400000-0x0000000000848000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\BDA4.dll

MD5 fb83c50473bc835620a17b00bee5bd0f
SHA1 010fc1701c2987ae01a7e0101ed81261b6bf974f
SHA256 57336c7e5a6d633b56e2d31c3eac18a81ce68aec094c7b5e67030317dce11831
SHA512 142ec9d0bc9033c2f66fc32aa4aed3dd6c990a6789d5477a8e27fb711c86c15733762585f6130f42662215e547c5999ff79303b3b6097c7383471d377b49ddc3

\Users\Admin\AppData\Local\Temp\BDA4.dll

MD5 c164d8be3dce9a1abf6757ae7ed935ef
SHA1 f7cbb13173e9c44595ea3f171da77640836e7fc9
SHA256 2e03b586356510cc34e30a862b615327f8d751abee7713285637860aa48557b5
SHA512 e172a2db5d324926a77454d193941ce4ec1c9ac9405fdb8a8510cb30dc3507f963c5ff2c3f821312644d0da1a46cfa7bb03494796bbfba7d6504db67a74cdba9

memory/1244-32-0x0000000010000000-0x0000000010202000-memory.dmp

memory/1244-33-0x0000000000DC0000-0x0000000000DC6000-memory.dmp

memory/1244-35-0x0000000004E80000-0x0000000004FA8000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\C93D.exe

MD5 6691c6e07c6f74edc383ffa6240146e5
SHA1 d97305fb580cf7314e21d1b969f83d34611c7949
SHA256 81f3979e60a44b5014b1a1d01cc6fe2ed0b13a3bd644c2192f56c8305a2434e7
SHA512 d9354ffcb623b4a1b488d7b60bf7c58713ab110a241c683b673f14dc14e8ca2de3e801cf6fe2d5031e0ce2489774b1bf043aac57141ae7d9152c262eaadbb313

memory/1244-40-0x0000000004FB0000-0x00000000050BD000-memory.dmp

memory/1244-43-0x0000000004FB0000-0x00000000050BD000-memory.dmp

memory/2276-45-0x0000000000F00000-0x00000000017F1000-memory.dmp

memory/2276-44-0x0000000000EE0000-0x0000000000EE1000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\CCC9.exe

MD5 a1b5ee1b9649ab629a7ac257e2392f8d
SHA1 dc1b14b6d57589440fb3021c9e06a3e3191968dc
SHA256 2bfd95260a4c52d4474cd51e74469fc3de94caed28937ff0ce99ded66af97e65
SHA512 50ccbb9fd4ea2da847c6be5988e1e82e28d551b06cc9122b921dbd40eff4b657a81a010cea76f29e88fda06f8c053090b38d04eb89a6d63ec4f42ef68b1cf82b

memory/3448-54-0x0000000001BB0000-0x0000000001C1B000-memory.dmp

memory/3448-53-0x0000000001D90000-0x0000000001E90000-memory.dmp

memory/3448-56-0x0000000000400000-0x0000000001A77000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\DC6A.exe

MD5 61b493308249ddaec5d74289fd9174bc
SHA1 52a7599a50702f0ee535e9c88462312916a9c6db
SHA256 9fc2b025bb50a4086b0300e12fa3e92ca230f86894cd4fbd971aef0e76801fe0
SHA512 6be47a9dec129398e516992be1c4798c2fa98fb2074f6fd5a0f730407b3155a7fca538c2793f9b3d46fe1e5e2dcfb418754ab20147e23ce9a04ac6994ce94af8

C:\Users\Admin\AppData\Local\Temp\DC6A.exe

MD5 8c1c7ee5a9dac0aeb61eb02d4692939e
SHA1 7c6bfe74ad91a1aa660ede97d91d98b6df093f0e
SHA256 f1274ead39129d0d7b399a7350551818cdfbc14becf7bf6b6a339a47c3f6f6e3
SHA512 ab4daf245325098a309396e0f545bdc198a53b17a31330f73b80f8ae5ebb83cf482a5ff2f8118ffcc76447599843cb992bc0e212c2731170ca18911b36aa1567

memory/592-61-0x0000000000010000-0x000000000049C000-memory.dmp

memory/592-62-0x00000000729F0000-0x00000000730DE000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe

MD5 0564a9bf638169a89ccb3820a6b9a58e
SHA1 57373f3b58f7cc2b9ea1808bdabb600d580a9ceb
SHA256 9e4b0556f698c9bc9a07c07bf13d60908d31995e0bd73510d9dd690b20b11058
SHA512 36b81c374529a9ba5fcbc6fcfebf145c27a7c30916814d63612c04372556d47994a8091cdc5f78dab460bb5296466ce0b284659c8b01883f7960ab08a1631ea6

memory/2940-71-0x00000000036D0000-0x0000000003737000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe

MD5 2ce2c35ccba681d1dfdb273e894f1cf2
SHA1 32730298565385205b865aef50f7f60eb1f1ae2f
SHA256 ed018a0feeacecd48c52e26c097ae7faaba6d2a206793d71759578c0555631ce
SHA512 34f4fc03f1300237ef06d361540774b42d850c3523f52b647de4680943610403f3c2034df80f1bd13b69811d8f256e119c5a9f493ca40eec04c25269e82ebf45

memory/592-79-0x00000000729F0000-0x00000000730DE000-memory.dmp

memory/4980-80-0x0000000000400000-0x0000000000848000-memory.dmp

memory/2940-78-0x0000000000400000-0x0000000001A4B000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe

MD5 5799f1ad837ed293fc7b3951862f2a3c
SHA1 07149d36a4cac34dc26ebecabe8818998d2cd3df
SHA256 00da920915b0f6fe613cb3fffbbd76af992eabaff704af2fee93fd1119bd701e
SHA512 e7a03debc89c3c086aacaaab1b5b24ef3ad1a97953e53484039663f0faf13c7079bbdb218e4dacae0897da02f235eca929ddeea29407692ca87dace274988ef2

memory/2940-69-0x0000000001AE0000-0x0000000001BE0000-memory.dmp

memory/3780-81-0x0000000003BD0000-0x0000000003FC9000-memory.dmp

memory/3780-82-0x0000000003FD0000-0x00000000048BB000-memory.dmp

memory/3780-83-0x0000000000400000-0x0000000001E0F000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\E6BB.exe

MD5 38617539f3925b6017474f088cc3769a
SHA1 c689b57ab62eac790a204c8231b02bfe0bc243a6
SHA256 defe2d4c932a7ef607e8ef1a643fb57b9c69cbc53b52bf802f9471aae5caef49
SHA512 15d87c6231a8f2115ae3f0f021949d175d3f36735637c7b508a229af5b2a93f70f32e19d9b8e3d1e0fa41bd21ee46ab5d9c6ef630c826afe2210a789e5da53e7

C:\Users\Admin\AppData\Local\Temp\u29o.0.exe

MD5 5c47e4602163dd29a39294b7192f0658
SHA1 268d1bf1f4c8c8b696298f802b95af8bd3891c10
SHA256 5c0b29d51d9b148c8c19ce0efca365ccb1bbe720f634a15897684abbd1dc5d76
SHA512 7baa0359781ba21c378a0fbd37dfcde2d1b0c5a9ce3afcf8db0617f91a49dd552416c90963731798669002eda0a15f2296120cb9307c8cafef18dfdb4a52ad91

C:\Users\Admin\AppData\Local\Temp\4KPV6A~1\cached-microdesc-consensus.tmp

MD5 4a8be7f7eb70124688fa24dc6626a985
SHA1 9ab10b9a98fb59ebc9ea9b077411c8921ea91fd2
SHA256 36be3115d6d1ad0e16531780a27cc9d122ae9414d0588af847439c27a74343a0
SHA512 cdcf1ecee2546ad979ead78bfa63a595f7e8263bfcdabe57df7c95f11d36520eb67d32471e13b973a03562ea399a419fdb735319fdfda682872e55105fb36a03

C:\Users\Admin\AppData\Local\Temp\u29o.1.exe

MD5 5b87828ea000c7111084d8beed17175e
SHA1 e8aa3848e39c449051702a333e608fafd2e5330f
SHA256 1a557fae2d39d06392f4bea760fb72c87f0959a7c3ac66865e36f316866f57d3
SHA512 56b0d0e5422b89a4659969f59570962dbb267fde913ed051fbedf3d66653c9c23d15c945a6ae8ce5570af010b3671eb0be085e8afb44c3088def9f423290f385

memory/1244-107-0x0000000010000000-0x0000000010202000-memory.dmp

memory/4980-108-0x0000000000400000-0x0000000000848000-memory.dmp

memory/2940-106-0x0000000000400000-0x0000000001A4B000-memory.dmp

memory/3476-109-0x0000000000400000-0x0000000000930000-memory.dmp

memory/3476-110-0x0000000000DA0000-0x0000000000DA1000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\4KPV6A~1\cached-microdescs.new

MD5 63dfd3024dc5ac2a3261b5501f5e1297
SHA1 de70afe0bb2fbc810a3f2224a4b6830c41040043
SHA256 85c88c17e7e2b81e903f8bc994b103ca08ef471ab01c7a15ec7fc001d6670c13
SHA512 b1806ba87662b6e19227f9d781f6075877b7012200013fe7029326caf9f0c94037b81b86ea4314643451156b24c82ef6bbb17c10674cdf6301860728b2f62975

memory/3448-122-0x0000000000400000-0x0000000001A77000-memory.dmp

memory/1476-124-0x00000000024D0000-0x00000000025D0000-memory.dmp

memory/1476-126-0x0000000002300000-0x000000000230B000-memory.dmp

memory/1476-129-0x0000000000400000-0x00000000022D3000-memory.dmp

memory/2276-133-0x0000000000F00000-0x00000000017F1000-memory.dmp

memory/2676-136-0x00000000023E0000-0x00000000024E0000-memory.dmp

memory/2676-137-0x0000000002370000-0x0000000002397000-memory.dmp

memory/2676-138-0x0000000000400000-0x00000000022DA000-memory.dmp

C:\Users\Admin\AppData\Roaming\Temp\Task.bat

MD5 11bb3db51f701d4e42d3287f71a6a43e
SHA1 63a4ee82223be6a62d04bdfe40ef8ba91ae49a86
SHA256 6be22058abfb22b40a42fb003f86b89e204a83024c03eb82cd53e2a0a047c331
SHA512 907ad2c070cc1db89f43459a94d7f48985d939d749c9648b78572a266f0d3fde47813a129e9151dbf4a7d96d36f588172f57c88b8b947b56ed818d7d068abab2

memory/3284-140-0x00000000030F0000-0x0000000003106000-memory.dmp

memory/1476-142-0x0000000000400000-0x00000000022D3000-memory.dmp

memory/2676-144-0x0000000061E00000-0x0000000061EF3000-memory.dmp

memory/4980-176-0x0000000000400000-0x0000000000848000-memory.dmp

memory/3780-179-0x0000000000400000-0x0000000001E0F000-memory.dmp

memory/2676-180-0x0000000000400000-0x00000000022DA000-memory.dmp

memory/3476-181-0x0000000000400000-0x0000000000930000-memory.dmp

C:\ProgramData\mozglue.dll

MD5 9340f2c4af1385bd79413e4fa2fbee6b
SHA1 09f0fcbdd95230c8f60e7d5718315e15a648f6d6
SHA256 ccc28d61a434efcbbaea87fd793a9bbc64f3575a6b7752972ccf94baa0727398
SHA512 1533bb1d37902d19025e55f7a710159c7f3d5119eafa7f7d60581cfa46089842b54f28b6a0e3e7462130ab6e4ef66d406635849fc46890e190b6d124fa7df1d8

\ProgramData\mozglue.dll

MD5 549242b4069e6a066e83d86ffc819763
SHA1 a43a6859f9cdbef33d997107e54e1e398ea87b1f
SHA256 7174297d854391e483be202810876e9e2c8be3c24a0fec2de11b0342be4fe33b
SHA512 c23d3dfb8ab7a3bf3eb953f2c5744cf1ec5c0b0480359ad9e72cbb752218456b4c66c2a58ab74ed5adee2245cfe90b9453168200da181bfb91d0d3a22debd04a

\ProgramData\nss3.dll

MD5 6344eecd4630c18d653a8c8f249c3585
SHA1 fa2d181d3a67e4b556ee7d5a1508d345148c3cce
SHA256 9157f80d4e4dd431ca252e9e0fafcb8513aaae99636b8a41af00eeddfd854ad9
SHA512 0b6347cbd8e8c162d39eda5ba2affd7eb95b91cae7a7b8a2a7ef455b9945b81d80f9553d3b4ec79d1591fb6dc59e54395f23e3187e0e9496c30d539b7a8b11c8

memory/4980-212-0x0000000000400000-0x0000000000848000-memory.dmp

memory/3780-214-0x0000000000400000-0x0000000001E0F000-memory.dmp

memory/4980-219-0x0000000000400000-0x0000000000848000-memory.dmp

memory/3448-221-0x0000000001D90000-0x0000000001E90000-memory.dmp

memory/4980-224-0x0000000000400000-0x0000000000848000-memory.dmp

memory/4980-220-0x0000000000400000-0x0000000000848000-memory.dmp

memory/4980-222-0x0000000000400000-0x0000000000848000-memory.dmp

memory/4980-225-0x0000000000400000-0x0000000000848000-memory.dmp

memory/4980-227-0x0000000000400000-0x0000000000848000-memory.dmp

memory/1764-229-0x0000000071390000-0x0000000071A7E000-memory.dmp

memory/4980-228-0x0000000000400000-0x0000000000848000-memory.dmp

memory/1764-232-0x0000000004970000-0x0000000004980000-memory.dmp

memory/1764-236-0x0000000004970000-0x0000000004980000-memory.dmp

memory/4980-226-0x0000000000400000-0x0000000000848000-memory.dmp

memory/1764-223-0x0000000006FE0000-0x0000000007608000-memory.dmp

memory/2676-217-0x0000000000400000-0x00000000022DA000-memory.dmp

memory/1764-218-0x00000000048B0000-0x00000000048E6000-memory.dmp

memory/1764-287-0x0000000007610000-0x0000000007632000-memory.dmp

memory/1764-316-0x0000000007850000-0x00000000078B6000-memory.dmp

memory/1764-309-0x00000000076B0000-0x0000000007716000-memory.dmp

C:\ProgramData\Are.docx

MD5 a33e5b189842c5867f46566bdbf7a095
SHA1 e1c06359f6a76da90d19e8fd95e79c832edb3196
SHA256 5abf8e3d1f78de7b09d7f6fb87f9e80e60caacf13ef3c1289665653dacd7c454
SHA512 f2ad3812ec9b915e9618539b0f103f2e9acaad25fbbacd84941c954ce070af231324e83a4621e951c1dbae8d40d50410954e40dd52bbd46e34c54b0d1957407b

memory/1764-322-0x0000000007980000-0x0000000007CD0000-memory.dmp

memory/1764-404-0x0000000007D90000-0x0000000007DAC000-memory.dmp

memory/2676-406-0x0000000000400000-0x00000000022DA000-memory.dmp

memory/1764-411-0x0000000007E90000-0x0000000007EDB000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_hwygrkd1.noo.ps1

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

memory/1764-480-0x0000000008DD0000-0x0000000008E0C000-memory.dmp

memory/1764-607-0x0000000008F50000-0x0000000008FC6000-memory.dmp

memory/1764-718-0x000000006FA60000-0x000000006FAAB000-memory.dmp

memory/1764-716-0x0000000008E80000-0x0000000008EB3000-memory.dmp

memory/1764-720-0x000000006FAB0000-0x000000006FE00000-memory.dmp

memory/1764-723-0x0000000008E60000-0x0000000008E7E000-memory.dmp

memory/1764-734-0x0000000009CC0000-0x0000000009D65000-memory.dmp

memory/3780-740-0x0000000003BD0000-0x0000000003FC9000-memory.dmp

memory/1764-743-0x000000007F290000-0x000000007F2A0000-memory.dmp

memory/3780-753-0x0000000000400000-0x0000000001E0F000-memory.dmp

memory/1764-752-0x0000000009F20000-0x0000000009FB4000-memory.dmp

memory/2276-980-0x0000000000F00000-0x00000000017F1000-memory.dmp

memory/1764-2197-0x0000000006EB0000-0x0000000006ECA000-memory.dmp

memory/1764-2230-0x0000000006EA0000-0x0000000006EA8000-memory.dmp

memory/3476-2396-0x0000000000DA0000-0x0000000000DA1000-memory.dmp

memory/1764-2412-0x0000000071390000-0x0000000071A7E000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe

MD5 44ff2ed7f28622afe0e5ba7c1cd702a7
SHA1 5aec4a3f1f3a57a7cd8a366c736e2e932f529ed8
SHA256 7d16cc26a07cc79b96c5ee6512102dae8ae526c4ae529380c412b0d45bc8351a
SHA512 c0b766f1f8a4977fdc47adbcd10dbfabc0996a9421cab4d98ded773ddcefbb101d3137beb9e2ff4ea2b5d66849875e754bcbe0486396ce6a43b15262ccf82266

memory/3780-2420-0x0000000000400000-0x0000000001E0F000-memory.dmp

memory/2860-2422-0x0000000003A50000-0x0000000003E57000-memory.dmp

memory/2860-2424-0x0000000000400000-0x0000000001E0F000-memory.dmp

memory/2220-2430-0x0000000071B20000-0x000000007220E000-memory.dmp

memory/2220-2431-0x0000000002C60000-0x0000000002C70000-memory.dmp

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\powershell.exe.log

MD5 db01a2c1c7e70b2b038edf8ad5ad9826
SHA1 540217c647a73bad8d8a79e3a0f3998b5abd199b
SHA256 413da361d77055dae7007f82b58b366c8783aa72e0b8fbe41519b940c253b38d
SHA512 c76ff57fcee5cdf9fdf3116d4e1dc0cf106867bf19ab474b763e242acf5dca9a7509cb837c35e130c3e056636b4e8a4e135512a978bcd3dd641e20f5bf76c3d6

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive

MD5 e884928ee0546676e1cc130e2b56fdcf
SHA1 cb8aa5bd637ce03cc1aae026c5ca8766a89ef9eb
SHA256 7f253d9647ca79e63ae41d6be561365942528a3840703f79b6315c38dfe10297
SHA512 1905ec745298e3115a2772fcef7397ddc2219fe73b5c91014a6610aa8b1497971990a4aca2cea800725d97c9abd670c2995c57e8b213775c4008c26e2db351c8

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive

MD5 76cbe39a1a8fa891a79f808271cd59c7
SHA1 31f3f3864500f998c89877a3f3cf0247016ae83a
SHA256 d00b53b834c24348a65d8ffb9f5009f82fe55549e1105d4871360d7b1c4053bc
SHA512 52e5cb1cd234ccd8f3707b3519941272dcd73db757842790a2a380009a3f6c9f512cfc3abff27ea5358fccf884745f080a2b96fec2227ca0dd979169730aa662

