Malware Analysis Report

2025-01-18 18:20

Sample ID 241209-cbqprsxngx
Target v2.bin(1).zip
SHA256 f442d0543f6df79be9fbaed90af2dedbcf2e4774561421763577b148a9ff8554
Tags
$2a$12$ltqvwf.cqvh9w5jzkak9lo0hmlnifwtufobj86ge.hlzgvclg6xhw 7563 sodinokibi credential_access discovery ransomware spyware stealer
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral4

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

f442d0543f6df79be9fbaed90af2dedbcf2e4774561421763577b148a9ff8554

Threat Level: Known bad

The file v2.bin(1).zip was found to be: Known bad.

Malicious Activity Summary

$2a$12$ltqvwf.cqvh9w5jzkak9lo0hmlnifwtufobj86ge.hlzgvclg6xhw 7563 sodinokibi credential_access discovery ransomware spyware stealer

Sodin,Sodinokibi,REvil

Sodinokibi family

Contacts a large (722) amount of remote hosts

Contacts a large (548) amount of remote hosts

Reads user/profile data of web browsers

Credentials from Password Stores: Windows Credential Manager

Drops startup file

Enumerates connected drives

Legitimate hosting services abused for malware hosting/C2

Sets desktop wallpaper using registry

Drops file in System32 directory

Drops file in Program Files directory

Enumerates physical storage devices

Unsigned PE

Browser Information Discovery

System Location Discovery: System Language Discovery

Suspicious use of FindShellTrayWindow

Suspicious use of AdjustPrivilegeToken

Suspicious behavior: EnumeratesProcesses

Suspicious use of SetWindowsHookEx

Uses Volume Shadow Copy service COM API

Suspicious use of WriteProcessMemory

Suspicious behavior: GetForegroundWindowSpam

Modifies system certificate store

Modifies registry class

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-12-09 01:54

Signatures

Sodinokibi family

sodinokibi

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-12-09 01:54

Reported

2024-12-09 02:24

Platform

win7-20241010-en

Max time kernel

1560s

Max time network

1560s

Command Line

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\v2.bin(1).zip"

Signatures

Enumerates physical storage devices

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000_CLASSES\reloc_auto_file\ C:\Windows\system32\rundll32.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000_CLASSES\reloc_auto_file\shell\edit C:\Windows\system32\rundll32.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000_CLASSES\reloc_auto_file\shell\open\command C:\Windows\system32\rundll32.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000_CLASSES\reloc_auto_file\shell\edit\command C:\Windows\system32\rundll32.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000_CLASSES\reloc_auto_file\shell\edit\command\ = "%SystemRoot%\\system32\\NOTEPAD.EXE %1" C:\Windows\system32\rundll32.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000_CLASSES\reloc_auto_file\shell\open C:\Windows\system32\rundll32.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000_Classes\Local Settings C:\Windows\system32\rundll32.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000_CLASSES\reloc_auto_file C:\Windows\system32\rundll32.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000_CLASSES\.reloc C:\Windows\system32\rundll32.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000_CLASSES\.reloc\ = "reloc_auto_file" C:\Windows\system32\rundll32.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000_CLASSES\reloc_auto_file\shell C:\Windows\system32\rundll32.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000_CLASSES\reloc_auto_file\shell\open\command\ = "%SystemRoot%\\system32\\NOTEPAD.EXE %1" C:\Windows\system32\rundll32.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeRestorePrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: 35 N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2708 wrote to memory of 1128 N/A C:\Program Files\7-Zip\7zFM.exe C:\Windows\system32\rundll32.exe
PID 2708 wrote to memory of 1128 N/A C:\Program Files\7-Zip\7zFM.exe C:\Windows\system32\rundll32.exe
PID 2708 wrote to memory of 1128 N/A C:\Program Files\7-Zip\7zFM.exe C:\Windows\system32\rundll32.exe
PID 1128 wrote to memory of 2816 N/A C:\Windows\system32\rundll32.exe C:\Windows\system32\NOTEPAD.EXE
PID 1128 wrote to memory of 2816 N/A C:\Windows\system32\rundll32.exe C:\Windows\system32\NOTEPAD.EXE
PID 1128 wrote to memory of 2816 N/A C:\Windows\system32\rundll32.exe C:\Windows\system32\NOTEPAD.EXE

Processes

C:\Program Files\7-Zip\7zFM.exe

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\v2.bin(1).zip"

C:\Windows\system32\rundll32.exe

"C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\AppData\Local\Temp\7zO49AA7AB7\.reloc

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\7zO49AA7AB7\.reloc

Network

N/A

Files

C:\Users\Admin\AppData\Local\Temp\7zO49AA7AB7\.reloc

MD5 37eca68cd795bb195a682fc3801d35aa
SHA1 b3d93cdff6b2040cf1b055a1db1755e44ea7622e
SHA256 3b67482ffde6defd3650261ad65d1a70d63226614d783bcec445db47ef4dd200
SHA512 70369edf9d747347691fc0a446e7ebe0aeba26851c1542c80b4c8cf78474b204c7f9ee6c7e78f6b2562624debe9d98e1d3cee9ad573deeb91a097429c2012bb2

Analysis: behavioral2

Detonation Overview

Submitted

2024-12-09 01:54

Reported

2024-12-09 02:24

Platform

win10v2004-20241007-en

Max time kernel

429s

Max time network

1154s

Command Line

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\v2.bin(1).zip"

Signatures

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Ʉ C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\ꄱ烳᳸蠀㛒翸 C:\Windows\system32\OpenWith.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\text_auto_file\shell\edit\command\ = "%SystemRoot%\\system32\\NOTEPAD.EXE %1" C:\Windows\system32\OpenWith.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\.text\ = "text_auto_file" C:\Windows\system32\OpenWith.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\ꄱ烳᳸蠀㛒翸\ = "text_auto_file" C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\忮Ʉ C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\text_auto_file\shell\edit C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\text_auto_file\shell C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\text_auto_file\shell\open C:\Windows\system32\OpenWith.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\text_auto_file\shell\open\command\ = "%SystemRoot%\\system32\\NOTEPAD.EXE %1" C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\text_auto_file C:\Windows\system32\OpenWith.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Ʉ\ = "text_auto_file" C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\潬灯s C:\Windows\system32\OpenWith.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\潬灯s\ = "text_auto_file" C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\ C:\Windows\system32\OpenWith.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\\ = "text_auto_file" C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\text_auto_file\shell\open\command C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings C:\Program Files\7-Zip\7zFM.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\.text C:\Windows\system32\OpenWith.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\忮Ʉ\ = "text_auto_file" C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\text_auto_file\shell\edit\command C:\Windows\system32\OpenWith.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeRestorePrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: 35 N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Windows\system32\NOTEPAD.EXE N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1624 wrote to memory of 1224 N/A C:\Windows\system32\OpenWith.exe C:\Windows\system32\NOTEPAD.EXE
PID 1624 wrote to memory of 1224 N/A C:\Windows\system32\OpenWith.exe C:\Windows\system32\NOTEPAD.EXE

Processes

C:\Program Files\7-Zip\7zFM.exe

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\v2.bin(1).zip"

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\7zO06CB8368\.text

Network

Country Destination Domain Proto
US 8.8.8.8:53 209.205.72.20.in-addr.arpa udp
US 8.8.8.8:53 81.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 17.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 72.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 50.23.12.20.in-addr.arpa udp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
US 8.8.8.8:53 134.130.81.91.in-addr.arpa udp
US 8.8.8.8:53 73.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 170.117.168.52.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Temp\7zO06CB8368\.text

MD5 546a09ceb867e9e993b449f1497f46cf
SHA1 b7e2b841b52d91156c1b87a8cf2bda97ab22158c
SHA256 df5f40068d7a70785cffd4633f65097efcc13b991a98fd3d29bdc55288171aae
SHA512 08f871c7afdf8b67bb10cbf76e023f4b8a225bd8d8842044b4ce96c6e4368b8f09cd2d7a387f61d4317af9a77cf01706eeb5e88165178ba1d3f9256205638a30

Analysis: behavioral3

Detonation Overview

Submitted

2024-12-09 01:54

Reported

2024-12-09 02:24

Platform

win7-20240903-en

Max time kernel

1797s

Max time network

1800s

Command Line

"C:\Users\Admin\AppData\Local\Temp\v2.exe"

Signatures

Sodin,Sodinokibi,REvil

ransomware sodinokibi

Sodinokibi family

sodinokibi

Contacts a large (722) amount of remote hosts

discovery

Credentials from Password Stores: Windows Credential Manager

credential_access stealer

Drops startup file

Description Indicator Process Target
File created \??\c:\users\admin\appdata\roaming\microsoft\word\startup\5e7y3v8-readme.txt C:\Users\Admin\AppData\Local\Temp\v2.exe N/A

Reads user/profile data of web browsers

spyware stealer

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\Z: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\B: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\E: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\G: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\L: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\P: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\Q: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\S: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\T: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\U: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\W: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\F: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\D: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\N: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\Y: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\A: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\H: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\J: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\K: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\System32\CatRoot2\dberr.txt C:\Users\Admin\AppData\Local\Temp\v2.exe N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\3m3vz.bmp" C:\Users\Admin\AppData\Local\Temp\v2.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files\TraceWait.wmf C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File created \??\c:\program files (x86)\microsoft sql server compact edition\5e7y3v8-readme.txt C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\AssertLock.txt C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\ClearStep.potx C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\RemoveClose.iso C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\ConfirmGrant.ppsx C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\DisableGrant.csv C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\OpenJoin.dib C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\WaitSplit.xsl C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\CompareUnlock.mp4v C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\MountExit.zip C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\SelectProtect.rle C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\ShowBackup.mht C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\UpdateSet.xps C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\FormatEnter.reg C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\JoinLimit.rmi C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\MountCopy.jpeg C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\ApproveCompress.mp3 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\CompleteDeny.AAC C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\SwitchSplit.xltx C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\RevokePing.M2T C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\UnpublishExport.crw C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File created \??\c:\program files (x86)\microsoft sql server compact edition\v3.5\desktop\5e7y3v8-readme.txt C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\AssertInvoke.xht C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\BackupOut.vsdm C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\DismountSubmit.tiff C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\GetSelect.7z C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\PublishUnblock.cr2 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\SaveStart.wdp C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\UpdateProtect.temp C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File created \??\c:\program files\5e7y3v8-readme.txt C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File created \??\c:\program files (x86)\5e7y3v8-readme.txt C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\ExitMeasure.xps C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\WatchResolve.wmv C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File created \??\c:\program files (x86)\microsoft sql server compact edition\v3.5\5e7y3v8-readme.txt C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\ConfirmCopy.ttc C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\ConvertToBackup.crw C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\StopFormat.zip C:\Users\Admin\AppData\Local\Temp\v2.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\v2.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\SystemCertificates\CA\Certificates\D89E3BD43D5D909B47A18977AA9D5CE36CEE184C C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\SystemCertificates\CA\Certificates\9E99A48A9960B14926BB7F3B02E22DA2B0AB7280 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\SystemCertificates\CA\Certificates\9E99A48A9960B14926BB7F3B02E22DA2B0AB7280\Blob = 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 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 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 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\SystemCertificates\CA\Certificates\D89E3BD43D5D909B47A18977AA9D5CE36CEE184C\Blob = 030000000100000014000000d89e3bd43d5d909b47a18977aa9d5ce36cee184c1400000001000000140000005379bf5aaa2b4acf5480e1d89bc09df2b20366cb040000000100000010000000285ec909c4ab0d2d57f5086b225799aa0f000000010000003000000013baa039635f1c5292a8c2f36aae7e1d25c025202e9092f5b0f53f5f752dfa9c71b3d1b8d9a6358fcee6ec75622fabf9190000000100000010000000ea6089055218053dd01e37e1d806eedf1800000001000000100000002aa1c05e2ae606f198c2c5e937c97aa22000000001000000850500003082058130820469a00302010202103972443af922b751d7d36c10dd313595300d06092a864886f70d01010c0500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3139303331323030303030305a170d3238313233313233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f7269747930820222300d06092a864886f70d01010105000382020f003082020a028202010080126517360ec3db08b3d0ac570d76edcd27d34cad508361e2aa204d092d6409dcce899fcc3da9ecf6cfc1dcf1d3b1d67b3728112b47da39c6bc3a19b45fa6bd7d9da36342b676f2a93b2b91f8e26fd0ec162090093ee2e874c918b491d46264db7fa306f188186a90223cbcfe13f087147bf6e41f8ed4e451c61167460851cb8614543fbc33fe7e6c9cff169d18bd518e35a6a766c87267db2166b1d49b7803c0503ae8ccf0dcbc9e4cfeaf0596351f575ab7ffcef93db72cb6f654ddc8e7123a4dae4c8ab75c9ab4b7203dca7f2234ae7e3b68660144e7014e46539b3360f794be5337907343f332c353efdbaafe744e69c76b8c6093dec4c70cdfe132aecc933b517895678bee3d56fe0cd0690f1b0ff325266b336df76e47fa7343e57e0ea566b1297c3284635589c40dc19354301913acd37d37a7eb5d3a6c355cdb41d712daa9490bdfd8808a0993628eb566cf2588cd84b8b13fa4390fd9029eeb124c957cf36b05a95e1683ccb867e2e8139dcc5b82d34cb3ed5bffdee573ac233b2d00bf3555740949d849581a7f9236e651920ef3267d1c4d17bcc9ec4326d0bf415f40a94444f499e757879e501f5754a83efd74632fb1506509e658422e431a4cb4f0254759fa041e93d426464a5081b2debe78b7fc6715e1c957841e0f63d6e962bad65f552eea5cc62808042539b80e2ba9f24c971c073f0d52f5edef2f820f0203010001a381f23081ef301f0603551d23041830168014a0110a233e96f107ece2af29ef82a57fd030a4b4301d0603551d0e041604145379bf5aaa2b4acf5480e1d89bc09df2b20366cb300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff30110603551d20040a300830060604551d200030430603551d1f043c303a3038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c303406082b0601050507010104283026302406082b060105050730018618687474703a2f2f6f6373702e636f6d6f646f63612e636f6d300d06092a864886f70d01010c05000382010100188751dc74213d9c8ae027b733d02eccecf0e6cb5e11de226f9b758e9e72fee4d6feaa1f9c962def034a7eaef48d6f723c433bc03febb8df5caaa9c6aef2fcd8eea37b43f686367c14e0cdf4f73ffedeb8b48af09196fefd43647efdccd201a17d7df81919c9422b13bf588bbaa4a266047688914e0c8914cea24dc932b3bae8141abc71f15bf0410b98000a220310e50cb1f9cd923719ed3bf1e43ab6f945132675afbbaaef3f7b773bd2c402913d1900d3175c39db3f7b180d45cd9385962f5ddf59164f3f51bdd545183fed4a8ee80661742316b50d50732744477f105d892a6b853114c4e8a96a4c80bc6a78cfb87f8e7672990c9dfed7910816a1a35f95 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6\Blob = 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 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\v2.exe

"C:\Users\Admin\AppData\Local\Temp\v2.exe"

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\system32\wbem\unsecapp.exe -Embedding