C:\Windows\rss\csrss.exe

MD5 0c7b8daa9b09bcdf947a020bf28c2f19
SHA1 738f89f4da5256d14fe11394cf79e42060a7e98b
SHA256 ff0c709f06a8850794f2501c7dc9ce4ffc75f1ab3039218952cd87a067d3d3ff
SHA512 b069ef6d30a5afafc4b4e2632cb4f9da65e58dcedb66706921d85a6be97a024c1e786ec51299ba52668a65fe948d499609aa2b4978fb20738dd0b643d84cbcf6

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive

MD5 cb493d7e7506c5a1673d111233dd6f22
SHA1 d14761751cc8b78a42d37fb5a7ab3aaef2bcaa67
SHA256 7ec71672f57b3891d884985dfa1091364dd5652485074312ff71c565408a62bd
SHA512 494d106e909eac1af0408a26ef72469c645d479496e021a5dad9214aa7de28a1012d366f5a548ac00dc4a778ccf61da353f6f18b17e2a7f454bcb5dc929a464e

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive

MD5 b2a4572d4c7232f705e84456c37081df
SHA1 a7b277be92ec1625da02a07b29fe06dee3f80b09
SHA256 9da71fd2c71311746148af04d80e6021c29a44bee14349fb2498058164117ec9
SHA512 bc43b53845c93aaf48fe5edd71bf211279b259b6e1aec48f47680fe2238d2992cd562fad306eb08878987f3adca19fbbd714c6fd036762bc6db6baee3dd5dbfd

Analysis: behavioral1

Detonation Overview

Submitted

2024-02-29 04:52

Reported

2024-02-29 04:57

Platform

win7-20240221-en

Max time kernel

58s

Max time network

302s

Command Line

"C:\Users\Admin\AppData\Local\Temp\4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809.exe"

Signatures

Glupteba

loader dropper glupteba

Glupteba payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

SmokeLoader

trojan backdoor smokeloader

Contacts a large (760) amount of remote hosts

discovery

Downloads MZ/PE file

Modifies Windows Firewall

evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\netsh.exe N/A

Deletes itself

Description Indicator Process Target
N/A N/A N/A N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\CSRSS = "\"C:\\ProgramData\\Drivers\\csrss.exe\"" C:\Users\Admin\AppData\Local\Temp\D3D3.exe N/A

Suspicious use of SetThreadContext

Description Indicator Process Target
PID 2636 set thread context of 2648 N/A C:\Users\Admin\AppData\Local\Temp\D3D3.exe C:\Users\Admin\AppData\Local\Temp\D3D3.exe

Enumerates physical storage devices

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\22.exe

Checks SCSI registry key(s)

Description Indicator Process Target
Key enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI C:\Users\Admin\AppData\Local\Temp\4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI C:\Users\Admin\AppData\Local\Temp\4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809.exe N/A
Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI C:\Users\Admin\AppData\Local\Temp\4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809.exe N/A

Creates scheduled task(s)

persistence
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious behavior: MapViewOfSection

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A N/A N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1264 wrote to memory of 2636 N/A N/A C:\Users\Admin\AppData\Local\Temp\D3D3.exe
PID 1264 wrote to memory of 2636 N/A N/A C:\Users\Admin\AppData\Local\Temp\D3D3.exe
PID 1264 wrote to memory of 2636 N/A N/A C:\Users\Admin\AppData\Local\Temp\D3D3.exe
PID 1264 wrote to memory of 2636 N/A N/A C:\Users\Admin\AppData\Local\Temp\D3D3.exe
PID 2636 wrote to memory of 2648 N/A C:\Users\Admin\AppData\Local\Temp\D3D3.exe C:\Users\Admin\AppData\Local\Temp\D3D3.exe
PID 2636 wrote to memory of 2648 N/A C:\Users\Admin\AppData\Local\Temp\D3D3.exe C:\Users\Admin\AppData\Local\Temp\D3D3.exe
PID 2636 wrote to memory of 2648 N/A C:\Users\Admin\AppData\Local\Temp\D3D3.exe C:\Users\Admin\AppData\Local\Temp\D3D3.exe
PID 2636 wrote to memory of 2648 N/A C:\Users\Admin\AppData\Local\Temp\D3D3.exe C:\Users\Admin\AppData\Local\Temp\D3D3.exe
PID 2636 wrote to memory of 2648 N/A C:\Users\Admin\AppData\Local\Temp\D3D3.exe C:\Users\Admin\AppData\Local\Temp\D3D3.exe
PID 2636 wrote to memory of 2648 N/A C:\Users\Admin\AppData\Local\Temp\D3D3.exe C:\Users\Admin\AppData\Local\Temp\D3D3.exe
PID 2636 wrote to memory of 2648 N/A C:\Users\Admin\AppData\Local\Temp\D3D3.exe C:\Users\Admin\AppData\Local\Temp\D3D3.exe
PID 2636 wrote to memory of 2648 N/A C:\Users\Admin\AppData\Local\Temp\D3D3.exe C:\Users\Admin\AppData\Local\Temp\D3D3.exe
PID 2636 wrote to memory of 2648 N/A C:\Users\Admin\AppData\Local\Temp\D3D3.exe C:\Users\Admin\AppData\Local\Temp\D3D3.exe
PID 1264 wrote to memory of 2488 N/A N/A C:\Windows\system32\regsvr32.exe
PID 1264 wrote to memory of 2488 N/A N/A C:\Windows\system32\regsvr32.exe
PID 1264 wrote to memory of 2488 N/A N/A C:\Windows\system32\regsvr32.exe
PID 1264 wrote to memory of 2488 N/A N/A C:\Windows\system32\regsvr32.exe
PID 1264 wrote to memory of 2488 N/A N/A C:\Windows\system32\regsvr32.exe
PID 2488 wrote to memory of 2972 N/A C:\Windows\system32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 2488 wrote to memory of 2972 N/A C:\Windows\system32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 2488 wrote to memory of 2972 N/A C:\Windows\system32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 2488 wrote to memory of 2972 N/A C:\Windows\system32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 2488 wrote to memory of 2972 N/A C:\Windows\system32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 2488 wrote to memory of 2972 N/A C:\Windows\system32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 2488 wrote to memory of 2972 N/A C:\Windows\system32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 1264 wrote to memory of 2832 N/A N/A C:\Users\Admin\AppData\Local\Temp\22.exe
PID 1264 wrote to memory of 2832 N/A N/A C:\Users\Admin\AppData\Local\Temp\22.exe
PID 1264 wrote to memory of 2832 N/A N/A C:\Users\Admin\AppData\Local\Temp\22.exe
PID 1264 wrote to memory of 2832 N/A N/A C:\Users\Admin\AppData\Local\Temp\22.exe
PID 1264 wrote to memory of 2332 N/A N/A C:\Users\Admin\AppData\Local\Temp\C72.exe
PID 1264 wrote to memory of 2332 N/A N/A C:\Users\Admin\AppData\Local\Temp\C72.exe
PID 1264 wrote to memory of 2332 N/A N/A C:\Users\Admin\AppData\Local\Temp\C72.exe
PID 1264 wrote to memory of 2332 N/A N/A C:\Users\Admin\AppData\Local\Temp\C72.exe
PID 2832 wrote to memory of 596 N/A C:\Users\Admin\AppData\Local\Temp\22.exe C:\Windows\SysWOW64\WerFault.exe
PID 2832 wrote to memory of 596 N/A C:\Users\Admin\AppData\Local\Temp\22.exe C:\Windows\SysWOW64\WerFault.exe
PID 2832 wrote to memory of 596 N/A C:\Users\Admin\AppData\Local\Temp\22.exe C:\Windows\SysWOW64\WerFault.exe
PID 2832 wrote to memory of 596 N/A C:\Users\Admin\AppData\Local\Temp\22.exe C:\Windows\SysWOW64\WerFault.exe
PID 1264 wrote to memory of 1648 N/A N/A C:\Users\Admin\AppData\Local\Temp\2080.exe
PID 1264 wrote to memory of 1648 N/A N/A C:\Users\Admin\AppData\Local\Temp\2080.exe
PID 1264 wrote to memory of 1648 N/A N/A C:\Users\Admin\AppData\Local\Temp\2080.exe
PID 1264 wrote to memory of 1648 N/A N/A C:\Users\Admin\AppData\Local\Temp\2080.exe
PID 1648 wrote to memory of 1516 N/A C:\Users\Admin\AppData\Local\Temp\2080.exe C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe
PID 1648 wrote to memory of 1516 N/A C:\Users\Admin\AppData\Local\Temp\2080.exe C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe
PID 1648 wrote to memory of 1516 N/A C:\Users\Admin\AppData\Local\Temp\2080.exe C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe
PID 1648 wrote to memory of 1516 N/A C:\Users\Admin\AppData\Local\Temp\2080.exe C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe
PID 1648 wrote to memory of 1516 N/A C:\Users\Admin\AppData\Local\Temp\2080.exe C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe
PID 1648 wrote to memory of 1516 N/A C:\Users\Admin\AppData\Local\Temp\2080.exe C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe
PID 1648 wrote to memory of 1516 N/A C:\Users\Admin\AppData\Local\Temp\2080.exe C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe
PID 1264 wrote to memory of 1712 N/A N/A C:\Users\Admin\AppData\Local\Temp\2C72.exe
PID 1264 wrote to memory of 1712 N/A N/A C:\Users\Admin\AppData\Local\Temp\2C72.exe
PID 1264 wrote to memory of 1712 N/A N/A C:\Users\Admin\AppData\Local\Temp\2C72.exe
PID 1264 wrote to memory of 1712 N/A N/A C:\Users\Admin\AppData\Local\Temp\2C72.exe

Processes

C:\Users\Admin\AppData\Local\Temp\4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809.exe

"C:\Users\Admin\AppData\Local\Temp\4db6f4628dcd3a4ef8417290ad40c858047ceaed4daaff87a4a5f0d873745809.exe"

C:\Users\Admin\AppData\Local\Temp\D3D3.exe

C:\Users\Admin\AppData\Local\Temp\D3D3.exe

C:\Users\Admin\AppData\Local\Temp\D3D3.exe

C:\Users\Admin\AppData\Local\Temp\D3D3.exe

C:\Windows\system32\regsvr32.exe

regsvr32 /s C:\Users\Admin\AppData\Local\Temp\EC24.dll

C:\Windows\SysWOW64\regsvr32.exe

/s C:\Users\Admin\AppData\Local\Temp\EC24.dll

C:\Users\Admin\AppData\Local\Temp\22.exe

C:\Users\Admin\AppData\Local\Temp\22.exe

C:\Users\Admin\AppData\Local\Temp\C72.exe

C:\Users\Admin\AppData\Local\Temp\C72.exe

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2832 -s 124

C:\Users\Admin\AppData\Local\Temp\2080.exe

C:\Users\Admin\AppData\Local\Temp\2080.exe

C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe

"C:\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe"

C:\Users\Admin\AppData\Local\Temp\2C72.exe

C:\Users\Admin\AppData\Local\Temp\2C72.exe

C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe

"C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe"

C:\Users\Admin\AppData\Local\Temp\u164.0.exe

"C:\Users\Admin\AppData\Local\Temp\u164.0.exe"

C:\Users\Admin\AppData\Local\Temp\u164.1.exe

"C:\Users\Admin\AppData\Local\Temp\u164.1.exe"

C:\Windows\SysWOW64\cmd.exe

cmd /c ""C:\Users\Admin\AppData\Roaming\Temp\Task.bat" "

C:\Windows\SysWOW64\chcp.com

chcp 1251

C:\Windows\SysWOW64\schtasks.exe

schtasks /create /tn "MalayamaraUpdate" /tr "'C:\Users\Admin\AppData\Local\Temp\Updater.exe'" /sc minute /mo 30 /F

C:\Windows\system32\makecab.exe

"C:\Windows\system32\makecab.exe" C:\Windows\Logs\CBS\CbsPersist_20240229045427.log C:\Windows\Logs\CBS\CbsPersist_20240229045427.cab

C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe

"C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe"

C:\Windows\system32\cmd.exe

C:\Windows\Sysnative\cmd.exe /C "netsh advfirewall firewall add rule name="csrss" dir=in action=allow program="C:\Windows\rss\csrss.exe" enable=yes"

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="csrss" dir=in action=allow program="C:\Windows\rss\csrss.exe" enable=yes

C:\Windows\rss\csrss.exe

C:\Windows\rss\csrss.exe

C:\Windows\system32\schtasks.exe

schtasks /CREATE /SC ONLOGON /RL HIGHEST /TR "C:\Windows\rss\csrss.exe" /TN csrss /F

C:\Windows\system32\schtasks.exe

schtasks /delete /tn ScheduledUpdate /f

C:\Users\Admin\AppData\Local\Temp\csrss\injector\injector.exe

C:\Users\Admin\AppData\Local\Temp\csrss\injector\injector.exe taskmgr.exe C:\Users\Admin\AppData\Local\Temp\csrss\injector\NtQuerySystemInformationHook.dll

Network

Country Destination Domain Proto
US 8.8.8.8:53 selebration17io.io udp
RU 91.215.85.120:80 selebration17io.io tcp
NL 45.151.167.10:8443 tcp
DE 185.172.128.19:80 185.172.128.19 tcp
DE 185.244.192.247:9001 tcp
DE 185.220.101.1:30001 tcp
US 8.8.8.8:53 trmpc.com udp
MX 187.156.75.116:80 trmpc.com tcp
N/A 127.0.0.1:49262 tcp
US 23.129.64.239:443 tcp
DE 131.188.40.189:443 tcp
DE 185.172.128.90:80 185.172.128.90 tcp
NL 84.54.51.86:443 tcp
PL 95.214.52.187:9001 tcp
DE 185.172.128.127:80 185.172.128.127 tcp
US 8.8.8.8:53 joly.bestsup.su udp
US 172.67.171.112:80 joly.bestsup.su tcp
DE 185.172.128.127:80 185.172.128.127 tcp
DE 185.172.128.109:80 185.172.128.109 tcp
NL 84.54.51.86:443 tcp
PL 95.214.52.187:9001 tcp
DE 185.172.128.145:80 185.172.128.145 tcp
US 8.8.8.8:53 goldmoonlimited.com udp
US 8.8.8.8:53 bdshopcity.com udp
US 8.8.8.8:53 bepurrfect.com udp
US 8.8.8.8:53 bgmgfxtool.com udp
US 8.8.8.8:53 bloombound.com udp
US 8.8.8.8:53 bneirachel.com udp
US 8.8.8.8:53 cardiesels.com udp
US 8.8.8.8:53 eranlevavi.com udp
US 8.8.8.8:53 hilttrader.com udp
US 8.8.8.8:53 bnmnestaway.com udp
US 8.8.8.8:53 bodufinolhu.com udp
US 8.8.8.8:53 boranetfile.com udp
US 8.8.8.8:53 borneoplant.com udp
US 8.8.8.8:53 broughtways.com udp
US 8.8.8.8:53 bullhangout.com udp
US 8.8.8.8:53 brzeeyachts.com udp
US 8.8.8.8:53 cafe-inshop.com udp
US 8.8.8.8:53 caloriesuae.com udp
US 172.67.213.38:443 caloriesuae.com tcp
US 172.67.209.4:443 bullhangout.com tcp
US 8.8.8.8:53 capitalgenn.com udp
US 8.8.8.8:53 cashapp-apk.com udp
US 8.8.8.8:53 careskinnow.com udp
US 8.8.8.8:53 carriersbot.com udp
US 8.8.8.8:53 casinoufa88.com udp
US 45.40.155.32:443 capitalgenn.com tcp
US 172.67.132.88:443 casinoufa88.com tcp
IN 89.117.188.247:443 carriersbot.com tcp
US 104.21.30.236:80 careskinnow.com tcp
US 8.8.8.8:53 chocoescape.com udp
US 8.8.8.8:53 choosebible.com udp
IN 89.117.27.158:443 chocoescape.com tcp
US 107.154.159.217:443 goldmoonlimited.com tcp
US 8.8.8.8:53 chotudragon.com udp
US 8.8.8.8:53 cleverprize.com udp
US 63.250.43.5:80 chotudragon.com tcp
US 8.8.8.8:53 claydorable.com udp
US 162.254.39.100:443 hilttrader.com tcp
US 8.8.8.8:53 clicksandgo.com udp
IL 192.116.146.86:443 bneirachel.com tcp
US 134.122.127.191:443 choosebible.com tcp
US 8.8.8.8:53 coffeejames.com udp
US 192.185.236.18:80 cardiesels.com tcp
US 162.241.225.171:80 bloombound.com tcp
US 162.241.224.209:80 bepurrfect.com tcp
IN 119.18.49.18:443 bgmgfxtool.com tcp
US 185.230.63.107:443 claydorable.com tcp
US 75.75.243.21:443 bnmnestaway.com tcp
US 89.117.139.201:443 cleverprize.com tcp
US 162.159.137.9:443 eranlevavi.com tcp
US 172.67.220.240:443 broughtways.com tcp
GB 3.10.70.235:443 clicksandgo.com tcp
GB 154.49.138.138:443 borneoplant.com tcp
US 207.148.31.98:443 coffeejames.com tcp
US 8.8.8.8:53 comics-play.com udp
US 8.8.8.8:53 crackssccgl.com udp
US 8.8.8.8:53 darkwebbase.com udp
US 8.8.8.8:53 deeppetcare.com udp
US 8.8.8.8:53 cyprodating.com udp
US 8.8.8.8:53 comfycoshop.com udp
US 8.8.8.8:53 cpdusupport.com udp
US 8.8.8.8:53 cuisinartss.com udp
US 8.8.8.8:53 decoristana.com udp
US 8.8.8.8:53 deluxdecore.com udp
US 8.8.8.8:53 cuebasmerch.com udp
US 8.8.8.8:53 damidaniele.com udp
US 8.8.8.8:53 darkangelgo.com udp
US 8.8.8.8:53 dao-connect.com udp
IN 89.117.157.242:443 brzeeyachts.com tcp
DE 103.169.142.0:80 cpdusupport.com tcp
US 8.8.8.8:53 dealerdessy.com udp
IR 89.32.248.53:443 cafe-inshop.com tcp
GB 141.136.39.169:443 cyprodating.com tcp
IN 89.117.188.40:443 crackssccgl.com tcp
US 63.250.43.7:443 decoristana.com tcp
DE 144.76.75.181:443 comfycoshop.com tcp
US 3.33.130.190:443 deluxdecore.com tcp
US 142.0.133.247:443 cuisinartss.com tcp
US 63.250.43.130:443 damidaniele.com tcp
US 149.28.201.101:80 cuebasmerch.com tcp
US 104.21.87.154:443 darkangelgo.com tcp
VN 103.118.29.42:443 comics-play.com tcp
US 8.8.8.8:53 debbkitchen.com udp
US 8.8.8.8:53 dietgrabber.com udp
US 34.120.137.41:80 deeppetcare.com tcp
US 8.8.8.8:53 demeter5000.com udp
US 8.8.8.8:53 phucuonggroup.net udp
US 208.97.146.104:443 debbkitchen.com tcp
US 8.8.8.8:53 www.bullhangout.com udp
FR 89.117.169.201:443 dao-connect.com tcp
ID 103.241.192.17:443 dealerdessy.com tcp
SG 146.190.103.95:443 dietgrabber.com tcp
US 8.8.8.8:53 www.broughtways.com udp
US 8.8.8.8:53 doctrdougie.com udp
US 8.8.8.8:53 dirtysoxxxs.com udp
US 8.8.8.8:53 denhocchobe.com udp
US 8.8.8.8:53 diydadsocal.com udp
US 8.8.8.8:53 elsabordemi.com udp
US 8.8.8.8:53 doidangsong.com udp
JP 45.32.58.213:443 demeter5000.com tcp
US 74.208.236.132:443 doidangsong.com tcp
DE 103.169.142.0:443 cpdusupport.com tcp
VN 103.214.8.206:443 phucuonggroup.net tcp
DE 188.68.47.150:443 dirtysoxxxs.com tcp
US 104.21.83.92:443 www.broughtways.com tcp
US 89.117.139.223:443 doctrdougie.com tcp
US 104.21.53.50:443 www.bullhangout.com tcp
VN 103.200.23.139:443 denhocchobe.com tcp
US 8.8.8.8:53 dxbrelocate.com udp
US 89.117.139.238:443 diydadsocal.com tcp
US 160.153.0.203:443 dxbrelocate.com tcp
US 8.8.8.8:53 emekconnect.com udp
US 8.8.8.8:53 emuinsights.com udp
US 8.8.8.8:53 emmatcheung.com udp
US 8.8.8.8:53 epicstoress.com udp
FR 109.234.166.236:443 emekconnect.com tcp
US 62.72.4.247:443 emuinsights.com tcp
US 8.8.8.8:53 etkegrafika.com udp
US 8.8.8.8:53 etnasneaker.com udp
US 8.8.8.8:53 eventmeetus.com udp
US 8.8.8.8:53 expomediasl.com udp
US 8.8.8.8:53 famelcoperu.com udp
US 8.8.8.8:53 europharmma.com udp
US 154.49.142.133:443 epicstoress.com tcp
US 8.8.8.8:53 fabrikakala.com udp
US 8.8.8.8:53 fashionfinn.com udp
US 8.8.8.8:53 fastfoodees.com udp
US 8.8.8.8:53 fasegraphic.com udp
SG 209.58.182.5:443 etnasneaker.com tcp
US 8.8.8.8:53 ferdosianco.com udp
NL 185.191.124.77:443 europharmma.com tcp
US 89.117.139.138:80 emmatcheung.com tcp
GB 159.65.83.15:443 expomediasl.com tcp
VN 103.214.8.206:443 phucuonggroup.net tcp
US 8.8.8.8:53 fazaazin-co.com udp
US 8.8.8.8:53 festivlamps.com udp
US 8.8.8.8:53 firstmail24.com udp
US 146.190.44.224:443 fashionfinn.com tcp
LT 84.32.84.32:443 famelcoperu.com tcp
US 198.38.86.93:443 eventmeetus.com tcp
FR 51.91.236.255:80 fasegraphic.com tcp
US 8.8.8.8:53 fitversepro.com udp
IR 185.94.96.118:80 fabrikakala.com tcp
DE 88.198.200.252:443 firstmail24.com tcp
DE 78.46.9.246:443 etkegrafika.com tcp
IN 82.180.143.209:443 fitversepro.com tcp
IR 185.88.153.186:80 fazaazin-co.com tcp
US 8.8.8.8:53 flowerhonor.com udp
US 104.21.92.90:443 festivlamps.com tcp
US 8.8.8.8:53 franckntoke.com udp
US 8.8.8.8:53 funwiselife.com udp
US 8.8.8.8:53 gamesmatrix.com udp
US 8.8.8.8:53 fritzmannel.com udp
US 8.8.8.8:53 fredgirbach.com udp
US 8.8.8.8:53 flexii-zone.com udp
US 8.8.8.8:53 gagsreviews.com udp
US 8.8.8.8:53 focusenegal.com udp
US 8.8.8.8:53 gartenweber.com udp
US 8.8.8.8:53 fitnutrinow.com udp
US 208.113.190.188:443 franckntoke.com tcp
US 172.67.144.43:443 gamesmatrix.com tcp
US 8.8.8.8:53 geekguru101.com udp
US 8.8.8.8:53 glancefitch.com udp
US 8.8.8.8:53 godslifedrc.com udp
US 8.8.8.8:53 genetransal.com udp
US 8.8.8.8:53 ethority.io udp
US 8.8.8.8:53 goldentree1.com udp
US 8.8.8.8:53 godowebmail.com udp
US 8.8.8.8:53 gondexpress.com udp
US 8.8.8.8:53 grantsbuddy.com udp
US 8.8.8.8:53 gptonlineai.com udp
US 8.8.8.8:53 gradmydayhk.com udp
US 8.8.8.8:53 guiadesushi.com udp
US 63.250.43.9:443 focusenegal.com tcp
US 195.179.237.60:443 fredgirbach.com tcp
DE 78.46.7.143:80 gartenweber.com tcp
US 184.73.90.77:443 gagsreviews.com tcp
US 144.202.85.64:443 gondexpress.com tcp
BR 89.117.7.178:443 fitnutrinow.com tcp
US 154.49.142.94:443 fritzmannel.com tcp
IN 35.200.241.195:443 flexii-zone.com tcp
US 8.8.8.8:53 gutguidance.com udp
LT 84.32.84.32:443 gptonlineai.com tcp
FR 109.234.165.231:443 godslifedrc.com tcp
CH 92.43.218.112:443 glancefitch.com tcp
US 172.67.135.232:443 grantsbuddy.com tcp
US 174.138.190.170:443 godowebmail.com tcp
US 66.235.200.146:80 gradmydayhk.com tcp
DE 85.13.164.66:443 ethority.io tcp
FR 154.49.245.81:443 guiadesushi.com tcp
KR 158.247.251.123:443 goldentree1.com tcp
JP 207.148.91.91:443 funwiselife.com tcp
FR 89.117.169.211:443 genetransal.com tcp
FR 155.133.132.6:443 gutguidance.com tcp
US 8.8.8.8:53 recaptcha.cloud udp
US 8.8.8.8:53 rentalaura.com udp
US 8.8.8.8:53 hahaexpress.com udp
US 8.8.8.8:53 andysartlab.com udp
US 8.8.8.8:53 ancasiminea.com udp
US 8.8.8.8:53 www.atmminerals.com udp
US 8.8.8.8:53 layarajaram.com udp
US 8.8.8.8:53 lectrcebike.com udp
US 8.8.8.8:53 artistica83.com udp
US 8.8.8.8:53 lawyerstamp.com udp
US 8.8.8.8:53 ldssgateway.com udp
US 8.8.8.8:53 lra-designs.com udp
US 8.8.8.8:53 lemondradio.com udp
US 8.8.8.8:53 letsbeahead.com udp
US 8.8.8.8:53 www.glancefitch.com udp
US 8.8.8.8:53 lingasuites.com udp
US 8.8.8.8:53 lukatiendas.com udp
US 8.8.8.8:53 lincomotors.com udp
US 8.8.8.8:53 lightupfako.com udp
US 8.8.8.8:53 linngahotel.com udp
US 8.8.8.8:53 loistmurray.com udp
US 8.8.8.8:53 luxurybrnds.com udp
US 8.8.8.8:53 lvprofinder.com udp
LT 84.32.84.32:443 lectrcebike.com tcp
US 82.180.128.139:443 hahaexpress.com tcp
FI 95.217.5.229:443 recaptcha.cloud tcp
US 67.223.118.22:443 andysartlab.com tcp
IE 5.181.161.83:80 ancasiminea.com tcp
US 107.191.98.213:443 lawyerstamp.com tcp
US 8.8.8.8:53 lvxhaircare.com udp
US 157.245.142.65:443 layarajaram.com tcp
US 66.29.153.33:443 artistica83.com tcp
US 63.250.43.4:443 lra-designs.com tcp
US 198.54.116.77:443 rentalaura.com tcp
US 8.8.8.8:53 lynnclaudie.com udp
US 198.12.219.192:443 lemondradio.com tcp
US 63.250.38.53:443 lincomotors.com tcp
US 162.241.252.233:443 lightupfako.com tcp
US 208.113.190.188:443 www.atmminerals.com tcp
US 8.8.8.8:53 madneiconia.com udp
US 149.100.151.74:443 lukatiendas.com tcp
TR 93.89.224.173:80 linngahotel.com tcp
CH 92.43.218.112:443 www.glancefitch.com tcp
US 209.126.25.188:443 ldssgateway.com tcp
US 89.117.139.218:443 letsbeahead.com tcp
US 198.46.91.127:443 loistmurray.com tcp
US 162.144.4.48:443 lvprofinder.com tcp
NL 212.107.17.246:443 luxurybrnds.com tcp
US 172.67.178.18:443 lynnclaudie.com tcp
US 72.167.68.184:443 lvxhaircare.com tcp
US 8.8.8.8:53 maebabycare.com udp
SG 185.232.14.116:443 madneiconia.com tcp
US 8.8.8.8:53 maharojagar.com udp
US 8.8.8.8:53 www.makeimpulse.com udp
US 8.8.8.8:53 magicmistpw.com udp
US 8.8.8.8:53 maircompany.com udp
US 8.8.8.8:53 mangasunion.com udp
US 8.8.8.8:53 manoeltitto.com udp
US 8.8.8.8:53 manifestcgs.com udp
US 8.8.8.8:53 mathsbeauty.com udp
US 8.8.8.8:53 www.franckntoke.com udp
US 8.8.8.8:53 mapsclarity.com udp
US 8.8.8.8:53 mattblalock.com udp
US 8.8.8.8:53 malibucollective.co udp
IN 89.117.157.223:443 maharojagar.com tcp
US 151.101.66.159:443 manifestcgs.com tcp
US 134.209.125.216:443 mattblalock.com tcp
US 162.215.226.7:80 mangasunion.com tcp
US 149.100.151.136:443 magicmistpw.com tcp
FR 188.165.224.145:443 www.makeimpulse.com tcp
IN 89.117.27.239:443 mathsbeauty.com tcp
US 192.185.209.79:443 manoeltitto.com tcp
US 198.15.109.91:443 mapsclarity.com tcp
US 192.185.210.139:443 maebabycare.com tcp
KZ 185.116.195.199:443 maircompany.com tcp
US 208.113.190.188:443 www.franckntoke.com tcp
US 8.8.8.8:53 maxwinlogin.com udp
US 8.8.8.8:53 maxhighways.com udp
US 8.8.8.8:53 mechatrades.com udp
US 8.8.8.8:53 metagameltd.com udp
US 8.8.8.8:53 www.mentaypoleo.com udp
US 8.8.8.8:53 milespatton.com udp
US 8.8.8.8:53 medibluelab.com udp
US 8.8.8.8:53 mekanpaylas.com udp
US 8.8.8.8:53 milaskampus.com udp
US 8.8.8.8:53 mimielitecs.com udp
US 8.8.8.8:53 millingpick.com udp
US 15.197.204.56:80 maxhighways.com tcp
US 172.67.175.128:443 www.mentaypoleo.com tcp
US 8.8.8.8:53 coa4kcontent.or.kr udp
US 8.8.8.8:53 mojalaldoor.com udp
US 43.135.161.203:443 millingpick.com tcp
IN 89.117.157.61:443 medibluelab.com tcp
TR 78.135.87.2:443 milaskampus.com tcp
US 104.21.41.103:443 milespatton.com tcp
US 104.21.68.238:443 mekanpaylas.com tcp
US 8.8.8.8:53 monteafisha.com udp
US 8.8.8.8:53 mintuzanews.com udp
IN 154.41.233.26:443 mechatrades.com tcp
US 108.179.232.92:443 mimielitecs.com tcp
US 8.8.8.8:53 momzmilkbar.com udp
US 8.8.8.8:53 mossoulfood.com udp
US 172.67.222.148:443 metagameltd.com tcp
US 172.67.202.235:443 monteafisha.com tcp
DE 88.198.47.16:443 mojalaldoor.com tcp
IN 178.16.136.20:443 mintuzanews.com tcp
KR 210.114.6.159:80 coa4kcontent.or.kr tcp
US 8.8.8.8:53 moversbdusa.com udp
US 162.241.225.12:443 momzmilkbar.com tcp
US 66.235.200.147:80 mossoulfood.com tcp
US 8.8.8.8:53 motleyscrew.com udp
US 8.8.8.8:53 mundglob123.com udp
US 8.8.8.8:53 multiplexsa.com udp
US 8.8.8.8:53 motionfurni.com udp
US 8.8.8.8:53 muguethouse.com udp
IN 89.117.27.245:443 moversbdusa.com tcp
BR 45.152.46.120:443 mundglob123.com tcp
US 162.241.24.110:443 motleyscrew.com tcp
US 15.197.204.56:443 maxhighways.com tcp
US 8.8.8.8:53 myagentseon.com udp
DE 162.55.245.212:443 muguethouse.com tcp
US 8.8.8.8:53 mydadstools.com udp
US 8.8.8.8:53 myvistotrip.com udp
US 8.8.8.8:53 naanakaadda.com udp
US 8.8.8.8:53 www.nalinkubcat.com udp
US 134.122.113.79:443 mydadstools.com tcp
BE 13.225.239.91:443 motionfurni.com tcp
US 8.8.8.8:53 www.mydiyhabits.com udp
US 192.185.131.29:80 multiplexsa.com tcp
IN 217.21.94.118:443 naanakaadda.com tcp
US 8.8.8.8:53 mzlahaldmam.com udp
BR 149.62.37.11:443 myvistotrip.com tcp
US 8.8.8.8:53 nestglucose.com udp
US 8.8.8.8:53 nayansardar.com udp
US 50.28.11.62:443 myagentseon.com tcp
US 8.8.8.8:53 lilihairsalon.com udp
US 8.8.8.8:53 nanomusings.com udp
US 8.8.8.8:53 www.lynnclaudie.com udp
US 8.8.8.8:53 nicecoimbra.com udp
US 8.8.8.8:53 nikrahdarya.com udp
US 8.8.8.8:53 nhbahamedia.com udp
US 8.8.8.8:53 nlssourcing.com udp
US 8.8.8.8:53 nickfassion.com udp
US 8.8.8.8:53 nehoestudio.com udp
US 8.8.8.8:53 natashaquay.com udp
US 8.8.8.8:53 www.mattblalock.com udp
US 8.8.8.8:53 nft-advance.com udp
US 89.117.9.16:443 mzlahaldmam.com tcp
TH 27.254.33.86:443 www.nalinkubcat.com tcp
US 104.244.121.76:443 www.mydiyhabits.com tcp
US 172.67.178.18:443 www.lynnclaudie.com tcp
US 108.167.161.93:443 nanomusings.com tcp
US 104.21.45.109:443 nestglucose.com tcp
IN 89.117.157.109:443 nayansardar.com tcp
US 160.153.0.73:443 lilihairsalon.com tcp
IR 185.88.178.79:443 nikrahdarya.com tcp
US 160.153.0.181:443 nlssourcing.com tcp
BR 149.62.37.17:443 nehoestudio.com tcp
US 89.117.139.238:443 nhbahamedia.com tcp
US 195.179.237.157:443 nickfassion.com tcp
US 8.8.8.8:53 nicholespet.com udp
US 8.8.8.8:53 nicolecathy.com udp
US 8.8.8.8:53 newztribune.com udp
US 8.8.8.8:53 nimonaplush.com udp
US 8.8.8.8:53 norimosquad.com udp
US 8.8.8.8:53 natashaover.com udp
US 151.101.130.159:443 natashaquay.com tcp
US 134.209.125.216:443 www.mattblalock.com tcp
BR 185.211.7.249:443 nft-advance.com tcp
US 8.8.8.8:53 nothingcore.com udp
US 8.8.8.8:53 nucleexpert.com udp
US 8.8.8.8:53 www.milespatton.com udp
US 8.8.8.8:53 nouspartons.com udp
US 8.8.8.8:53 nomadicodes.com udp
US 8.8.8.8:53 brushcreekins.com udp
US 8.8.8.8:53 numerica-gr.com udp
US 8.8.8.8:53 nutrasaving.com udp
US 172.67.146.132:443 norimosquad.com tcp
US 50.28.11.62:443 brushcreekins.com tcp
US 104.21.71.56:443 natashaover.com tcp
BR 82.180.153.240:443 nucleexpert.com tcp
US 104.21.40.32:443 nicolecathy.com tcp
US 8.8.8.8:53 www.nutravetsac.com udp
US 8.8.8.8:53 onamzfinder.com udp
US 8.8.8.8:53 omaimashams.com udp
US 8.8.8.8:53 openhubnews.com udp
US 8.8.8.8:53 orvibostore.com udp
US 8.8.8.8:53 otmfinances.com udp
US 8.8.8.8:53 paardvitaal.com udp
US 104.21.81.13:443 nimonaplush.com tcp
US 63.250.43.9:443 nicholespet.com tcp
US 216.69.164.170:443 nutrasaving.com tcp
US 172.67.146.131:443 www.milespatton.com tcp
US 195.35.33.38:443 nomadicodes.com tcp
US 8.8.8.8:53 www.onoelectric.com udp
US 8.8.8.8:53 omegaplanos.com udp
US 8.8.8.8:53 ozmathefilm.com udp
US 172.67.209.115:443 newztribune.com tcp
FR 154.49.245.252:443 numerica-gr.com tcp
US 50.87.144.48:443 nouspartons.com tcp
US 8.8.8.8:53 verbenafm.com udp
US 160.153.0.175:443 odiedesigns.com tcp
US 104.21.69.84:443 omegaplanos.com tcp
US 104.21.48.107:443 omaimashams.com tcp
US 193.42.137.252:443 otmfinances.com tcp
BE 13.225.239.50:443 www.onoelectric.com tcp
DK 91.184.0.8:443 paardvitaal.com tcp
US 8.8.8.8:53 www.motionfurni.com udp
ES 18.101.89.30:443 openhubnews.com tcp
DE 217.160.0.113:443 verbenafm.com tcp
US 170.10.161.194:443 www.nutravetsac.com tcp
US 192.185.189.34:443 onamzfinder.com tcp
US 75.119.221.79:443 ozmathefilm.com tcp
BE 13.225.239.121:443 www.motionfurni.com tcp
US 8.8.8.8:53 rdclub.click udp
US 8.8.8.8:53 zoo-flix.com udp
US 8.8.8.8:53 riveriaglobal-development-wordpress.site udp
US 8.8.8.8:53 jornald.com udp
US 8.8.8.8:53 iheketo.com udp
US 8.8.8.8:53 ianetec.com udp
US 8.8.8.8:53 vakviral.com udp