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

Network

Country Destination Domain Proto
US 8.8.8.8:53 commercialboatbuilding.com udp
US 8.8.8.8:53 parkstreetauto.net udp
US 50.28.1.103:443 parkstreetauto.net tcp
US 50.28.1.103:443 parkstreetauto.net tcp
US 8.8.8.8:53 longislandelderlaw.com udp
US 160.153.0.194:443 longislandelderlaw.com tcp
US 160.153.0.194:443 longislandelderlaw.com tcp
US 8.8.8.8:53 lbcframingelectrical.com udp
DE 3.124.100.143:443 lbcframingelectrical.com tcp
DE 3.124.100.143:443 lbcframingelectrical.com tcp
US 8.8.8.8:53 assurancesalextrespaille.fr udp
US 8.8.8.8:53 smale-opticiens.nl udp
NL 217.18.77.142:443 smale-opticiens.nl tcp
NL 217.18.77.142:443 smale-opticiens.nl tcp
US 8.8.8.8:53 naturavetal.hr udp
DE 168.119.205.241:443 naturavetal.hr tcp
DE 168.119.205.241:443 naturavetal.hr tcp
US 8.8.8.8:53 global-kids.info udp
US 8.8.8.8:53 kaotikkustomz.com udp
US 162.240.41.248:443 kaotikkustomz.com tcp
US 162.240.41.248:443 kaotikkustomz.com tcp
US 8.8.8.8:53 klusbeter.nl udp
IE 54.154.183.243:443 klusbeter.nl tcp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.klusbeter.nl udp
IE 34.250.140.231:443 www.klusbeter.nl tcp
US 8.8.8.8:53 socstrp.org udp
US 172.67.155.193:443 socstrp.org tcp
US 8.8.8.8:53 stefanpasch.me udp
US 151.101.0.119:443 stefanpasch.me tcp
US 151.101.0.119:443 stefanpasch.me tcp
US 8.8.8.8:53 jandaonline.com udp
DE 91.203.110.207:443 jandaonline.com tcp
DE 91.203.110.207:443 jandaonline.com tcp
US 8.8.8.8:53 beyondmarcomdotcom.wordpress.com udp
US 192.0.78.13:443 beyondmarcomdotcom.wordpress.com tcp
US 192.0.78.13:443 beyondmarcomdotcom.wordpress.com tcp
US 8.8.8.8:53 nmiec.com udp
US 8.8.8.8:53 sabel-bf.com udp
US 8.8.8.8:53 edv-live.de udp
DE 202.61.195.82:443 edv-live.de tcp
DE 202.61.195.82:443 edv-live.de tcp
US 8.8.8.8:53 zewatchers.com udp
FR 185.100.4.146:443 zewatchers.com tcp
FR 185.100.4.146:443 zewatchers.com tcp
US 8.8.8.8:53 controldekk.com udp
US 172.67.191.43:443 controldekk.com tcp
US 8.8.8.8:53 berlin-bamboo-bikes.org udp
US 70.32.1.32:443 berlin-bamboo-bikes.org tcp
US 70.32.1.32:443 berlin-bamboo-bikes.org tcp
US 8.8.8.8:53 sauschneider.info udp
JP 133.125.48.132:443 sauschneider.info tcp
US 8.8.8.8:53 norpol-yachting.com udp
PL 85.128.229.94:443 norpol-yachting.com tcp
PL 85.128.229.94:443 norpol-yachting.com tcp
US 8.8.8.8:53 nhadatcanho247.com udp
US 8.8.8.8:53 plantag.de udp
DE 217.160.0.197:443 plantag.de tcp
DE 217.160.0.197:443 plantag.de tcp
US 8.8.8.8:53 paradicepacks.com udp
US 8.8.8.8:53 odiclinic.org udp
US 170.249.205.18:443 odiclinic.org tcp
US 170.249.205.18:443 odiclinic.org tcp
US 8.8.8.8:53 grupocarvalhoerodrigues.com.br udp
US 8.8.8.8:53 ino-professional.ru udp
RU 77.74.185.33:443 ino-professional.ru tcp
RU 77.74.185.33:443 ino-professional.ru tcp
US 8.8.8.8:53 koken-voor-baby.nl udp
FR 152.228.189.75:443 koken-voor-baby.nl tcp
US 8.8.8.8:53 interactcenter.org udp
US 162.159.135.42:443 interactcenter.org tcp
US 162.159.135.42:443 interactcenter.org tcp
US 8.8.8.8:53 homng.net udp
US 8.8.8.8:53 vox-surveys.com udp
DE 5.189.182.42:443 vox-surveys.com tcp
US 8.8.8.8:53 apps.identrust.com udp
US 8.8.8.8:53 linnankellari.fi udp
FI 94.237.35.37:443 linnankellari.fi tcp
FI 94.237.35.37:443 linnankellari.fi tcp
US 8.8.8.8:53 lmtprovisions.com udp
US 35.215.98.25:443 lmtprovisions.com tcp
US 35.215.98.25:443 lmtprovisions.com tcp
US 8.8.8.8:53 igrealestate.com udp
US 157.230.196.39:443 igrealestate.com tcp
US 157.230.196.39:443 igrealestate.com tcp
US 8.8.8.8:53 bimnapratica.com udp
US 172.67.137.150:443 bimnapratica.com tcp
US 8.8.8.8:53 theadventureedge.com udp
US 143.198.70.160:443 theadventureedge.com tcp
US 143.198.70.160:443 theadventureedge.com tcp
US 8.8.8.8:53 hugoversichert.de udp
DE 62.141.48.71:443 hugoversichert.de tcp
DE 62.141.48.71:443 hugoversichert.de tcp
US 8.8.8.8:53 vorotauu.ru udp
RU 92.53.96.171:443 vorotauu.ru tcp
RU 92.53.96.171:443 vorotauu.ru tcp
US 8.8.8.8:53 deoudedorpskernnoordwijk.nl udp
NL 37.72.99.127:443 deoudedorpskernnoordwijk.nl tcp
NL 37.72.99.127:443 deoudedorpskernnoordwijk.nl tcp
US 8.8.8.8:53 aglend.com.au udp
US 104.21.89.246:443 aglend.com.au tcp
US 104.21.89.246:443 aglend.com.au tcp
US 8.8.8.8:53 jasonbaileystudio.com udp
US 104.21.32.1:443 jasonbaileystudio.com tcp
US 8.8.8.8:53 xn--fn-kka.no udp
NO 194.63.248.52:443 xn--fn-kka.no tcp
NO 194.63.248.52:443 xn--fn-kka.no tcp
US 8.8.8.8:53 finde-deine-marke.de udp
US 8.8.8.8:53 kikedeoliveira.com udp
US 8.8.8.8:53 first-2-aid-u.com udp
US 8.8.8.8:53 maureenbreezedancetheater.org udp
US 198.49.23.145:443 maureenbreezedancetheater.org tcp
US 198.49.23.145:443 maureenbreezedancetheater.org tcp
US 8.8.8.8:53 maxadams.london udp
GB 77.72.2.73:443 maxadams.london tcp
GB 77.72.2.73:443 maxadams.london tcp
US 8.8.8.8:53 smessier.com udp
US 8.8.8.8:53 pivoineetc.fr udp
US 104.21.50.89:443 pivoineetc.fr tcp
US 104.21.50.89:443 pivoineetc.fr tcp
US 8.8.8.8:53 edgewoodestates.org udp
US 5.161.100.232:443 edgewoodestates.org tcp
US 5.161.100.232:443 edgewoodestates.org tcp
US 8.8.8.8:53 delchacay.com.ar udp
US 52.71.4.6:443 delchacay.com.ar tcp
US 52.71.4.6:443 delchacay.com.ar tcp
US 8.8.8.8:53 no-plans.com udp
US 198.49.23.145:443 no-plans.com tcp
US 198.49.23.145:443 no-plans.com tcp
US 8.8.8.8:53 vihannesporssi.fi udp
FI 185.168.212.98:443 vihannesporssi.fi tcp
FI 185.168.212.98:443 vihannesporssi.fi tcp
US 8.8.8.8:53 gporf.fr udp
FR 85.31.222.20:443 gporf.fr tcp
FR 85.31.222.20:443 gporf.fr tcp
US 8.8.8.8:53 cite4me.org udp
US 104.21.86.93:443 cite4me.org tcp
US 8.8.8.8:53 studentshare.org udp
US 172.67.73.159:443 studentshare.org tcp
US 8.8.8.8:53 cursoporcelanatoliquido.online udp
US 8.8.8.8:53 kath-kirche-gera.de udp
DE 78.46.130.17:443 kath-kirche-gera.de tcp
DE 78.46.130.17:443 kath-kirche-gera.de tcp
US 8.8.8.8:53 olejack.ru udp
US 172.67.204.196:443 olejack.ru tcp
US 8.8.8.8:53 strategicstatements.com udp
US 15.197.225.128:443 strategicstatements.com tcp
US 15.197.225.128:443 strategicstatements.com tcp
US 8.8.8.8:53 remcakram.com udp
US 8.8.8.8:53 qlog.de udp
DE 212.53.214.163:443 qlog.de tcp
DE 212.53.214.163:443 qlog.de tcp
US 8.8.8.8:53 loprus.pl udp
PL 46.242.232.208:443 loprus.pl tcp
PL 46.242.232.208:443 loprus.pl tcp
US 8.8.8.8:53 ulyssemarketing.com udp
US 8.8.8.8:53 geoffreymeuli.com udp
BE 176.62.169.78:443 geoffreymeuli.com tcp
US 8.8.8.8:53 blossombeyond50.com udp
US 8.8.8.8:53 helenekowalsky.com udp
DE 178.16.62.149:443 helenekowalsky.com tcp
DE 178.16.62.149:443 helenekowalsky.com tcp
US 8.8.8.8:53 id-vet.com udp
FR 178.20.66.76:443 id-vet.com tcp
US 8.8.8.8:53 maasreusel.nl udp
NL 185.104.29.132:443 maasreusel.nl tcp
US 8.8.8.8:53 oemands.dk udp
DK 94.231.103.159:443 oemands.dk tcp
DK 94.231.103.159:443 oemands.dk tcp
US 8.8.8.8:53 penco.ie udp
US 104.21.48.1:443 penco.ie tcp
US 104.21.48.1:443 penco.ie tcp
US 8.8.8.8:53 koko-nora.dk udp
US 8.8.8.8:53 solhaug.tk udp
US 107.178.223.183:443 solhaug.tk tcp
US 8.8.8.8:53 thomasvicino.com udp
US 104.21.92.24:443 thomasvicino.com tcp
US 8.8.8.8:53 itelagen.com udp
US 157.230.80.33:443 itelagen.com tcp
US 157.230.80.33:443 itelagen.com tcp
US 8.8.8.8:53 supportsumba.nl udp
SE 5.198.250.123:443 supportsumba.nl tcp
SE 5.198.250.123:443 supportsumba.nl tcp
US 8.8.8.8:53 cuppacap.com udp
PL 51.68.138.187:443 cuppacap.com tcp
US 8.8.8.8:53 krlosdavid.com udp
US 45.33.241.252:443 krlosdavid.com tcp
US 8.8.8.8:53 pcp-nc.com udp
US 34.160.17.71:443 pcp-nc.com tcp
US 34.160.17.71:443 pcp-nc.com tcp
US 8.8.8.8:53 mapawood.com udp
US 74.220.199.6:443 mapawood.com tcp
US 8.8.8.8:53 importardechina.info udp
US 8.8.8.8:53 kenhnoithatgo.com udp
US 8.8.8.8:53 milltimber.aberdeen.sch.uk udp
GB 80.76.118.1:443 milltimber.aberdeen.sch.uk tcp
GB 80.76.118.1:443 milltimber.aberdeen.sch.uk tcp
US 8.8.8.8:53 hiddencitysecrets.com.au udp
AU 103.42.111.213:443 hiddencitysecrets.com.au tcp
AU 103.42.111.213:443 hiddencitysecrets.com.au tcp
US 8.8.8.8:53 mirjamholleman.nl udp
US 8.8.8.8:53 fizzl.ru udp
US 172.67.128.105:443 fizzl.ru tcp
US 8.8.8.8:53 blood-sports.net udp
US 172.67.166.213:443 blood-sports.net tcp
US 8.8.8.8:53 kisplanning.com.au udp
AU 103.242.49.203:443 kisplanning.com.au tcp
AU 103.242.49.203:443 kisplanning.com.au tcp
US 8.8.8.8:53 tandartspraktijkheesch.nl udp
NL 31.7.4.143:443 tandartspraktijkheesch.nl tcp
NL 31.7.4.143:443 tandartspraktijkheesch.nl tcp
US 8.8.8.8:53 deprobatehelp.com udp
US 208.118.247.88:443 deprobatehelp.com tcp
US 8.8.8.8:53 completeweddingkansas.com udp
US 76.223.54.146:443 completeweddingkansas.com tcp
US 76.223.54.146:443 completeweddingkansas.com tcp
US 8.8.8.8:53 tongdaifpthaiphong.net udp
US 172.67.170.234:443 tongdaifpthaiphong.net tcp
US 8.8.8.8:53 berliner-versicherungsvergleich.de udp
DE 94.130.244.208:443 berliner-versicherungsvergleich.de tcp
DE 94.130.244.208:443 berliner-versicherungsvergleich.de tcp
US 8.8.8.8:53 blog.solutionsarchitect.guru udp
US 8.8.8.8:53 sevenadvertising.com udp
US 8.8.8.8:53 buroludo.nl udp
NL 185.37.70.69:443 buroludo.nl tcp
NL 185.37.70.69:443 buroludo.nl tcp
US 8.8.8.8:53 stemplusacademy.com udp
US 104.21.84.248:443 stemplusacademy.com tcp
US 8.8.8.8:53 zieglerbrothers.de udp
DE 178.254.34.29:443 zieglerbrothers.de tcp
DE 178.254.34.29:443 zieglerbrothers.de tcp
US 8.8.8.8:53 offroadbeasts.com udp
US 8.8.8.8:53 nandistribution.nl udp
US 8.8.8.8:53 trystana.com udp
US 216.55.155.72:443 trystana.com tcp
US 162.159.134.42:443 friendsandbrgrs.com tcp
US 162.159.134.42:443 friendsandbrgrs.com tcp
US 8.8.8.8:53 tomaso.gr udp
GB 77.68.4.74:443 tomaso.gr tcp
US 8.8.8.8:53 live-your-life.jp udp
JP 202.172.26.37:443 live-your-life.jp tcp
JP 202.172.26.37:443 live-your-life.jp tcp
US 8.8.8.8:53 readberserk.com udp
US 104.21.235.131:443 readberserk.com tcp
US 104.21.235.131:443 readberserk.com tcp
US 8.8.8.8:53 amylendscrestview.com udp
US 3.33.251.168:443 amylendscrestview.com tcp
US 3.33.251.168:443 amylendscrestview.com tcp
US 8.8.8.8:53 webcodingstudio.com udp
UA 91.239.233.22:443 webcodingstudio.com tcp
UA 91.239.233.22:443 webcodingstudio.com tcp
US 8.8.8.8:53 aakritpatel.com udp
US 162.248.215.177:443 aakritpatel.com tcp
US 8.8.8.8:53 ianaswanson.com udp
US 67.20.70.156:443 ianaswanson.com tcp
US 67.20.70.156:443 ianaswanson.com tcp
US 8.8.8.8:53 lecantou-coworking.com udp
FR 213.186.33.4:443 lecantou-coworking.com tcp
FR 213.186.33.4:443 lecantou-coworking.com tcp
US 8.8.8.8:53 allamatberedare.se udp
US 8.8.8.8:53 dubscollective.com udp
US 199.15.163.139:443 dubscollective.com tcp
US 8.8.8.8:53 bristolaeroclub.co.uk udp
GB 91.238.162.172:443 bristolaeroclub.co.uk tcp
GB 91.238.162.172:443 bristolaeroclub.co.uk tcp
US 8.8.8.8:53 partnertaxi.sk udp
US 8.8.8.8:53 saarland-thermen-resort.com udp
DE 212.82.35.248:443 saarland-thermen-resort.com tcp
US 8.8.8.8:53 shiftinspiration.com udp
US 8.8.8.8:53 testcoreprohealthuk.com udp
US 104.161.48.2:443 testcoreprohealthuk.com tcp
US 104.161.48.2:443 testcoreprohealthuk.com tcp
US 8.8.8.8:53 freie-baugutachterpraxis.de udp
US 199.59.243.227:443 freie-baugutachterpraxis.de tcp
US 199.59.243.227:443 freie-baugutachterpraxis.de tcp
US 8.8.8.8:53 asiluxury.com udp
HK 206.119.6.196:443 asiluxury.com tcp
US 8.8.8.8:53 aunexis.ch udp
US 8.8.8.8:53 international-sound-awards.com udp
DE 217.160.0.46:443 international-sound-awards.com tcp
DE 217.160.0.46:443 international-sound-awards.com tcp
US 8.8.8.8:53 exenberger.at udp
AT 81.19.159.60:443 exenberger.at tcp
AT 81.19.159.60:443 exenberger.at tcp
US 8.8.8.8:53 iwelt.de udp
DE 82.212.215.131:443 iwelt.de tcp
DE 82.212.215.131:443 iwelt.de tcp
US 8.8.8.8:53 connectedace.com udp
US 3.94.41.167:443 connectedace.com tcp
US 52.86.6.113:443 connectedace.com tcp
US 8.8.8.8:53 dutchcoder.nl udp
US 8.8.8.8:53 evergreen-fishing.com udp
JP 118.27.103.110:443 evergreen-fishing.com tcp
JP 118.27.103.110:443 evergreen-fishing.com tcp
US 8.8.8.8:53 chaotrang.com udp
HK 206.119.6.194:443 chaotrang.com tcp
US 8.8.8.8:53 desert-trails.com udp
US 198.185.159.144:443 desert-trails.com tcp
US 198.185.159.144:443 desert-trails.com tcp
US 8.8.8.8:53 binder-buerotechnik.at udp
DE 87.230.41.243:443 binder-buerotechnik.at tcp
DE 87.230.41.243:443 binder-buerotechnik.at tcp
US 8.8.8.8:53 luckypatcher-apkz.com udp
US 8.8.8.8:53 gamesboard.info udp
FR 185.221.181.20:443 gamesboard.info tcp
FR 185.221.181.20:443 gamesboard.info tcp
US 8.8.8.8:53 siliconbeach-realestate.com udp
US 8.8.8.8:53 dramagickcom.wordpress.com udp
US 192.0.78.12:443 dramagickcom.wordpress.com tcp
US 192.0.78.12:443 dramagickcom.wordpress.com tcp
US 8.8.8.8:53 gw2guilds.org udp
US 104.21.50.86:443 gw2guilds.org tcp
US 8.8.8.8:53 oncarrot.com udp
US 44.229.70.187:443 oncarrot.com tcp
US 44.229.70.187:443 oncarrot.com tcp
US 8.8.8.8:53 manijaipur.com udp
US 104.21.28.183:443 manijaipur.com tcp
US 8.8.8.8:53 www.manijaipur.com udp
US 104.21.28.183:443 www.manijaipur.com tcp
US 8.8.8.8:53 consultaractadenacimiento.com udp
US 50.31.176.70:443 consultaractadenacimiento.com tcp
US 50.31.176.70:443 consultaractadenacimiento.com tcp
US 8.8.8.8:53 michaelsmeriglioracing.com udp
US 8.8.8.8:53 wasmachtmeinfonds.at udp
AT 81.19.154.98:443 wasmachtmeinfonds.at tcp
US 8.8.8.8:53 logopaedie-blomberg.de udp
FR 92.205.210.41:443 logopaedie-blomberg.de tcp
FR 92.205.210.41:443 logopaedie-blomberg.de tcp
US 8.8.8.8:53 memaag.com udp
HK 206.119.6.197:443 memaag.com tcp
DE 82.212.215.131:443 iwelt.de tcp
DE 82.212.215.131:443 iwelt.de tcp
US 8.8.8.8:53 urclan.net udp
DE 104.248.39.236:443 urclan.net tcp
US 8.8.8.8:53 321play.com.hk udp
US 8.8.8.8:53 stingraybeach.com udp
US 209.17.116.163:443 stingraybeach.com tcp
US 209.17.116.163:443 stingraybeach.com tcp
US 8.8.8.8:53 ecopro-kanto.com udp
JP 157.7.189.242:443 ecopro-kanto.com tcp
JP 157.7.189.242:443 ecopro-kanto.com tcp
US 8.8.8.8:53 extraordinaryoutdoors.com udp
US 3.19.116.195:443 extraordinaryoutdoors.com tcp
US 3.18.7.81:443 extraordinaryoutdoors.com tcp
US 8.8.8.8:53 kostenlose-webcams.com udp
US 8.8.8.8:53 ziegler-praezisionsteile.de udp
FR 92.205.229.161:443 ziegler-praezisionsteile.de tcp
FR 92.205.229.161:443 ziegler-praezisionsteile.de tcp
US 8.8.8.8:53 psnacademy.in udp
US 216.239.32.21:443 psnacademy.in tcp
US 216.239.32.21:443 psnacademy.in tcp
US 8.8.8.8:53 zflas.com udp
US 104.21.16.1:443 zflas.com tcp
US 8.8.8.8:53 huehnerauge-entfernen.de udp
DK 46.30.215.119:443 huehnerauge-entfernen.de tcp
DK 46.30.215.119:443 huehnerauge-entfernen.de tcp
US 8.8.8.8:53 micahkoleoso.de udp
DE 5.35.225.193:443 micahkoleoso.de tcp
DE 5.35.225.193:443 micahkoleoso.de tcp
US 8.8.8.8:53 rhinosfootballacademy.com udp
US 8.8.8.8:53 promalaga.es udp
FR 20.19.246.54:443 promalaga.es tcp
FR 20.19.246.54:443 promalaga.es tcp
US 8.8.8.8:53 hairnetty.wordpress.com udp
US 192.0.78.12:443 hairnetty.wordpress.com tcp
US 192.0.78.12:443 hairnetty.wordpress.com tcp
US 8.8.8.8:53 esope-formation.fr udp
FR 54.38.245.176:443 esope-formation.fr tcp
US 8.8.8.8:53 adoptioperheet.fi udp
US 104.21.25.53:443 adoptioperheet.fi tcp
US 8.8.8.8:53 www.adoptioperheet.fi udp
US 172.67.222.184:443 www.adoptioperheet.fi tcp
US 8.8.8.8:53 classycurtainsltd.co.uk udp
GB 185.194.90.11:443 classycurtainsltd.co.uk tcp
GB 185.194.90.11:443 classycurtainsltd.co.uk tcp
US 8.8.8.8:53 devstyle.org udp
NL 85.10.159.10:443 devstyle.org tcp
US 8.8.8.8:53 evangelische-pfarrgemeinde-tuniberg.de udp
DE 78.47.183.205:443 evangelische-pfarrgemeinde-tuniberg.de tcp
DE 78.47.183.205:443 evangelische-pfarrgemeinde-tuniberg.de tcp
US 8.8.8.8:53 eco-southafrica.com udp
FR 195.64.164.87:443 projetlyonturin.fr tcp
FR 195.64.164.87:443 projetlyonturin.fr tcp
US 8.8.8.8:53 ivfminiua.com udp
HK 206.119.5.222:443 ivfminiua.com tcp
US 8.8.8.8:53 homecomingstudio.com udp
FR 164.132.235.17:443 homecomingstudio.com tcp
FR 164.132.235.17:443 homecomingstudio.com tcp
US 8.8.8.8:53 bierensgebakkramen.nl udp
NL 128.140.223.200:443 bierensgebakkramen.nl tcp
NL 128.140.223.200:443 bierensgebakkramen.nl tcp
US 8.8.8.8:53 pubweb.carnet.hr udp
HR 193.198.184.106:443 pubweb.carnet.hr tcp
US 8.8.8.8:53 katiekerr.co.uk udp
GB 141.0.160.22:443 katiekerr.co.uk tcp
GB 141.0.160.22:443 katiekerr.co.uk tcp
US 8.8.8.8:53 markelbroch.com udp
US 18.214.190.32:443 markelbroch.com tcp
US 18.214.190.32:443 markelbroch.com tcp
US 8.8.8.8:53 bogdanpeptine.ro udp
RO 185.162.66.158:443 bogdanpeptine.ro tcp
RO 185.162.66.158:443 bogdanpeptine.ro tcp
US 8.8.8.8:53 123vrachi.ru udp
RU 92.63.102.9:443 123vrachi.ru tcp
RU 92.63.102.9:443 123vrachi.ru tcp
US 8.8.8.8:53 baumkuchenexpo.jp udp
JP 153.122.173.27:443 baumkuchenexpo.jp tcp
JP 153.122.173.27:443 baumkuchenexpo.jp tcp
US 8.8.8.8:53 tsklogistik.eu udp
AT 152.53.65.220:443 tsklogistik.eu tcp
AT 152.53.65.220:443 tsklogistik.eu tcp
US 8.8.8.8:53 narcert.com udp
US 160.153.0.21:443 narcert.com tcp
US 160.153.0.21:443 narcert.com tcp
US 8.8.8.8:53 associacioesportivapolitg.cat udp
FR 94.23.80.4:443 associacioesportivapolitg.cat tcp
FR 94.23.80.4:443 associacioesportivapolitg.cat tcp
US 8.8.8.8:53 sla-paris.com udp
FR 51.91.98.250:443 sla-paris.com tcp
FR 51.91.98.250:443 sla-paris.com tcp
FR 213.186.33.5:443 latribuessentielle.com tcp
US 8.8.8.8:53 hvccfloorcare.com udp
US 3.19.116.195:443 hvccfloorcare.com tcp
US 3.18.7.81:443 hvccfloorcare.com tcp
US 8.8.8.8:53 colorofhorses.com udp
US 8.8.8.8:53 humancondition.com udp
US 172.66.42.253:443 humancondition.com tcp
US 8.8.8.8:53 www.humancondition.com udp
US 172.66.42.253:443 www.humancondition.com tcp
US 8.8.8.8:53 hotelzentral.at udp
AT 93.189.31.34:443 hotelzentral.at tcp
AT 93.189.31.34:443 hotelzentral.at tcp
US 8.8.8.8:53 kosterra.com udp
US 35.215.114.69:443 kosterra.com tcp
US 35.215.114.69:443 kosterra.com tcp
US 8.8.8.8:53 polzine.net udp
JP 52.69.52.231:443 polzine.net tcp
US 8.8.8.8:53 panelsandwichmadrid.es udp
ES 185.161.98.72:443 panelsandwichmadrid.es tcp
US 8.8.8.8:53 morawe-krueger.de udp
DE 89.107.188.143:443 morawe-krueger.de tcp
DE 89.107.188.143:443 morawe-krueger.de tcp
US 8.8.8.8:53 xn--vrftet-pua.biz udp
DK 94.231.103.100:443 xn--vrftet-pua.biz tcp
US 8.8.8.8:53 eraorastudio.com udp
US 198.54.115.34:443 eraorastudio.com tcp
US 198.54.115.34:443 eraorastudio.com tcp
US 8.8.8.8:53 shadebarandgrillorlando.com udp
US 190.92.159.133:443 shadebarandgrillorlando.com tcp
US 190.92.159.133:443 shadebarandgrillorlando.com tcp
US 8.8.8.8:53 calxplus.eu udp
US 8.8.8.8:53 365questions.org udp
FR 78.40.8.65:443 365questions.org tcp
FR 78.40.8.65:443 365questions.org tcp
US 8.8.8.8:53 videomarketing.pro udp
US 104.21.24.63:443 videomarketing.pro tcp
US 8.8.8.8:53 spinheal.ru udp
RU 31.31.205.163:443 spinheal.ru tcp
US 8.8.8.8:53 dupontsellshomes.com udp
US 70.40.220.182:443 dupontsellshomes.com tcp
US 70.40.220.182:443 dupontsellshomes.com tcp
US 8.8.8.8:53 centromarysalud.com udp
FR 15.236.15.196:443 centromarysalud.com tcp
US 8.8.8.8:53 chrissieperry.com udp
AU 35.213.220.12:443 chrissieperry.com tcp
AU 35.213.220.12:443 chrissieperry.com tcp
US 8.8.8.8:53 atozdistribution.co.uk udp
US 8.8.8.8:53 podsosnami.ru udp
RU 31.31.196.204:443 podsosnami.ru tcp
RU 31.31.196.204:443 podsosnami.ru tcp
US 8.8.8.8:53 travelffeine.com udp
US 172.67.150.49:443 travelffeine.com tcp
US 172.67.150.49:443 travelffeine.com tcp
US 8.8.8.8:53 americafirstcommittee.org udp
US 104.21.74.236:443 americafirstcommittee.org tcp
US 8.8.8.8:53 siluet-decor.ru udp