US 8.8.8.8:53 ytvrecap.com udp
US 8.8.8.8:53 splashclean.biz udp
US 8.8.8.8:53 iboexam.com udp
US 8.8.8.8:53 jexello.com udp
US 8.8.8.8:53 jreketo.com udp
US 8.8.8.8:53 iluvchz.com udp
US 8.8.8.8:53 jstockk.com udp
US 172.67.135.61:443 rdclub.click tcp
US 63.250.43.10:443 vakviral.com tcp
US 66.29.141.202:443 riveriaglobal-development-wordpress.site tcp
US 198.54.121.233:443 ianetec.com tcp
US 8.8.8.8:53 jamande.com udp
US 8.8.8.8:53 jmiketo.com udp
FR 87.98.235.62:443 zoo-flix.com tcp
US 8.8.8.8:53 lgichde.com udp
US 8.8.8.8:53 shape-rail.com udp
US 8.8.8.8:53 www.natashaover.com udp
US 8.8.8.8:53 mitanne.com udp
US 8.8.8.8:53 www.nicolecathy.com udp
US 8.8.8.8:53 ket-rah.com udp
US 104.21.17.141:443 iluvchz.com tcp
US 8.8.8.8:53 md2hemp.com udp
US 8.8.8.8:53 mokling.com udp
US 8.8.8.8:53 www.nyameng.com udp
US 8.8.8.8:53 mypikku.com udp
IN 89.117.157.210:443 iboexam.com tcp
GB 185.77.97.90:443 splashclean.biz tcp
US 108.167.157.167:443 ytvrecap.com tcp
US 104.21.2.147:443 jornald.com tcp
US 8.8.8.8:53 mumfire.com udp
PL 178.211.137.153:443 jexello.com tcp
US 178.128.144.216:443 jstockk.com tcp
KR 64.176.224.184:443 mokling.com tcp
US 162.241.216.116:443 mypikku.com tcp
CN 8.134.138.93:443 lgichde.com tcp
IE 74.125.193.121:443 www.nyameng.com tcp
IR 185.141.168.198:443 jamande.com tcp
US 172.67.143.182:443 www.natashaover.com tcp
US 172.67.174.225:443 www.nicolecathy.com tcp
NL 185.104.29.90:443 shape-rail.com tcp
ES 34.175.132.224:443 ket-rah.com tcp
AR 200.58.112.50:443 mitanne.com tcp
IN 128.199.24.176:443 janmarg.com tcp
US 8.8.8.8:53 rohani37.com udp
US 96.125.174.19:443 md2hemp.com tcp
US 162.241.216.188:443 mumfire.com tcp
US 8.8.8.8:53 sellme24.com udp
US 8.8.8.8:53 hitbonuswin.life udp
US 8.8.8.8:53 sarpport.com udp
US 8.8.8.8:53 sexsub3x.net udp
US 8.8.8.8:53 sexcamsr.com udp
US 8.8.8.8:53 soyahang.com udp
US 8.8.8.8:53 tabanllc.com udp
US 8.8.8.8:53 topaz-q8.com udp
US 8.8.8.8:53 www.taxizara.be udp
US 8.8.8.8:53 sociodea.com udp
US 8.8.8.8:53 sultancarwash.com udp
US 8.8.8.8:53 tasksprinters.com udp
US 8.8.8.8:53 www.ozmathefilm.com udp
US 8.8.8.8:53 purrfectnames.com udp
US 8.8.8.8:53 stupid-couple.com udp
US 8.8.8.8:53 www.iluvchz.com udp
US 8.8.8.8:53 tbgearthworks.com udp
US 8.8.8.8:53 thequirkycrew.com udp
US 8.8.8.8:53 thinkfiscally.com udp
US 8.8.8.8:53 inova-outdoor.com udp
DE 212.72.171.49:443 sellme24.com tcp
US 104.21.6.8:443 sexsub3x.net tcp
TR 94.73.148.53:80 sarpport.com tcp
VN 45.252.248.26:443 topaz-q8.com tcp
US 104.21.17.141:443 www.iluvchz.com tcp
CH 185.155.184.85:443 hitbonuswin.life tcp
US 172.67.166.171:443 sexcamsr.com tcp
NL 68.66.248.51:443 www.taxizara.be tcp
CA 104.152.168.202:443 thinkfiscally.com tcp
US 75.119.221.79:443 www.ozmathefilm.com tcp
US 50.87.217.132:80 purrfectnames.com tcp
MY 103.191.76.170:80 soyahang.com tcp
US 8.8.8.8:53 timwolfebooks.com udp
DE 168.119.8.199:443 inova-outdoor.com tcp
IN 69.57.172.38:443 tabanllc.com tcp
US 185.230.63.186:80 tbgearthworks.com tcp
JP 131.186.56.176:443 stupid-couple.com tcp
US 8.8.8.8:53 todoroki-1010.com udp
NL 198.20.127.197:443 tasksprinters.com tcp
SG 148.66.136.215:443 thequirkycrew.com tcp
US 173.255.231.87:443 timwolfebooks.com tcp
JP 133.242.220.117:443 todoroki-1010.com tcp
US 8.8.8.8:53 jamandeh.com udp
US 8.8.8.8:53 unalibraaldia.com udp
US 8.8.8.8:53 topitstaffing.com udp
US 8.8.8.8:53 uniquepeacebd.com udp
US 8.8.8.8:53 unfilterednow.com udp
US 8.8.8.8:53 us-ioservices.com udp
US 8.8.8.8:53 vallartaaldia.com udp
US 8.8.8.8:53 underabluesky.com udp
US 8.8.8.8:53 verbenaatelie.com udp
US 8.8.8.8:53 sexsubvn.com udp
US 8.8.8.8:53 university-ks.com udp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 v-tconsulting.com udp
US 8.8.8.8:53 covecapitalinc.com udp
US 8.8.8.8:53 cropdashcrew89.com udp
US 8.8.8.8:53 www.venus-wellous.com udp
US 8.8.8.8:53 www.cunha-training.at udp
US 8.8.8.8:53 wccc2023egypt.com udp
US 8.8.8.8:53 trkprotectors.com udp
US 8.8.8.8:53 cptcodeslookup.com udp
US 8.8.8.8:53 webcare-store.com udp
US 8.8.8.8:53 www.tbgearthworks.com udp
US 8.8.8.8:53 czechoutprague.com udp
US 8.8.8.8:53 databrokersllc.com udp
US 8.8.8.8:53 daniautomatiza.com udp
US 8.8.8.8:53 deartealjarafe.com udp
US 8.8.8.8:53 www.depotdesigners.com udp
US 8.8.8.8:53 dhousecuritiba.com.br udp
US 8.8.8.8:53 dekoratiftugla.com udp
US 8.8.8.8:53 deroyalarchers.com udp
US 160.153.0.172:443 topitstaffing.com tcp
US 208.109.74.59:80 vallartaaldia.com tcp
GB 18.135.92.217:443 underabluesky.com tcp
US 172.67.143.184:80 sexsubvn.com tcp
US 45.32.5.165:443 covecapitalinc.com tcp
US 132.148.250.136:80 unfilterednow.com tcp
US 106.0.62.82:443 us-ioservices.com tcp
US 8.8.8.8:53 digitalplaners.com udp
SG 109.106.252.20:443 webcare-store.com tcp
US 86.38.202.147:443 czechoutprague.com tcp
US 8.8.8.8:53 digichronicles.com udp
AT 81.19.159.90:443 www.cunha-training.at tcp
GB 45.77.57.25:443 www.venus-wellous.com tcp
US 149.100.151.182:443 deroyalarchers.com tcp
IE 74.125.193.138:443 play.google.com tcp
NL 162.0.217.19:443 v-tconsulting.com tcp
US 104.21.78.245:443 jamandeh.com tcp
FR 92.205.7.232:443 university-ks.com tcp
US 172.67.169.157:443 cropdashcrew89.com tcp
BD 103.159.37.24:443 uniquepeacebd.com tcp
US 65.60.5.219:443 wccc2023egypt.com tcp
US 184.154.2.146:80 unalibraaldia.com tcp
US 34.149.87.45:443 www.tbgearthworks.com tcp
IN 68.178.147.171:80 trkprotectors.com tcp
US 209.217.225.34:443 databrokersllc.com tcp
DE 116.202.128.32:443 dekoratiftugla.com tcp
FR 89.117.169.24:443 deartealjarafe.com tcp
BR 186.202.153.207:443 dhousecuritiba.com.br tcp
US 138.68.239.70:443 cptcodeslookup.com tcp
US 154.49.142.212:443 digichronicles.com tcp
IN 86.38.243.32:443 digitalplaners.com tcp
US 8.8.8.8:53 digitalwirksam.com udp
US 172.67.195.101:443 digitalwirksam.com tcp
US 8.8.8.8:53 ditomediagroup.com udp
US 8.8.8.8:53 elecscooterpro.com udp
US 172.67.143.184:443 sexsubvn.com tcp
US 8.8.8.8:53 eliteelegances.com udp
US 8.8.8.8:53 electronikahub.com udp
US 8.8.8.8:53 elegancebymino.com udp
US 8.8.8.8:53 www.v-tconsulting.com udp
US 8.8.8.8:53 federicagironi.com udp
US 8.8.8.8:53 faisalblogvibe.com udp
US 8.8.8.8:53 fchrisdigitals.com udp
US 8.8.8.8:53 fingertapgames.com udp
US 8.8.8.8:53 fashionfusebox.com udp
US 8.8.8.8:53 fenxiangzhijia.com udp
US 8.8.8.8:53 flaviochinchan.com udp
US 8.8.8.8:53 firelightpress.com udp
US 8.8.8.8:53 friedgardossig.com udp
US 8.8.8.8:53 gboyeclassique.com udp
US 8.8.8.8:53 gestaoderendas.com udp
US 8.8.8.8:53 georgecottrell.com udp
US 8.8.8.8:53 frenchtvstream.com udp
US 8.8.8.8:53 getmentalpeace.com udp
US 8.8.8.8:53 enzogabrielmkt.com udp
US 8.8.8.8:53 glassesgocrazy.com udp
US 8.8.8.8:53 elliotforedina.com udp
IN 103.152.79.182:443 electronikahub.com tcp
RU 91.215.85.68:443 elecscooterpro.com tcp
US 195.35.33.40:443 eliteelegances.com tcp
US 8.8.8.8:53 forthycreative.com udp
US 8.8.8.8:53 ghislainepinel.com udp
US 8.8.8.8:53 getier-jewelry.com udp
BR 186.202.153.207:443 dhousecuritiba.com.br tcp
ES 185.162.53.46:443 elegancebymino.com tcp
US 172.67.167.253:443 federicagironi.com tcp
VN 103.75.187.17:443 fingertapgames.com tcp
US 8.8.8.8:53 lustclubprive.com udp
NL 162.0.217.19:443 www.v-tconsulting.com tcp
FR 87.98.184.98:443 fchrisdigitals.com tcp
US 195.35.38.25:443 faisalblogvibe.com tcp
US 8.8.8.8:53 mariamghznavi.com udp
US 8.8.8.8:53 lyricsquester.com udp
US 172.67.202.147:443 firelightpress.com tcp
US 172.67.146.120:443 friedgardossig.com tcp
GB 154.49.138.245:443 frenchtvstream.com tcp
US 149.100.151.12:443 forthycreative.com tcp
BR 185.213.81.174:443 flaviochinchan.com tcp
GB 185.77.97.136:443 glassesgocrazy.com tcp
US 104.21.63.227:443 georgecottrell.com tcp
US 162.214.173.69:443 elliotforedina.com tcp
US 209.126.6.116:443 fashionfusebox.com tcp
BR 154.49.247.188:443 gestaoderendas.com tcp
IN 149.100.146.32:443 getmentalpeace.com tcp
US 104.21.49.45:443 ghislainepinel.com tcp
BR 154.49.247.151:443 enzogabrielmkt.com tcp
LT 45.84.207.82:443 getier-jewelry.com tcp
US 104.21.59.35:443 lyricsquester.com tcp
FR 51.91.236.193:443 lustclubprive.com tcp
IR 194.147.142.130:443 mariamghznavi.com tcp
US 8.8.8.8:53 lovelinjoshua.com udp
DE 144.76.97.27:443 lovelinjoshua.com tcp
US 8.8.8.8:53 luxuryhair-tr.com udp
US 8.8.8.8:53 madametzarina.com udp
US 8.8.8.8:53 marlos-winkel.com udp
US 8.8.8.8:53 masterlexperu.com udp
US 8.8.8.8:53 matisaeventos.com udp
US 8.8.8.8:53 mathieuquiros.com udp
US 8.8.8.8:53 mdbizconsults.com udp
US 8.8.8.8:53 maximisegains.com udp
US 8.8.8.8:53 medlifechoice.com udp
US 8.8.8.8:53 meccakidswear.com udp
US 8.8.8.8:53 meet-medicare.com udp
US 8.8.8.8:53 megankellyllc.com udp
US 8.8.8.8:53 www.dekoratiftugla.com udp
US 8.8.8.8:53 metamagicmask.com udp
US 8.8.8.8:53 milanotourexp.com udp
US 172.67.222.129:443 luxuryhair-tr.com tcp
US 8.8.8.8:53 hillviewps.com udp
US 8.8.8.8:53 www.mariamghznavi.com udp
DE 116.202.128.32:443 www.dekoratiftugla.com tcp
BR 45.151.120.219:443 milanotourexp.com tcp
US 8.8.8.8:53 moneyinfoland.com udp
US 8.8.8.8:53 mobileyfibers.com udp
US 8.8.8.8:53 multihealings.com udp
US 8.8.8.8:53 www.electronikahub.com udp
US 8.8.8.8:53 moneylifeblog.com udp
US 8.8.8.8:53 www.digitalwirksam.com udp
US 8.8.8.8:53 mydisplaynest.com udp
US 172.67.199.52:443 marlos-winkel.com tcp
US 8.8.8.8:53 mythuatdailoi.com udp
US 141.193.213.20:443 hillviewps.com tcp
US 8.8.8.8:53 www.federicagironi.com udp
DE 162.55.243.250:443 mdbizconsults.com tcp
US 154.16.200.5:443 megankellyllc.com tcp
US 74.208.236.114:443 meet-medicare.com tcp
US 172.67.204.209:443 maximisegains.com tcp
US 149.100.151.82:443 matisaeventos.com tcp
US 20.51.127.5:443 medlifechoice.com tcp
US 208.113.151.102:443 masterlexperu.com tcp
FR 109.234.165.181:443 mathieuquiros.com tcp
IT 81.88.48.71:443 metamagicmask.com tcp
SG 154.26.139.34:443 meccakidswear.com tcp
IR 194.147.142.130:443 www.mariamghznavi.com tcp
US 104.21.12.187:443 www.digitalwirksam.com tcp
US 8.8.8.8:53 mywifiextblog.com udp
US 104.21.74.60:443 www.federicagironi.com tcp
IN 103.152.79.182:443 www.electronikahub.com tcp
SG 139.180.141.227:443 mythuatdailoi.com tcp
US 89.117.139.92:443 mobileyfibers.com tcp
US 8.8.8.8:53 nacionalreduz.com udp
US 74.208.236.54:443 mydisplaynest.com tcp
SG 146.190.108.12:443 moneyinfoland.com tcp
US 8.8.8.8:53 www.lovelinjoshua.com udp
US 8.8.8.8:53 mviesdownload.com udp
US 8.8.8.8:53 www.navarrasummit.com udp
US 8.8.8.8:53 myrebelhealth.com udp
US 8.8.8.8:53 nearmeexperts.com udp
SG 157.230.245.170:443 moneylifeblog.com tcp
US 185.212.71.55:443 multihealings.com tcp
IN 154.41.233.94:443 mywifiextblog.com tcp
US 8.8.8.8:53 nonboxdigital.com udp
US 8.8.8.8:53 www.ghislainepinel.com udp
US 8.8.8.8:53 novitasvoyage.com udp
US 8.8.8.8:53 sashimi-sp.com udp
US 8.8.8.8:53 nandhanamshop.com udp
US 8.8.8.8:53 www.friedgardossig.com udp
US 8.8.8.8:53 nci-transport.com udp
US 8.8.8.8:53 non-stopstore.com udp
US 8.8.8.8:53 notcryptobros.com udp
US 8.8.8.8:53 nuestrodiadyd.com udp
US 8.8.8.8:53 www.masterlexperu.com udp
US 8.8.8.8:53 nutraparadise.com udp
US 8.8.8.8:53 oasisbusyness.com udp
US 8.8.8.8:53 ouestchatrlie.com udp
SG 23.106.53.137:443 mviesdownload.com tcp
US 104.248.228.137:443 myrebelhealth.com tcp
US 8.8.8.8:53 odakaryokuchi.com udp
DE 144.76.97.27:443 www.lovelinjoshua.com tcp
BR 186.202.153.26:80 nacionalreduz.com tcp
ES 82.159.245.189:443 www.navarrasummit.com tcp
US 149.100.151.73:443 novitasvoyage.com tcp
US 172.67.208.30:443 nonboxdigital.com tcp
US 170.106.152.115:443 nci-transport.com tcp
US 172.67.197.251:443 nearmeexperts.com tcp
GB 145.14.153.105:443 nandhanamshop.com tcp
FR 89.117.169.194:443 oasisbusyness.com tcp
US 104.21.49.45:443 www.ghislainepinel.com tcp
US 104.21.76.79:443 sashimi-sp.com tcp
US 15.197.142.173:443 notcryptobros.com tcp
US 104.21.79.158:443 www.friedgardossig.com tcp
US 209.126.87.47:443 nuestrodiadyd.com tcp
US 208.113.151.102:443 www.masterlexperu.com tcp
US 82.180.172.30:443 non-stopstore.com tcp
US 8.8.8.8:53 ourreviewspot.com udp
BE 213.158.94.167:443 ouestchatrlie.com tcp
US 8.8.8.8:53 pack61valrico.com udp
US 8.8.8.8:53 paintforprint.com udp
US 8.8.8.8:53 imunify-alert.com udp
US 8.8.8.8:53 paradisepetpr.com udp
US 8.8.8.8:53 pakcalculator.com udp
US 8.8.8.8:53 timempresassc.com udp
US 8.8.8.8:53 toothchillers.com udp
US 8.8.8.8:53 patelveerdigi.com udp
JP 133.167.83.34:443 odakaryokuchi.com tcp
US 82.180.138.5:443 paintforprint.com tcp
US 172.67.176.47:443 imunify-alert.com tcp
IN 154.41.233.18:443 patelveerdigi.com tcp
US 8.8.8.8:53 toddlrtravels.com udp
US 154.49.142.209:443 ourreviewspot.com tcp
US 162.240.97.189:80 paradisepetpr.com tcp
US 172.67.163.29:443 pakcalculator.com tcp
US 173.236.194.8:443 pack61valrico.com tcp
US 38.60.251.213:443 toothchillers.com tcp
BR 191.252.37.9:443 timempresassc.com tcp
US 8.8.8.8:53 topviralsound.com udp
US 8.8.8.8:53 travelingease.com udp
US 89.117.139.110:443 toddlrtravels.com tcp
US 8.8.8.8:53 tufafinwtalla.com udp
US 8.8.8.8:53 www.nci-transport.com udp
US 172.67.183.69:443 topviralsound.com tcp
US 8.8.8.8:53 trendz-travel.com udp
US 8.8.8.8:53 tripsytravels.com udp
US 8.8.8.8:53 tru-glow-skin.com udp
US 8.8.8.8:53 unlock-living.com udp
US 8.8.8.8:53 violetkennedy.com udp
US 8.8.8.8:53 vendhubglobal.com udp
US 8.8.8.8:53 ulearndigital.com udp
US 8.8.8.8:53 uitgelijurken.com udp
US 8.8.8.8:53 unboundtech4u.com udp
US 8.8.8.8:53 uniquehedgefx.com udp
US 172.67.132.64:443 travelingease.com tcp
CA 104.255.152.78:443 tufafinwtalla.com tcp
US 8.8.8.8:53 vegasanmarket.com udp
US 8.8.8.8:53 vigourventure.com udp
US 8.8.8.8:53 viralpostnews.com udp
US 8.8.8.8:53 warcraftgifts.com udp
US 8.8.8.8:53 vrudhiventure.com udp
US 8.8.8.8:53 wasiuchnikyan.com udp
US 141.193.213.10:443 tripsytravels.com tcp
US 172.67.137.202:443 uitgelijurken.com tcp
GB 192.250.239.60:443 unboundtech4u.com tcp
US 170.106.152.115:443 www.nci-transport.com tcp
SG 185.232.14.91:443 unlock-living.com tcp
US 104.21.30.77:443 tru-glow-skin.com tcp
US 131.153.147.34:443 ulearndigital.com tcp
US 154.49.142.175:443 vendhubglobal.com tcp
US 8.8.8.8:53 wepaintxtreme.com udp
US 8.8.8.8:53 winkel-jansen.com udp
US 8.8.8.8:53 waterloungers.com udp
US 185.212.71.210:443 violetkennedy.com tcp
US 109.106.251.167:443 vigourventure.com tcp
US 195.35.33.41:443 uniquehedgefx.com tcp
US 160.153.0.108:443 vegasanmarket.com tcp
US 8.8.8.8:53 whaquedtennis.com udp
PL 62.129.210.84:80 wasiuchnikyan.com tcp
CA 23.227.38.65:443 warcraftgifts.com tcp
US 8.8.8.8:53 winkel-rutten.com udp
US 8.8.8.8:53 wowparabrisas.com udp
IN 89.117.157.243:443 vrudhiventure.com tcp
US 89.116.239.74:443 waterloungers.com tcp
US 149.28.246.224:443 wepaintxtreme.com tcp
US 8.8.8.8:53 www.pack61valrico.com udp
US 172.67.136.161:443 wowparabrisas.com tcp
US 172.67.170.82:443 winkel-jansen.com tcp
US 172.67.146.54:443 whaquedtennis.com tcp
US 104.21.82.56:443 winkel-rutten.com tcp
US 8.8.8.8:53 yangchenminer.com udp
US 8.8.8.8:53 yngglobaltrip.com udp
US 8.8.8.8:53 xaydungbuigia.com udp
US 8.8.8.8:53 westernslopecs.com udp
US 8.8.8.8:53 xvideosgringo.com udp
US 185.212.70.169:443 yangchenminer.com tcp
US 173.236.194.8:443 www.pack61valrico.com tcp
US 8.8.8.8:53 zero-2-jacked.com udp
US 8.8.8.8:53 zylbersztejns.com udp
US 8.8.8.8:53 winslow-energy.com udp
US 8.8.8.8:53 zbusterzapper.com udp
US 8.8.8.8:53 wicker-shutter.com udp
US 104.21.76.181:443 xvideosgringo.com tcp
VN 103.74.118.169:443 xaydungbuigia.com tcp
US 82.180.172.45:443 wicker-shutter.com tcp
US 172.67.204.232:443 zbusterzapper.com tcp
US 104.21.77.133:443 zero-2-jacked.com tcp
BG 185.45.66.180:80 winslow-energy.com tcp
CA 208.94.107.101:443 westernslopecs.com tcp
TH 27.254.152.23:443 yngglobaltrip.com tcp
BE 213.158.94.167:443 zylbersztejns.com tcp
US 8.8.8.8:53 woodardfineart.com udp
US 8.8.8.8:53 yarafashiontr.com udp
US 8.8.8.8:53 xindafurniture.com udp
US 8.8.8.8:53 yassineraddahi.com udp
BR 149.62.37.237:443 yarafashiontr.com tcp
US 62.72.2.4:443 xindafurniture.com tcp
NL 85.10.159.155:443 yassineraddahi.com tcp
US 172.67.182.249:443 woodardfineart.com tcp
US 8.8.8.8:53 yasmin-jewelry.com udp
US 8.8.8.8:53 yoursimplehelp.com udp
US 8.8.8.8:53 zabljakgradnja.com udp
US 8.8.8.8:53 zaandam-winkel.com udp
US 8.8.8.8:53 yourgooddesign.com udp
US 8.8.8.8:53 yazd-electrode.com udp
US 8.8.8.8:53 10xincomeguide.com udp
US 8.8.8.8:53 www.247jobsafricia.com udp
US 8.8.8.8:53 www.ologeek.com udp
US 8.8.8.8:53 nunuzen.com udp
US 8.8.8.8:53 17aaginhibitor.com udp
US 8.8.8.8:53 oabutre.com udp
US 8.8.8.8:53 olvy-jo.com udp