US 8.8.8.8:53 raschlosser.de udp
DE 185.245.99.134:443 raschlosser.de tcp
US 8.8.8.8:53 www.raschlosser.de udp
DE 185.245.99.134:443 www.raschlosser.de tcp
US 8.8.8.8:53 poultrypartners.nl udp
NL 185.223.163.47:443 poultrypartners.nl tcp
NL 185.223.163.47:443 poultrypartners.nl tcp
US 8.8.8.8:53 roadwarrior.app udp
FR 52.222.201.103:443 roadwarrior.app tcp
FR 52.222.201.103:443 roadwarrior.app tcp
US 8.8.8.8:53 huesges-gruppe.de udp
DE 185.159.122.22:443 huesges-gruppe.de tcp
DE 185.159.122.22:443 huesges-gruppe.de tcp
US 8.8.8.8:53 wellplast.se udp
DE 172.105.94.142:443 wellplast.se tcp
DE 172.105.94.142:443 wellplast.se tcp
US 8.8.8.8:53 advizewealth.com udp
US 185.230.63.186:443 advizewealth.com tcp
US 185.230.63.186:443 advizewealth.com tcp
US 8.8.8.8:53 danubecloud.com udp
US 54.161.222.85:443 danubecloud.com tcp
US 34.205.242.146:443 danubecloud.com tcp
US 8.8.8.8:53 dw-css.de udp
DE 64.190.63.222:443 dw-css.de tcp
DE 64.190.63.222:443 dw-css.de tcp
US 8.8.8.8:53 mariposapropaneaz.com udp
US 76.223.67.189:443 mariposapropaneaz.com tcp
US 76.223.67.189:443 mariposapropaneaz.com tcp
US 8.8.8.8:53 aurum-juweliere.de udp
FI 95.217.148.141:443 aurum-juweliere.de tcp
US 8.8.8.8:53 jobcenterkenya.com udp
US 38.31.150.230:443 jobcenterkenya.com tcp
US 8.8.8.8:53 aselbermachen.com udp
US 8.8.8.8:53 tux-espacios.com udp
US 107.161.179.93:443 tux-espacios.com tcp
US 107.161.179.93:443 tux-espacios.com tcp
US 8.8.8.8:53 answerstest.ru udp
RU 92.53.96.50:443 answerstest.ru tcp
RU 92.53.96.50:443 answerstest.ru tcp
US 8.8.8.8:53 kampotpepper.gives udp
US 8.8.8.8:53 monark.com udp
US 76.223.27.102:443 monark.com tcp
US 76.223.27.102:443 monark.com tcp
US 8.8.8.8:53 cranleighscoutgroup.org udp
NL 20.82.12.44:443 cranleighscoutgroup.org tcp
NL 20.82.12.44:443 cranleighscoutgroup.org tcp
US 8.8.8.8:53 coffreo.biz udp
US 104.22.66.164:443 coffreo.biz tcp
US 104.22.66.164:443 coffreo.biz tcp
US 8.8.8.8:53 thomas-hospital.de udp
DE 167.233.15.238:443 thomas-hospital.de tcp
DE 167.233.15.238:443 thomas-hospital.de tcp
US 8.8.8.8:53 hkr-reise.de udp
FR 5.35.241.68:443 hkr-reise.de tcp
FR 5.35.241.68:443 hkr-reise.de tcp
US 8.8.8.8:53 executiveairllc.com udp
US 50.28.18.55:443 executiveairllc.com tcp
US 50.28.18.55:443 executiveairllc.com tcp
US 8.8.8.8:53 vesinhnha.com.vn udp
VN 103.74.118.108:443 vesinhnha.com.vn tcp
VN 103.74.118.108:443 vesinhnha.com.vn tcp
US 8.8.8.8:53 aodaichandung.com udp
US 8.8.8.8:53 lukeshepley.wordpress.com udp
US 192.0.78.13:443 lukeshepley.wordpress.com tcp
US 192.0.78.13:443 lukeshepley.wordpress.com tcp
US 8.8.8.8:53 copystar.co.uk udp
DE 217.160.0.115:443 copystar.co.uk tcp
DE 217.160.0.115:443 copystar.co.uk tcp
US 8.8.8.8:53 noesis.tech udp
IN 143.110.186.61:443 noesis.tech tcp
US 8.8.8.8:53 montrium.com udp
US 75.2.70.75:443 montrium.com tcp
US 75.2.70.75:443 montrium.com tcp
US 8.8.8.8:53 zenderthelender.com udp
US 172.66.0.125:443 zenderthelender.com tcp
US 172.66.0.125:443 zenderthelender.com tcp
US 8.8.8.8:53 theduke.de udp
DE 217.160.0.111:443 theduke.de tcp
DE 217.160.0.111:443 theduke.de tcp
US 8.8.8.8:53 rebeccarisher.com udp
US 104.156.253.187:443 rebeccarisher.com tcp
US 104.156.253.187:443 rebeccarisher.com tcp
US 8.8.8.8:53 levdittliv.se udp
US 172.67.155.122:443 levdittliv.se tcp
US 8.8.8.8:53 fitforme.com udp
US 172.67.75.185:443 fitforme.com tcp
US 172.67.75.185:443 fitforme.com tcp
US 8.8.8.8:53 abogadoengijon.es udp
ES 185.47.12.73:443 abogadoengijon.es tcp
US 8.8.8.8:53 kevinjodea.com udp
US 172.67.220.52:443 kevinjodea.com tcp
US 8.8.8.8:53 faroairporttransfers.net udp
US 162.213.251.210:443 faroairporttransfers.net tcp
US 162.213.251.210:443 faroairporttransfers.net tcp
US 8.8.8.8:53 igfap.com udp
US 173.208.199.194:443 igfap.com tcp
US 8.8.8.8:53 centuryrs.com udp
US 8.8.8.8:53 blewback.com udp
US 8.8.8.8:53 ora-it.de udp
FR 176.28.10.103:443 ora-it.de tcp
US 8.8.8.8:53 www.ora-it.de udp
FR 176.28.10.103:443 www.ora-it.de tcp
US 8.8.8.8:53 limassoldriving.com udp
US 108.163.225.126:443 limassoldriving.com tcp
US 108.163.225.126:443 limassoldriving.com tcp
US 8.8.8.8:53 nosuchthingasgovernment.com udp
US 104.219.248.46:443 nosuchthingasgovernment.com tcp
US 104.219.248.46:443 nosuchthingasgovernment.com tcp
US 8.8.8.8:53 iviaggisonciliegie.it udp
GB 77.95.113.179:443 iviaggisonciliegie.it tcp
GB 77.95.113.179:443 iviaggisonciliegie.it tcp
US 8.8.8.8:53 thefixhut.com udp
US 198.185.159.145:443 thefixhut.com tcp
US 198.185.159.145:443 thefixhut.com tcp
US 8.8.8.8:53 patrickfoundation.net udp
US 8.8.8.8:53 herbstfeststaefa.ch udp
CH 217.26.52.28:443 herbstfeststaefa.ch tcp
CH 217.26.52.28:443 herbstfeststaefa.ch tcp
US 8.8.8.8:53 walter-lemm.de udp
DE 5.35.225.156:443 walter-lemm.de tcp
DE 5.35.225.156:443 walter-lemm.de tcp
US 8.8.8.8:53 toreria.es udp
US 8.8.8.8:53 the-virtualizer.com udp
FR 5.175.14.53:443 the-virtualizer.com tcp
FR 5.175.14.53:443 the-virtualizer.com tcp
US 8.8.8.8:53 villa-marrakesch.de udp
US 8.8.8.8:53 pasivect.co.uk udp
US 8.8.8.8:53 live-con-arte.de udp
DE 138.201.29.115:443 live-con-arte.de tcp
DE 138.201.29.115:443 live-con-arte.de tcp
US 8.8.8.8:53 surespark.org.uk udp
FR 155.133.142.6:443 surespark.org.uk tcp
FR 155.133.142.6:443 surespark.org.uk tcp
US 8.8.8.8:53 htchorst.nl udp
NL 2.56.226.118:443 htchorst.nl tcp
NL 2.56.226.118:443 htchorst.nl tcp
US 8.8.8.8:53 saka.gr udp
DE 138.201.194.220:443 saka.gr tcp
DE 138.201.194.220:443 saka.gr tcp
US 8.8.8.8:53 geekwork.pl udp
PL 94.154.117.119:443 geekwork.pl tcp
US 8.8.8.8:53 journeybacktolife.com udp
US 3.140.13.188:443 journeybacktolife.com tcp
US 18.119.154.66:443 journeybacktolife.com tcp
US 8.8.8.8:53 mountsoul.de udp
DE 35.207.98.7:443 mountsoul.de tcp
DE 35.207.98.7:443 mountsoul.de tcp
US 8.8.8.8:53 funjose.org.gt udp
US 34.174.238.219:443 funjose.org.gt tcp
US 34.174.238.219:443 funjose.org.gt tcp
US 8.8.8.8:53 creative-waves.co.uk udp
US 8.8.8.8:53 manutouchmassage.com udp
US 8.8.8.8:53 mediaplayertest.net udp
US 8.8.8.8:53 vitavia.lt udp
EE 217.146.69.43:443 vitavia.lt tcp
EE 217.146.69.43:443 vitavia.lt tcp
US 8.8.8.8:53 osterberg.fi udp
FI 185.220.77.1:443 osterberg.fi tcp
FI 185.220.77.1:443 osterberg.fi tcp
US 8.8.8.8:53 pierrehale.com udp
FR 155.133.142.13:443 pierrehale.com tcp
FR 155.133.142.13:443 pierrehale.com tcp
US 8.8.8.8:53 asgestion.com udp
ES 185.66.41.224:443 asgestion.com tcp
ES 185.66.41.224:443 asgestion.com tcp
US 8.8.8.8:53 airconditioning-waalwijk.nl udp
US 8.8.8.8:53 rushhourappliances.com udp
GB 185.77.97.90:443 rushhourappliances.com tcp
GB 185.77.97.90:443 rushhourappliances.com tcp
US 8.8.8.8:53 artotelamsterdam.com udp
US 141.193.213.21:443 artotelamsterdam.com tcp
US 141.193.213.21:443 artotelamsterdam.com tcp
US 8.8.8.8:53 cursosgratuitosnainternet.com udp
US 8.8.8.8:53 baylegacy.com udp
US 141.193.213.11:443 baylegacy.com tcp
US 141.193.213.11:443 baylegacy.com tcp
US 8.8.8.8:53 campus2day.de udp
SE 93.158.97.64:443 campus2day.de tcp
SE 93.158.97.64:443 campus2day.de tcp
US 8.8.8.8:53 personalenhancementcenter.com udp
US 54.241.44.184:443 personalenhancementcenter.com tcp
US 8.8.8.8:53 godekcenter.com udp
US 54.241.44.184:443 godekcenter.com tcp
US 8.8.8.8:53 www.godekcenter.com udp
US 54.241.44.184:443 www.godekcenter.com tcp
US 8.8.8.8:53 strandcampingdoonbeg.com udp
IE 78.137.164.83:443 strandcampingdoonbeg.com tcp
IE 78.137.164.83:443 strandcampingdoonbeg.com tcp
US 8.8.8.8:53 cirugiauretra.es udp
US 8.8.8.8:53 bradynursery.com udp
US 35.215.111.114:443 bradynursery.com tcp
US 35.215.111.114:443 bradynursery.com tcp
US 8.8.8.8:53 team-montage.dk udp
DE 46.4.208.59:443 team-montage.dk tcp
DE 46.4.208.59:443 team-montage.dk tcp
US 8.8.8.8:53 iwr.nl udp
NL 5.157.80.172:443 iwr.nl tcp
NL 5.157.80.172:443 iwr.nl tcp
US 8.8.8.8:53 babcockchurch.org udp
US 13.248.169.48:443 babcockchurch.org tcp
US 13.248.169.48:443 babcockchurch.org tcp
US 8.8.8.8:53 simulatebrain.com udp
US 8.8.8.8:53 d1franchise.com udp
US 199.60.103.140:443 d1franchise.com tcp
US 199.60.103.140:443 d1franchise.com tcp
US 8.8.8.8:53 edelman.jp udp
US 18.209.206.50:443 edelman.jp tcp
US 8.8.8.8:53 sojamindbody.com udp
CH 185.177.62.150:443 lebellevue.fr tcp
CH 185.177.62.150:443 lebellevue.fr tcp
US 8.8.8.8:53 wurmpower.at udp
FR 85.25.185.59:443 wurmpower.at tcp
FR 85.25.185.59:443 wurmpower.at tcp
US 8.8.8.8:53 bptdmaluku.com udp
GB 185.151.30.179:443 bptdmaluku.com tcp
GB 185.151.30.179:443 bptdmaluku.com tcp
US 8.8.8.8:53 winrace.no udp
NO 77.88.77.99:443 winrace.no tcp
US 8.8.8.8:53 www.winrace.no udp
NO 77.88.77.99:443 www.winrace.no tcp
US 8.8.8.8:53 ungsvenskarna.se udp
SE 185.21.145.101:443 ungsvenskarna.se tcp
SE 185.21.145.101:443 ungsvenskarna.se tcp
US 8.8.8.8:53 boompinoy.com udp
US 8.8.8.8:53 dirittosanitario.biz udp
DE 3.73.135.230:443 dirittosanitario.biz tcp
US 8.8.8.8:53 smokeysstoves.com udp
US 35.209.217.183:443 smokeysstoves.com tcp
US 35.209.217.183:443 smokeysstoves.com tcp
US 8.8.8.8:53 thailandholic.com udp
US 204.11.56.48:443 thailandholic.com tcp
US 204.11.56.48:443 thailandholic.com tcp
US 8.8.8.8:53 dpo-as-a-service.com udp
GB 91.108.103.197:443 dpo-as-a-service.com tcp
GB 91.108.103.197:443 dpo-as-a-service.com tcp
US 8.8.8.8:53 spd-ehningen.de udp
DE 109.237.138.15:443 spd-ehningen.de tcp
DE 109.237.138.15:443 spd-ehningen.de tcp
US 8.8.8.8:53 agence-chocolat-noir.com udp
FR 213.186.33.5:443 agence-chocolat-noir.com tcp
US 8.8.8.8:53 mrsfieldskc.com udp
US 8.8.8.8:53 kamahouse.net udp
US 172.67.203.128:443 pasvenska.se tcp
US 8.8.8.8:53 hatech.io udp
US 8.8.8.8:53 abl1.net udp
US 104.21.54.188:443 abl1.net tcp
US 8.8.8.8:53 www.abl1.net udp
US 104.21.54.188:443 www.abl1.net tcp
US 8.8.8.8:53 www.ablfunding.com udp
US 172.67.201.254:443 www.ablfunding.com tcp
US 8.8.8.8:53 rumahminangberdaya.com udp
US 8.8.8.8:53 burkert-ideenreich.de udp
DE 188.40.2.8:443 burkert-ideenreich.de tcp
US 8.8.8.8:53 dutchbrewingcoffee.com udp
US 104.155.138.21:443 dutchbrewingcoffee.com tcp
US 8.8.8.8:53 thewellnessmimi.com udp
US 8.8.8.8:53 spacecitysisters.org udp
US 198.49.23.145:443 spacecitysisters.org tcp
US 198.49.23.145:443 spacecitysisters.org tcp
US 8.8.8.8:53 myzk.site udp
US 8.8.8.8:53 ncuccr.org udp
US 192.124.249.56:443 ncuccr.org tcp
US 192.124.249.56:443 ncuccr.org tcp
US 8.8.8.8:53 financescorecard.com udp
US 44.230.85.241:443 financescorecard.com tcp
US 44.230.85.241:443 financescorecard.com tcp
US 8.8.8.8:53 operaslovakia.sk udp
SK 37.9.175.132:443 operaslovakia.sk tcp
SK 37.9.175.132:443 operaslovakia.sk tcp
US 8.8.8.8:53 paulisdogshop.de udp
DE 85.10.215.20:443 paulisdogshop.de tcp
US 8.8.8.8:53 kedak.de udp
US 172.67.167.188:443 kedak.de tcp
US 149.28.115.51:443 firstpaymentservices.com tcp
US 149.28.115.51:443 firstpaymentservices.com tcp
US 8.8.8.8:53 bafuncs.org udp
GB 3.9.206.124:443 bafuncs.org tcp
US 8.8.8.8:53 caribdoctor.org udp
US 8.8.8.8:53 scenepublique.net udp
US 8.8.8.8:53 starsarecircular.org udp
US 185.230.63.171:443 starsarecircular.org tcp
US 185.230.63.171:443 starsarecircular.org tcp
US 8.8.8.8:53 securityfmm.com udp
US 8.8.8.8:53 stormwall.se udp
US 8.8.8.8:53 drnice.de udp
DE 78.47.54.3:443 drnice.de tcp
US 8.8.8.8:53 geisterradler.de udp
US 8.8.8.8:53 mooreslawngarden.com udp
US 8.8.8.8:53 modestmanagement.com udp
GB 62.100.206.104:443 modestmanagement.com tcp
GB 62.100.206.104:443 modestmanagement.com tcp
US 8.8.8.8:53 onlyresultsmarketing.com udp
US 162.243.165.239:443 onlyresultsmarketing.com tcp
US 8.8.8.8:53 talentwunder.com udp
DE 128.140.39.110:443 talentwunder.com tcp
DE 128.140.39.110:443 talentwunder.com tcp
US 8.8.8.8:53 veybachcenter.de udp
DE 85.13.161.99:443 veybachcenter.de tcp
DE 85.13.161.99:443 veybachcenter.de tcp
US 8.8.8.8:53 trulynolen.co.uk udp
N/A 127.0.0.1:443 tcp
US 8.8.8.8:53 pcprofessor.com udp
US 184.170.246.76:443 pcprofessor.com tcp
US 184.170.246.76:443 pcprofessor.com tcp
US 8.8.8.8:53 hardinggroup.com udp
US 35.208.165.110:443 hardinggroup.com tcp
US 35.208.165.110:443 hardinggroup.com tcp
US 8.8.8.8:53 ouryoungminds.wordpress.com udp
US 192.0.78.12:443 ouryoungminds.wordpress.com tcp
US 192.0.78.12:443 ouryoungminds.wordpress.com tcp
US 8.8.8.8:53 plv.media udp
US 66.42.112.66:443 plv.media tcp
US 8.8.8.8:53 handi-jack-llc.com udp
US 8.8.8.8:53 yamalevents.com udp
US 160.153.0.180:443 yamalevents.com tcp
US 160.153.0.180:443 yamalevents.com tcp
US 8.8.8.8:53 sandd.nl udp
GB 2.18.27.154:443 sandd.nl tcp
GB 2.18.27.154:443 sandd.nl tcp
US 8.8.8.8:53 diversiapsicologia.es udp
DE 217.160.0.121:443 diversiapsicologia.es tcp
DE 217.160.0.121:443 diversiapsicologia.es tcp
US 8.8.8.8:53 samnewbyjax.com udp
US 8.8.8.8:53 naturalrapids.com udp
US 74.220.199.6:443 naturalrapids.com tcp
US 8.8.8.8:53 kafu.ch udp
CH 83.166.138.66:443 kafu.ch tcp
CH 83.166.138.66:443 kafu.ch tcp
US 8.8.8.8:53 girlillamarketing.com udp
US 75.2.70.75:443 girlillamarketing.com tcp
US 75.2.70.75:443 girlillamarketing.com tcp
US 8.8.8.8:53 campusoutreach.org udp
US 50.116.39.119:443 campusoutreach.org tcp
US 50.116.39.119:443 campusoutreach.org tcp
US 8.8.8.8:53 biapi-coaching.fr udp
FR 91.134.190.181:443 biapi-coaching.fr tcp
FR 91.134.190.181:443 biapi-coaching.fr tcp
US 8.8.8.8:53 groupe-frayssinet.fr udp
FR 162.19.75.184:443 groupe-frayssinet.fr tcp
US 8.8.8.8:53 fensterbau-ziegler.de udp
DE 82.212.214.7:443 fensterbau-ziegler.de tcp
DE 82.212.214.7:443 fensterbau-ziegler.de tcp
ES 185.186.169.202:443 abogados-en-alicante.es tcp
ES 185.186.169.202:443 abogados-en-alicante.es tcp
US 8.8.8.8:53 fiscalsort.com udp
ES 212.227.37.46:443 fiscalsort.com tcp
ES 212.227.37.46:443 fiscalsort.com tcp
US 172.232.25.148:443 durganews.com tcp
US 172.232.25.148:443 durganews.com tcp
US 8.8.8.8:53 div-vertriebsforschung.de udp
US 8.8.8.8:53 sarbatkhalsafoundation.org udp
US 160.153.0.167:443 sarbatkhalsafoundation.org tcp
US 160.153.0.167:443 sarbatkhalsafoundation.org tcp
US 8.8.8.8:53 vickiegrayimages.com udp
US 160.153.0.86:443 vickiegrayimages.com tcp
US 160.153.0.86:443 vickiegrayimages.com tcp
US 8.8.8.8:53 camsadviser.com udp
US 8.8.8.8:53 iwelt.de udp
DE 82.212.215.131:443 iwelt.de tcp
DE 82.212.215.131:443 iwelt.de tcp
US 8.8.8.8:53 coding-marking.com udp
FR 164.132.235.17:443 coding-marking.com tcp
FR 164.132.235.17:443 coding-marking.com tcp
US 8.8.8.8:53 castillobalduz.es udp
ES 78.136.73.185:443 castillobalduz.es tcp
US 8.8.8.8:53 www.castillobalduz.es udp
ES 78.136.73.185:443 www.castillobalduz.es tcp
ES 78.136.73.185:443 www.castillobalduz.es tcp
US 8.8.8.8:53 oslomf.no udp
NO 194.63.249.211:443 oslomf.no tcp
NO 194.63.249.211:443 oslomf.no tcp
US 8.8.8.8:53 woodworkersolution.com udp
US 77.247.126.152:443 woodworkersolution.com tcp
US 8.8.8.8:53 atalent.fi udp
US 76.76.21.21:443 atalent.fi tcp
US 76.76.21.21:443 atalent.fi tcp
US 8.8.8.8:53 harpershologram.wordpress.com udp
US 192.0.78.12:443 harpershologram.wordpress.com tcp
US 192.0.78.12:443 harpershologram.wordpress.com tcp
US 8.8.8.8:53 lefumetdesdombes.com udp
FR 164.132.235.17:443 lefumetdesdombes.com tcp
FR 164.132.235.17:443 lefumetdesdombes.com tcp
US 8.8.8.8:53 lachofikschiet.nl udp
NL 212.32.242.248:443 lachofikschiet.nl tcp
US 8.8.8.8:53 kmbshipping.co.uk udp
US 141.193.213.10:443 kmbshipping.co.uk tcp
US 141.193.213.10:443 kmbshipping.co.uk tcp
US 8.8.8.8:53 echtveilig.nl udp
NL 136.144.130.40:443 echtveilig.nl tcp
NL 136.144.130.40:443 echtveilig.nl tcp
US 8.8.8.8:53 ligiercenter-sachsen.de udp
DE 138.201.183.11:443 ligiercenter-sachsen.de tcp
DE 138.201.183.11:443 ligiercenter-sachsen.de tcp
US 8.8.8.8:53 gymnasedumanagement.com udp
FR 51.83.116.214:443 gymnasedumanagement.com tcp
FR 51.83.116.214:443 gymnasedumanagement.com tcp
US 8.8.8.8:53 suncrestcabinets.ca udp
DK 185.58.213.110:443 suncrestcabinets.ca tcp
DK 185.58.213.110:443 suncrestcabinets.ca tcp
US 8.8.8.8:53 anthonystreetrimming.com udp
US 107.21.217.230:443 anthonystreetrimming.com tcp
US 107.21.217.230:443 anthonystreetrimming.com tcp
US 8.8.8.8:53 gonzalezfornes.es udp
US 8.8.8.8:53 aniblinova.wordpress.com udp
US 192.0.78.12:443 aniblinova.wordpress.com tcp
US 192.0.78.12:443 aniblinova.wordpress.com tcp
US 8.8.8.8:53 naturstein-hotte.de udp
DE 78.46.10.150:443 naturstein-hotte.de tcp
US 8.8.8.8:53 fitnessingbyjessica.com udp
US 34.174.248.197:443 fitnessingbyjessica.com tcp
US 34.174.248.197:443 fitnessingbyjessica.com tcp
US 8.8.8.8:53 alvinschwartz.wordpress.com udp
US 192.0.78.12:443 alvinschwartz.wordpress.com tcp
US 192.0.78.12:443 alvinschwartz.wordpress.com tcp
US 8.8.8.8:53 maryloutaylor.com udp
US 54.205.192.227:443 maryloutaylor.com tcp
US 54.82.172.55:443 maryloutaylor.com tcp
US 8.8.8.8:53 liliesandbeauties.org udp
US 8.8.8.8:53 iyahayki.nl udp
NL 62.221.215.82:443 iyahayki.nl tcp
NL 62.221.215.82:443 iyahayki.nl tcp
US 8.8.8.8:53 simoneblum.de udp
US 8.8.8.8:53 xlarge.at udp
DE 5.22.145.16:443 xlarge.at tcp
DE 5.22.145.121:443 xlarge.at tcp
US 8.8.8.8:53 atmos-show.com udp
CZ 46.8.8.100:443 atmos-show.com tcp
US 8.8.8.8:53 houseofplus.com udp
US 3.33.251.168:443 houseofplus.com tcp
US 3.33.251.168:443 houseofplus.com tcp
US 8.8.8.8:53 tenacitytenfold.com udp
US 8.8.8.8:53 hoteledenpadova.it udp
US 8.8.8.8:53 hokagestore.com udp
US 209.58.148.145:443 hokagestore.com tcp
US 209.58.148.145:443 hokagestore.com tcp
US 8.8.8.8:53 nicoleaeschbachorg.wordpress.com udp
US 192.0.78.13:443 nicoleaeschbachorg.wordpress.com tcp
US 192.0.78.13:443 nicoleaeschbachorg.wordpress.com tcp
US 8.8.8.8:53 joyeriaorindia.com udp
ES 89.17.195.40:443 joyeriaorindia.com tcp
US 8.8.8.8:53 julis-lsa.de udp
DE 185.53.177.20:443 julis-lsa.de tcp
DE 185.53.177.20:443 julis-lsa.de tcp
US 8.8.8.8:53 yourobgyn.net udp
US 172.67.130.137:443 yourobgyn.net tcp
US 8.8.8.8:53 theletter.company udp
US 15.197.148.33:443 theletter.company tcp
US 15.197.148.33:443 theletter.company tcp
US 8.8.8.8:53 ceres.org.au udp
AU 43.250.142.137:443 ceres.org.au tcp
AU 43.250.142.137:443 ceres.org.au tcp
US 8.8.8.8:53 glennroberts.co.nz udp
NZ 120.138.30.85:443 glennroberts.co.nz tcp
NZ 120.138.30.85:443 glennroberts.co.nz tcp
US 8.8.8.8:53 platformier.com udp
US 8.8.8.8:53 wychowanieprzedszkolne.pl udp
PL 77.55.253.214:443 wychowanieprzedszkolne.pl tcp
PL 77.55.253.214:443 wychowanieprzedszkolne.pl tcp
US 8.8.8.8:53 crosspointefellowship.church udp
US 74.208.236.106:443 crosspointefellowship.church tcp
US 74.208.236.106:443 crosspointefellowship.church tcp
US 8.8.8.8:53 newyou.at udp
AT 81.19.159.78:443 newyou.at tcp
AT 81.19.159.78:443 newyou.at tcp
US 8.8.8.8:53 highlinesouthasc.com udp
US 104.21.81.149:443 highlinesouthasc.com tcp
US 8.8.8.8:53 delawarecorporatelaw.com udp
US 173.231.220.89:443 delawarecorporatelaw.com tcp
US 173.231.220.89:443 delawarecorporatelaw.com tcp
US 8.8.8.8:53 gratispresent.se udp
US 104.21.46.52:443 gratispresent.se tcp
US 8.8.8.8:53 spargel-kochen.de udp
DE 87.238.193.48:443 spargel-kochen.de tcp
DE 87.238.193.48:443 spargel-kochen.de tcp
US 8.8.8.8:53 smartypractice.com udp
US 8.8.8.8:53 musictreehouse.net udp
US 8.8.8.8:53 catholicmusicfest.com udp
US 208.91.197.195:443 catholicmusicfest.com tcp
US 208.91.197.195:443 catholicmusicfest.com tcp
US 8.8.8.8:53 jbbjw.com udp
US 172.65.190.172:443 jbbjw.com tcp
US 8.8.8.8:53 yousay.site udp
US 162.241.224.155:443 yousay.site tcp
US 162.241.224.155:443 yousay.site tcp
US 8.8.8.8:53 spectrmash.ru udp