US 8.8.8.8:53 omevids.com udp
US 8.8.8.8:53 a1gmtlocksmith.com udp
US 8.8.8.8:53 optasis.com udp
US 8.8.8.8:53 onaircc.com udp
US 8.8.8.8:53 www.wowparabrisas.com udp
US 8.8.8.8:53 agnumtek.com udp
US 8.8.8.8:53 afric-eg.com udp
US 8.8.8.8:53 aiteknow.com udp
US 8.8.8.8:53 www.zbusterzapper.com udp
US 8.8.8.8:53 oringsets.com udp
US 154.56.36.118:443 yoursimplehelp.com tcp
US 104.21.76.79:443 sashimi-sp.com tcp
US 8.8.8.8:53 www.pastaloni.com udp
NL 162.0.217.158:80 zabljakgradnja.com tcp
US 172.67.136.161:443 www.wowparabrisas.com tcp
US 172.67.144.64:443 yourgooddesign.com tcp
US 149.100.149.21:443 www.247jobsafricia.com tcp
US 104.21.92.56:443 a1gmtlocksmith.com tcp
NL 145.14.156.80:443 olvy-jo.com tcp
US 8.8.8.8:53 paulbross.com udp
SG 194.163.35.218:443 omevids.com tcp
US 104.21.85.205:443 17aaginhibitor.com tcp
US 172.67.135.206:443 oringsets.com tcp
US 134.195.91.139:443 optasis.com tcp
US 104.21.69.54:443 www.zbusterzapper.com tcp
FR 163.172.42.194:443 yasmin-jewelry.com tcp
HK 45.207.88.251:443 www.ologeek.com tcp
IR 212.33.203.165:443 yazd-electrode.com tcp
US 86.38.202.69:443 10xincomeguide.com tcp
US 66.29.132.5:443 agnumtek.com tcp
US 67.222.38.76:80 aiteknow.com tcp
US 38.145.211.5:443 nunuzen.com tcp
BR 187.45.240.76:80 oabutre.com tcp
US 162.241.226.178:443 afric-eg.com tcp
KR 183.111.183.58:443 onaircc.com tcp
US 172.67.179.65:443 zaandam-winkel.com tcp
US 8.8.8.8:53 serwer2197115.home.pl udp
US 68.178.244.168:443 www.pastaloni.com tcp
PL 62.129.210.84:80 serwer2197115.home.pl tcp
US 104.21.95.117:443 paulbross.com tcp
US 8.8.8.8:53 reconenterprise.net udp
US 8.8.8.8:53 pinngrade.com udp
US 8.8.8.8:53 qpremixes.com udp
US 8.8.8.8:53 renaissam.com udp
US 8.8.8.8:53 rosker-uk.com udp
US 8.8.8.8:53 www.yngglobaltrip.com udp
US 8.8.8.8:53 rodendogs.com udp
US 8.8.8.8:53 porn-flip.com udp
US 8.8.8.8:53 soccertit.com udp
US 8.8.8.8:53 sollumier.com udp
US 8.8.8.8:53 www.gorynse.com udp
US 8.8.8.8:53 spasavant.com udp
US 8.8.8.8:53 sweetglim.com udp
US 8.8.8.8:53 skipnugas.com udp
US 8.8.8.8:53 somosbina.com udp
US 8.8.8.8:53 smartvire.com udp
US 8.8.8.8:53 socialbaj.com udp
US 8.8.8.8:53 t-bargain.com udp
US 8.8.8.8:53 sunecarts.com udp
US 8.8.8.8:53 teach2tec.com udp
US 8.8.8.8:53 prioritize.io udp
US 8.8.8.8:53 techflyme.com udp
US 8.8.8.8:53 www.textile2x.com udp
NL 162.0.217.158:443 zabljakgradnja.com tcp
US 160.153.0.193:443 renaissam.com tcp
US 172.67.207.243:443 porn-flip.com tcp
US 72.167.250.210:443 pinngrade.com tcp
DE 62.171.162.105:80 qpremixes.com tcp
US 89.117.139.123:443 somosbina.com tcp
US 8.8.8.8:53 rtpslotmax.com udp
US 195.179.238.102:443 t-bargain.com tcp
IN 89.117.157.182:443 socialbaj.com tcp
US 174.127.114.152:443 sunecarts.com tcp
SG 156.67.222.39:443 skipnugas.com tcp
FR 92.205.2.176:443 rosker-uk.com tcp
DE 81.169.145.160:80 rodendogs.com tcp
GB 154.49.138.195:443 soccertit.com tcp
US 50.62.137.44:443 www.gorynse.com tcp
US 62.72.50.95:443 spasavant.com tcp
IT 86.107.32.169:443 www.textile2x.com tcp
CA 208.94.107.101:443 reconenterprise.net tcp
NL 193.160.66.118:443 sweetglim.com tcp
TH 27.254.152.23:443 www.yngglobaltrip.com tcp
US 104.21.78.46:443 smartvire.com tcp
US 148.72.29.61:443 prioritize.io tcp
US 8.8.8.8:53 thelabeld.com udp
US 8.8.8.8:53 rumorsmill.com udp
US 8.8.8.8:53 sadnacraft.com udp
US 8.8.8.8:53 safarisaad.com udp
US 8.8.8.8:53 salontrays.com udp
GB 185.77.97.153:443 techflyme.com tcp
US 8.8.8.8:53 saminmusic.com udp
US 8.8.8.8:53 safelyrich.com udp
US 8.8.8.8:53 samebiketh.com udp
US 50.62.137.44:443 www.gorynse.com tcp
US 104.21.90.142:443 rtpslotmax.com tcp
US 154.56.47.130:443 teach2tec.com tcp
US 104.21.26.80:443 rumorsmill.com tcp
FR 5.135.225.250:443 sadnacraft.com tcp
IN 154.41.233.85:443 safarisaad.com tcp
IN 154.41.233.131:443 thelabeld.com tcp
US 154.56.47.33:443 saminmusic.com tcp
US 63.250.43.4:443 safelyrich.com tcp
CA 199.16.129.213:443 samebiketh.com tcp
US 137.184.233.171:443 salontrays.com tcp
US 8.8.8.8:53 searchcura.com udp
US 8.8.8.8:53 www.paulbross.com udp
US 104.21.95.117:443 www.paulbross.com tcp
US 8.8.8.8:53 www.scoreprice.com udp
US 63.250.43.131:80 searchcura.com tcp
US 8.8.8.8:53 seonetplus.com udp
US 8.8.8.8:53 www.sdsigraocs.com udp
US 8.8.8.8:53 seasonself.com udp
US 8.8.8.8:53 seemlybite.com udp
US 8.8.8.8:53 sexfilmhub.com udp
US 8.8.8.8:53 shangdaluo.com udp
FR 217.182.147.96:443 www.scoreprice.com tcp
IN 178.16.136.44:443 seasonself.com tcp
US 173.236.195.233:443 www.sdsigraocs.com tcp
US 8.8.8.8:53 shengwenwp.com udp
US 8.8.8.8:53 shinxiaomi.com udp
US 8.8.8.8:53 shirtpodus.com udp
CA 51.222.10.231:443 seonetplus.com tcp
US 8.8.8.8:53 212footgear.com udp
US 104.21.30.97:443 seemlybite.com tcp
US 104.21.23.167:443 sexfilmhub.com tcp
US 8.8.8.8:53 52thinknest.com udp
US 8.8.8.8:53 9999premium.com udp
US 8.8.8.8:53 shopiterpk.com udp
US 104.21.33.126:443 shirtpodus.com tcp
SG 13.229.225.82:443 shengwenwp.com tcp
US 8.8.8.8:53 shivnagari.com udp
US 8.8.8.8:53 www.0815concept.com udp
US 8.8.8.8:53 www.247carsrent.com udp
US 8.8.8.8:53 724download.com udp
US 86.38.202.62:443 shopiterpk.com tcp
SG 159.223.95.251:443 shinxiaomi.com tcp
US 8.8.8.8:53 3d-video-ip.com udp
US 8.8.8.8:53 abiyemsende.com udp
US 8.8.8.8:53 3cangvip24h.com udp
US 8.8.8.8:53 actcelgauze.com udp
US 8.8.8.8:53 www.addielamarr.com udp
US 8.8.8.8:53 adakcompany.com udp
SG 156.67.222.26:443 212footgear.com tcp
US 8.8.8.8:53 afamtraders.com udp
US 8.8.8.8:53 afkhami-biz.com udp
US 3.33.152.147:443 notcryptobros.com tcp
US 8.8.8.8:53 aforestbird.com udp
IN 154.41.233.123:443 shivnagari.com tcp
US 172.67.148.98:443 actcelgauze.com tcp
US 104.21.58.226:443 9999premium.com tcp
US 50.2.85.6:80 52thinknest.com tcp
AT 81.19.159.43:443 www.0815concept.com tcp
SG 66.42.50.173:443 3cangvip24h.com tcp
KR 141.164.61.164:443 aforestbird.com tcp
FR 154.49.245.71:443 abiyemsende.com tcp
TH 163.44.198.62:443 www.247carsrent.com tcp
FR 151.106.26.219:443 afamtraders.com tcp
DE 176.9.29.145:443 adakcompany.com tcp
US 69.163.154.76:443 www.addielamarr.com tcp
JP 45.32.49.187:443 3d-video-ip.com tcp
US 8.8.8.8:53 alexandreiv.com udp
US 8.8.8.8:53 alldigitool.com udp
US 8.8.8.8:53 ahmadostore.com udp
US 8.8.8.8:53 amperfiedtr.com udp
US 8.8.8.8:53 anadolugilt.com udp
US 8.8.8.8:53 aiwork-labo.com udp
US 8.8.8.8:53 alkhairiyya.com udp
US 8.8.8.8:53 allnameinfo.com udp
US 8.8.8.8:53 www.alphashop22.com udp
US 8.8.8.8:53 allmetalsaz.com udp
US 8.8.8.8:53 amysparaplu.com udp
US 8.8.8.8:53 animegersub.com udp
US 8.8.8.8:53 aniwatchapk.com udp
GB 5.180.60.178:443 ahmadostore.com tcp
BR 154.49.247.101:443 alexandreiv.com tcp
US 172.67.204.20:80 aiwork-labo.com tcp
US 86.38.202.124:443 allnameinfo.com tcp
IN 217.21.94.188:443 aniwatchapk.com tcp
FR 178.33.118.79:443 www.alphashop22.com tcp
SG 35.187.227.253:443 amysparaplu.com tcp
US 149.100.151.156:443 allmetalsaz.com tcp
LT 84.32.84.32:443 animegersub.com tcp
IN 217.21.90.200:443 alkhairiyya.com tcp
IN 154.41.233.169:443 alldigitool.com tcp
US 104.21.28.99:443 anadolugilt.com tcp
TR 78.135.107.41:443 amperfiedtr.com tcp
US 8.8.8.8:53 apecoin2erc.com udp
US 8.8.8.8:53 arkamwahrof.com udp
US 8.8.8.8:53 apostahorse.com udp
US 8.8.8.8:53 apostaequus.com udp
US 8.8.8.8:53 antalyanero.com udp
US 8.8.8.8:53 arcticdelux.com udp
US 8.8.8.8:53 artofmehndi.com udp
US 8.8.8.8:53 askforwrite.com udp
US 8.8.8.8:53 aseguramoss.com udp
US 8.8.8.8:53 atomauftour.com udp
US 8.8.8.8:53 asrinvestor.com udp
US 8.8.8.8:53 asmarasheed.com udp
US 8.8.8.8:53 atestofhome.com udp
US 172.67.204.20:443 aiwork-labo.com tcp
US 172.67.186.227:443 apostaequus.com tcp
FR 213.32.10.205:443 atomauftour.com tcp
US 151.106.105.205:443 aseguramoss.com tcp
US 67.222.135.210:443 asmarasheed.com tcp
US 154.56.47.21:443 atestofhome.com tcp
FR 92.205.7.250:80 arcticdelux.com tcp
GB 45.77.57.25:443 askforwrite.com tcp
US 104.21.37.249:80 antalyanero.com tcp
TR 94.138.202.35:443 apecoin2erc.com tcp
GB 185.77.97.82:443 artofmehndi.com tcp
US 172.67.187.225:443 apostahorse.com tcp
NL 89.116.53.34:443 arkamwahrof.com tcp
IN 68.178.158.76:80 asrinvestor.com tcp
US 8.8.8.8:53 audiencpoll.com udp
US 8.8.8.8:53 attireclubs.com udp
US 8.8.8.8:53 clips-4sales.com udp
US 8.8.8.8:53 thespanishoven.com udp
US 8.8.8.8:53 thestellarpets.com udp
US 8.8.8.8:53 tiaceureceitas.com udp
US 8.8.8.8:53 thuanthanhshop.com udp
US 8.8.8.8:53 tlsolutionsllc.com udp
US 8.8.8.8:53 topbrandsteals.com udp
US 8.8.8.8:53 toptierbargain.com udp
US 8.8.8.8:53 top3technology.com udp
US 8.8.8.8:53 antalyaxoxs.com udp
US 104.21.80.159:443 clips-4sales.com tcp
SG 156.67.222.109:443 thuanthanhshop.com tcp
US 104.21.67.98:443 topbrandsteals.com tcp
US 185.230.63.107:443 tlsolutionsllc.com tcp
US 208.109.213.103:443 attireclubs.com tcp
US 8.8.8.8:53 topwaterbassin.com udp
US 54.85.199.254:443 thestellarpets.com tcp
US 104.21.75.41:80 antalyaxoxs.com tcp
US 172.67.199.12:443 toptierbargain.com tcp
PT 94.63.230.244:80 tiaceureceitas.com tcp
BE 13.225.239.96:443 thespanishoven.com tcp
DE 217.160.0.132:443 top3technology.com tcp
IN 46.28.45.234:443 tradingherotak.com tcp
US 104.21.39.6:443 towntradetales.com tcp
US 8.8.8.8:53 travelisttours.com udp
US 8.8.8.8:53 trandstorynews.com udp
SG 156.67.222.47:443 travelisttours.com tcp
US 8.8.8.8:53 trekkingninjas.com udp
US 8.8.8.8:53 tribalhorizons.com udp
US 8.8.8.8:53 turbopantallas.com udp
US 8.8.8.8:53 trellisdynamic.com udp
US 8.8.8.8:53 www.travelwithflip.com udp
US 8.8.8.8:53 trimfadebarber.com udp
US 8.8.8.8:53 usafashionmall.com udp
US 8.8.8.8:53 ulrike-isensee.com udp
US 8.8.8.8:53 urbanmarkethub.com udp
US 8.8.8.8:53 urbanembroider.com udp
US 8.8.8.8:53 usamexabogados.com udp
US 8.8.8.8:53 uvasolutionslc.com udp
US 8.8.8.8:53 vibebrandmedia.com udp
US 8.8.8.8:53 tramitesunidos.com udp
AT 81.19.159.43:443 www.travelwithflip.com tcp
IN 154.41.233.135:443 trandstorynews.com tcp
US 8.8.8.8:53 www.receitasdatiaceu.com udp
US 72.167.206.79:443 usamexabogados.com tcp
DE 164.92.140.210:443 trellisdynamic.com tcp
US 154.56.47.119:443 tribalhorizons.com tcp
DE 95.111.232.206:443 turbopantallas.com tcp
US 104.21.27.189:443 tramitesunidos.com tcp
US 172.67.191.196:443 trimfadebarber.com tcp
US 149.100.151.111:443 vibebrandmedia.com tcp
FR 154.49.245.191:443 uvasolutionslc.com tcp
US 104.21.66.31:443 urbanmarkethub.com tcp
IN 154.41.233.104:443 trekkingninjas.com tcp
DE 83.243.41.150:443 ulrike-isensee.com tcp
US 195.179.238.65:443 usafashionmall.com tcp
IN 82.180.143.61:443 urbanembroider.com tcp
IN 217.21.90.136:443 ulagucreations.com tcp
PT 94.63.230.244:80 www.receitasdatiaceu.com tcp
US 8.8.8.8:53 vidovitihristo.com udp
US 8.8.8.8:53 vinoothimmaiah.com udp
US 8.8.8.8:53 watch-4-beauty.com udp
US 8.8.8.8:53 wecleanweshine.com udp
US 8.8.8.8:53 vngamesdevelop.com udp
US 8.8.8.8:53 vitualsvietnam.com udp
US 8.8.8.8:53 washjeffandyou.com udp
US 8.8.8.8:53 wawacomponents.com udp
US 8.8.8.8:53 whisperedtoday.com udp
US 8.8.8.8:53 wholenineyarns.com udp
US 8.8.8.8:53 willbetraining.com udp
US 8.8.8.8:53 workshopbantry.com udp
US 8.8.8.8:53 writersfortune.com udp
US 141.193.213.10:443 wawacomponents.com tcp
US 160.153.0.57:80 willbetraining.com tcp
US 160.153.0.109:443 wecleanweshine.com tcp
IN 154.41.233.107:443 vinoothimmaiah.com tcp
GB 153.92.6.220:443 wholenineyarns.com tcp
GB 185.61.152.54:80 vidovitihristo.com tcp
US 172.67.157.73:443 watch-4-beauty.com tcp
DE 5.189.178.23:443 whisperedtoday.com tcp
US 141.193.213.10:443 wawacomponents.com tcp
GB 141.136.33.30:443 workshopbantry.com tcp
BR 185.220.22.139:443 vngamesdevelop.com tcp
US 8.8.8.8:53 yawabehtraders.com udp
SG 31.220.110.223:443 vitualsvietnam.com tcp
US 8.8.8.8:53 indiadigistore.com udp
SG 156.67.222.15:443 yawabehtraders.com tcp
US 160.153.0.57:443 willbetraining.com tcp
IN 154.41.233.118:443 indiadigistore.com tcp
US 8.8.8.8:53 www.indotravelgrup.com udp
US 8.8.8.8:53 interfonocasco.com udp
US 8.8.8.8:53 instadateideas.com udp
US 104.21.92.137:80 www.indotravelgrup.com tcp
US 8.8.8.8:53 taqweemtourism.com udp
US 8.8.8.8:53 tasisatdarvish.com udp
US 157.245.251.140:443 interfonocasco.com tcp
ES 82.223.104.246:443 instadateideas.com tcp
US 8.8.8.8:53 taylorandhuynh.com udp
US 8.8.8.8:53 taxiiskenderun.com udp
US 8.8.8.8:53 techwavedigest.com udp
US 8.8.8.8:53 teefastpacific.com udp
US 8.8.8.8:53 tether-casinos.com udp
US 8.8.8.8:53 thebwilepeople.com udp
US 8.8.8.8:53 www.vngamesdevelop.com udp
US 8.8.8.8:53 terrariumtales.com udp
US 89.117.139.92:443 taqweemtourism.com tcp
US 8.8.8.8:53 tecnomixventas.com udp
IN 154.41.233.4:443 taylorandhuynh.com tcp
DE 188.40.224.240:443 tasisatdarvish.com tcp
US 8.8.8.8:53 www.wanakawinery.com udp
TR 89.252.159.163:443 taxiiskenderun.com tcp
BR 185.220.22.139:443 www.vngamesdevelop.com tcp
US 8.8.8.8:53 theediblehouse.com udp
US 104.21.65.79:80 tether-casinos.com tcp
US 209.142.64.23:443 techwavedigest.com tcp
US 8.8.8.8:53 thegioisilicon.com udp
US 8.8.8.8:53 thedecorduniya.com udp
US 173.252.167.30:443 thebwilepeople.com tcp
GB 45.77.57.25:443 terrariumtales.com tcp
US 8.8.8.8:53 thegalletitans.com udp
US 75.102.22.72:443 tecnomixventas.com tcp
US 8.8.8.8:53 thegreatlooser.com udp
US 208.113.221.23:443 www.wanakawinery.com tcp
US 104.21.92.137:443 www.indotravelgrup.com tcp
US 74.208.236.109:443 thecreativizer.com tcp
US 8.8.8.8:53 inabetterfuture.com udp
US 8.8.8.8:53 industriasrojas.com udp
VN 103.48.193.28:80 thegioisilicon.com tcp
US 8.8.8.8:53 indibiznasional.com udp
US 8.8.8.8:53 www.ingramhenrietta.com udp
US 54.85.199.254:443 theediblehouse.com tcp
US 104.21.1.67:443 thegalletitans.com tcp
IN 62.72.28.41:443 thegreatlooser.com tcp
GB 154.49.138.211:443 thedecorduniya.com tcp
BR 154.49.247.205:443 industriasrojas.com tcp
US 8.8.8.8:53 integralrebirth.com udp
US 8.8.8.8:53 harrisallied.com udp
US 8.8.8.8:53 interiordynamyx.com udp
SG 128.199.228.159:443 inabetterfuture.com tcp
US 162.215.255.5:443 www.ingramhenrietta.com tcp
US 172.67.189.193:443 interiordynamyx.com tcp
SG 45.143.81.74:443 indibiznasional.com tcp
ZA 41.203.18.93:443 integralrebirth.com tcp
US 8.8.8.8:53 izzyselectricca.com udp
US 8.8.8.8:53 www.jackieschererux.com udp
US 8.8.8.8:53 jasmine-fujieda.com udp
US 8.8.8.8:53 jeremiefulconis.com udp
US 8.8.8.8:53 jcpprofessional.com udp
US 35.229.91.43:443 harrisallied.com tcp
US 8.8.8.8:53 www.jetmax-hematbbm.com udp
US 8.8.8.8:53 jet-boats-sales.com udp
US 162.255.166.168:443 izzyselectricca.com tcp
BE 13.225.239.110:443 jasmine-fujieda.com tcp
US 8.8.8.8:53 jainspacedesign.com udp
US 104.21.22.98:443 jeremiefulconis.com tcp
US 8.8.8.8:53 jhnailsemprende.com udp
US 8.8.8.8:53 jewish-identity.com udp
US 8.8.8.8:53 jindalbathworld.com udp
US 8.8.8.8:53 johnathanfriend.com udp
US 173.236.195.199:443 www.jackieschererux.com tcp
US 8.8.8.8:53 joshuasmith2024.com udp
MY 110.4.45.172:443 jcpprofessional.com tcp
ID 103.180.162.166:443 www.jetmax-hematbbm.com tcp
DE 144.76.114.186:443 jainspacedesign.com tcp
US 172.67.193.93:443 joshuasmith2024.com tcp
IN 154.41.233.119:443 jindalbathworld.com tcp
US 151.101.66.159:443 jewish-identity.com tcp
US 104.225.208.23:443 johnathanfriend.com tcp
US 173.236.209.143:443 jhnailsemprende.com tcp
US 8.8.8.8:53 juanloveramirez.com udp
US 8.8.8.8:53 kaigai-chotatsu.com udp
US 8.8.8.8:53 kabar-terupdate.com udp
US 8.8.8.8:53 karimabadmarket.com udp
US 8.8.8.8:53 kampungkopicamp.com udp
US 8.8.8.8:53 kheyootboutique.com udp
US 8.8.8.8:53 keteringfavorit.com udp
IN 154.41.233.60:443 kabar-terupdate.com tcp
US 195.35.39.28:443 karimabadmarket.com tcp
SG 156.67.222.12:443 kampungkopicamp.com tcp
VN 123.30.136.246:80 kaigai-chotatsu.com tcp
US 162.213.255.30:443 kheyootboutique.com tcp
US 212.1.210.103:443 juanloveramirez.com tcp
RS 94.127.7.176:443 keteringfavorit.com tcp
US 8.8.8.8:53 kommunikatsioon.com udp
US 8.8.8.8:53 kelloggsremates.com udp
US 8.8.8.8:53 klerosfinancial.com udp
US 8.8.8.8:53 kiteboardmexico.com udp
US 8.8.8.8:53 kyelimahardware.com udp
US 8.8.8.8:53 krp-architektur.com udp
US 8.8.8.8:53 www.jeremiefulconis.com udp
US 8.8.8.8:53 www.lactosefreeexpo.com udp
US 8.8.8.8:53 www.lafeeducourrier.com udp
US 8.8.8.8:53 cookingrecepes1.com udp
US 8.8.8.8:53 cookwellness360.com udp
US 8.8.8.8:53 www.coolhealthydiet.com udp
US 8.8.8.8:53 cpu-cooling-fan.com udp
US 8.8.8.8:53 crokersbroaster.com udp
US 8.8.8.8:53 coolkitchen4you.com udp
GB 77.75.122.198:443 klerosfinancial.com tcp
US 172.67.183.48:443 www.lactosefreeexpo.com tcp
FR 92.205.50.73:443 krp-architektur.com tcp
SG 46.17.172.214:443 cookingrecepes1.com tcp
US 70.32.23.85:443 kyelimahardware.com tcp
EE 185.7.252.203:80 kommunikatsioon.com tcp
US 8.8.8.8:53 crystal-cove-tr.com udp
US 8.8.8.8:53 cuteclubfactory.com udp
US 172.67.204.42:443 www.jeremiefulconis.com tcp
US 8.8.8.8:53 cuteandcozykids.com udp
US 96.44.182.130:443 www.coolhealthydiet.com tcp
US 107.161.188.106:443 kiteboardmexico.com tcp
IT 81.88.52.173:443 www.lafeeducourrier.com tcp
US 8.8.8.8:53 daydreamshealth.com udp
US 8.8.8.8:53 cybergamingshop.com udp
US 92.249.45.136:80 crokersbroaster.com tcp
US 104.21.14.233:443 cpu-cooling-fan.com tcp
US 172.67.214.157:443 crystal-cove-tr.com tcp
US 8.8.8.8:53 cybermondaywiki.com udp
US 8.8.8.8:53 darleneanderton.com udp
US 8.8.8.8:53 decarre-avocats.com udp
US 8.8.8.8:53 deluxeisolation.com udp
US 8.8.8.8:53 datadiveacademy.com udp
US 8.8.8.8:53 daliadesignsadv.com udp
US 8.8.8.8:53 deanaaronwaters.com udp
US 8.8.8.8:53 deepanshunagpal.com udp
US 172.67.204.192:443 cookwellness360.com tcp
DE 144.76.97.27:443 cuteclubfactory.com tcp
US 8.8.8.8:53 demotivatedduck.com udp
US 209.182.203.21:443 cuteandcozykids.com tcp
US 8.8.8.8:53 demirbasmekanik.com udp
US 172.67.198.46:443 darleneanderton.com tcp
US 128.199.9.35:443 deanaaronwaters.com tcp
RU 185.26.122.81:443 coolkitchen4you.com tcp
US 154.56.47.61:443 deluxeisolation.com tcp
IN 69.57.172.24:443 cybergamingshop.com tcp
NL 145.14.156.20:443 daliadesignsadv.com tcp
US 45.13.135.74:443 datadiveacademy.com tcp
DE 151.106.38.106:443 daydreamshealth.com tcp
US 154.56.37.121:443 cybermondaywiki.com tcp
FR 51.91.236.193:443 decarre-avocats.com tcp
US 104.21.30.209:443 deepanshunagpal.com tcp
EE 185.7.252.203:443 kommunikatsioon.com tcp
US 104.21.15.146:80 demotivatedduck.com tcp
TR 104.247.167.147:80 demirbasmekanik.com tcp
US 8.8.8.8:53 dengdanytrading.com udp
US 8.8.8.8:53 deshunshoacrack.com udp
US 8.8.8.8:53 detektifmonitor.com udp
US 8.8.8.8:53 www.depannage-cyril.com udp
US 8.8.8.8:53 desevensacadem.wpengine.com udp
US 8.8.8.8:53 carshine-bd.com udp
US 8.8.8.8:53 dialtechtelecom.com udp
US 8.8.8.8:53 determinedmacho.com udp
US 162.210.102.25:80 dengdanytrading.com tcp
US 23.227.176.186:443 desaceleramente.com tcp
US 160.153.0.177:443 determinedmacho.com tcp
US 104.21.26.65:443 carshine-bd.com tcp
GB 35.197.224.246:443 desevensacadem.wpengine.com tcp
US 172.67.183.198:443 www.depannage-cyril.com tcp
US 165.227.92.68:443 deshunshoacrack.com tcp
SG 156.67.222.38:443 detektifmonitor.com tcp
FR 92.222.139.190:443 dialtechtelecom.com tcp
US 8.8.8.8:53 dienmaynamkhang.com udp
US 8.8.8.8:53 dieselscantools.com udp
US 8.8.8.8:53 dienmaydongxuan.com udp
US 8.8.8.8:53 dientuxuantrung.com udp
US 8.8.8.8:53 digitalagrifarm.com udp
US 8.8.8.8:53 drinkwithenergy.com udp
US 8.8.8.8:53 dwimasfurniture.com udp
US 8.8.8.8:53 easygotraveling.com udp
US 8.8.8.8:53 donbussplumbing.com udp
US 8.8.8.8:53 electrohydrocar.com udp
US 8.8.8.8:53 eleganceenclave.com udp
US 8.8.8.8:53 edm-development.com udp
US 8.8.8.8:53 www.darleneanderton.com udp
US 8.8.8.8:53 enriqueescalona.com udp
US 8.8.8.8:53 espiralcorporal.com udp
US 8.8.8.8:53 employeecubicle.com udp
US 8.8.8.8:53 esquinaguzellik.com udp
US 8.8.8.8:53 eshopconnectors.com udp
US 8.8.8.8:53 evaluateyourbiz.com udp
US 8.8.8.8:53 etiquetasmadrid.com udp
US 8.8.8.8:53 evaultsolutions.com udp
US 8.8.8.8:53 evilthinker2020.com udp
US 62.72.25.245:443 dieselscantools.com tcp
IN 89.117.27.127:443 downloadtechhub.com tcp
US 104.21.36.252:443 electrohydrocar.com tcp
US 154.56.47.64:443 edm-development.com tcp
GB 154.49.138.48:443 drinkwithenergy.com tcp
US 67.225.226.83:443 enriqueescalona.com tcp
US 104.21.27.206:443 eleganceenclave.com tcp
US 154.56.47.76:443 donbussplumbing.com tcp
US 66.29.141.4:443 digitalanalyses.com tcp
US 104.21.52.106:443 www.darleneanderton.com tcp
IN 154.41.233.147:443 digitalagrifarm.com tcp
GB 185.77.97.237:443 employeecubicle.com tcp
SG 194.163.42.66:443 dwimasfurniture.com tcp
BR 154.49.247.155:443 eshopconnectors.com tcp
TR 89.252.187.207:443 esquinaguzellik.com tcp
BE 34.76.160.99:443 etiquetasmadrid.com tcp
GB 154.49.138.46:443 elifeministries.com tcp
FR 92.222.139.190:443 dialtechtelecom.com tcp
IN 62.72.28.179:443 easygotraveling.com tcp
VN 125.212.224.208:80 dienmaydongxuan.com tcp
US 172.67.176.47:443 imunify-alert.com tcp
AU 27.54.81.33:443 evaluateyourbiz.com tcp
GB 154.49.138.199:443 evilthinker2020.com tcp
VN 103.56.160.14:443 dienmaynamkhang.com tcp
ES 185.92.244.178:443 espiralcorporal.com tcp
VN 112.213.89.140:443 dientuxuantrung.com tcp
US 8.8.8.8:53 familytripdeals.com udp
US 8.8.8.8:53 fconsultoressas.com udp
US 8.8.8.8:53 www.demirbasmekanik.com udp
US 8.8.8.8:53 nems.odns.fr udp
US 8.8.8.8:53 fighterzacademy.com udp
US 8.8.8.8:53 flashdentalbali.com udp
US 8.8.8.8:53 flyoverhorizons.com udp
US 8.8.8.8:53 www.familysakhteman.com udp
US 8.8.8.8:53 finitassessoria.com udp
US 8.8.8.8:53 fivemmarketclub.com udp
US 8.8.8.8:53 flotadoreszebec.com udp
DE 135.125.140.191:443 evaultsolutions.com tcp
FR 62.72.37.246:443 fivemmarketclub.com tcp
FR 109.234.161.33:80 familytripdeals.com tcp
US 74.208.236.168:443 flyoverhorizons.com tcp
DE 157.230.30.46:443 fighterzacademy.com tcp
GB 154.49.138.176:443 fasshiontrend24.com tcp
TR 104.247.167.147:80 www.demirbasmekanik.com tcp
FR 109.234.164.253:443 nems.odns.fr tcp
IR 5.144.131.247:443 www.familysakhteman.com tcp
ES 188.164.197.242:443 flotadoreszebec.com tcp
US 8.8.8.8:53 foodmattasstore.com udp
US 8.8.8.8:53 formacionstimma.com udp
ID 103.234.209.216:443 flashdentalbali.com tcp
US 8.8.8.8:53 gabriellemuller.com udp
US 8.8.8.8:53 gaaccconsultant.com udp
US 8.8.8.8:53 gamestartsurvey.com udp
GB 94.136.170.164:80 foodmattasstore.com tcp
US 8.8.8.8:53 glamourlanemall.com udp
US 172.67.139.213:443 gaaccconsultant.com tcp
US 8.8.8.8:53 www.golfhighpointgc.com udp
US 8.8.8.8:53 futuremedhealth.com udp
US 8.8.8.8:53 fundacionsannar.com udp
US 8.8.8.8:53 graciousmalhome.com udp
US 8.8.8.8:53 gagragrandhotel.com udp
US 8.8.8.8:53 garantiya-prava.com udp
US 8.8.8.8:53 grand-tennis-tr.com udp
US 8.8.8.8:53 glamourfindings.com udp
US 8.8.8.8:53 gstcalculatornz.com udp
US 8.8.8.8:53 goatsgardenfarm.com udp
US 8.8.8.8:53 harappaimpexllc.com udp
US 8.8.8.8:53 govirtualafrica.com udp
US 8.8.8.8:53 grahnilifestyle.com udp
US 8.8.8.8:53 gardenersschool.com udp
US 8.8.8.8:53 smartwatchtricks.com udp
US 8.8.8.8:53 www.gsrmenterprises.com udp
US 8.8.8.8:53 hajverybuilders.com udp
US 8.8.8.8:53 smaharashtranews.com udp
US 8.8.8.8:53 www.smilehealthquest.com udp
US 8.8.8.8:53 flyoverhorizons.live-website.com udp
US 216.246.47.134:443 formacionstimma.com tcp
US 172.67.130.10:443 gamestartsurvey.com tcp
US 8.8.8.8:53 socasresourcehub.com udp
CA 66.226.136.25:80 gabriellemuller.com tcp
GB 153.92.6.213:443 grahnilifestyle.com tcp
US 104.21.73.228:443 grand-tennis-tr.com tcp
RU 194.67.193.110:443 glamourfindings.com tcp
US 8.8.8.8:53 socialtravellife.com udp
GB 185.77.97.120:443 gardenersschool.com tcp
RO 185.247.225.10:443 garantiya-prava.com tcp
IN 62.72.28.39:443 glamourlanemall.com tcp
US 213.190.7.241:443 smaharashtranews.com tcp
US 151.106.103.138:443 graciousmalhome.com tcp
US 192.0.66.2:443 www.golfhighpointgc.com tcp
US 52.7.222.30:443 futuremedhealth.com tcp
US 86.38.202.61:443 goatsgardenfarm.com tcp
DE 116.202.175.241:443 govirtualafrica.com tcp
BR 154.49.247.229:443 fundacionsannar.com tcp
FR 51.210.156.4:443 www.gsrmenterprises.com tcp
IN 89.117.188.225:443 hajverybuilders.com tcp
US 195.35.10.155:443 smartwatchtricks.com tcp
IN 188.241.62.47:443 gstcalculatornz.com tcp
US 172.67.205.43:443 gagragrandhotel.com tcp
US 74.208.236.168:443 flyoverhorizons.live-website.com tcp
US 89.117.139.129:443 harappaimpexllc.com tcp
US 151.101.130.159:443 socasresourcehub.com tcp
US 62.72.49.228:443 socialtravellife.com tcp
US 8.8.8.8:53 solarandcoenergy.com udp
US 8.8.8.8:53 southasiandigest.com udp
US 8.8.8.8:53 spesialisacbogor.com udp
US 8.8.8.8:53 specialweboffers.com udp
US 8.8.8.8:53 www.grahnilifestyle.com udp
US 8.8.8.8:53 spiritcreativity.com udp
US 8.8.8.8:53 springboardskill.com udp
US 8.8.8.8:53 alsajib.online udp
US 8.8.8.8:53 sucessodigitalhoje.top udp
US 8.8.8.8:53 hotelescontoboganes.top udp
US 8.8.8.8:53 avsp.shop udp
US 8.8.8.8:53 sportclubfitness.com udp
US 8.8.8.8:53 stargainsfitness.com udp
US 8.8.8.8:53 zuhupay.online udp
US 8.8.8.8:53 equilibriosaludable.top udp
US 23.95.120.194:443 spiritcreativity.com tcp
US 8.8.8.8:53 quantumlifemarketing.top udp
US 67.223.118.133:443 solarandcoenergy.com tcp
NL 109.106.246.47:443 specialweboffers.com tcp
US 74.208.236.2:443 stargainsfitness.com tcp
IR 5.144.131.247:443 www.familysakhteman.com tcp
US 172.67.198.251:443 zuhupay.online tcp
US 62.72.25.85:443 sportclubfitness.com tcp
GB 143.244.38.136:443 equilibriosaludable.top tcp
US 104.21.26.65:443 carshine-bd.com tcp
GB 153.92.6.213:443 www.grahnilifestyle.com tcp
US 104.21.71.38:443 hotelescontoboganes.top tcp
BR 154.49.247.215:443 sucessodigitalhoje.top tcp
ID 103.178.175.23:443 spesialisacbogor.com tcp
US 8.8.8.8:53 7nui.shop udp
IN 217.21.89.65:443 southasiandigest.com tcp
IN 69.57.172.36:443 avsp.shop tcp
US 172.67.196.110:443 hotelesconparqueacuatico.top tcp
US 172.67.137.106:443 quantumlifemarketing.top tcp
US 8.8.8.8:53 legro.shop udp
GB 141.136.33.6:443 springboardskill.com tcp
US 8.8.8.8:53 zyzwd.shop udp
VN 103.173.227.188:80 7nui.shop tcp
US 8.8.8.8:53 goldt.shop udp
US 8.8.8.8:53 wevape.shop udp
US 8.8.8.8:53 fintk.shop udp
US 8.8.8.8:53 mwnyhs.shop udp
US 8.8.8.8:53 www.rikta.shop udp
US 8.8.8.8:53 noceqk.shop udp
US 8.8.8.8:53 jcjdgv.shop udp
US 8.8.8.8:53 www.rassam.shop udp
US 8.8.8.8:53 uamsoy.shop udp
US 8.8.8.8:53 accomm.shop udp
US 8.8.8.8:53 ssytaa.shop udp
US 8.8.8.8:53 geyike.shop udp
US 8.8.8.8:53 qovbuw.shop udp
US 8.8.8.8:53 iexvhd.shop udp
US 8.8.8.8:53 www.socialtravellife.com udp
US 8.8.8.8:53 amlban.shop udp
US 8.8.8.8:53 buomfs.shop udp
US 172.67.218.171:443 jcjdgv.shop tcp
US 104.21.93.230:443 zyzwd.shop tcp
US 198.187.31.236:80 amlban.shop tcp
US 172.67.205.229:80 wevape.shop tcp
US 198.187.31.236:80 amlban.shop tcp
US 198.187.31.236:80 amlban.shop tcp
US 203.161.46.45:443 www.rikta.shop tcp
US 8.8.8.8:53 bykios.shop udp
US 8.8.8.8:53 tcmall.shop udp
US 8.8.8.8:53 roefxt.shop udp
US 104.21.28.130:443 mwnyhs.shop tcp
US 104.21.69.75:443 noceqk.shop tcp
US 104.21.66.222:443 accomm.shop tcp
BR 154.49.247.219:443 uamsoy.shop tcp
US 8.8.8.8:53 vavous.shop udp
US 8.8.8.8:53 rovwjd.shop udp
US 172.67.214.90:443 buomfs.shop tcp
US 172.67.155.178:443 qovbuw.shop tcp
US 62.72.49.228:443 www.socialtravellife.com tcp
US 104.21.69.95:443 ssytaa.shop tcp
US 172.67.176.47:443 imunify-alert.com tcp
HK 118.99.29.42:80 geyike.shop tcp
US 172.67.164.111:443 iexvhd.shop tcp
US 8.8.8.8:53 fkahgs.shop udp
US 8.8.8.8:53 viaras.shop udp
US 8.8.8.8:53 makeshiftroll.store udp
US 8.8.8.8:53 dpsmembers.online udp
SG 8.219.57.184:80 tcmall.shop tcp
US 104.21.72.34:443 rovwjd.shop tcp
US 8.8.8.8:53 mayasfoodsltd.store udp
US 8.8.8.8:53 meeracreation.store udp
FI 95.217.5.229:443 recaptcha.cloud tcp
US 104.21.10.72:443 fkahgs.shop tcp
SG 156.67.222.11:443 viaras.shop tcp
US 172.67.205.229:443 wevape.shop tcp
US 172.67.176.60:443 makeshiftroll.store tcp
US 104.21.31.36:80 dpsmembers.online tcp
US 63.250.43.9:443 bykios.shop tcp
IN 89.117.27.71:443 meeracreation.store tcp
US 104.21.31.36:80 dpsmembers.online tcp
US 172.67.168.8:443 roefxt.shop tcp
US 162.241.224.20:443 mayasfoodsltd.store tcp
CA 23.227.38.65:443 newlivingsoul.store tcp
US 8.8.8.8:53 shakeologybod.store udp
US 8.8.8.8:53 easycontainerssllc.store udp
US 199.188.205.15:443 easycontainerssllc.store tcp
US 8.8.8.8:53 originaloffer.store udp
US 8.8.8.8:53 washbasinlvyu.store udp
US 8.8.8.8:53 best-high-arch-insoles.store udp
US 8.8.8.8:53 123jk.vip udp
US 8.8.8.8:53 gift123.shop udp
US 8.8.8.8:53 lv224.vip udp
US 8.8.8.8:53 bmwaccessoriesstore.store udp
US 8.8.8.8:53 milieustickers-service.store udp
US 8.8.8.8:53 w2bet.vip udp
US 8.8.8.8:53 www.newlivingsoul.store udp
US 8.8.8.8:53 123fox.vip udp
US 8.8.8.8:53 123gtr.vip udp
US 104.21.31.36:80 dpsmembers.online tcp
IN 154.41.233.156:443 best-high-arch-insoles.store tcp
US 172.67.206.59:443 washbasinlvyu.store tcp
US 162.241.203.45:443 originaloffer.store tcp
US 104.21.2.13:443 123jk.vip tcp
US 172.67.214.239:443 lv224.vip tcp
CA 23.227.38.74:443 www.newlivingsoul.store tcp
US 172.67.173.189:443 123fox.vip tcp
SG 217.21.74.233:443 w2bet.vip tcp
US 8.8.8.8:53 gmz555.vip udp
US 104.21.31.36:443 dpsmembers.online tcp
US 69.57.162.24:443 pakistanifollowers.store tcp
US 104.21.31.36:443 dpsmembers.online tcp
US 8.8.8.8:53 jakky7.vip udp
US 8.8.8.8:53 www.tcmall.shop udp
US 154.56.47.64:443 bmwaccessoriesstore.store tcp
US 8.8.8.8:53 sos888.vip udp
US 8.8.8.8:53 lkk135.vip udp
US 8.8.8.8:53 nmdbet.vip udp
NL 185.104.29.150:443 milieustickers-service.store tcp
US 104.21.75.195:443 123gtr.vip tcp
US 104.21.28.66:443 map191.vip tcp
US 104.21.91.68:443 jakky7.vip tcp
US 172.67.173.7:443 gmz555.vip tcp
US 8.8.8.8:53 www.makeshiftroll.store udp
US 104.21.80.83:443 sos888.vip tcp
SG 8.219.57.184:443 www.tcmall.shop tcp
US 104.21.52.89:443 lkk135.vip tcp
US 172.67.176.60:443 www.makeshiftroll.store tcp
US 104.21.50.196:443 nmdbet.vip tcp
US 8.8.8.8:53 syasia.vip udp
US 8.8.8.8:53 flix888.vip udp
US 8.8.8.8:53 fafa800.vip udp
US 8.8.8.8:53 hugball.vip udp
US 8.8.8.8:53 noble99.vip udp
US 8.8.8.8:53 jrich88.vip udp
US 104.21.65.238:443 syasia.vip tcp
US 104.21.95.215:443 flix888.vip tcp
US 172.67.152.238:443 hugball.vip tcp
US 8.8.8.8:53 rafa168.vip udp
US 8.8.8.8:53 sloth69.vip udp
US 8.8.8.8:53 zuka999.vip udp
US 8.8.8.8:53 wmbet55.vip udp
US 8.8.8.8:53 derby168.vip udp
US 8.8.8.8:53 aston168.vip udp
US 8.8.8.8:53 gamesoft.vip udp
US 8.8.8.8:53 gbetclub.vip udp
US 8.8.8.8:53 imiwin44.vip udp
US 8.8.8.8:53 nasaslot.vip udp
US 8.8.8.8:53 mogul999.vip udp
US 8.8.8.8:53 pgslot7g.vip udp
US 172.67.139.106:443 jrich88.vip tcp
US 172.67.174.36:443 fafa800.vip tcp
US 8.8.8.8:53 lucia555.vip udp
US 8.8.8.8:53 www.washbasinlvyu.store udp
US 172.67.197.66:443 noble99.vip tcp
US 172.67.221.15:443 u31thai.vip tcp
US 104.21.31.36:443 dpsmembers.online tcp
US 172.67.153.6:443 derby168.vip tcp
US 172.67.150.184:443 aston168.vip tcp
US 104.21.38.87:443 gamesoft.vip tcp
US 172.67.206.59:443 www.washbasinlvyu.store tcp
US 104.21.66.241:443 wmbet55.vip tcp
US 172.67.216.53:443 sloth69.vip tcp
SG 217.21.74.233:443 zuka999.vip tcp
US 172.67.153.4:443 rafa168.vip tcp
US 172.67.174.42:443 duck1688.vip tcp
US 104.21.35.19:443 imiwin44.vip tcp
US 172.67.133.209:443 gbetclub.vip tcp
US 172.67.152.41:443 nasaslot.vip tcp
US 172.67.194.211:443 pgslot7g.vip tcp
US 104.21.26.228:443 lucia555.vip tcp
US 172.67.223.132:443 mogul999.vip tcp
US 8.8.8.8:53 noverbet.vip udp
US 8.8.8.8:53 phim18hd.vip udp
US 8.8.8.8:53 xoxoclub.vip udp
US 8.8.8.8:53 saclub77.vip udp
US 104.21.70.78:443 noverbet.vip tcp
US 104.21.38.34:443 phim18hd.vip tcp
US 172.67.205.122:443 xoxoclub.vip tcp
US 8.8.8.8:53 betflix86.vip udp
US 172.67.150.56:443 saclub77.vip tcp
US 172.67.209.73:443 slotup77.vip tcp
US 104.21.40.168:443 betflikdc.vip tcp
US 104.21.10.232:443 betflikza.vip tcp
US 104.21.2.250:443 betflix86.vip tcp
US 8.8.8.8:53 evoplay88.vip udp
US 8.8.8.8:53 biggameth.vip udp
US 8.8.8.8:53 fomobet88.vip udp
US 8.8.8.8:53 gembet999.vip udp
US 8.8.8.8:53 gdsociety.vip udp
US 8.8.8.8:53 kaseybass.vip udp
US 8.8.8.8:53 happyslot.vip udp
US 8.8.8.8:53 livewoman.vip udp
US 104.21.9.144:443 evoplay88.vip tcp
US 172.67.152.177:443 biggameth.vip tcp
US 172.67.128.202:443 happyslot.vip tcp
NL 188.72.205.231:443 livewoman.vip tcp
US 104.21.93.183:443 gembet999.vip tcp
US 69.175.107.217:443 kaseybass.vip tcp
US 172.67.133.209:443 fomobet88.vip tcp
US 8.8.8.8:53 maxasiath.vip udp
US 8.8.8.8:53 yes88thai.vip udp
US 8.8.8.8:53 pgbig1688.vip udp
US 172.67.183.209:443 maxasiath.vip tcp
US 104.21.70.247:443 pgbig1688.vip tcp
US 104.21.50.113:443 yes88thai.vip tcp
US 8.8.8.8:53 filtrosmastersv.com udp
FR 154.41.236.126:443 filtrosmastersv.com tcp
US 8.8.8.8:53 kamsmad.com udp
KR 210.182.29.70:80 kamsmad.com tcp
KR 210.182.29.70:80 kamsmad.com tcp
KR 210.182.29.70:80 kamsmad.com tcp
KR 210.182.29.70:80 kamsmad.com tcp
KR 210.182.29.70:80 kamsmad.com tcp
KR 210.182.29.70:80 kamsmad.com tcp
KR 210.182.29.70:80 kamsmad.com tcp
KR 210.182.29.70:80 kamsmad.com tcp
US 8.8.8.8:53 4e785956-e00b-4d37-a9db-9f4bf113f2f8.uuid.localstats.org udp
KR 210.182.29.70:80 kamsmad.com tcp