RU 77.222.56.169:443 spectrmash.ru tcp
RU 77.222.56.169:443 spectrmash.ru tcp
US 8.8.8.8:53 triactis.com udp
FR 145.239.37.162:443 triactis.com tcp
FR 145.239.37.162:443 triactis.com tcp
US 8.8.8.8:53 peterstrobos.com udp
FR 213.186.33.2:443 peterstrobos.com tcp
FR 213.186.33.2:443 peterstrobos.com tcp
US 8.8.8.8:53 mepavex.nl udp
BE 217.21.184.250:443 mepavex.nl tcp
US 8.8.8.8:53 rimborsobancario.net udp
US 8.8.8.8:53 kindersitze-vergleich.de udp
DE 185.159.123.48:443 kindersitze-vergleich.de tcp
US 8.8.8.8:53 hashkasolutindo.com udp
US 8.8.8.8:53 onlybacklink.com udp
US 208.100.26.245:443 onlybacklink.com tcp
US 8.8.8.8:53 collaborativeclassroom.org udp
US 162.159.135.42:443 collaborativeclassroom.org tcp
US 162.159.135.42:443 collaborativeclassroom.org tcp
US 8.8.8.8:53 zzyjtsgls.com udp
US 8.8.8.8:53 drinkseed.com udp
US 192.185.20.95:443 drinkseed.com tcp
US 192.185.20.95:443 drinkseed.com tcp
US 8.8.8.8:53 tandartspraktijkhartjegroningen.nl udp
NL 89.31.58.92:443 tandartspraktijkhartjegroningen.nl tcp
NL 89.31.58.92:443 tandartspraktijkhartjegroningen.nl tcp
US 8.8.8.8:53 werkkring.nl udp
BE 83.217.86.218:443 werkkring.nl tcp
US 8.8.8.8:53 knowledgemuseumbd.com udp
US 8.8.8.8:53 elpa.se udp
SE 159.253.26.222:443 elpa.se tcp
US 8.8.8.8:53 www.elpa.se udp
SE 159.253.26.222:443 www.elpa.se tcp
US 8.8.8.8:53 globedivers.wordpress.com udp
US 192.0.78.12:443 globedivers.wordpress.com tcp
US 192.0.78.12:443 globedivers.wordpress.com tcp
US 8.8.8.8:53 cyntox.com udp
US 199.60.103.116:443 cyntox.com tcp
US 199.60.103.116:443 cyntox.com tcp
US 8.8.8.8:53 upmrkt.co udp
ZA 196.40.97.190:443 upmrkt.co tcp
ZA 196.40.97.190:443 upmrkt.co tcp
US 8.8.8.8:53 marchand-sloboda.com udp
US 8.8.8.8:53 vancouver-print.ca udp
US 24.38.41.117:443 vancouver-print.ca tcp
US 24.38.41.117:443 vancouver-print.ca tcp
US 8.8.8.8:53 makeitcount.at udp
DE 89.110.151.38:443 makeitcount.at tcp
DE 89.110.151.38:443 makeitcount.at tcp
US 8.8.8.8:53 ausair.com.au udp
US 8.8.8.8:53 mank.de udp
DE 176.52.247.15:443 mank.de tcp
DE 176.52.247.15:443 mank.de tcp
US 8.8.8.8:53 adultgamezone.com udp
LT 84.32.84.32:443 adultgamezone.com tcp
LT 84.32.84.32:443 adultgamezone.com tcp
US 8.8.8.8:53 wmiadmin.com udp
DE 185.53.177.52:443 wmiadmin.com tcp
DE 185.53.177.52:443 wmiadmin.com tcp
US 8.8.8.8:53 stampagrafica.es udp
ES 82.98.178.174:443 stampagrafica.es tcp
US 8.8.8.8:53 officehymy.com udp
JP 157.112.183.48:443 officehymy.com tcp
JP 157.112.183.48:443 officehymy.com tcp
US 8.8.8.8:53 biortaggivaldelsa.com udp
IT 185.221.175.252:443 biortaggivaldelsa.com tcp
IT 185.221.175.252:443 biortaggivaldelsa.com tcp
US 8.8.8.8:53 craigmccabe.fun udp
US 8.8.8.8:53 rafaut.com udp
FR 54.36.91.62:443 rafaut.com tcp
FR 54.36.91.62:443 rafaut.com tcp
US 8.8.8.8:53 norovirus-ratgeber.de udp
DE 85.10.214.209:443 norovirus-ratgeber.de tcp
US 8.8.8.8:53 moveonnews.com udp
US 8.8.8.8:53 dublikator.com udp
UA 185.68.16.210:443 dublikator.com tcp
US 8.8.8.8:53 rieed.de udp
US 8.8.8.8:53 mrsplans.net udp
US 100.24.208.97:443 mrsplans.net tcp
US 100.24.208.97:443 mrsplans.net tcp
US 8.8.8.8:53 tanzschule-kieber.de udp
FR 92.204.55.63:443 tanzschule-kieber.de tcp
FR 92.204.55.63:443 tanzschule-kieber.de tcp
US 8.8.8.8:53 ahouseforlease.com udp
US 8.8.8.8:53 anteniti.com udp
UA 185.104.45.128:443 anteniti.com tcp
US 8.8.8.8:53 selfoutlet.com udp
FR 146.59.209.152:443 selfoutlet.com tcp
FR 146.59.209.152:443 selfoutlet.com tcp
US 8.8.8.8:53 alhashem.net udp
US 199.59.243.227:443 alhashem.net tcp
US 199.59.243.227:443 alhashem.net tcp
US 8.8.8.8:53 hebkft.hu udp
HU 185.33.55.101:443 hebkft.hu tcp
HU 185.33.55.101:443 hebkft.hu tcp
US 8.8.8.8:53 wraithco.com udp
US 216.55.169.119:443 wraithco.com tcp
US 8.8.8.8:53 argos.wityu.fund udp
US 141.193.213.10:443 argos.wityu.fund tcp
US 141.193.213.10:443 argos.wityu.fund tcp
US 8.8.8.8:53 broseller.com udp
DE 89.31.143.90:443 broseller.com tcp
DE 89.31.143.90:443 broseller.com tcp
US 8.8.8.8:53 bildungsunderlebnis.haus udp
DE 5.35.226.24:443 bildungsunderlebnis.haus tcp
DE 5.35.226.24:443 bildungsunderlebnis.haus tcp
US 8.8.8.8:53 antiaginghealthbenefits.com udp
US 8.8.8.8:53 littlebird.salon udp
US 199.59.243.227:443 littlebird.salon tcp
US 199.59.243.227:443 littlebird.salon tcp
US 8.8.8.8:53 danholzmann.com udp
DE 185.181.104.242:443 danholzmann.com tcp
US 8.8.8.8:53 turkcaparbariatrics.com udp
TR 213.159.7.167:443 turkcaparbariatrics.com tcp
TR 213.159.7.167:443 turkcaparbariatrics.com tcp
US 8.8.8.8:53 muamuadolls.com udp
US 104.21.53.217:443 muamuadolls.com tcp
US 8.8.8.8:53 minipara.com udp
US 8.8.8.8:53 stoneys.ch udp
CH 217.26.48.101:443 stoneys.ch tcp
CH 217.26.48.101:443 stoneys.ch tcp
US 8.8.8.8:53 schlafsack-test.net udp
US 8.8.8.8:53 rehabilitationcentersinhouston.net udp
US 8.8.8.8:53 fannmedias.com udp
US 8.8.8.8:53 resortmtn.com udp
US 3.33.251.168:443 resortmtn.com tcp
US 3.33.251.168:443 resortmtn.com tcp
US 192.124.249.84:443 dlc.berlin tcp
US 192.124.249.84:443 dlc.berlin tcp
US 8.8.8.8:53 mbxvii.com udp
US 3.33.130.190:443 mbxvii.com tcp
US 3.33.130.190:443 mbxvii.com tcp
US 8.8.8.8:53 chavesdoareeiro.com udp
US 8.8.8.8:53 bouncingbonanza.com udp
US 8.8.8.8:53 bouncingbonanza.com udp
US 107.163.254.247:443 bouncingbonanza.com tcp
US 8.8.8.8:53 digivod.de udp
BE 185.175.196.88:443 digivod.de tcp
US 8.8.8.8:53 judithjansen.com udp
NL 185.135.241.57:443 judithjansen.com tcp
NL 185.135.241.57:443 judithjansen.com tcp
US 8.8.8.8:53 trackyourconstruction.com udp
US 8.8.8.8:53 mountaintoptinyhomes.com udp
US 172.232.25.148:443 mountaintoptinyhomes.com tcp
US 172.232.25.148:443 mountaintoptinyhomes.com tcp
US 8.8.8.8:53 cleliaekiko.online udp
GB 188.240.191.167:443 shiresresidential.com tcp
GB 188.240.191.167:443 shiresresidential.com tcp
US 8.8.8.8:53 austinlchurch.com udp
US 75.2.70.75:443 austinlchurch.com tcp
US 75.2.70.75:443 austinlchurch.com tcp
US 8.8.8.8:53 epwritescom.wordpress.com udp
US 192.0.78.13:443 epwritescom.wordpress.com tcp
US 192.0.78.13:443 epwritescom.wordpress.com tcp
US 8.8.8.8:53 deltacleta.cat udp
ES 185.66.41.210:443 deltacleta.cat tcp
ES 185.66.41.210:443 deltacleta.cat tcp
US 75.2.37.224:443 blogdecachorros.com tcp
US 75.2.37.224:443 blogdecachorros.com tcp
US 8.8.8.8:53 puertamatic.es udp
DE 144.76.199.3:443 puertamatic.es tcp
US 8.8.8.8:53 portoesdofarrobo.com udp
US 8.8.8.8:53 devok.info udp
US 104.21.16.1:443 devok.info tcp
US 8.8.8.8:53 ahoravision.com udp
US 172.67.169.148:443 ahoravision.com tcp
US 8.8.8.8:53 yaioa.com udp
SG 139.99.120.6:443 yaioa.com tcp
US 8.8.8.8:53 maestrojumpinmusic.com udp
SG 139.99.120.6:443 maestrojumpinmusic.com tcp
US 8.8.8.8:53 marathonerpaolo.com udp
US 199.59.243.227:443 marathonerpaolo.com tcp
US 199.59.243.227:443 marathonerpaolo.com tcp
US 8.8.8.8:53 coastalbridgeadvisors.com udp
US 70.32.23.95:443 coastalbridgeadvisors.com tcp
US 70.32.23.95:443 coastalbridgeadvisors.com tcp
US 8.8.8.8:53 irishmachineryauctions.com udp
NL 35.214.182.106:443 irishmachineryauctions.com tcp
NL 35.214.182.106:443 irishmachineryauctions.com tcp
US 8.8.8.8:53 ctrler.cn udp
HK 119.28.54.134:443 ctrler.cn tcp
HK 119.28.54.134:443 ctrler.cn tcp
US 8.8.8.8:53 mir-na-iznanku.com udp
UA 185.68.16.177:443 mir-na-iznanku.com tcp
US 8.8.8.8:53 daklesa.de udp
DE 178.250.15.192:443 daklesa.de tcp
DE 178.250.15.192:443 daklesa.de tcp
US 8.8.8.8:53 forestlakeuca.org.au udp
US 8.8.8.8:53 pmcimpact.com udp
US 8.8.8.8:53 leeuwardenstudentcity.nl udp
FR 15.236.230.5:443 leeuwardenstudentcity.nl tcp
FR 15.236.230.5:443 leeuwardenstudentcity.nl tcp
US 8.8.8.8:53 deschl.net udp
DE 178.63.103.80:443 deschl.net tcp
DE 178.63.103.80:443 deschl.net tcp
US 8.8.8.8:53 faizanullah.com udp
AE 193.123.91.179:443 faizanullah.com tcp
AE 193.123.91.179:443 faizanullah.com tcp
US 8.8.8.8:53 bookspeopleplaces.com udp
US 3.215.100.79:443 bookspeopleplaces.com tcp
US 3.215.100.79:443 bookspeopleplaces.com tcp
US 8.8.8.8:53 pelorus.group udp
US 3.33.130.190:443 pelorus.group tcp
US 3.33.130.190:443 pelorus.group tcp
US 8.8.8.8:53 zonamovie21.net udp
US 8.8.8.8:53 haremnick.com udp
US 172.232.25.148:443 haremnick.com tcp
US 172.232.25.148:443 haremnick.com tcp
US 8.8.8.8:53 jvanvlietdichter.nl udp
BE 188.208.37.47:443 jvanvlietdichter.nl tcp
US 8.8.8.8:53 dr-tremel-rednitzhembach.de udp
DE 159.69.74.75:443 dr-tremel-rednitzhembach.de tcp
DE 159.69.74.75:443 dr-tremel-rednitzhembach.de tcp
US 8.8.8.8:53 you-bysia.com.au udp
AU 116.90.53.15:443 you-bysia.com.au tcp
US 8.8.8.8:53 youbysia.com.au udp
US 198.49.23.145:443 youbysia.com.au tcp
US 198.49.23.145:443 youbysia.com.au tcp
US 8.8.8.8:53 drugdevice.org udp
US 8.8.8.8:53 wien-mitte.co.at udp
DE 136.243.147.81:443 wien-mitte.co.at tcp
US 8.8.8.8:53 andersongilmour.co.uk udp
US 8.8.8.8:53 microcirc.net udp
US 18.209.127.182:443 microcirc.net tcp
US 8.8.8.8:53 jusibe.com udp
US 172.67.192.199:443 jusibe.com tcp
US 8.8.8.8:53 101gowrie.com udp
US 8.8.8.8:53 smithmediastrategies.com udp
US 50.87.170.173:443 smithmediastrategies.com tcp
US 50.87.170.173:443 smithmediastrategies.com tcp
US 8.8.8.8:53 slimani.net udp
US 69.163.178.50:443 slimani.net tcp
US 69.163.178.50:443 slimani.net tcp
US 8.8.8.8:53 urmasiimariiuniri.ro udp
RO 81.181.102.24:443 urmasiimariiuniri.ro tcp
RO 81.181.102.24:443 urmasiimariiuniri.ro tcp
US 8.8.8.8:53 romeguidedvisit.com udp
NL 35.214.139.14:443 romeguidedvisit.com tcp
NL 35.214.139.14:443 romeguidedvisit.com tcp
US 8.8.8.8:53 mylovelybluesky.com udp
MY 103.130.153.151:443 mylovelybluesky.com tcp
MY 103.130.153.151:443 mylovelybluesky.com tcp
DK 46.30.213.127:443 jorgobe.at tcp
DK 46.30.213.127:443 jorgobe.at tcp
US 8.8.8.8:53 agence-referencement-naturel-geneve.net udp
US 8.8.8.8:53 dareckleyministries.com udp
CA 54.39.143.67:443 dareckleyministries.com tcp
CA 54.39.143.67:443 dareckleyministries.com tcp
US 8.8.8.8:53 ateliergamila.com udp
US 8.8.8.8:53 fransespiegels.nl udp
CA 23.227.38.65:443 fransespiegels.nl tcp
CA 23.227.38.65:443 fransespiegels.nl tcp
US 8.8.8.8:53 oceanastudios.com udp
US 192.124.249.107:443 oceanastudios.com tcp
US 192.124.249.107:443 oceanastudios.com tcp
US 8.8.8.8:53 craftleathermnl.com udp
US 8.8.8.8:53 admos-gleitlager.de udp
DE 81.169.145.149:443 admos-gleitlager.de tcp
DE 81.169.145.149:443 admos-gleitlager.de tcp
US 8.8.8.8:53 otto-bollmann.de udp
DE 87.230.43.198:443 otto-bollmann.de tcp
US 8.8.8.8:53 jiloc.com udp
GB 169.197.114.138:443 jiloc.com tcp
GB 169.197.114.138:443 jiloc.com tcp
US 8.8.8.8:53 vannesteconstruct.be udp
DK 46.30.213.139:443 vannesteconstruct.be tcp
DK 46.30.213.139:443 vannesteconstruct.be tcp
US 8.8.8.8:53 cerebralforce.net udp
US 8.8.8.8:53 makeflowers.ru udp
RU 23.111.202.89:443 makeflowers.ru tcp
RU 23.111.202.89:443 makeflowers.ru tcp
US 8.8.8.8:53 i-trust.dk udp
DK 94.231.106.19:443 i-trust.dk tcp
DK 94.231.106.19:443 i-trust.dk tcp
US 8.8.8.8:53 drfoyle.com udp
US 76.223.54.146:443 drfoyle.com tcp
US 76.223.54.146:443 drfoyle.com tcp
US 8.8.8.8:53 ccpbroadband.com udp
US 35.212.37.164:443 ccpbroadband.com tcp
US 35.212.37.164:443 ccpbroadband.com tcp
US 8.8.8.8:53 imadarchid.com udp
US 104.21.32.72:443 imadarchid.com tcp
US 8.8.8.8:53 psa-sec.de udp
US 172.67.72.178:443 psa-sec.de tcp
US 8.8.8.8:53 lapmangfpt.info.vn udp
VN 202.92.4.5:443 lapmangfpt.info.vn tcp
US 8.8.8.8:53 zimmerei-deboer.de udp
DE 91.184.32.130:443 zimmerei-deboer.de tcp
DE 91.184.32.130:443 zimmerei-deboer.de tcp
US 8.8.8.8:53 vetapharma.fr udp
FR 51.91.223.60:443 vetapharma.fr tcp
US 8.8.8.8:53 seminoc.com udp
BE 34.77.225.87:443 seminoc.com tcp
BE 34.77.225.87:443 seminoc.com tcp
US 8.8.8.8:53 csgospeltips.se udp
US 8.8.8.8:53 boisehosting.net udp
US 216.250.122.17:443 boisehosting.net tcp
US 216.250.122.17:443 boisehosting.net tcp
LT 185.5.53.29:443 ilive.lt tcp
LT 185.5.53.29:443 ilive.lt tcp
US 8.8.8.8:53 toponlinecasinosuk.co.uk udp
US 172.67.160.188:443 toponlinecasinosuk.co.uk tcp
US 8.8.8.8:53 botanicinnovations.com udp
US 141.193.213.20:443 botanicinnovations.com tcp
US 141.193.213.20:443 botanicinnovations.com tcp
US 76.223.54.146:443 drfoyle.com tcp
US 76.223.54.146:443 drfoyle.com tcp
US 8.8.8.8:53 coding-machine.com udp
FR 164.132.235.17:443 coding-machine.com tcp
FR 164.132.235.17:443 coding-machine.com tcp
US 8.8.8.8:53 sachnendoc.com udp
SG 172.96.191.104:443 sachnendoc.com tcp
SG 172.96.191.104:443 sachnendoc.com tcp
US 8.8.8.8:53 xn--fnsterputssollentuna-39b.se udp
SE 93.188.2.51:443 xn--fnsterputssollentuna-39b.se tcp
SE 93.188.2.51:443 xn--fnsterputssollentuna-39b.se tcp
US 8.8.8.8:53 hairstylesnow.site udp
US 8.8.8.8:53 worldhealthbasicinfo.com udp
US 8.8.8.8:53 mediaclan.info udp
AT 94.136.22.200:443 mediaclan.info tcp
AT 94.136.22.200:443 mediaclan.info tcp
US 8.8.8.8:53 comparatif-lave-linge.fr udp
US 8.8.8.8:53 xn--thucmctc-13a1357egba.com udp
US 8.8.8.8:53 gantungankunciakrilikbandung.com udp
US 8.8.8.8:53 pferdebiester.de udp
DE 80.237.130.138:443 pferdebiester.de tcp
US 8.8.8.8:53 mytechnoway.com udp
US 8.8.8.8:53 corendonhotels.com udp
NL 136.144.215.188:443 corendonhotels.com tcp
US 8.8.8.8:53 www.corendonhotels.com udp
NL 136.144.215.188:443 www.corendonhotels.com tcp
US 8.8.8.8:53 perbudget.com udp
US 3.33.251.168:443 perbudget.com tcp
US 3.33.251.168:443 perbudget.com tcp
US 8.8.8.8:53 smhydro.com.pl udp
PL 89.161.222.203:443 smhydro.com.pl tcp
PL 89.161.222.203:443 smhydro.com.pl tcp
US 8.8.8.8:53 ventti.com.ar udp
US 8.8.8.8:53 parkcf.nl udp
DE 18.156.169.48:443 parkcf.nl tcp
DE 18.156.169.48:443 parkcf.nl tcp
US 8.8.8.8:53 datacenters-in-europe.com udp
LU 188.93.172.5:443 datacenters-in-europe.com tcp
LU 188.93.172.5:443 datacenters-in-europe.com tcp
US 8.8.8.8:53 kadesignandbuild.co.uk udp
US 104.21.64.1:443 kadesignandbuild.co.uk tcp
US 8.8.8.8:53 autodujos.lt udp
LT 79.98.28.30:443 autodujos.lt tcp
LT 79.98.28.30:443 autodujos.lt tcp
US 8.8.8.8:53 2ekeus.nl udp
NL 62.212.88.194:443 2ekeus.nl tcp
US 8.8.8.8:53 carolinepenn.com udp
GB 77.68.103.74:443 carolinepenn.com tcp
GB 77.68.103.74:443 carolinepenn.com tcp
US 8.8.8.8:53 birnam-wood.com udp
AU 202.74.68.188:443 birnam-wood.com tcp
US 8.8.8.8:53 jameskibbie.com udp
CA 66.70.219.208:443 jameskibbie.com tcp
CA 66.70.219.208:443 jameskibbie.com tcp
US 8.8.8.8:53 tetinfo.in udp
US 172.67.211.14:443 tetinfo.in tcp
US 8.8.8.8:53 www.tetinfo.in udp
US 104.21.45.69:443 www.tetinfo.in tcp
US 8.8.8.8:53 greenfieldoptimaldentalcare.com udp
US 104.21.85.172:443 greenfieldoptimaldentalcare.com tcp
US 8.8.8.8:53 www.kozykennelsjoliet.com udp
US 172.67.129.41:443 www.kozykennelsjoliet.com tcp
US 8.8.8.8:53 insidegarage.pl udp
PL 194.181.228.90:443 insidegarage.pl tcp
PL 194.181.228.90:443 insidegarage.pl tcp
US 8.8.8.8:53 euro-trend.pl udp
PL 185.238.73.63:443 euro-trend.pl tcp
PL 185.238.73.63:443 euro-trend.pl tcp
US 8.8.8.8:53 carlosja.com udp
GB 18.172.88.84:443 carlosja.com tcp
GB 18.172.88.84:443 carlosja.com tcp
US 8.8.8.8:53 analiticapublica.es udp
US 104.21.43.186:443 analiticapublica.es tcp
US 8.8.8.8:53 sergiojimenez.net udp
ES 91.146.101.136:443 sergiojimenez.net tcp
ES 91.146.101.136:443 sergiojimenez.net tcp
ES 31.47.78.30:443 aprepol.com tcp
ES 31.47.78.30:443 aprepol.com tcp
US 8.8.8.8:53 pmc-services.de udp
DE 188.68.47.165:443 pmc-services.de tcp
DE 188.68.47.165:443 pmc-services.de tcp
US 8.8.8.8:53 notsilentmd.org udp
US 8.8.8.8:53 irinaverwer.com udp
NL 31.204.147.5:443 irinaverwer.com tcp
NL 31.204.147.5:443 irinaverwer.com tcp
US 8.8.8.8:53 ki-lowroermond.nl udp
NL 141.138.169.222:443 ki-lowroermond.nl tcp
NL 141.138.169.222:443 ki-lowroermond.nl tcp
US 8.8.8.8:53 expandet.dk udp
US 104.21.112.1:443 expandet.dk tcp
US 8.8.8.8:53 newstap.com.ng udp
US 104.21.59.24:443 newstap.com.ng tcp
US 8.8.8.8:53 backstreetpub.com udp
US 3.19.116.195:443 backstreetpub.com tcp
US 3.18.7.81:443 backstreetpub.com tcp
US 8.8.8.8:53 bbsmobler.se udp
US 99.83.129.195:443 bbsmobler.se tcp
US 99.83.129.195:443 bbsmobler.se tcp
US 8.8.8.8:53 victoriousfestival.co.uk udp
GB 35.177.75.40:443 victoriousfestival.co.uk tcp
GB 35.177.75.40:443 victoriousfestival.co.uk tcp
US 8.8.8.8:53 theshungiteexperience.com.au udp
US 192.124.249.65:443 theshungiteexperience.com.au tcp
US 192.124.249.65:443 theshungiteexperience.com.au tcp
US 8.8.8.8:53 phantastyk.com udp
HK 206.119.6.195:443 phantastyk.com tcp
US 8.8.8.8:53 iyengaryogacharlotte.com udp
US 65.60.36.230:443 iyengaryogacharlotte.com tcp
US 65.60.36.230:443 iyengaryogacharlotte.com tcp
US 8.8.8.8:53 creamery201.com udp
US 185.230.63.171:443 creamery201.com tcp
US 185.230.63.171:443 creamery201.com tcp
US 8.8.8.8:53 xltyu.com udp
CN 43.143.202.221:443 xltyu.com tcp
US 8.8.8.8:53 employeesurveys.com udp
US 209.17.116.163:443 employeesurveys.com tcp
US 209.17.116.163:443 employeesurveys.com tcp
US 8.8.8.8:53 humanityplus.org udp
US 198.49.23.145:443 humanityplus.org tcp
US 198.49.23.145:443 humanityplus.org tcp
US 8.8.8.8:53 liikelataamo.fi udp
US 34.149.81.128:443 liikelataamo.fi tcp
US 34.149.81.128:443 liikelataamo.fi tcp
US 8.8.8.8:53 advokathuset.dk udp
US 162.159.140.127:443 advokathuset.dk tcp
US 162.159.140.127:443 advokathuset.dk tcp
US 8.8.8.8:53 sofavietxinh.com udp
US 172.67.146.138:443 sofavietxinh.com tcp
US 172.67.146.138:443 sofavietxinh.com tcp
US 8.8.8.8:53 katketytaanet.fi udp
US 8.8.8.8:53 comarenterprises.com udp
FR 54.36.91.62:443 apprendrelaudit.com tcp
FR 54.36.91.62:443 apprendrelaudit.com tcp
US 8.8.8.8:53 pixelarttees.com udp
US 54.82.172.55:443 pixelarttees.com tcp
US 54.205.192.227:443 pixelarttees.com tcp
US 8.8.8.8:53 celularity.com udp
US 141.193.213.10:443 celularity.com tcp
US 141.193.213.10:443 celularity.com tcp
US 8.8.8.8:53 thee.network udp
US 13.248.169.48:443 thee.network tcp
US 13.248.169.48:443 thee.network tcp
US 8.8.8.8:53 blacksirius.de udp
DE 185.185.24.227:443 blacksirius.de tcp
US 8.8.8.8:53 sporthamper.com udp
CA 23.227.38.32:443 sporthamper.com tcp
CA 23.227.38.32:443 sporthamper.com tcp
US 8.8.8.8:53 heidelbergartstudio.gallery udp
US 8.8.8.8:53 beautychance.se udp
US 8.8.8.8:53 bsaship.com udp
NO 194.63.249.219:443 bsaship.com tcp
NO 194.63.249.219:443 bsaship.com tcp
US 8.8.8.8:53 cortec-neuro.com udp
DE 217.160.0.189:443 cortec-neuro.com tcp
DE 217.160.0.189:443 cortec-neuro.com tcp
US 8.8.8.8:53 modelmaking.nl udp
NL 88.214.28.139:443 modelmaking.nl tcp
US 8.8.8.8:53 noixdecocom.fr udp
FR 195.154.181.211:443 noixdecocom.fr tcp
FR 195.154.181.211:443 noixdecocom.fr tcp
US 8.8.8.8:53 associationanalytics.com udp
US 141.193.213.20:443 associationanalytics.com tcp
US 141.193.213.20:443 associationanalytics.com tcp
US 8.8.8.8:53 elimchan.com udp
NL 141.138.168.151:443 elimchan.com tcp
NL 141.138.168.151:443 elimchan.com tcp
US 8.8.8.8:53 i-arslan.de udp
DE 85.13.163.93:443 i-arslan.de tcp
DE 85.13.163.93:443 i-arslan.de tcp
US 8.8.8.8:53 dsl-ip.de udp
DE 185.242.112.149:443 dsl-ip.de tcp
DE 185.242.112.149:443 dsl-ip.de tcp
US 8.8.8.8:53 tuuliautio.fi udp
FI 5.44.245.22:443 tuuliautio.fi tcp
US 8.8.8.8:53 bigasgrup.com udp
DE 207.180.235.18:443 bigasgrup.com tcp
DE 207.180.235.18:443 bigasgrup.com tcp
US 8.8.8.8:53 upplandsspar.se udp
SE 46.16.236.26:443 upplandsspar.se tcp
SE 46.16.236.26:443 upplandsspar.se tcp
US 76.223.54.146:443 thee.network tcp
US 76.223.54.146:443 thee.network tcp
US 8.8.8.8:53 cafemattmeera.com udp
US 8.8.8.8:53 notmissingout.com udp
US 185.230.63.171:443 notmissingout.com tcp
US 185.230.63.171:443 notmissingout.com tcp
US 8.8.8.8:53 triggi.de udp
BE 185.76.237.177:443 triggi.de tcp
US 8.8.8.8:53 skanah.com udp
LU 198.251.89.144:443 skanah.com tcp
LU 198.251.89.144:443 skanah.com tcp
US 8.8.8.8:53 courteney-cox.net udp
US 8.8.8.8:53 tulsawaterheaterinstallation.com udp
US 8.8.8.8:53 vloeren-nu.nl udp
NL 109.237.209.175:443 vloeren-nu.nl tcp
NL 109.237.209.175:443 vloeren-nu.nl tcp
US 8.8.8.8:53 twohourswithlena.wordpress.com udp
US 192.0.78.12:443 twohourswithlena.wordpress.com tcp
US 192.0.78.12:443 twohourswithlena.wordpress.com tcp
US 8.8.8.8:53 rocketccw.com udp
US 198.49.23.145:443 rocketccw.com tcp
US 198.49.23.145:443 rocketccw.com tcp
US 8.8.8.8:53 luxurytv.jp udp
US 8.8.8.8:53 quickyfunds.com udp
US 8.8.8.8:53 gemeentehetkompas.nl udp
US 8.8.8.8:53 simpkinsedwards.co.uk udp
US 172.67.174.169:443 simpkinsedwards.co.uk tcp
US 8.8.8.8:53 www.simpkinsedwards.co.uk udp
US 172.67.174.169:443 www.simpkinsedwards.co.uk tcp
US 8.8.8.8:53 malychanieruchomoscipremium.com udp
PL 79.96.76.244:443 malychanieruchomoscipremium.com tcp
PL 79.96.76.244:443 malychanieruchomoscipremium.com tcp
US 8.8.8.8:53 shonacox.com udp
US 162.241.123.12:443 shonacox.com tcp
US 162.241.123.12:443 shonacox.com tcp
US 8.8.8.8:53 hotelsolbh.com.br udp
US 8.8.8.8:53 artige.com udp
NL 185.10.159.69:443 artige.com tcp
NL 185.10.159.69:443 artige.com tcp
US 8.8.8.8:53 otsu-bon.com udp
US 8.8.8.8:53 gasolspecialisten.se udp
SE 31.193.252.186:443 gasolspecialisten.se tcp
SE 31.193.252.186:443 gasolspecialisten.se tcp
US 8.8.8.8:53 baronloan.org udp
US 162.159.134.42:443 baronloan.org tcp
US 162.159.134.42:443 baronloan.org tcp
US 8.8.8.8:53 caffeinternet.it udp
US 8.8.8.8:53 milestoneshows.com udp
US 208.90.68.80:443 milestoneshows.com tcp
US 208.90.68.80:443 milestoneshows.com tcp
US 8.8.8.8:53 vyhino-zhulebino-24.ru udp
US 8.8.8.8:53 brigitte-erler.com udp
US 8.8.8.8:53 coursio.com udp
NL 64.227.72.13:443 coursio.com tcp
NL 64.227.72.13:443 coursio.com tcp
US 8.8.8.8:53 fundaciongregal.org udp
ES 178.23.56.80:443 fundaciongregal.org tcp
ES 178.23.56.80:443 fundaciongregal.org tcp
US 8.8.8.8:53 qualitus.com udp
DE 136.243.1.43:443 qualitus.com tcp
DE 136.243.1.43:443 qualitus.com tcp
US 8.8.8.8:53 dnepr-beskid.com.ua udp
US 8.8.8.8:53 mirjamholleman.nl udp
US 8.8.8.8:53 zervicethai.co.th udp
US 8.8.8.8:53 kalkulator-oszczednosci.pl udp
PL 54.38.49.27:443 kalkulator-oszczednosci.pl tcp
PL 54.38.49.27:443 kalkulator-oszczednosci.pl tcp
US 8.8.8.8:53 vermoote.de udp
DE 85.215.214.106:443 vermoote.de tcp
DE 85.215.214.106:443 vermoote.de tcp
US 8.8.8.8:53 restaurantesszimmer.de udp
DE 91.107.239.23:443 restaurantesszimmer.de tcp
DE 91.107.239.23:443 restaurantesszimmer.de tcp
US 8.8.8.8:53 frontierweldingllc.com udp
US 216.152.143.240:443 frontierweldingllc.com tcp
US 216.152.143.240:443 frontierweldingllc.com tcp
US 8.8.8.8:53 tradiematepro.com.au udp
AU 119.148.70.243:443 tradiematepro.com.au tcp
AU 119.148.70.243:443 tradiematepro.com.au tcp
US 8.8.8.8:53 macabaneaupaysflechois.com udp
US 8.8.8.8:53 n1-headache.com udp
FR 79.137.75.185:443 n1-headache.com tcp
FR 79.137.75.185:443 n1-headache.com tcp
US 8.8.8.8:53 southeasternacademyofprosthodontics.org udp
US 8.8.8.8:53 familypark40.com udp
FR 213.186.33.24:443 familypark40.com tcp
FR 213.186.33.24:443 familypark40.com tcp
US 8.8.8.8:53 sportsmassoren.com udp
DK 94.231.106.24:443 sportsmassoren.com tcp
DK 94.231.106.24:443 sportsmassoren.com tcp
US 8.8.8.8:53 basisschooldezonnewijzer.nl udp
NL 85.10.159.174:443 basisschooldezonnewijzer.nl tcp
US 8.8.8.8:53 paymybill.guru udp
US 192.124.249.119:443 paymybill.guru tcp
US 192.124.249.119:443 paymybill.guru tcp
US 8.8.8.8:53 syndikat-asphaltfieber.de udp
FR 92.204.236.49:443 syndikat-asphaltfieber.de tcp
FR 92.204.236.49:443 syndikat-asphaltfieber.de tcp
US 8.8.8.8:53 greenpark.ch udp
CH 149.126.6.52:443 greenpark.ch tcp
CH 149.126.6.52:443 greenpark.ch tcp
US 8.8.8.8:53 psc.de udp
DE 185.146.238.134:443 psc.de tcp
US 8.8.8.8:53 corona-handles.com udp
FR 188.165.23.19:443 corona-handles.com tcp
FR 188.165.23.19:443 corona-handles.com tcp
US 8.8.8.8:53 higadograsoweb.com udp
US 8.8.8.8:53 pickanose.com udp
US 104.21.58.81:443 pickanose.com tcp
US 8.8.8.8:53 tophumanservicescourses.com udp
US 107.178.223.183:443 tophumanservicescourses.com tcp
US 8.8.8.8:53 daniel-akermann-architektur-und-planung.ch udp
CH 217.26.52.17:443 daniel-akermann-architektur-und-planung.ch tcp
CH 217.26.52.17:443 daniel-akermann-architektur-und-planung.ch tcp
US 8.8.8.8:53 sportverein-tambach.de udp
US 172.67.183.39:443 sportverein-tambach.de tcp
US 8.8.8.8:53 instatron.net udp
US 8.8.8.8:53 smogathon.com udp
FR 178.32.149.185:443 smogathon.com tcp
FR 178.32.149.185:443 smogathon.com tcp
ES 82.223.39.41:443 fotoideaymedia.es tcp
US 8.8.8.8:53 roygolden.com udp
US 50.16.12.56:443 roygolden.com tcp
US 8.8.8.8:53 blumenhof-wegleitner.at udp
AT 81.19.159.57:443 blumenhof-wegleitner.at tcp
AT 81.19.159.57:443 blumenhof-wegleitner.at tcp
US 8.8.8.8:53 oldschoolfun.net udp
NL 103.13.210.239:443 oldschoolfun.net tcp
NL 103.13.210.239:443 oldschoolfun.net tcp
US 8.8.8.8:53 sweering.fr udp
FR 2.15.210.106:443 sweering.fr tcp
FR 2.15.210.106:443 sweering.fr tcp
US 8.8.8.8:53 enovos.de udp
DE 185.175.199.0:443 enovos.de tcp
US 8.8.8.8:53 withahmed.com udp
DE 139.162.191.157:443 withahmed.com tcp
DE 139.162.191.157:443 withahmed.com tcp
US 8.8.8.8:53 cimanchesterescorts.co.uk udp
US 104.21.0.184:443 cimanchesterescorts.co.uk tcp
US 8.8.8.8:53 www.cimanchesterescorts.co.uk udp
US 172.67.128.48:443 www.cimanchesterescorts.co.uk tcp
US 172.67.128.48:443 www.cimanchesterescorts.co.uk tcp
US 8.8.8.8:53 alysonhoward.com udp
US 172.67.195.179:443 alysonhoward.com tcp
US 8.8.8.8:53 mank.de udp
DE 176.52.247.15:443 mank.de tcp
DE 176.52.247.15:443 mank.de tcp
US 8.8.8.8:53 transportesycementoshidalgo.es udp
ES 185.232.41.243:443 transportesycementoshidalgo.es tcp
US 8.8.8.8:53 wolf-glas-und-kunst.de udp
DE 5.44.111.37:443 wolf-glas-und-kunst.de tcp
DE 5.44.111.37:443 wolf-glas-und-kunst.de tcp
US 8.8.8.8:53 webhostingsrbija.rs udp
US 172.67.142.216:443 webhostingsrbija.rs tcp
US 8.8.8.8:53 manifestinglab.com udp
US 162.159.135.42:443 manifestinglab.com tcp
US 162.159.135.42:443 manifestinglab.com tcp
US 8.8.8.8:53 nakupunafoundation.org udp
US 141.193.213.11:443 nakupunafoundation.org tcp
US 141.193.213.11:443 nakupunafoundation.org tcp
US 8.8.8.8:53 fitnessbazaar.com udp
US 8.8.8.8:53 alfa-stroy72.com udp
US 8.8.8.8:53 denovofoodsgroup.com udp
US 8.8.8.8:53 bloggyboulga.net udp
FR 185.246.44.131:443 bloggyboulga.net tcp
FR 185.246.44.131:443 bloggyboulga.net tcp
US 8.8.8.8:53 pointos.com udp
US 166.62.108.36:443 pointos.com tcp
US 166.62.108.36:443 pointos.com tcp
US 8.8.8.8:53 tastewilliamsburg.com udp
US 72.52.224.19:443 tastewilliamsburg.com tcp
US 72.52.224.19:443 tastewilliamsburg.com tcp
US 8.8.8.8:53 craigvalentineacademy.com udp
US 35.215.125.133:443 craigvalentineacademy.com tcp
US 35.215.125.133:443 craigvalentineacademy.com tcp
US 8.8.8.8:53 nijaplay.com udp
US 8.8.8.8:53 mousepad-direkt.de udp
FR 5.175.14.15:443 mousepad-direkt.de tcp
FR 5.175.14.15:443 mousepad-direkt.de tcp
US 8.8.8.8:53 wacochamber.com udp
US 216.128.142.183:443 wacochamber.com tcp
US 216.128.142.183:443 wacochamber.com tcp
US 8.8.8.8:53 liveottelut.com udp
US 172.67.155.110:443 liveottelut.com tcp
US 8.8.8.8:53 www.bestcasino.com udp
US 172.67.131.75:443 www.bestcasino.com tcp
US 172.67.131.75:443 www.bestcasino.com tcp
US 8.8.8.8:53 art2gointerieurprojecten.nl udp
NL 37.72.99.133:443 art2gointerieurprojecten.nl tcp
NL 37.72.99.133:443 art2gointerieurprojecten.nl tcp
US 8.8.8.8:53 gmto.fr udp
FR 213.186.33.40:443 gmto.fr tcp
FR 213.186.33.40:443 gmto.fr tcp
US 8.8.8.8:53 todocaracoles.com udp
US 8.8.8.8:53 ampisolabergeggi.it udp
FR 51.178.206.226:443 ampisolabergeggi.it tcp
FR 51.178.206.226:443 ampisolabergeggi.it tcp
US 8.8.8.8:53 westdeptfordbuyrite.com udp
US 104.16.23.78:443 westdeptfordbuyrite.com tcp
US 8.8.8.8:53 digi-talents.com udp
ES 46.226.40.217:443 digi-talents.com tcp
ES 46.226.40.217:443 digi-talents.com tcp
US 8.8.8.8:53 flexicloud.hk udp
US 8.8.8.8:53 highimpactoutdoors.net udp
US 165.140.69.88:443 highimpactoutdoors.net tcp
US 165.140.69.88:443 highimpactoutdoors.net tcp
US 8.8.8.8:53 parking.netgateway.eu udp
DE 91.210.226.175:443 parking.netgateway.eu tcp
DE 91.210.226.175:443 parking.netgateway.eu tcp
US 8.8.8.8:53 corelifenutrition.com udp
US 8.8.8.8:53 profectis.de udp
DE 87.118.76.247:443 profectis.de tcp
US 15.197.225.128:443 perbudget.com tcp
US 15.197.225.128:443 perbudget.com tcp
US 8.8.8.8:53 fotoscondron.com udp
ES 217.76.156.252:443 fotoscondron.com tcp
US 8.8.8.8:53 richard-felix.co.uk udp
GB 185.199.220.79:443 richard-felix.co.uk tcp
GB 185.199.220.79:443 richard-felix.co.uk tcp
US 8.8.8.8:53 erstatningsadvokaterne.dk udp
DK 46.36.210.13:443 erstatningsadvokaterne.dk tcp
DK 46.36.210.13:443 erstatningsadvokaterne.dk tcp
US 8.8.8.8:53 stacyloeb.com udp
US 160.153.0.98:443 stacyloeb.com tcp
US 160.153.0.98:443 stacyloeb.com tcp
US 8.8.8.8:53 praxis-foerderdiagnostik.de udp
DE 206.81.31.151:443 praxis-foerderdiagnostik.de tcp
DE 206.81.31.151:443 praxis-foerderdiagnostik.de tcp
US 8.8.8.8:53 bargningavesta.se udp
LU 80.92.65.144:443 bargningavesta.se tcp
US 8.8.8.8:53 aco-media.nl udp
NL 46.182.180.88:443 aco-media.nl tcp
NL 46.182.180.88:443 aco-media.nl tcp
US 8.8.8.8:53 mymoneyforex.com udp
US 8.8.8.8:53 nsec.se udp
US 8.8.8.8:53 bhwlawfirm.com udp
US 141.193.213.10:443 bhwlawfirm.com tcp
US 141.193.213.10:443 bhwlawfirm.com tcp
US 8.8.8.8:53 navyfederalautooverseas.com udp
GB 95.101.143.89:443 navyfederalautooverseas.com tcp
GB 95.101.143.89:443 navyfederalautooverseas.com tcp
FR 213.186.33.24:443 familypark40.com tcp
FR 213.186.33.24:443 familypark40.com tcp
US 8.8.8.8:53 carrybrands.nl udp
NL 45.82.191.77:443 carrybrands.nl tcp
NL 45.82.191.77:443 carrybrands.nl tcp
US 8.8.8.8:53 juneauopioidworkgroup.org udp
US 8.8.8.8:53 lescomtesdemean.be udp
US 8.8.8.8:53 antenanavi.com udp
US 8.8.8.8:53 woodleyacademy.org udp
US 208.69.169.161:443 woodleyacademy.org tcp
US 8.8.8.8:53 torgbodenbollnas.se udp
DK 46.30.211.38:443 torgbodenbollnas.se tcp
DK 46.30.211.38:443 torgbodenbollnas.se tcp
US 8.8.8.8:53 verbisonline.com udp
US 8.8.8.8:53 educar.org udp
US 172.67.190.103:443 educar.org tcp
US 8.8.8.8:53 www.educar.org udp
US 104.21.36.81:443 www.educar.org tcp
US 104.21.36.81:443 www.educar.org tcp
US 104.21.36.81:443 www.educar.org tcp
US 104.21.36.81:443 www.educar.org tcp
US 104.21.36.81:443 www.educar.org tcp
US 104.21.36.81:443 www.educar.org tcp
US 104.21.36.81:443 www.educar.org tcp
US 104.21.36.81:443 www.educar.org tcp
US 104.21.36.81:443 www.educar.org tcp
US 8.8.8.8:53 ilso.net udp
US 8.8.8.8:53 4youbeautysalon.com udp
US 8.8.8.8:53 hushavefritid.dk udp
US 8.8.8.8:53 foryourhealth.live udp
US 72.52.178.23:443 foryourhealth.live tcp
US 72.52.178.23:443 foryourhealth.live tcp
US 104.21.62.250:443 mylolis.com tcp
US 104.21.62.250:443 mylolis.com tcp
US 8.8.8.8:53 gaiam.nl udp
DE 78.46.9.130:443 gaiam.nl tcp
DE 78.46.9.130:443 gaiam.nl tcp
US 8.8.8.8:53 bordercollie-nim.nl udp
US 8.8.8.8:53 lionware.de udp
DE 188.40.16.200:443 lionware.de tcp
DE 188.40.16.200:443 lionware.de tcp
US 8.8.8.8:53 sotsioloogia.ee udp
EE 217.146.69.14:443 sotsioloogia.ee tcp
EE 217.146.69.14:443 sotsioloogia.ee tcp
US 8.8.8.8:53 cwsitservices.co.uk udp
GB 35.214.77.27:443 cwsitservices.co.uk tcp
GB 35.214.77.27:443 cwsitservices.co.uk tcp
US 8.8.8.8:53 gasbarre.com udp
US 104.26.13.67:443 gasbarre.com tcp
US 104.26.13.67:443 gasbarre.com tcp
US 8.8.8.8:53 marketingsulweb.com udp
US 172.67.207.222:443 marketingsulweb.com tcp
US 8.8.8.8:53 balticdentists.com udp
LT 79.98.28.6:443 balticdentists.com tcp
LT 79.98.28.6:443 balticdentists.com tcp
US 8.8.8.8:53 centrospgolega.com udp
PT 109.71.44.119:443 centrospgolega.com tcp
PT 109.71.44.119:443 centrospgolega.com tcp
US 8.8.8.8:53 neuschelectrical.co.za udp
ZA 196.22.240.134:443 neuschelectrical.co.za tcp
ZA 196.22.240.134:443 neuschelectrical.co.za tcp
US 8.8.8.8:53 sanyue119.com udp
US 8.8.8.8:53 pocket-opera.de udp
DE 213.239.249.207:443 pocket-opera.de tcp
DE 213.239.249.207:443 pocket-opera.de tcp
US 8.8.8.8:53 iwelt.de udp
DE 82.212.215.131:443 iwelt.de tcp
DE 82.212.215.131:443 iwelt.de tcp
US 8.8.8.8:53 ontrailsandboulevards.com udp
US 172.67.191.173:443 ontrailsandboulevards.com tcp
US 8.8.8.8:53 crowcanyon.com udp
US 192.124.249.10:443 crowcanyon.com tcp
US 192.124.249.10:443 crowcanyon.com tcp
US 8.8.8.8:53 allentownpapershow.com udp
US 104.21.43.17:443 allentownpapershow.com tcp
US 8.8.8.8:53 artallnightdc.com udp
US 3.33.251.168:443 artallnightdc.com tcp
US 3.33.251.168:443 artallnightdc.com tcp
US 8.8.8.8:53 beaconhealthsystem.org udp
US 23.185.0.3:443 beaconhealthsystem.org tcp
US 23.185.0.3:443 beaconhealthsystem.org tcp
US 8.8.8.8:53 hrabritelefon.hr udp
DE 139.162.162.119:443 hrabritelefon.hr tcp
US 8.8.8.8:53 solinegraphic.com udp
US 8.8.8.8:53 webmaster-peloton.com udp
US 8.8.8.8:53 heliomotion.com udp
US 104.21.2.63:443 heliomotion.com tcp
US 104.21.2.63:443 heliomotion.com tcp
US 8.8.8.8:53 waermetauscher-berechnen.de udp
DE 92.204.37.106:443 waermetauscher-berechnen.de tcp
DE 92.204.37.106:443 waermetauscher-berechnen.de tcp
US 8.8.8.8:53 abogadosaccidentetraficosevilla.es udp
US 8.8.8.8:53 augenta.com udp
ZA 197.221.12.212:443 augenta.com tcp
ZA 197.221.12.212:443 augenta.com tcp
DE 188.40.30.16:443 sanaia.com tcp
DE 188.40.30.16:443 sanaia.com tcp
US 8.8.8.8:53 crowd-patch.co.uk udp
US 8.8.8.8:53 testzandbakmetmening.online udp
US 8.8.8.8:53 vibethink.net udp
US 172.67.151.107:443 vibethink.net tcp
US 8.8.8.8:53 greenko.pl udp
PL 109.95.159.39:443 greenko.pl tcp
US 8.8.8.8:53 vitalyscenter.es udp
ES 178.211.133.48:443 vitalyscenter.es tcp
US 8.8.8.8:53 philippedebroca.com udp
FR 212.83.139.44:443 philippedebroca.com tcp
FR 212.83.139.44:443 philippedebroca.com tcp
US 8.8.8.8:53 aminaboutique247.com udp
US 8.8.8.8:53 mooglee.com udp
US 3.33.130.190:443 mooglee.com tcp
US 3.33.130.190:443 mooglee.com tcp
US 8.8.8.8:53 proudground.org udp
US 198.185.159.145:443 proudground.org tcp
US 198.185.159.145:443 proudground.org tcp
US 8.8.8.8:53 nuzech.com udp
US 104.21.0.94:443 nuzech.com tcp
US 8.8.8.8:53 fibrofolliculoma.info udp
US 8.8.8.8:53 easytrans.com.au udp
US 8.8.8.8:53 rerekatu.com udp
US 8.8.8.8:53 polychromelabs.com udp
US 104.21.25.93:443 polychromelabs.com tcp
US 8.8.8.8:53 slimidealherbal.com udp
US 45.43.239.79:443 slimidealherbal.com tcp
US 8.8.8.8:53 www.slimidealherbal.com udp
US 45.43.239.79:443 www.slimidealherbal.com tcp
US 8.8.8.8:53 imperfectstore.com udp
US 13.248.169.48:443 imperfectstore.com tcp
US 13.248.169.48:443 imperfectstore.com tcp
US 8.8.8.8:53 wari.com.pe udp
US 103.195.100.18:443 wari.com.pe tcp
US 103.195.100.18:443 wari.com.pe tcp
US 8.8.8.8:53 cheminpsy.fr udp
DE 217.160.0.70:443 cheminpsy.fr tcp
DE 217.160.0.70:443 cheminpsy.fr tcp
US 8.8.8.8:53 saxtec.com udp
DE 134.255.237.119:443 saxtec.com tcp
DE 134.255.237.119:443 saxtec.com tcp
US 8.8.8.8:53 jolly-events.com udp
DE 217.160.0.32:443 jolly-events.com tcp
DE 217.160.0.32:443 jolly-events.com tcp
NL 213.108.104.109:443 degroenetunnel.com tcp
NL 213.108.104.109:443 degroenetunnel.com tcp
US 8.8.8.8:53 filmvideoweb.com udp
US 3.33.251.168:443 filmvideoweb.com tcp
US 3.33.251.168:443 filmvideoweb.com tcp
US 8.8.8.8:53 lapinvihreat.fi udp
FI 94.237.33.171:443 lapinvihreat.fi tcp
FI 94.237.33.171:443 lapinvihreat.fi tcp
US 8.8.8.8:53 pomodori-pizzeria.de udp
DE 91.230.22.128:443 pomodori-pizzeria.de tcp
DE 91.230.22.128:443 pomodori-pizzeria.de tcp
US 192.185.20.95:443 drinkseed.com tcp
US 192.185.20.95:443 drinkseed.com tcp
US 8.8.8.8:53 web.ion.ag udp
DE 188.68.56.212:443 web.ion.ag tcp
US 8.8.8.8:53 tarotdeseidel.com udp
US 104.21.20.105:443 almosthomedogrescue.dog tcp
US 104.21.20.105:443 almosthomedogrescue.dog tcp
US 8.8.8.8:53 marietteaernoudts.nl udp
NL 141.138.169.211:443 marietteaernoudts.nl tcp
NL 141.138.169.211:443 marietteaernoudts.nl tcp
US 8.8.8.8:53 ikads.org udp
US 8.8.8.8:53 ledmes.ru udp
US 8.8.8.8:53 pv-design.de udp
DE 93.90.177.166:443 pv-design.de tcp
DE 93.90.177.166:443 pv-design.de tcp
US 8.8.8.8:53 mbfagency.com udp
US 173.236.205.247:443 mbfagency.com tcp
US 173.236.205.247:443 mbfagency.com tcp
US 8.8.8.8:53 danielblum.info udp
US 198.49.23.145:443 danielblum.info tcp
US 198.49.23.145:443 danielblum.info tcp
US 8.8.8.8:53 henricekupper.com udp
US 8.8.8.8:53 sobreholanda.com udp
US 8.8.8.8:53 boldcitydowntown.com udp
US 104.21.8.95:443 boldcitydowntown.com tcp
US 8.8.8.8:53 quemargrasa.net udp
US 13.248.169.48:443 quemargrasa.net tcp
US 13.248.169.48:443 quemargrasa.net tcp
US 8.8.8.8:53 ilcdover.com udp
US 141.193.213.20:443 ilcdover.com tcp
US 141.193.213.20:443 ilcdover.com tcp
US 8.8.8.8:53 marcuswhitten.site udp
US 8.8.8.8:53 nativeformulas.com udp
US 35.215.106.112:443 nativeformulas.com tcp
US 35.215.106.112:443 nativeformulas.com tcp
US 8.8.8.8:53 sw1m.ru udp
US 8.8.8.8:53 12starhd.online udp
NL 94.247.76.79:443 pridoxmaterieel.nl tcp
NL 94.247.76.79:443 pridoxmaterieel.nl tcp
US 8.8.8.8:53 kidbucketlist.com.au udp
US 162.241.217.210:443 kidbucketlist.com.au tcp
US 162.241.217.210:443 kidbucketlist.com.au tcp
US 8.8.8.8:53 revezlimage.com udp
BE 193.105.133.66:443 revezlimage.com tcp
BE 193.105.133.66:443 revezlimage.com tcp
US 8.8.8.8:53 mikeramirezcpa.com udp
US 3.33.130.190:443 mikeramirezcpa.com tcp
US 3.33.130.190:443 mikeramirezcpa.com tcp
US 8.8.8.8:53 stupbratt.no udp
NO 194.63.249.218:443 stupbratt.no tcp
NO 194.63.249.218:443 stupbratt.no tcp
US 8.8.8.8:53 stoeberstuuv.de udp
DE 83.243.40.12:443 stoeberstuuv.de tcp
DE 83.243.40.12:443 stoeberstuuv.de tcp
US 8.8.8.8:53 jenniferandersonwriter.com udp
US 67.227.250.52:443 jenniferandersonwriter.com tcp
US 67.227.250.52:443 jenniferandersonwriter.com tcp
US 8.8.8.8:53 presseclub-magdeburg.de udp
DE 212.227.13.185:443 presseclub-magdeburg.de tcp
DE 212.227.13.185:443 presseclub-magdeburg.de tcp
US 8.8.8.8:53 happyeasterimages.org udp
US 8.8.8.8:53 maratonaclubedeportugal.com udp
IT 81.88.52.192:443 maratonaclubedeportugal.com tcp
US 8.8.8.8:53 conasmanagement.de udp
DE 217.160.0.18:443 conasmanagement.de tcp
DE 217.160.0.18:443 conasmanagement.de tcp
US 8.8.8.8:53 grelot-home.com udp
JP 13.115.64.214:443 grelot-home.com tcp
US 8.8.8.8:53 smalltownideamill.wordpress.com udp
US 192.0.78.12:443 smalltownideamill.wordpress.com tcp
US 192.0.78.12:443 smalltownideamill.wordpress.com tcp
US 8.8.8.8:53 leoben.at udp
AT 94.247.147.150:443 leoben.at tcp
US 8.8.8.8:53 kao.at udp
FR 5.175.14.110:443 kao.at tcp
FR 5.175.14.110:443 kao.at tcp
US 8.8.8.8:53 ivivo.es udp
ES 217.76.130.137:443 ivivo.es tcp
ES 217.76.130.137:443 ivivo.es tcp
US 8.8.8.8:53 theclubms.com udp
US 141.193.213.11:443 theclubms.com tcp
US 141.193.213.11:443 theclubms.com tcp
US 8.8.8.8:53 alsace-first.com udp
FR 213.186.33.4:443 alsace-first.com tcp
FR 213.186.33.4:443 alsace-first.com tcp
US 8.8.8.8:53 tonelektro.nl udp
DK 46.30.213.35:443 tonelektro.nl tcp
DK 46.30.213.35:443 tonelektro.nl tcp
US 8.8.8.8:53 abogadosadomicilio.es udp
DE 143.42.56.88:443 abogadosadomicilio.es tcp
DE 143.42.56.88:443 abogadosadomicilio.es tcp
US 8.8.8.8:53 synlab.lt udp