Files

memory/620-1-0x0000000001B50000-0x0000000001C50000-memory.dmp

memory/620-2-0x0000000000230000-0x000000000023B000-memory.dmp

memory/620-3-0x0000000000400000-0x0000000001A2C000-memory.dmp

memory/1264-4-0x00000000029F0000-0x0000000002A06000-memory.dmp

memory/620-5-0x0000000000400000-0x0000000001A2C000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\D3D3.exe

MD5 398ab69b1cdc624298fbc00526ea8aca
SHA1 b2c76463ae08bb3a08accfcbf609ec4c2a9c0821
SHA256 ca827a18753cf8281d57b7dff32488c0701fe85af56b59eab5a619ae45b5f0be
SHA512 3b222a46a8260b7810e2e6686b7c67b690452db02ed1b1e75990f4ac1421ead9ddc21438a419010169258b1ae4b206fbfa22bb716b83788490b7737234e42739

memory/2636-17-0x0000000003700000-0x00000000038B8000-memory.dmp

memory/2636-18-0x0000000003700000-0x00000000038B8000-memory.dmp

memory/2636-19-0x00000000038C0000-0x0000000003A77000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\D3D3.exe

MD5 6e92468a589a118a0e52a69838812d5a
SHA1 f7600765aaf24de6261aceabb2823992d5b7d11a
SHA256 89de3a6e7282355c370058f7b4fe364ec79205602c38013dc5f23196cf7a1f2a
SHA512 f212a536db73fb5a9798cbd472913ca8dfcad06c724b19930098ec3868ca41f2bb825d9824f6f0aaace763f57c589768206f6565461f79d97ae93591f96fd570

memory/2648-22-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

memory/2648-24-0x0000000000400000-0x0000000000848000-memory.dmp

memory/2648-27-0x0000000000400000-0x0000000000848000-memory.dmp

memory/2648-28-0x0000000000400000-0x0000000000848000-memory.dmp

memory/2648-29-0x0000000000400000-0x0000000000848000-memory.dmp

memory/2648-31-0x0000000000400000-0x0000000000848000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\EC24.dll

MD5 9b1697d40dfd386fdd7e9327844f301a
SHA1 e75defb119e2c7b7d3f75ab70a100ec504af5ebf
SHA256 69e7b08c127dde5fd1f85e1e8107d06aa686e94aef3fd48ff0bb092b38a0cb1d
SHA512 3e945bf24ed81fdc49e974d086a70f9758a17b8656bb0e460dca0be2a84fa0ba065b62b6dd5d55ca1dbe0b4f19ec4f164df84c115244f1cbfddd79611d013d69

memory/2648-33-0x0000000000400000-0x0000000000848000-memory.dmp

memory/2648-36-0x0000000010000000-0x0000000010202000-memory.dmp

memory/2648-35-0x0000000000230000-0x0000000000236000-memory.dmp

\Users\Admin\AppData\Local\Temp\EC24.dll

MD5 286796d0050225040303192dffc1c4ef
SHA1 daef291b3941387fee3ced03d44a4e254dfec217
SHA256 1546488b5733038151f0c4f8e946afc1cc87990b51a4f191b0911d6705ba6e24
SHA512 04d623a2fe9fa8ec639b9c0ba467f5a2929992f514a1885f943a93401da94ab50ff1c9e0b3ac3e86b79ea570b7010583fbcca062612e28161a1ac0b62b6b56b8

memory/2972-40-0x0000000000170000-0x0000000000176000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\22.exe