RO 89.44.139.37:443 synlab.lt tcp
RO 89.44.139.37:443 synlab.lt tcp
US 8.8.8.8:53 teresianmedia.org udp
US 45.33.30.174:443 teresianmedia.org tcp
US 45.33.30.174:443 teresianmedia.org tcp
US 8.8.8.8:53 precisionbevel.com udp
US 104.21.76.177:443 precisionbevel.com tcp
US 104.21.76.177:443 precisionbevel.com tcp
US 8.8.8.8:53 allure-cosmetics.at udp
DE 159.69.224.11:443 allure-cosmetics.at tcp
US 8.8.8.8:53 www.allure-cosmetics.at udp
DE 159.69.224.11:443 www.allure-cosmetics.at tcp
US 8.8.8.8:53 embracinghiscall.com udp
US 3.33.251.168:443 embracinghiscall.com tcp
US 3.33.251.168:443 embracinghiscall.com tcp
US 8.8.8.8:53 lorenacarnero.com udp
ES 178.211.133.18:443 lorenacarnero.com tcp
US 8.8.8.8:53 despedidascostablanca.es udp
FR 46.105.204.5:443 despedidascostablanca.es tcp
FR 46.105.204.5:443 despedidascostablanca.es tcp
US 8.8.8.8:53 truenyc.co udp
US 35.168.57.48:443 truenyc.co tcp
US 52.73.158.210:443 truenyc.co tcp
US 8.8.8.8:53 icpcnj.org udp
US 66.23.232.70:443 icpcnj.org tcp
US 66.23.232.70:443 icpcnj.org tcp
US 8.8.8.8:53 myteamgenius.com udp
US 209.17.116.163:443 myteamgenius.com tcp
US 209.17.116.163:443 myteamgenius.com tcp
US 8.8.8.8:53 whittier5k.com udp
US 72.52.184.75:443 whittier5k.com tcp
DE 178.254.0.103:443 hannah-fink.de tcp
DE 178.254.0.103:443 hannah-fink.de tcp
US 8.8.8.8:53 effortlesspromo.com udp
US 8.8.8.8:53 body-guards.it udp
IT 151.11.50.69:443 body-guards.it tcp
IT 151.11.50.69:443 body-guards.it tcp
US 8.8.8.8:53 tennisclubetten.nl udp
NL 84.244.132.79:443 tennisclubetten.nl tcp
NL 84.244.132.79:443 tennisclubetten.nl tcp
US 8.8.8.8:53 whyinterestingly.ru udp
US 8.8.8.8:53 seproc.hn udp
US 204.13.232.50:443 seproc.hn tcp
US 204.13.232.50:443 seproc.hn tcp
US 8.8.8.8:53 em-gmbh.ch udp
US 8.8.8.8:53 licor43.de udp
ES 185.66.41.198:443 licor43.de tcp
ES 185.66.41.198:443 licor43.de tcp
US 8.8.8.8:53 farhaani.com udp
US 8.8.8.8:53 dezatec.es udp
US 198.54.125.16:443 dezatec.es tcp
US 198.54.125.16:443 dezatec.es tcp
US 8.8.8.8:53 actecfoundation.org udp
US 192.124.249.62:443 actecfoundation.org tcp
US 192.124.249.62:443 actecfoundation.org tcp
US 8.8.8.8:53 behavioralmedicinespecialists.com udp
US 198.49.23.144:443 behavioralmedicinespecialists.com tcp
US 198.49.23.144:443 behavioralmedicinespecialists.com tcp
US 8.8.8.8:53 gopackapp.com udp
US 64.44.53.250:443 gopackapp.com tcp
US 64.44.53.250:443 gopackapp.com tcp
US 8.8.8.8:53 ohidesign.com udp
US 67.199.146.77:443 ohidesign.com tcp
US 67.199.146.77:443 ohidesign.com tcp
US 8.8.8.8:53 insigniapmg.com udp
US 151.101.66.159:443 insigniapmg.com tcp
US 151.101.66.159:443 insigniapmg.com tcp
US 8.8.8.8:53 bouquet-de-roses.com udp
US 8.8.8.8:53 softsproductkey.com udp
US 104.155.138.21:443 softsproductkey.com tcp
US 8.8.8.8:53 zweerscreatives.nl udp
NL 141.138.168.129:443 zweerscreatives.nl tcp
NL 141.138.168.129:443 zweerscreatives.nl tcp
US 8.8.8.8:53 sipstroysochi.ru udp
RU 109.120.162.1:443 sipstroysochi.ru tcp
RU 109.120.162.1:443 sipstroysochi.ru tcp
US 8.8.8.8:53 mmgdouai.fr udp
US 8.8.8.8:53 hexcreatives.co udp
US 172.67.179.147:443 hexcreatives.co tcp
US 8.8.8.8:53 bodyforwife.com udp
US 173.230.249.203:443 bodyforwife.com tcp
US 173.230.249.203:443 bodyforwife.com tcp
US 8.8.8.8:53 waynela.com udp
GB 85.92.72.43:443 waynela.com tcp
GB 85.92.72.43:443 waynela.com tcp
US 8.8.8.8:53 finediningweek.pl udp
US 104.21.8.33:443 finediningweek.pl tcp
US 104.21.8.33:443 finediningweek.pl tcp
US 8.8.8.8:53 launchhubl.com udp
GB 51.140.210.99:443 launchhubl.com tcp
US 8.8.8.8:53 shhealthlaw.com udp
US 141.193.213.21:443 shhealthlaw.com tcp
US 141.193.213.21:443 shhealthlaw.com tcp
US 8.8.8.8:53 foretprivee.ca udp
CA 35.182.181.32:443 foretprivee.ca tcp
CA 35.182.181.32:443 foretprivee.ca tcp
US 8.8.8.8:53 groupe-cets.com udp
FR 94.23.176.123:443 groupe-cets.com tcp
FR 94.23.176.123:443 groupe-cets.com tcp
US 8.8.8.8:53 autodemontagenijmegen.nl udp
NL 185.104.29.46:443 autodemontagenijmegen.nl tcp
NL 185.104.29.46:443 autodemontagenijmegen.nl tcp
US 8.8.8.8:53 kaminscy.com udp
US 104.21.72.23:443 kaminscy.com tcp
US 8.8.8.8:53 www.kaminscy.com udp
US 104.21.72.23:443 www.kaminscy.com tcp
US 8.8.8.8:53 kojinsaisei.info udp
US 8.8.8.8:53 real-estate-experts.com udp
UA 185.68.16.13:443 real-estate-experts.com tcp
US 8.8.8.8:53 thedad.com udp
FR 52.84.174.49:443 thedad.com tcp
FR 52.84.174.49:443 thedad.com tcp
US 8.8.8.8:53 nvwoodwerks.com udp
US 172.67.131.172:443 nvwoodwerks.com tcp
US 8.8.8.8:53 resinwerksstudio.com udp
CA 23.227.38.65:443 resinwerksstudio.com tcp
CA 23.227.38.65:443 resinwerksstudio.com tcp
US 8.8.8.8:53 lusak.at udp
DE 212.53.165.102:443 lusak.at tcp
DE 212.53.165.102:443 lusak.at tcp
US 8.8.8.8:53 hihaho.com udp
DK 45.148.29.59:443 hihaho.com tcp
DK 45.148.29.59:443 hihaho.com tcp
US 8.8.8.8:53 tstaffing.nl udp
NL 93.119.3.14:443 tstaffing.nl tcp
NL 93.119.3.14:443 tstaffing.nl tcp
US 8.8.8.8:53 seevilla-dr-sturm.at udp
DE 2.58.54.78:443 seevilla-dr-sturm.at tcp
DE 2.58.54.78:443 seevilla-dr-sturm.at tcp
FR 5.175.14.224:443 autopfand24.de tcp
FR 5.175.14.224:443 autopfand24.de tcp
US 8.8.8.8:53 citymax-cr.com udp
US 18.218.251.224:443 citymax-cr.com tcp
US 8.8.8.8:53 crt.rootg2.amazontrust.com udp
FR 3.164.163.90:80 crt.rootg2.amazontrust.com tcp
US 8.8.8.8:53 www.citymax-cr.com udp
US 3.129.122.254:443 www.citymax-cr.com tcp
US 8.8.8.8:53 edrcreditservices.nl udp
US 172.66.0.125:443 edrcreditservices.nl tcp
US 172.66.0.125:443 edrcreditservices.nl tcp
US 8.8.8.8:53 slashdb.com udp
US 52.1.93.170:443 slashdb.com tcp
US 52.1.93.170:443 slashdb.com tcp
US 8.8.8.8:53 ralister.co.uk udp
US 104.21.91.244:443 ralister.co.uk tcp
US 8.8.8.8:53 www.ralister.co.uk udp
US 104.21.91.244:443 www.ralister.co.uk tcp
US 8.8.8.8:53 caribbeansunpoker.com udp
US 8.8.8.8:53 prochain-voyage.net udp
US 8.8.8.8:53 ftf.or.at udp
AT 143.205.174.166:443 ftf.or.at tcp
US 8.8.8.8:53 harveybp.com udp
US 20.120.112.184:443 harveybp.com tcp
US 20.120.112.184:443 harveybp.com tcp
US 8.8.8.8:53 fairfriends18.de udp
FR 92.205.212.213:443 fairfriends18.de tcp
FR 92.205.212.213:443 fairfriends18.de tcp
US 8.8.8.8:53 systemate.dk udp
DK 94.231.103.171:443 systemate.dk tcp
DK 94.231.103.171:443 systemate.dk tcp
US 8.8.8.8:53 www1.proresult.no udp
US 141.193.213.10:443 www1.proresult.no tcp
US 141.193.213.10:443 www1.proresult.no tcp
US 8.8.8.8:53 piajeppesen.dk udp
DK 46.30.211.38:443 piajeppesen.dk tcp
DK 46.30.211.38:443 piajeppesen.dk tcp
US 8.8.8.8:53 sexandfessenjoon.wordpress.com udp
US 192.0.78.12:443 sexandfessenjoon.wordpress.com tcp
US 192.0.78.12:443 sexandfessenjoon.wordpress.com tcp
US 8.8.8.8:53 healthyyworkout.com udp
US 8.8.8.8:53 ravensnesthomegoods.com udp
US 8.8.8.8:53 transliminaltribe.wordpress.com udp
US 192.0.78.12:443 transliminaltribe.wordpress.com tcp
US 192.0.78.12:443 transliminaltribe.wordpress.com tcp
US 8.8.8.8:53 bayoga.co.uk udp
GB 18.171.208.110:443 bayoga.co.uk tcp
GB 18.171.208.110:443 bayoga.co.uk tcp
US 8.8.8.8:53 baptisttabernacle.com udp
US 34.197.116.254:443 baptisttabernacle.com tcp
US 8.8.8.8:53 www.baptisttabernacle.com udp
US 34.197.116.254:443 www.baptisttabernacle.com tcp
US 8.8.8.8:53 x-ray.ca udp
US 192.124.249.26:443 x-ray.ca tcp
US 192.124.249.26:443 x-ray.ca tcp
US 8.8.8.8:53 spsshomeworkhelp.com udp
US 104.21.45.163:443 spsshomeworkhelp.com tcp
US 8.8.8.8:53 www.spsshomeworkhelp.com udp
US 172.67.216.165:443 www.spsshomeworkhelp.com tcp
US 172.67.216.165:443 www.spsshomeworkhelp.com tcp
US 8.8.8.8:53 nurturingwisdom.com udp
US 35.215.73.168:443 nurturingwisdom.com tcp
US 35.215.73.168:443 nurturingwisdom.com tcp
US 8.8.8.8:53 jerling.de udp
DE 49.12.229.217:443 jerling.de tcp
DE 49.12.229.217:443 jerling.de tcp
US 8.8.8.8:53 unim.su udp
RU 176.57.64.176:443 unim.su tcp
US 8.8.8.8:53 dr-pipi.de udp
DE 217.160.0.213:443 dr-pipi.de tcp
DE 217.160.0.213:443 dr-pipi.de tcp
US 8.8.8.8:53 ra-staudte.de udp
FR 92.205.52.101:443 ra-staudte.de tcp
FR 92.205.52.101:443 ra-staudte.de tcp
US 8.8.8.8:53 bridgeloanslenders.com udp
US 70.40.218.93:443 bridgeloanslenders.com tcp
US 70.40.218.93:443 bridgeloanslenders.com tcp
US 8.8.8.8:53 satyayoga.de udp
US 185.230.63.107:443 satyayoga.de tcp
US 185.230.63.107:443 satyayoga.de tcp
US 8.8.8.8:53 bockamp.com udp
DE 85.13.143.115:443 bockamp.com tcp
DE 85.13.143.115:443 bockamp.com tcp
US 8.8.8.8:53 myhealth.net.au udp
AU 112.213.33.223:443 myhealth.net.au tcp
AU 112.213.33.223:443 myhealth.net.au tcp
US 8.8.8.8:53 clos-galant.com udp
DE 217.160.0.15:443 clos-galant.com tcp
DE 217.160.0.15:443 clos-galant.com tcp
US 8.8.8.8:53 work2live.de udp
DE 217.160.0.72:443 work2live.de tcp
DE 217.160.0.72:443 work2live.de tcp
US 8.8.8.8:53 physiofischer.de udp
DE 178.254.32.102:443 physiofischer.de tcp
US 8.8.8.8:53 boulderwelt-muenchen-west.de udp
DE 116.202.244.254:443 boulderwelt-muenchen-west.de tcp
DE 116.202.244.254:443 boulderwelt-muenchen-west.de tcp
US 8.8.8.8:53 igorbarbosa.com udp
CA 174.138.112.228:443 igorbarbosa.com tcp
CA 174.138.112.228:443 igorbarbosa.com tcp
US 8.8.8.8:53 chefdays.de udp
AT 77.75.21.132:443 chefdays.de tcp
AT 77.75.21.132:443 chefdays.de tcp
US 8.8.8.8:53 chandlerpd.com udp
CA 216.40.34.41:443 chandlerpd.com tcp
US 8.8.8.8:53 micro-automation.de udp
DE 185.237.67.60:443 micro-automation.de tcp
DE 185.237.67.60:443 micro-automation.de tcp
US 8.8.8.8:53 dontpassthepepper.com udp
DE 64.190.63.222:443 dontpassthepepper.com tcp
DE 64.190.63.222:443 dontpassthepepper.com tcp
US 8.8.8.8:53 blgr.be udp
US 8.8.8.8:53 lascuola.nl udp
NL 141.138.169.201:443 lascuola.nl tcp
NL 141.138.169.201:443 lascuola.nl tcp
US 8.8.8.8:53 slupetzky.at udp
AT 81.19.159.24:443 slupetzky.at tcp
AT 81.19.159.24:443 slupetzky.at tcp
US 8.8.8.8:53 buymedical.biz udp
US 107.178.223.183:443 buymedical.biz tcp
US 8.8.8.8:53 bowengroup.com.au udp
FR 3.162.38.30:443 bowengroup.com.au tcp
FR 3.162.38.30:443 bowengroup.com.au tcp
US 8.8.8.8:53 idemblogs.com udp
US 8.8.8.8:53 songunceliptv.com udp
US 208.100.26.245:443 songunceliptv.com tcp
US 8.8.8.8:53 asteriag.com udp
US 8.8.8.8:53 architekturbuero-wagner.net udp
DE 85.13.162.179:443 architekturbuero-wagner.net tcp
DE 85.13.162.179:443 architekturbuero-wagner.net tcp
US 8.8.8.8:53 plotlinecreative.com udp
US 3.33.251.168:443 plotlinecreative.com tcp
US 3.33.251.168:443 plotlinecreative.com tcp
US 8.8.8.8:53 steampluscarpetandfloors.com udp
US 35.209.122.3:443 steampluscarpetandfloors.com tcp
US 35.209.122.3:443 steampluscarpetandfloors.com tcp
US 8.8.8.8:53 simpliza.com udp
NL 209.42.195.219:443 simpliza.com tcp
NL 209.42.195.219:443 simpliza.com tcp
US 8.8.8.8:53 haar-spange.com udp
US 8.8.8.8:53 deepsouthclothingcompany.com udp
US 8.8.8.8:53 charlottepoudroux-photographie.fr udp
DE 185.53.177.53:443 charlottepoudroux-photographie.fr tcp
DE 185.53.177.53:443 charlottepoudroux-photographie.fr tcp
US 8.8.8.8:53 naswrrg.org udp
US 162.255.119.134:443 naswrrg.org tcp
US 8.8.8.8:53 boosthybrid.com.au udp
US 8.8.8.8:53 tinyagency.com udp
US 75.2.71.199:443 tinyagency.com tcp
US 75.2.71.199:443 tinyagency.com tcp
US 8.8.8.8:53 bargningharnosand.se udp
LU 80.92.65.144:443 bargningharnosand.se tcp
US 8.8.8.8:53 pier40forall.org udp
US 15.197.148.33:443 pier40forall.org tcp
US 15.197.148.33:443 pier40forall.org tcp
US 8.8.8.8:53 rosavalamedahr.com udp
US 35.215.118.92:443 rosavalamedahr.com tcp
US 35.215.118.92:443 rosavalamedahr.com tcp
US 8.8.8.8:53 maineemploymentlawyerblog.com udp
FR 13.32.145.45:443 maineemploymentlawyerblog.com tcp
US 8.8.8.8:53 www.maineemploymentlawyerblog.com udp
FR 13.32.145.45:443 www.maineemploymentlawyerblog.com tcp
US 8.8.8.8:53 vibehouse.rw udp
DE 136.243.23.15:443 vibehouse.rw tcp
US 8.8.8.8:53 yassir.pro udp
US 45.60.0.150:443 yassir.pro tcp
US 45.60.0.150:443 yassir.pro tcp
US 8.8.8.8:53 promesapuertorico.com udp
US 8.8.8.8:53 stemenstilte.nl udp
US 104.21.12.217:443 stemenstilte.nl tcp
US 8.8.8.8:53 kunze-immobilien.de udp
US 104.22.1.210:443 kunze-immobilien.de tcp
US 104.22.1.210:443 kunze-immobilien.de tcp
US 8.8.8.8:53 waywithwords.net udp
GB 3.11.210.207:443 waywithwords.net tcp
GB 3.11.210.207:443 waywithwords.net tcp
US 8.8.8.8:53 ausbeverage.com.au udp
US 104.26.3.7:443 ausbeverage.com.au tcp
US 104.26.3.7:443 ausbeverage.com.au tcp
US 8.8.8.8:53 better.town udp
US 137.184.181.111:443 better.town tcp
US 8.8.8.8:53 tecnojobsnet.com udp
US 104.21.112.1:443 tecnojobsnet.com tcp
US 104.21.112.1:443 tecnojobsnet.com tcp
US 8.8.8.8:53 falcou.fr udp
FR 46.105.204.26:443 falcou.fr tcp
FR 46.105.204.26:443 falcou.fr tcp
US 8.8.8.8:53 ceid.info.tr udp
US 8.8.8.8:53 brandl-blumen.de udp
DE 185.207.107.174:443 brandl-blumen.de tcp
US 8.8.8.8:53 zimmerei-fl.de udp
DE 81.169.145.163:443 zimmerei-fl.de tcp
DE 81.169.145.163:443 zimmerei-fl.de tcp
US 8.8.8.8:53 ruralarcoiris.com udp
ES 185.23.70.17:443 ruralarcoiris.com tcp
ES 185.23.70.17:443 ruralarcoiris.com tcp
US 8.8.8.8:53 ogdenvision.com udp
US 66.228.32.51:443 ogdenvision.com tcp
US 66.228.32.51:443 ogdenvision.com tcp
US 8.8.8.8:53 pogypneu.sk udp
SK 37.9.175.133:443 pogypneu.sk tcp
SK 37.9.175.133:443 pogypneu.sk tcp
US 8.8.8.8:53 pt-arnold.de udp
DE 82.100.220.54:443 pt-arnold.de tcp
US 8.8.8.8:53 planchaavapor.net udp
US 8.8.8.8:53 refluxreducer.com udp
US 34.174.11.53:443 theapifactory.com tcp
US 34.174.11.53:443 theapifactory.com tcp
FR 109.234.162.102:443 izzi360.com tcp
FR 109.234.162.102:443 izzi360.com tcp
US 8.8.8.8:53 acomprarseguidores.com udp
US 104.21.30.250:443 acomprarseguidores.com tcp
US 8.8.8.8:53 dr-seleznev.com udp
US 8.8.8.8:53 sairaku.net udp
JP 202.210.8.84:443 sairaku.net tcp
JP 202.210.8.84:443 sairaku.net tcp
US 8.8.8.8:53 bee4win.com udp
FR 20.216.129.32:443 bee4win.com tcp
FR 20.216.129.32:443 bee4win.com tcp
US 8.8.8.8:53 lillegrandpalais.com udp
FR 185.254.101.34:443 lillegrandpalais.com tcp
FR 185.254.101.34:443 lillegrandpalais.com tcp
US 8.8.8.8:53 baustb.de udp
DE 85.13.164.99:443 baustb.de tcp
DE 85.13.164.99:443 baustb.de tcp
US 8.8.8.8:53 levihotelspa.fi udp
FI 95.217.114.231:443 levihotelspa.fi tcp
FI 95.217.114.231:443 levihotelspa.fi tcp
US 8.8.8.8:53 lynsayshepherd.co.uk udp
US 70.39.144.94:443 lynsayshepherd.co.uk tcp
US 70.39.144.94:443 lynsayshepherd.co.uk tcp
US 8.8.8.8:53 themadbotter.com udp
US 35.215.116.99:443 themadbotter.com tcp
US 35.215.116.99:443 themadbotter.com tcp
US 8.8.8.8:53 conexa4papers.trade udp
US 8.8.8.8:53 the-domain-trader.com udp
US 8.8.8.8:53 argenblogs.com.ar udp
US 50.31.177.70:443 argenblogs.com.ar tcp
US 50.31.177.70:443 argenblogs.com.ar tcp
DE 85.13.152.101:443 spylista.com tcp
DE 85.13.152.101:443 spylista.com tcp
US 8.8.8.8:53 femxarxa.cat udp
US 104.21.90.219:443 femxarxa.cat tcp
US 8.8.8.8:53 www.manlleu.cat udp
FR 91.134.184.74:443 www.manlleu.cat tcp
FR 91.134.184.74:443 www.manlleu.cat tcp
US 8.8.8.8:53 c-a.co.in udp
US 66.85.142.50:443 c-a.co.in tcp
US 66.85.142.50:443 c-a.co.in tcp
US 8.8.8.8:53 opatrovanie-ako.sk udp
US 8.8.8.8:53 symphonyenvironmental.com udp
GB 185.25.240.163:443 symphonyenvironmental.com tcp
GB 185.25.240.163:443 symphonyenvironmental.com tcp
US 8.8.8.8:53 lichencafe.com udp
US 8.8.8.8:53 sterlingessay.com udp
US 199.59.243.227:443 sterlingessay.com tcp
US 199.59.243.227:443 sterlingessay.com tcp
US 8.8.8.8:53 oneheartwarriors.at udp
CH 185.178.193.229:443 oneheartwarriors.at tcp
CH 185.178.193.229:443 oneheartwarriors.at tcp
US 8.8.8.8:53 nancy-informatique.fr udp
FR 54.37.11.130:443 nancy-informatique.fr tcp
FR 54.37.11.130:443 nancy-informatique.fr tcp
RU 217.119.30.236:443 lenreactiv-shop.ru tcp
RU 217.119.30.236:443 lenreactiv-shop.ru tcp
US 8.8.8.8:53 lightair.com udp
US 104.26.8.104:443 lightair.com tcp
US 8.8.8.8:53 dinslips.se udp
SE 151.252.25.12:443 dinslips.se tcp
SE 151.252.25.12:443 dinslips.se tcp
US 8.8.8.8:53 mediaacademy-iraq.org udp
US 8.8.8.8:53 retroearthstudio.com udp
GB 195.200.9.119:443 retroearthstudio.com tcp
GB 195.200.9.119:443 retroearthstudio.com tcp
US 8.8.8.8:53 sinal.org udp
IT 93.95.216.98:443 sinal.org tcp
IT 93.95.216.98:443 sinal.org tcp
US 8.8.8.8:53 christinarebuffetcourses.com udp
DE 35.242.240.46:443 christinarebuffetcourses.com tcp
DE 35.242.240.46:443 christinarebuffetcourses.com tcp
US 8.8.8.8:53 35-40konkatsu.net udp
US 8.8.8.8:53 apolomarcas.com udp
US 3.33.130.190:443 apolomarcas.com tcp
US 3.33.130.190:443 apolomarcas.com tcp
US 8.8.8.8:53 mercantedifiori.com udp
US 70.32.1.32:443 mercantedifiori.com tcp
US 70.32.1.32:443 mercantedifiori.com tcp
US 8.8.8.8:53 unetica.fr udp
FR 51.75.28.165:443 unetica.fr tcp
US 8.8.8.8:53 ditog.fr udp
FR 146.59.196.35:443 ditog.fr tcp
US 8.8.8.8:53 chatizel-paysage.fr udp
FR 213.186.33.16:443 chatizel-paysage.fr tcp
FR 213.186.33.16:443 chatizel-paysage.fr tcp
US 8.8.8.8:53 pinkexcel.com udp
US 8.8.8.8:53 schoolofpassivewealth.com udp
US 74.208.236.52:443 schoolofpassivewealth.com tcp
US 74.208.236.52:443 schoolofpassivewealth.com tcp
US 8.8.8.8:53 brawnmediany.com udp
US 104.21.2.109:443 brawnmediany.com tcp
US 8.8.8.8:53 mirkoreisser.de udp
DE 212.53.215.113:443 mirkoreisser.de tcp
DE 212.53.215.113:443 mirkoreisser.de tcp
US 8.8.8.8:53 lange.host udp
US 70.35.205.62:443 lange.host tcp
US 70.35.205.62:443 lange.host tcp
US 8.8.8.8:53 herbayupro.com udp
US 8.8.8.8:53 hmsdanmark.dk udp
DK 94.231.103.180:443 hmsdanmark.dk tcp
DK 94.231.103.180:443 hmsdanmark.dk tcp
US 8.8.8.8:53 radaradvies.nl udp
NL 178.22.56.114:443 radaradvies.nl tcp
NL 178.22.56.114:443 radaradvies.nl tcp
US 8.8.8.8:53 visiativ-industry.fr udp
FR 51.68.244.60:443 visiativ-industry.fr tcp
US 8.8.8.8:53 www.visiativ-solutions.fr udp
FR 51.68.244.60:443 www.visiativ-solutions.fr tcp
FR 51.68.244.60:443 www.visiativ-solutions.fr tcp
US 8.8.8.8:53 www.visiativ.com udp
FR 5.39.7.193:443 www.visiativ.com tcp
FR 5.39.7.193:443 www.visiativ.com tcp
US 8.8.8.8:53 madinblack.com udp
US 199.59.243.227:443 madinblack.com tcp
US 199.59.243.227:443 madinblack.com tcp
US 8.8.8.8:53 hypozentrum.com udp
DE 185.175.199.24:443 hypozentrum.com tcp
US 8.8.8.8:53 rozemondcoaching.nl udp
NL 94.237.47.137:443 rozemondcoaching.nl tcp
NL 94.237.47.137:443 rozemondcoaching.nl tcp
US 8.8.8.8:53 fitovitaforum.com udp
US 8.8.8.8:53 filmstreamingvfcomplet.be udp
US 8.8.8.8:53 eaglemeetstiger.de udp
DE 188.68.47.33:443 eaglemeetstiger.de tcp
DE 188.68.47.33:443 eaglemeetstiger.de tcp
US 8.8.8.8:53 tanciu.com udp
FI 37.27.97.173:443 tanciu.com tcp
FI 37.27.97.173:443 tanciu.com tcp
US 8.8.8.8:53 verifort-capital.de udp
DE 78.46.166.13:443 verifort-capital.de tcp
US 8.8.8.8:53 leather-factory.co.jp udp
JP 133.18.34.103:443 leather-factory.co.jp tcp
US 8.8.8.8:53 lucidinvestbank.com udp
DE 95.111.241.115:443 lucidinvestbank.com tcp
US 8.8.8.8:53 takeflat.com udp
US 3.130.253.23:443 takeflat.com tcp
US 3.130.204.160:443 takeflat.com tcp
US 8.8.8.8:53 vanswigchemdesign.com udp
US 8.8.8.8:53 praxis-management-plus.de udp
DE 64.190.63.222:443 praxis-management-plus.de tcp
DE 64.190.63.222:443 praxis-management-plus.de tcp
US 8.8.8.8:53 sloverse.com udp
US 104.21.91.237:443 sloverse.com tcp
US 104.21.91.237:443 sloverse.com tcp
US 8.8.8.8:53 extensionmaison.info udp
FR 213.186.33.5:443 extensionmaison.info tcp
US 8.8.8.8:53 abitur-undwieweiter.de udp
DE 85.220.182.132:443 abitur-undwieweiter.de tcp
DE 85.220.182.132:443 tcp
US 8.8.8.8:53 udp
US 15.197.148.33:443 tcp
US 15.197.148.33:443 tcp
US 8.8.8.8:53 udp

Files

C:\Recovery\5e7y3v8-readme.txt

MD5 63b9002f5abfb2c9a8cf3a5562f834a9
SHA1 608cb6912c9126a2cd6e3f792611da022a9ad587
SHA256 396b1c0f863c632f4c3cb73e70418597dd5323184ae634d6636aab678599dce3
SHA512 59bfb443ac8a3c6dbe832f805221a7da4bf265d89fcfee4a9a819792fc45d54165c2dbbb6d200d7823f2e19d0d4a3ad714907c369abf7333e5f9109bfc73a6ae

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

MD5 49aebf8cbd62d92ac215b2923fb1b9f5
SHA1 1723be06719828dda65ad804298d0431f6aff976
SHA256 b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512 bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

C:\Users\Admin\AppData\Local\Temp\Tar4CAF.tmp

MD5 4ea6026cf93ec6338144661bf1202cd1
SHA1 a1dec9044f750ad887935a01430bf49322fbdcb7
SHA256 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA512 6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

C:\Windows\System32\catroot2\dberr.txt

MD5 1ffa9d84559d18389d22b4395d0ce47c
SHA1 4920ec2a4c19942e281176142e496bf78a47fb46
SHA256 3a4a261d5c7dcd8e2adc16f2a223fc0e036fb9a1eda8f14614d6502fa0e7cbec
SHA512 531c1b75c5b866f23977374f4052ef24ef4e1461c9302aeef7382f6fcb0c21b02419aff6a9ca0fb8ed276f6945bdef8239178ca517b167ebb92e74e70df39ec9

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

MD5 a266bb7dcc38a562631361bbf61dd11b
SHA1 3b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256 df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA512 0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

MD5 32b8d070507ea8002daa44a1403960fb
SHA1 4530d422bb14b2f7e002b4befc59b2ab8c85e475
SHA256 7c1d4cd1fab4124ef3e35ed753a7e3a069ec5e466612f396692402d67c637cbe
SHA512 c7df9c75c48ad6b578d575a954ba4857c7d027e0a28e6cea153603f93e17df441240505499669cac39cdb85a1232cf835a911220eca0ec1627356f6fda4fb61d

Analysis: behavioral4

Detonation Overview

Submitted

2024-12-09 01:54

Reported

2024-12-09 02:24

Platform

win10v2004-20241007-en

Max time kernel

1800s

Max time network

1801s

Command Line

"C:\Users\Admin\AppData\Local\Temp\v2.exe"

Signatures

Sodin,Sodinokibi,REvil

ransomware sodinokibi

Sodinokibi family

sodinokibi

Contacts a large (548) amount of remote hosts

discovery

Credentials from Password Stores: Windows Credential Manager

credential_access stealer

Drops startup file

Description Indicator Process Target
File created \??\c:\users\admin\appdata\roaming\microsoft\word\startup\265062875m-readme.txt C:\Users\Admin\AppData\Local\Temp\v2.exe N/A

Reads user/profile data of web browsers

spyware stealer

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\N: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\P: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\Q: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\W: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\H: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\J: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\L: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\F: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\U: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\D: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\A: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\E: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\K: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\S: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\Y: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\B: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\G: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\T: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened (read-only) \??\Z: C:\Users\Admin\AppData\Local\Temp\v2.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A sites.google.com N/A N/A
N/A sites.google.com N/A N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2437139445-1151884604-3026847218-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\6v49p3a39.bmp" C:\Users\Admin\AppData\Local\Temp\v2.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files\CheckpointStep.m3u C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\MeasureDeny.vstx C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\MountSelect.mov C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\TestUse.docx C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\ConfirmSwitch.shtml C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\CopyLock.eprtx C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\ImportUnregister.dxf C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\OutSet.bmp C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\OptimizeBlock.pptx C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\ResizeStart.mpg C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\ConvertToRequest.rtf C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\DebugEnter.mov C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\DebugRemove.clr C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\MeasureMove.otf C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\RestoreSave.html C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File created \??\c:\program files\265062875m-readme.txt C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File created \??\c:\program files (x86)\265062875m-readme.txt C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\EditLimit.vsx C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
File opened for modification \??\c:\program files\OpenLimit.m3u C:\Users\Admin\AppData\Local\Temp\v2.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\v2.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2437139445-1151884604-3026847218-1000\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\33E4E80807204C2B6182A3A14B591ACD25B5F0DB C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\02FAF3E291435468607857694DF5E45B68851868\Blob = 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 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2437139445-1151884604-3026847218-1000\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D89E3BD43D5D909B47A18977AA9D5CE36CEE184C C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2437139445-1151884604-3026847218-1000\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D89E3BD43D5D909B47A18977AA9D5CE36CEE184C\Blob = 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 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2437139445-1151884604-3026847218-1000\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\C94DC4831A901A9FEC0FB49B71BD49B5AAD4FAD0\Blob = 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 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\02FAF3E291435468607857694DF5E45B68851868\Blob = 0f000000010000001400000009b9105c5bba24343ca7f341c624e183f6ee7c1b090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b0601050507030853000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00b00000001000000260000005300650063007400690067006f00200028004100640064005400720075007300740029000000620000000100000020000000687fa451382278fff0c8b11f8d43d576671c6eb2bceab413fb83d965d06d2ff2140000000100000014000000adbd987a34b426f7fac42654ef03bde024cb541a1d000000010000001000000006f9583c00a763c23fb9e065a3366d557e0000000100000008000000000063f58926d70168000000010000000800000000409120d035d90103000000010000001400000002faf3e291435468607857694df5e45b6885186820000000010000003a040000308204363082031ea003020102020101300d06092a864886f70d0101050500306f310b300906035504061302534531143012060355040a130b416464547275737420414231263024060355040b131d41646454727573742045787465726e616c20545450204e6574776f726b312230200603550403131941646454727573742045787465726e616c20434120526f6f74301e170d3030303533303130343833385a170d3230303533303130343833385a306f310b300906035504061302534531143012060355040a130b416464547275737420414231263024060355040b131d41646454727573742045787465726e616c20545450204e6574776f726b312230200603550403131941646454727573742045787465726e616c20434120526f6f7430820122300d06092a864886f70d01010105000382010f003082010a0282010100b7f71a33e6f200042d39e04e5bed1fbc6c0fcdb5fa23b6cede9b113397a4294c7d939fbd4abc93ed031ae38fcfe56d505ad69729945a80b0497adb2e95fdb8cabf37382d1e3e9141ad7056c7f04f3fe8329e74cac89054e9c65f0f789d9a403c0eac61aa5e148f9e87a16a50dcd79a4eaf05b3a671949c71b350600ac7139d38078602a8e9a869261890ab4cb04f23ab3a4f84d8dfce9fe1696fbbd742d76b44e4c7adee6d415f725a710837b37965a459a09437f7002f0dc29272dad03872db14a845c45d2a7db7b4d6c4eeaccd1344b7c92bdd430025fa61b9696a582311b7a7338f567559f5cd29d746b70a2b65b6d3426f15b2b87bfbefe95d53d5345a270203010001a381dc3081d9301d0603551d0e04160414adbd987a34b426f7fac42654ef03bde024cb541a300b0603551d0f040403020106300f0603551d130101ff040530030101ff3081990603551d2304819130818e8014adbd987a34b426f7fac42654ef03bde024cb541aa173a471306f310b300906035504061302534531143012060355040a130b416464547275737420414231263024060355040b131d41646454727573742045787465726e616c20545450204e6574776f726b312230200603550403131941646454727573742045787465726e616c20434120526f6f74820101300d06092a864886f70d01010505000382010100b09be08525c2d623e20f9606929d41989cd9847981d91e5b14072336658fb0d877bbac416c47608351b0f9323de7fcf62613c78016a5bf5afc87cf787989219ae24c070a8635bcf2de51c4d296b7dc7e4eee70fd1c39eb0c0251142d8ebd16e0c1df4675e724adecf442b48593701067ba9d06354a18d32b7acc5142a17a63d1e6bba1c52bc236be130de6bd637e797ba7090d40ab6add8f8ac3f6f68c1a420551d445f59fa76221681520433c99e77cbd24d8a9911773883f561b313818b4710f9acdc80e9e8e2e1be18c9883cb1f31f1444cc604734976600fc7f8bd17806b2ee9cc4c0e5a9a790f200a2ed59e63261e559294d882175a7bd0bcc78f4e8604 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\02FAF3E291435468607857694DF5E45B68851868\Blob = 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 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2437139445-1151884604-3026847218-1000\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\C94DC4831A901A9FEC0FB49B71BD49B5AAD4FAD0 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\02FAF3E291435468607857694DF5E45B68851868 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\02FAF3E291435468607857694DF5E45B68851868\Blob = 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 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2437139445-1151884604-3026847218-1000\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\33E4E80807204C2B6182A3A14B591ACD25B5F0DB\Blob = 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 C:\Users\Admin\AppData\Local\Temp\v2.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Users\Admin\AppData\Local\Temp\v2.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\v2.exe

"C:\Users\Admin\AppData\Local\Temp\v2.exe"

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\system32\wbem\unsecapp.exe -Embedding