MD5 ce6ad58033f8b42fbc3c94a43b15f1c2
SHA1 dd32f21d487845c827a8d247208870d6294afad9
SHA256 65f05a4f4195d489e2ccbdd6f7e8eb44c20b9865423e2a7a0789fef19b8a1636
SHA512 61f766799a6243000d717589b48c2cb89a742bf73ddca15e4af7e7bb8ae9425964ece4c1813196b80b793f8ec8d9c353d40e6efcfc7246044d348033fce28787

memory/2972-46-0x00000000022C0000-0x00000000023E8000-memory.dmp

memory/2972-47-0x00000000023F0000-0x00000000024FD000-memory.dmp

memory/2972-50-0x00000000023F0000-0x00000000024FD000-memory.dmp

memory/2648-51-0x0000000002B20000-0x0000000002C48000-memory.dmp

memory/2648-53-0x0000000002C50000-0x0000000002D5D000-memory.dmp

memory/2648-56-0x0000000002C50000-0x0000000002D5D000-memory.dmp

memory/2648-57-0x0000000002C50000-0x0000000002D5D000-memory.dmp

memory/2972-58-0x00000000023F0000-0x00000000024FD000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\C72.exe

MD5 a1b5ee1b9649ab629a7ac257e2392f8d
SHA1 dc1b14b6d57589440fb3021c9e06a3e3191968dc
SHA256 2bfd95260a4c52d4474cd51e74469fc3de94caed28937ff0ce99ded66af97e65
SHA512 50ccbb9fd4ea2da847c6be5988e1e82e28d551b06cc9122b921dbd40eff4b657a81a010cea76f29e88fda06f8c053090b38d04eb89a6d63ec4f42ef68b1cf82b

C:\Users\Admin\AppData\Local\Temp\22.exe

MD5 d689d942a645a468007b85fdf9413de9
SHA1 c94e0a7ff515c05a73048f3c6d2dd0c95071c4b6
SHA256 82177bd7ae6c995aa53d63d21e5c53883af16f3b84832d5557fe3dfce3cf58cd
SHA512 525184773ae2e1642e05bee15b58457a995a3225f417a8b26580d306bd292ab880d9768187b6e5c144bf9d4eb3f95f2a2b82f7402eb11b3239740f5412f7608c

memory/2832-74-0x0000000000080000-0x0000000000081000-memory.dmp

memory/2832-76-0x0000000000F70000-0x0000000001861000-memory.dmp

memory/2832-77-0x0000000000080000-0x0000000000081000-memory.dmp

memory/2832-79-0x0000000000080000-0x0000000000081000-memory.dmp

memory/2832-80-0x0000000077C30000-0x0000000077C31000-memory.dmp

memory/2832-82-0x0000000000F70000-0x0000000001861000-memory.dmp

memory/2832-84-0x0000000000090000-0x0000000000091000-memory.dmp

\Users\Admin\AppData\Local\Temp\22.exe

MD5 a83405f84742b2a51b2ba4997d7438fd
SHA1 193461bd57c697b931bef84d1be693ca8ecf19a0
SHA256 15587a567c5076f5fd6c72caab34ad99fcd76dff6fc8340cc0a22be067c6318f
SHA512 f7910567b193a02c5103f344ee44aea1c876352723d0a628837a93aebf84a6f9e2b0c0621ddf059244d113f97052a24e9ceccbde83955b8e542255804de7ca29

C:\Users\Admin\AppData\Local\Temp\2080.exe

MD5 adfe6f6b6e20e07eb11a4df4e289a4bd
SHA1 a08b40ccaf7abdb7baf0d3b82ffdfbe39445ad6b
SHA256 0a48bd86a56ae7e4edaa6a70e10c4086c52fbf6e8774c3a434678da8fbe3c655
SHA512 0fbc1b83106244f18123c4d109f93ea82bc39fb3b14b331a17d51ccda2ac386447fb542fa9cfd040cb95a3f1b361019a5ac8a01ca6fdce3d71a9832b21f5480f

C:\Users\Admin\AppData\Local\Temp\2080.exe

MD5 dc223f6ce4c1d7ff421701a415e1cc76
SHA1 2b5c193ad484287fd0a9897a06e4eb04dec6d2d7
SHA256 e326bae5f103f52cbc175b84b986fb9c3e279b60d1941369a17d7666972f145b
SHA512 a0edf6527131a567c81d3a5d09d4691c5099126f84bf97727afbf93f733ec4ff7dbba81b3fc44945e097df5e170eaa7088596afb6b4a076a42eccf047548b67e

memory/1648-93-0x0000000001380000-0x000000000180C000-memory.dmp

memory/1648-94-0x0000000074310000-0x00000000749FE000-memory.dmp

\Users\Admin\AppData\Local\Temp\InstallSetup_four.exe

MD5 0564a9bf638169a89ccb3820a6b9a58e
SHA1 57373f3b58f7cc2b9ea1808bdabb600d580a9ceb
SHA256 9e4b0556f698c9bc9a07c07bf13d60908d31995e0bd73510d9dd690b20b11058
SHA512 36b81c374529a9ba5fcbc6fcfebf145c27a7c30916814d63612c04372556d47994a8091cdc5f78dab460bb5296466ce0b284659c8b01883f7960ab08a1631ea6

memory/2648-102-0x0000000000400000-0x0000000000848000-memory.dmp

memory/1516-104-0x0000000000270000-0x0000000000370000-memory.dmp

memory/1516-107-0x0000000001A50000-0x0000000001AB7000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\2C72.exe

MD5 38617539f3925b6017474f088cc3769a
SHA1 c689b57ab62eac790a204c8231b02bfe0bc243a6
SHA256 defe2d4c932a7ef607e8ef1a643fb57b9c69cbc53b52bf802f9471aae5caef49
SHA512 15d87c6231a8f2115ae3f0f021949d175d3f36735637c7b508a229af5b2a93f70f32e19d9b8e3d1e0fa41bd21ee46ab5d9c6ef630c826afe2210a789e5da53e7

memory/1516-113-0x0000000000400000-0x0000000001A4B000-memory.dmp

\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe

MD5 b93108b3671a16cc43cc0fddcfbdba3f
SHA1 214cec6912a00942c3687e8ba25dd4a67edddcfb
SHA256 941245b551e8c714f3c4afb07b61ad39897fa2c541455c6afa693e50d14e492b
SHA512 847a95b66b6d21e5dbc6c15dcad69de98ff378c80034daca676a94abb27dfebf08394dbd03806a3fc435164e8ec3de8f9051885f03b7ac9d26ca2847ba4ba5b0

\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe

MD5 4bbc8c9d8fe73f8375c496ca66675a9a
SHA1 6fe5d80a9edc9fab11cc8486581099d09f3e7867
SHA256 2f2a5ceebf8f36476a861993384c67f650feb9afff5add72634be71bfc536801
SHA512 007d3e2c8d4df5e3c18c0df3d02865750f336da3b171880706ff882cd8578ce415f3521eff5926ca43eaa5e0083ac8e7ef7b9bed45311d8c4818fba7552b4ec9

C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe

MD5 7f8258b807521f36ab4ae18aba1910a4
SHA1 f9496254825bf37ce0a4dc99b15b78bc0abc8238
SHA256 5ed3b3d03e90ce54352ce1b449c3140da18738701949fb3a4827bc0de866c881
SHA512 27bf13503c016be93ff794e1b9e4325366dc631bd1734fe5570eae472b1dbf24d3d5f7ba78015b3c20e7a3dedfed1b168467091fc0aa7994fee663b15e0530c1

memory/1980-121-0x00000000038F0000-0x0000000003CE8000-memory.dmp

memory/1648-122-0x0000000074310000-0x00000000749FE000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe

MD5 3a40d0aaff97ddb91ddc200778c24b97
SHA1 dfdbef7bcedfd689da7d976438b6b49edfa0dc32
SHA256 9d734c38e56911d196f0aa0c7ce493384ef54c4879e148100edab79dd96fde08
SHA512 150e9278d991d1524f9fac048c2bc8bb9bef15bb3be7ac9f9efad8ae8229b68442e367456de350a01f308caccdb35df20bf608cd00f41314eb55ae4c170fb1b1

C:\Users\Admin\AppData\Local\Temp\4KPV6A~1\cached-microdesc-consensus.tmp

MD5 b13292411ec91c30f393d8f247470c2f
SHA1 12fbbf43b1b1408caa0ce8d732763602278cc17b
SHA256 85594db4662d1632c63bfd97c6fd75a358dd6d6077a16e0f92c0f13edf2f28d1
SHA512 21425cbefed818ef4ef2951b5900dcf2a0fbd41ae538f0f019c7c9b9ae40ea48326997af498e24f164df365cb5e69294da315dd9aa6786ef15d77b380cb7d93b

memory/2648-134-0x0000000000400000-0x0000000000848000-memory.dmp

memory/2648-135-0x0000000000400000-0x0000000000848000-memory.dmp

memory/1712-138-0x0000000002440000-0x0000000002540000-memory.dmp

memory/1712-140-0x0000000000220000-0x000000000022B000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\4KPV6A~1\cached-microdescs.new

MD5 994bf8b0c93a7b86c2784a0e67a17054
SHA1 44b46a7a113b54b9ba25cf7e4f96e9ea3fe6ea2b
SHA256 f35b8d0ffcd3cadfa05433e3e8a975293b8937d031c52e3ee7e85554b1f279c7
SHA512 0accb0d3b2f096418a8e181285c6582b5fd60371d8d9195f841d31002c94b3a40039f0a177eb509d28b26399c1e762a9cde4f3cee4da87353a9dd3e901e457aa

\Users\Admin\AppData\Local\Temp\u164.0.exe

MD5 5c47e4602163dd29a39294b7192f0658
SHA1 268d1bf1f4c8c8b696298f802b95af8bd3891c10
SHA256 5c0b29d51d9b148c8c19ce0efca365ccb1bbe720f634a15897684abbd1dc5d76
SHA512 7baa0359781ba21c378a0fbd37dfcde2d1b0c5a9ce3afcf8db0617f91a49dd552416c90963731798669002eda0a15f2296120cb9307c8cafef18dfdb4a52ad91

memory/1712-160-0x0000000000400000-0x00000000022D3000-memory.dmp

memory/1980-161-0x00000000038F0000-0x0000000003CE8000-memory.dmp

memory/1980-162-0x0000000003CF0000-0x00000000045DB000-memory.dmp

memory/1980-163-0x0000000000400000-0x0000000001E0F000-memory.dmp

\Users\Admin\AppData\Local\Temp\u164.1.exe

MD5 5b87828ea000c7111084d8beed17175e
SHA1 e8aa3848e39c449051702a333e608fafd2e5330f
SHA256 1a557fae2d39d06392f4bea760fb72c87f0959a7c3ac66865e36f316866f57d3
SHA512 56b0d0e5422b89a4659969f59570962dbb267fde913ed051fbedf3d66653c9c23d15c945a6ae8ce5570af010b3671eb0be085e8afb44c3088def9f423290f385

C:\Users\Admin\AppData\Local\Temp\u164.1.exe

MD5 ed70d9f1f84bcac7611662c76a8e017b
SHA1 f9501d1e53620e54b1591461acf86bf6e8b48861
SHA256 f6e4857fa831c5ed599739fd7f235b50a6a8572c027856ddf55e705b4ecab8f8
SHA512 678c02dcbde9f2a61592c34ec2050b76b62d6b67c75645b334ab18735cd3f57d8e94994f2a06ac9f84e0c43d3d8ca27145e5e4b27e5615adf9efcd0483a94b01

\Users\Admin\AppData\Local\Temp\u164.1.exe

MD5 88a3d3dddaff28c7462422d7b9bb39d4
SHA1 7e811f79992f68f6a30d4011d256eba672ada687
SHA256 35ab625b862478a31539a391082058fce150da6a49a2b4a8e1ddcb03d92eefbe
SHA512 e8085474d6da4e93c8aad2917956928e0afdd4e865236e3d51637d8f3d0613dd26f15191d4a947ad3c8cf21c34fc6942a5058280ae1a13e4a3271ed0604a2413

memory/1516-178-0x00000000046A0000-0x0000000004BD0000-memory.dmp

memory/1516-183-0x00000000046A0000-0x0000000004BD0000-memory.dmp

memory/1516-177-0x0000000000400000-0x0000000001A4B000-memory.dmp

memory/1264-186-0x0000000003970000-0x0000000003986000-memory.dmp

memory/1712-188-0x0000000000400000-0x00000000022D3000-memory.dmp

memory/1980-193-0x0000000000400000-0x0000000001E0F000-memory.dmp

memory/2648-197-0x0000000000400000-0x0000000000848000-memory.dmp

memory/1956-198-0x0000000000230000-0x0000000000231000-memory.dmp

memory/1956-199-0x0000000000400000-0x0000000000930000-memory.dmp

memory/2832-201-0x0000000000F70000-0x0000000001861000-memory.dmp

memory/1892-202-0x0000000002740000-0x0000000002840000-memory.dmp

memory/1892-203-0x00000000003C0000-0x00000000003E7000-memory.dmp

memory/1892-204-0x0000000000400000-0x00000000022DA000-memory.dmp

memory/1980-205-0x0000000000400000-0x0000000001E0F000-memory.dmp

memory/1956-210-0x0000000000400000-0x0000000000930000-memory.dmp

memory/2648-211-0x0000000000400000-0x0000000000848000-memory.dmp

memory/1892-212-0x0000000000400000-0x00000000022DA000-memory.dmp

memory/1956-213-0x0000000000400000-0x0000000000930000-memory.dmp

memory/1892-214-0x0000000061E00000-0x0000000061EF3000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe

MD5 5499771cd6c1c0922515f3568ea8a2d1
SHA1 58a06324b2997cb93f0ae9bb8093cb08129ac0d6
SHA256 8477ea226911b3f2e16836c55aecc03a974ae2dcb7e0839a1739e59a28bdce60
SHA512 6aaca1dc9611ae876acf43a6940ca6e50cd110c4f8d9b7d0e99abe457645925f36e7e7b2979644cc802a45ab8ce5aca47538ad50c2eb25e79846852404e74605

C:\Users\Admin\AppData\Roaming\Temp\Task.bat

MD5 11bb3db51f701d4e42d3287f71a6a43e
SHA1 63a4ee82223be6a62d04bdfe40ef8ba91ae49a86
SHA256 6be22058abfb22b40a42fb003f86b89e204a83024c03eb82cd53e2a0a047c331
SHA512 907ad2c070cc1db89f43459a94d7f48985d939d749c9648b78572a266f0d3fde47813a129e9151dbf4a7d96d36f588172f57c88b8b947b56ed818d7d068abab2

\ProgramData\nss3.dll

MD5 1cc453cdf74f31e4d913ff9c10acdde2
SHA1 6e85eae544d6e965f15fa5c39700fa7202f3aafe
SHA256 ac5c92fe6c51cfa742e475215b83b3e11a4379820043263bf50d4068686c6fa5
SHA512 dd9ff4e06b00dc831439bab11c10e9b2ae864ea6e780d3835ea7468818f35439f352ef137da111efcdf2bb6465f6ca486719451bf6cf32c6a4420a56b1d64571

\ProgramData\mozglue.dll

MD5 c8fd9be83bc728cc04beffafc2907fe9
SHA1 95ab9f701e0024cedfbd312bcfe4e726744c4f2e
SHA256 ba06a6ee0b15f5be5c4e67782eec8b521e36c107a329093ec400fe0404eb196a
SHA512 fbb446f4a27ef510e616caad52945d6c9cc1fd063812c41947e579ec2b54df57c6dc46237ded80fca5847f38cbe1747a6c66a13e2c8c19c664a72be35eb8b040

C:\Users\Admin\AppData\Local\Temp\288c47bbc1871b439df19ff4df68f076.exe

MD5 44ff2ed7f28622afe0e5ba7c1cd702a7
SHA1 5aec4a3f1f3a57a7cd8a366c736e2e932f529ed8
SHA256 7d16cc26a07cc79b96c5ee6512102dae8ae526c4ae529380c412b0d45bc8351a
SHA512 c0b766f1f8a4977fdc47adbcd10dbfabc0996a9421cab4d98ded773ddcefbb101d3137beb9e2ff4ea2b5d66849875e754bcbe0486396ce6a43b15262ccf82266

memory/1980-288-0x0000000000400000-0x0000000001E0F000-memory.dmp

memory/1332-292-0x0000000003810000-0x0000000003C08000-memory.dmp

memory/1332-293-0x0000000000400000-0x0000000001E0F000-memory.dmp

memory/1892-294-0x0000000000400000-0x00000000022DA000-memory.dmp

memory/1956-1036-0x0000000000230000-0x0000000000231000-memory.dmp

\Windows\rss\csrss.exe

MD5 7c98bc09c1f2209af831f254ab699cbc
SHA1 e6e9e083655dc04897ab6ed4009135cd3ba9d04e
SHA256 3872a68b627ce2f07cfcdbe5b7e6f822b02822af34f5415c8ef092bcf14d8aee
SHA512 0f0e84f25af302f5a20d8c07f11381935cd9beaccbefc4938f45f4a3d79f482a19e7aaec5c5f6120ffec4f560a32cd8fd1e967b14a5b9ed06fa873a7601b6e34

\Windows\rss\csrss.exe

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

memory/1956-2057-0x0000000000400000-0x0000000000930000-memory.dmp

memory/1332-2091-0x0000000000400000-0x0000000001E0F000-memory.dmp

memory/2888-2188-0x0000000003AA0000-0x0000000003E98000-memory.dmp

C:\Windows\rss\csrss.exe

MD5 0c7b8daa9b09bcdf947a020bf28c2f19
SHA1 738f89f4da5256d14fe11394cf79e42060a7e98b
SHA256 ff0c709f06a8850794f2501c7dc9ce4ffc75f1ab3039218952cd87a067d3d3ff
SHA512 b069ef6d30a5afafc4b4e2632cb4f9da65e58dcedb66706921d85a6be97a024c1e786ec51299ba52668a65fe948d499609aa2b4978fb20738dd0b643d84cbcf6

memory/2888-2213-0x0000000000400000-0x0000000001E0F000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\csrss\injector\injector.exe

MD5 d98e33b66343e7c96158444127a117f6
SHA1 bb716c5509a2bf345c6c1152f6e3e1452d39d50d
SHA256 5de4e2b07a26102fe527606ce5da1d5a4b938967c9d380a3c5fe86e2e34aaaf1
SHA512 705275e4a1ba8205eb799a8cf1737bc8ba686925e52c9198a6060a7abeee65552a85b814ac494a4b975d496a63be285f19a6265550585f2fc85824c42d7efab5