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 241.150.49.20.in-addr.arpa udp
US 8.8.8.8:53 81.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 138.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 8.8.8.8:53 212.20.149.52.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 133.130.81.91.in-addr.arpa udp
US 8.8.8.8:53 13.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 commercialboatbuilding.com udp
US 8.8.8.8:53 parkstreetauto.net udp
US 50.28.1.103:443 parkstreetauto.net tcp
US 8.8.8.8:53 longislandelderlaw.com udp
US 160.153.0.194:443 longislandelderlaw.com tcp
US 8.8.8.8:53 lbcframingelectrical.com udp
DE 3.125.36.175:443 lbcframingelectrical.com tcp
US 8.8.8.8:53 103.1.28.50.in-addr.arpa udp
US 8.8.8.8:53 194.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 assurancesalextrespaille.fr udp
US 8.8.8.8:53 smale-opticiens.nl udp
NL 217.18.77.142:443 smale-opticiens.nl tcp
US 8.8.8.8:53 175.36.125.3.in-addr.arpa udp
US 8.8.8.8:53 142.77.18.217.in-addr.arpa udp
US 8.8.8.8:53 naturavetal.hr udp
DE 168.119.205.241:443 naturavetal.hr tcp
US 8.8.8.8:53 www.naturavetal.hr udp
DE 168.119.205.241:443 www.naturavetal.hr tcp
US 8.8.8.8:53 global-kids.info udp
US 8.8.8.8:53 kaotikkustomz.com udp
US 162.240.41.248:443 kaotikkustomz.com tcp
US 8.8.8.8:53 241.205.119.168.in-addr.arpa udp
US 8.8.8.8:53 klusbeter.nl udp
IE 54.77.118.147:443 klusbeter.nl tcp
US 8.8.8.8:53 www.klusbeter.nl udp
IE 34.250.140.231:443 www.klusbeter.nl tcp
US 8.8.8.8:53 248.41.240.162.in-addr.arpa udp
US 8.8.8.8:53 147.118.77.54.in-addr.arpa udp
US 8.8.8.8:53 231.140.250.34.in-addr.arpa udp
US 8.8.8.8:53 socstrp.org udp
US 104.21.40.177:443 socstrp.org tcp
US 8.8.8.8:53 stefanpasch.me udp
US 151.101.128.119:443 stefanpasch.me tcp
US 8.8.8.8:53 jandaonline.com udp
DE 91.203.110.207:443 jandaonline.com tcp
US 8.8.8.8:53 beyondmarcomdotcom.wordpress.com udp
US 8.8.8.8:53 177.40.21.104.in-addr.arpa udp
US 8.8.8.8:53 119.128.101.151.in-addr.arpa udp
US 8.8.8.8:53 207.110.203.91.in-addr.arpa udp
US 192.0.78.13:443 beyondmarcomdotcom.wordpress.com tcp
US 8.8.8.8:53 nmiec.com udp
US 8.8.8.8:53 13.78.0.192.in-addr.arpa udp
US 8.8.8.8:53 sabel-bf.com udp
US 8.8.8.8:53 edv-live.de udp
DE 202.61.195.82:443 edv-live.de tcp
US 8.8.8.8:53 zewatchers.com udp
US 8.8.8.8:53 82.195.61.202.in-addr.arpa udp
FR 185.100.4.146:443 zewatchers.com tcp
US 8.8.8.8:53 controldekk.com udp
US 104.21.49.151:443 controldekk.com tcp
US 8.8.8.8:53 146.4.100.185.in-addr.arpa udp
US 8.8.8.8:53 151.49.21.104.in-addr.arpa udp
US 8.8.8.8:53 berlin-bamboo-bikes.org udp
US 170.178.183.18:443 berlin-bamboo-bikes.org tcp
US 8.8.8.8:53 sauschneider.info udp
JP 133.125.48.132:443 sauschneider.info tcp
US 8.8.8.8:53 18.183.178.170.in-addr.arpa udp
US 8.8.8.8:53 norpol-yachting.com udp
PL 85.128.229.94:443 norpol-yachting.com tcp
US 8.8.8.8:53 nhadatcanho247.com udp
US 8.8.8.8:53 plantag.de udp
DE 217.160.0.197:443 plantag.de tcp
US 8.8.8.8:53 www.plantag.de udp
DE 217.160.0.197:443 www.plantag.de tcp
US 8.8.8.8:53 94.229.128.85.in-addr.arpa udp
US 8.8.8.8:53 197.0.160.217.in-addr.arpa udp
US 8.8.8.8:53 paradicepacks.com udp
US 8.8.8.8:53 odiclinic.org udp
US 170.249.205.18:443 odiclinic.org tcp
US 8.8.8.8:53 grupocarvalhoerodrigues.com.br udp
US 8.8.8.8:53 ino-professional.ru udp
RU 77.74.185.33:443 ino-professional.ru tcp
US 8.8.8.8:53 18.205.249.170.in-addr.arpa udp
US 8.8.8.8:53 koken-voor-baby.nl udp
FR 152.228.189.75:443 koken-voor-baby.nl tcp
US 8.8.8.8:53 interactcenter.org udp
US 162.159.135.42:443 interactcenter.org tcp
US 8.8.8.8:53 33.185.74.77.in-addr.arpa udp
US 8.8.8.8:53 75.189.228.152.in-addr.arpa udp
US 8.8.8.8:53 interactcenterarts.org udp
US 162.159.134.42:443 interactcenterarts.org tcp
US 8.8.8.8:53 homng.net udp
US 8.8.8.8:53 vox-surveys.com udp
US 8.8.8.8:53 42.134.159.162.in-addr.arpa udp
US 8.8.8.8:53 42.135.159.162.in-addr.arpa udp
DE 5.189.182.42:443 vox-surveys.com tcp
US 8.8.8.8:53 linnankellari.fi udp
FI 94.237.35.37:443 linnankellari.fi tcp
US 8.8.8.8:53 lmtprovisions.com udp
US 35.215.98.25:443 lmtprovisions.com tcp
US 8.8.8.8:53 igrealestate.com udp
US 157.230.196.39:443 igrealestate.com tcp
US 8.8.8.8:53 42.182.189.5.in-addr.arpa udp
US 8.8.8.8:53 37.35.237.94.in-addr.arpa udp
US 8.8.8.8:53 25.98.215.35.in-addr.arpa udp
US 8.8.8.8:53 bimnapratica.com udp
US 104.21.64.233:443 bimnapratica.com tcp
US 8.8.8.8:53 theadventureedge.com udp
US 143.198.70.160:443 theadventureedge.com tcp
US 8.8.8.8:53 233.64.21.104.in-addr.arpa udp
US 8.8.8.8:53 39.196.230.157.in-addr.arpa udp
US 8.8.8.8:53 160.70.198.143.in-addr.arpa udp
US 8.8.8.8:53 hugoversichert.de udp
DE 62.141.48.71:443 hugoversichert.de tcp
US 8.8.8.8:53 vorotauu.ru udp
RU 92.53.96.171:443 vorotauu.ru tcp
US 8.8.8.8:53 deoudedorpskernnoordwijk.nl udp
NL 37.72.99.127:443 deoudedorpskernnoordwijk.nl tcp
US 8.8.8.8:53 aglend.com.au udp
US 104.21.89.246:443 aglend.com.au tcp
US 8.8.8.8:53 71.48.141.62.in-addr.arpa udp
US 8.8.8.8:53 171.96.53.92.in-addr.arpa udp
US 8.8.8.8:53 127.99.72.37.in-addr.arpa udp
US 8.8.8.8:53 246.89.21.104.in-addr.arpa udp
US 8.8.8.8:53 jasonbaileystudio.com udp
US 104.21.64.1:443 jasonbaileystudio.com tcp
US 8.8.8.8:53 jasonbailey.studio udp
US 76.76.21.21:443 jasonbailey.studio tcp
US 8.8.8.8:53 xn--fn-kka.no udp
NO 194.63.248.52:443 xn--fn-kka.no tcp
US 8.8.8.8:53 finde-deine-marke.de udp
US 8.8.8.8:53 kikedeoliveira.com udp
US 8.8.8.8:53 first-2-aid-u.com udp
US 8.8.8.8:53 maureenbreezedancetheater.org udp
US 198.49.23.144:443 maureenbreezedancetheater.org tcp
US 8.8.8.8:53 21.21.76.76.in-addr.arpa udp
US 8.8.8.8:53 52.248.63.194.in-addr.arpa udp
US 8.8.8.8:53 1.64.21.104.in-addr.arpa udp
US 8.8.8.8:53 www.maureenbreezedancetheater.org udp
US 198.49.23.144:443 www.maureenbreezedancetheater.org tcp
US 8.8.8.8:53 144.23.49.198.in-addr.arpa udp
US 8.8.8.8:53 maxadams.london udp
GB 77.72.2.73:443 maxadams.london tcp
US 8.8.8.8:53 smessier.com udp
US 8.8.8.8:53 pivoineetc.fr udp
US 104.21.50.89:443 pivoineetc.fr tcp
US 8.8.8.8:53 73.2.72.77.in-addr.arpa udp
US 104.21.50.89:443 pivoineetc.fr tcp
US 8.8.8.8:53 edgewoodestates.org udp
US 5.161.100.232:443 edgewoodestates.org tcp
US 8.8.8.8:53 89.50.21.104.in-addr.arpa udp
US 8.8.8.8:53 delchacay.com.ar udp
US 52.71.4.6:443 delchacay.com.ar tcp
US 8.8.8.8:53 232.100.161.5.in-addr.arpa udp
US 8.8.8.8:53 6.4.71.52.in-addr.arpa udp
US 8.8.8.8:53 no-plans.com udp
US 198.49.23.145:443 no-plans.com tcp
US 8.8.8.8:53 noplans.studio udp
US 76.76.21.21:443 noplans.studio tcp
US 8.8.8.8:53 145.23.49.198.in-addr.arpa udp
FI 185.168.212.98:443 vihannesporssi.fi tcp
US 8.8.8.8:53 98.212.168.185.in-addr.arpa udp
US 8.8.8.8:53 www.vegeporssi.fi udp
FI 185.168.212.119:443 www.vegeporssi.fi tcp
US 8.8.8.8:53 vegeporssi.fi udp
FI 185.168.212.119:443 vegeporssi.fi tcp
US 8.8.8.8:53 119.212.168.185.in-addr.arpa udp
US 8.8.8.8:53 gporf.fr udp
FR 85.31.222.20:443 gporf.fr tcp
US 8.8.8.8:53 cite4me.org udp
US 104.21.86.93:443 cite4me.org tcp
US 8.8.8.8:53 studentshare.org udp
US 104.26.11.211:443 studentshare.org tcp
US 8.8.8.8:53 20.222.31.85.in-addr.arpa udp
US 8.8.8.8:53 93.86.21.104.in-addr.arpa udp
US 8.8.8.8:53 cursoporcelanatoliquido.online udp
US 8.8.8.8:53 kath-kirche-gera.de udp
DE 78.46.130.17:443 kath-kirche-gera.de tcp
US 8.8.8.8:53 katholische-kirche-gera.de udp
DE 78.46.130.17:443 katholische-kirche-gera.de tcp
US 8.8.8.8:53 olejack.ru udp
US 104.21.34.118:443 olejack.ru tcp
US 8.8.8.8:53 211.11.26.104.in-addr.arpa udp
US 8.8.8.8:53 17.130.46.78.in-addr.arpa udp
US 8.8.8.8:53 strategicstatements.com udp
US 15.197.225.128:443 strategicstatements.com tcp
US 15.197.225.128:443 strategicstatements.com tcp
US 15.197.225.128:443 strategicstatements.com tcp
US 8.8.8.8:53 remcakram.com udp
US 8.8.8.8:53 qlog.de udp
DE 212.53.214.163:443 qlog.de tcp
US 8.8.8.8:53 loprus.pl udp
PL 46.242.232.208:443 loprus.pl tcp
US 8.8.8.8:53 118.34.21.104.in-addr.arpa udp
US 8.8.8.8:53 128.225.197.15.in-addr.arpa udp
US 8.8.8.8:53 163.214.53.212.in-addr.arpa udp
US 8.8.8.8:53 ulyssemarketing.com udp
US 8.8.8.8:53 geoffreymeuli.com udp
BE 176.62.169.78:443 geoffreymeuli.com tcp
US 8.8.8.8:53 208.232.242.46.in-addr.arpa udp
US 8.8.8.8:53 blossombeyond50.com udp
US 8.8.8.8:53 helenekowalsky.com udp
DE 178.16.62.149:443 helenekowalsky.com tcp
US 8.8.8.8:53 id-vet.com udp
FR 178.20.66.76:443 id-vet.com tcp
US 8.8.8.8:53 crt.sectigo.com udp
US 104.18.38.233:80 crt.sectigo.com tcp
US 8.8.8.8:53 www.innovative-diagnostics.com udp
FR 178.20.66.76:443 www.innovative-diagnostics.com tcp
US 8.8.8.8:53 76.66.20.178.in-addr.arpa udp
US 8.8.8.8:53 149.62.16.178.in-addr.arpa udp
US 8.8.8.8:53 233.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 23.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 maasreusel.nl udp
NL 185.104.29.132:443 maasreusel.nl tcp
US 8.8.8.8:53 oemands.dk udp
DK 94.231.103.159:443 oemands.dk tcp
US 8.8.8.8:53 159.103.231.94.in-addr.arpa udp
US 8.8.8.8:53 penco.ie udp
US 104.21.16.1:443 penco.ie tcp
US 8.8.8.8:53 koko-nora.dk udp
US 8.8.8.8:53 solhaug.tk udp
US 104.155.138.21:443 solhaug.tk tcp
US 8.8.8.8:53 thomasvicino.com udp
US 172.67.185.2:443 thomasvicino.com tcp
US 8.8.8.8:53 itelagen.com udp
US 157.230.80.33:443 itelagen.com tcp
US 8.8.8.8:53 supportsumba.nl udp
SE 5.198.250.123:443 supportsumba.nl tcp
US 8.8.8.8:53 21.138.155.104.in-addr.arpa udp
US 8.8.8.8:53 2.185.67.172.in-addr.arpa udp
US 8.8.8.8:53 33.80.230.157.in-addr.arpa udp
US 8.8.8.8:53 cuppacap.com udp
PL 51.68.138.187:443 cuppacap.com tcp
US 8.8.8.8:53 krlosdavid.com udp
US 45.33.241.252:443 krlosdavid.com tcp
US 8.8.8.8:53 123.250.198.5.in-addr.arpa udp
US 8.8.8.8:53 187.138.68.51.in-addr.arpa udp
US 8.8.8.8:53 pcp-nc.com udp
US 34.160.17.71:443 pcp-nc.com tcp
US 8.8.8.8:53 www.pcp-nc.com udp
US 34.160.81.203:443 www.pcp-nc.com tcp
US 8.8.8.8:53 71.17.160.34.in-addr.arpa udp
US 8.8.8.8:53 mapawood.com udp
US 74.220.199.6:443 mapawood.com tcp
US 8.8.8.8:53 203.81.160.34.in-addr.arpa udp
US 8.8.8.8:53 importardechina.info udp
US 8.8.8.8:53 kenhnoithatgo.com udp
US 8.8.8.8:53 milltimber.aberdeen.sch.uk udp
GB 80.76.118.1:443 milltimber.aberdeen.sch.uk tcp
US 8.8.8.8:53 sites.google.com udp
GB 172.217.169.14:443 sites.google.com tcp
US 8.8.8.8:53 hiddencitysecrets.com.au udp
AU 103.42.111.213:443 hiddencitysecrets.com.au tcp
US 8.8.8.8:53 1.118.76.80.in-addr.arpa udp
US 8.8.8.8:53 14.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 213.111.42.103.in-addr.arpa udp
US 8.8.8.8:53 mirjamholleman.nl udp
US 8.8.8.8:53 fizzl.ru udp
US 104.21.1.247:443 fizzl.ru tcp
US 8.8.8.8:53 blood-sports.net udp
US 104.21.41.195:443 blood-sports.net tcp
US 8.8.8.8:53 247.1.21.104.in-addr.arpa udp
US 8.8.8.8:53 kisplanning.com.au udp
AU 103.242.49.203:443 kisplanning.com.au tcp
US 8.8.8.8:53 195.41.21.104.in-addr.arpa udp
US 8.8.8.8:53 203.49.242.103.in-addr.arpa udp
US 8.8.8.8:53 tandartspraktijkheesch.nl udp
NL 31.7.4.143:443 tandartspraktijkheesch.nl tcp
US 8.8.8.8:53 143.4.7.31.in-addr.arpa udp
US 8.8.8.8:53 deprobatehelp.com udp
US 208.118.247.88:443 deprobatehelp.com tcp
US 8.8.8.8:53 completeweddingkansas.com udp
US 13.248.169.48:443 completeweddingkansas.com tcp
US 8.8.8.8:53 88.247.118.208.in-addr.arpa udp
US 8.8.8.8:53 tongdaifpthaiphong.net udp
US 172.67.170.234:443 tongdaifpthaiphong.net tcp
US 8.8.8.8:53 48.169.248.13.in-addr.arpa udp
US 8.8.8.8:53 234.170.67.172.in-addr.arpa udp
US 8.8.8.8:53 berliner-versicherungsvergleich.de udp
DE 94.130.244.208:443 berliner-versicherungsvergleich.de tcp
US 8.8.8.8:53 blog.solutionsarchitect.guru udp
US 8.8.8.8:53 sevenadvertising.com udp
US 8.8.8.8:53 buroludo.nl udp
NL 185.37.70.69:443 buroludo.nl tcp
US 8.8.8.8:53 208.244.130.94.in-addr.arpa udp
US 8.8.8.8:53 69.70.37.185.in-addr.arpa udp
US 8.8.8.8:53 stemplusacademy.com udp
US 172.67.199.110:443 stemplusacademy.com tcp
DE 178.254.34.29:443 zieglerbrothers.de tcp
US 8.8.8.8:53 offroadbeasts.com udp
US 8.8.8.8:53 nandistribution.nl udp
US 8.8.8.8:53 trystana.com udp
US 216.55.155.72:443 trystana.com tcp
US 8.8.8.8:53 110.199.67.172.in-addr.arpa udp
US 8.8.8.8:53 29.34.254.178.in-addr.arpa udp
US 8.8.8.8:53 friendsandbrgrs.com udp
US 162.159.134.42:443 friendsandbrgrs.com tcp
US 8.8.8.8:53 www.friendsandbrgrs.fi udp
US 162.159.134.42:443 www.friendsandbrgrs.fi tcp
US 162.159.134.42:443 www.friendsandbrgrs.fi tcp
US 8.8.8.8:53 tomaso.gr udp
GB 77.68.4.74:443 tomaso.gr tcp
US 8.8.8.8:53 74.4.68.77.in-addr.arpa udp
US 8.8.8.8:53 live-your-life.jp udp
JP 202.172.26.37:443 live-your-life.jp tcp
US 8.8.8.8:53 readberserk.com udp
US 104.21.235.131:443 readberserk.com tcp
US 8.8.8.8:53 37.26.172.202.in-addr.arpa udp
US 104.21.235.131:443 readberserk.com tcp
US 8.8.8.8:53 amylendscrestview.com udp
US 15.197.225.128:443 amylendscrestview.com tcp
US 8.8.8.8:53 131.235.21.104.in-addr.arpa udp
US 15.197.225.128:443 amylendscrestview.com tcp
US 15.197.225.128:443 amylendscrestview.com tcp
US 8.8.8.8:53 webcodingstudio.com udp
UA 91.239.233.22:443 webcodingstudio.com tcp
US 8.8.8.8:53 22.233.239.91.in-addr.arpa udp
US 8.8.8.8:53 11.179.89.13.in-addr.arpa udp
US 8.8.8.8:53 aakritpatel.com udp
US 162.248.215.177:443 aakritpatel.com tcp
US 8.8.8.8:53 ianaswanson.com udp
US 67.20.70.156:443 ianaswanson.com tcp
US 8.8.8.8:53 lecantou-coworking.com udp
FR 213.186.33.4:443 lecantou-coworking.com tcp
US 8.8.8.8:53 allamatberedare.se udp
US 8.8.8.8:53 dubscollective.com udp
US 199.15.163.139:443 dubscollective.com tcp
US 8.8.8.8:53 156.70.20.67.in-addr.arpa udp
US 8.8.8.8:53 4.33.186.213.in-addr.arpa udp
US 8.8.8.8:53 bristolaeroclub.co.uk udp
GB 91.238.162.172:443 bristolaeroclub.co.uk tcp
US 8.8.8.8:53 172.162.238.91.in-addr.arpa udp
US 8.8.8.8:53 partnertaxi.sk udp
US 8.8.8.8:53 saarland-thermen-resort.com udp
DE 212.82.35.248:443 saarland-thermen-resort.com tcp
US 8.8.8.8:53 shiftinspiration.com udp
US 8.8.8.8:53 testcoreprohealthuk.com udp
US 8.8.8.8:53 248.35.82.212.in-addr.arpa udp
US 104.161.48.2:443 testcoreprohealthuk.com tcp
US 8.8.8.8:53 freie-baugutachterpraxis.de udp
US 199.59.243.227:443 freie-baugutachterpraxis.de tcp
US 8.8.8.8:53 asiluxury.com udp
HK 206.119.6.196:443 asiluxury.com tcp
US 8.8.8.8:53 2.48.161.104.in-addr.arpa udp
US 8.8.8.8:53 aunexis.ch udp
US 8.8.8.8:53 international-sound-awards.com udp
DE 217.160.0.46:443 international-sound-awards.com tcp
US 8.8.8.8:53 227.243.59.199.in-addr.arpa udp
US 8.8.8.8:53 196.6.119.206.in-addr.arpa udp
US 8.8.8.8:53 exenberger.at udp
AT 81.19.159.60:443 exenberger.at tcp
US 8.8.8.8:53 46.0.160.217.in-addr.arpa udp
US 8.8.8.8:53 60.159.19.81.in-addr.arpa udp
US 8.8.8.8:53 www.exenberger.at udp
AT 81.19.159.60:443 www.exenberger.at tcp
US 8.8.8.8:53 iwelt.de udp
DE 82.212.215.131:443 iwelt.de tcp
US 8.8.8.8:53 www.iwelt.de udp
DE 82.212.215.131:443 www.iwelt.de tcp
US 8.8.8.8:53 connectedace.com udp
US 54.209.32.212:443 connectedace.com tcp
US 8.8.8.8:53 131.215.212.82.in-addr.arpa udp
US 52.71.57.184:443 connectedace.com tcp
US 8.8.8.8:53 dutchcoder.nl udp
US 8.8.8.8:53 evergreen-fishing.com udp
JP 118.27.103.110:443 evergreen-fishing.com tcp
US 8.8.8.8:53 chaotrang.com udp
HK 206.119.6.194:443 chaotrang.com tcp
US 8.8.8.8:53 110.103.27.118.in-addr.arpa udp
US 8.8.8.8:53 desert-trails.com udp
US 198.49.23.144:443 desert-trails.com tcp
US 198.185.159.145:443 desert-trails.com tcp
US 8.8.8.8:53 194.6.119.206.in-addr.arpa udp
US 8.8.8.8:53 binder-buerotechnik.at udp
DE 87.230.41.243:443 binder-buerotechnik.at tcp
US 8.8.8.8:53 luckypatcher-apkz.com udp
US 8.8.8.8:53 gamesboard.info udp
FR 185.221.181.20:443 gamesboard.info tcp
US 8.8.8.8:53 siliconbeach-realestate.com udp
US 8.8.8.8:53 dramagickcom.wordpress.com udp
US 192.0.78.13:443 dramagickcom.wordpress.com tcp
US 8.8.8.8:53 145.159.185.198.in-addr.arpa udp
US 8.8.8.8:53 243.41.230.87.in-addr.arpa udp
US 8.8.8.8:53 20.181.221.185.in-addr.arpa udp
US 8.8.8.8:53 gw2guilds.org udp
US 104.21.50.86:443 gw2guilds.org tcp
US 8.8.8.8:53 oncarrot.com udp
US 44.229.70.187:443 oncarrot.com tcp
US 8.8.8.8:53 86.50.21.104.in-addr.arpa udp
US 8.8.8.8:53 carrot.com udp
US 44.229.70.187:443 carrot.com tcp
US 8.8.8.8:53 187.70.229.44.in-addr.arpa udp
US 8.8.8.8:53 manijaipur.com udp
US 172.67.147.21:443 manijaipur.com tcp
US 8.8.8.8:53 www.manijaipur.com udp
US 172.67.147.21:443 www.manijaipur.com tcp
US 8.8.8.8:53 consultaractadenacimiento.com udp
US 8.8.8.8:53 21.147.67.172.in-addr.arpa udp
US 50.31.176.70:443 consultaractadenacimiento.com tcp
US 8.8.8.8:53 secundariaenlinea.com.mx udp
US 104.21.3.68:443 secundariaenlinea.com.mx tcp
US 8.8.8.8:53 70.176.31.50.in-addr.arpa udp
US 8.8.8.8:53 michaelsmeriglioracing.com udp
US 8.8.8.8:53 wasmachtmeinfonds.at udp
AT 81.19.154.98:443 wasmachtmeinfonds.at tcp
US 8.8.8.8:53 68.3.21.104.in-addr.arpa udp
US 8.8.8.8:53 logopaedie-blomberg.de udp
FR 92.205.210.41:443 logopaedie-blomberg.de tcp
US 8.8.8.8:53 memaag.com udp
HK 206.119.6.197:443 memaag.com tcp
DE 82.212.215.131:443 www.iwelt.de tcp
US 8.8.8.8:53 41.210.205.92.in-addr.arpa udp
DE 82.212.215.131:443 www.iwelt.de tcp
US 8.8.8.8:53 urclan.net udp
DE 104.248.39.236:443 urclan.net tcp
US 8.8.8.8:53 197.6.119.206.in-addr.arpa udp
US 8.8.8.8:53 321play.com.hk udp
US 8.8.8.8:53 stingraybeach.com udp
US 209.17.116.163:443 stingraybeach.com tcp
US 8.8.8.8:53 ecopro-kanto.com udp
JP 157.7.189.242:443 ecopro-kanto.com tcp
US 8.8.8.8:53 163.116.17.209.in-addr.arpa udp
US 8.8.8.8:53 extraordinaryoutdoors.com udp
US 18.119.154.66:443 extraordinaryoutdoors.com tcp
US 8.8.8.8:53 242.189.7.157.in-addr.arpa udp
US 3.140.13.188:443 extraordinaryoutdoors.com tcp
US 8.8.8.8:53 kostenlose-webcams.com udp
US 8.8.8.8:53 ziegler-praezisionsteile.de udp
FR 92.205.229.161:443 ziegler-praezisionsteile.de tcp
US 8.8.8.8:53 www.ziegler-praezisionsteile.de udp
FR 92.205.229.161:443 www.ziegler-praezisionsteile.de tcp
US 8.8.8.8:53 psnacademy.in udp
US 216.239.34.21:443 psnacademy.in tcp
US 216.239.34.21:443 psnacademy.in tcp
US 216.239.34.21:443 psnacademy.in tcp
US 8.8.8.8:53 zflas.com udp
US 104.21.96.1:443 zflas.com tcp
US 8.8.8.8:53 huehnerauge-entfernen.de udp
DK 46.30.215.119:443 huehnerauge-entfernen.de tcp
US 8.8.8.8:53 1.96.21.104.in-addr.arpa udp
US 8.8.8.8:53 21.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 micahkoleoso.de udp
DE 5.35.225.193:443 micahkoleoso.de tcp
US 8.8.8.8:53 rhinosfootballacademy.com udp
US 8.8.8.8:53 promalaga.es udp
FR 20.19.246.54:443 promalaga.es tcp
US 8.8.8.8:53 www.promalaga.es udp
FR 20.19.246.54:443 www.promalaga.es tcp
US 8.8.8.8:53 54.246.19.20.in-addr.arpa udp
US 8.8.8.8:53 119.215.30.46.in-addr.arpa udp
US 8.8.8.8:53 193.225.35.5.in-addr.arpa udp
US 8.8.8.8:53 hairnetty.wordpress.com udp
US 192.0.78.12:443 hairnetty.wordpress.com tcp
US 8.8.8.8:53 esope-formation.fr udp
FR 54.38.245.176:443 esope-formation.fr tcp
US 8.8.8.8:53 adoptioperheet.fi udp
US 8.8.8.8:53 12.78.0.192.in-addr.arpa udp
US 8.8.8.8:53 176.245.38.54.in-addr.arpa udp
US 104.21.25.53:443 adoptioperheet.fi tcp
US 8.8.8.8:53 www.adoptioperheet.fi udp
US 172.67.222.184:443 www.adoptioperheet.fi tcp
US 8.8.8.8:53 53.25.21.104.in-addr.arpa udp
US 8.8.8.8:53 184.222.67.172.in-addr.arpa udp
US 8.8.8.8:53 classycurtainsltd.co.uk udp
GB 185.194.90.11:443 classycurtainsltd.co.uk tcp
US 8.8.8.8:53 devstyle.org udp
NL 85.10.159.10:443 devstyle.org tcp
US 8.8.8.8:53 11.90.194.185.in-addr.arpa udp
US 8.8.8.8:53 evangelische-pfarrgemeinde-tuniberg.de udp
DE 78.47.183.205:443 evangelische-pfarrgemeinde-tuniberg.de tcp
US 8.8.8.8:53 www.evangelische-pfarrgemeinde-tuniberg.de udp
DE 78.47.183.205:443 www.evangelische-pfarrgemeinde-tuniberg.de tcp
DE 78.47.183.205:443 www.evangelische-pfarrgemeinde-tuniberg.de tcp
US 8.8.8.8:53 eco-southafrica.com udp
US 8.8.8.8:53 projetlyonturin.fr udp
US 8.8.8.8:53 205.183.47.78.in-addr.arpa udp
FR 195.64.164.87:443 projetlyonturin.fr tcp
HK 206.119.5.222:443 ivfminiua.com tcp
US 8.8.8.8:53 homecomingstudio.com udp
FR 164.132.235.17:443 homecomingstudio.com tcp
US 8.8.8.8:53 87.164.64.195.in-addr.arpa udp
US 8.8.8.8:53 222.5.119.206.in-addr.arpa udp
US 8.8.8.8:53 17.235.132.164.in-addr.arpa udp
US 8.8.8.8:53 bierensgebakkramen.nl udp
NL 128.140.223.200:443 bierensgebakkramen.nl tcp
US 8.8.8.8:53 200.223.140.128.in-addr.arpa udp
US 8.8.8.8:53 pubweb.carnet.hr udp
HR 193.198.184.106:443 pubweb.carnet.hr tcp
US 8.8.8.8:53 katiekerr.co.uk udp
GB 141.0.160.22:443 katiekerr.co.uk tcp
US 8.8.8.8:53 www.jessiejuniper.co.uk udp
CA 23.227.38.74:443 www.jessiejuniper.co.uk tcp
US 8.8.8.8:53 markelbroch.com udp
US 18.214.190.32:443 markelbroch.com tcp
US 8.8.8.8:53 22.160.0.141.in-addr.arpa udp
US 8.8.8.8:53 74.38.227.23.in-addr.arpa udp
US 8.8.8.8:53 106.184.198.193.in-addr.arpa udp
US 8.8.8.8:53 bogdanpeptine.ro udp
RO 185.162.66.158:443 bogdanpeptine.ro tcp
US 8.8.8.8:53 123vrachi.ru udp
RU 92.63.102.9:443 123vrachi.ru tcp
US 8.8.8.8:53 baumkuchenexpo.jp udp
US 8.8.8.8:53 158.66.162.185.in-addr.arpa udp
US 8.8.8.8:53 32.190.214.18.in-addr.arpa udp
US 8.8.8.8:53 9.102.63.92.in-addr.arpa udp
JP 153.122.173.27:443 baumkuchenexpo.jp tcp
US 8.8.8.8:53 tsklogistik.eu udp
AT 152.53.65.220:443 tsklogistik.eu tcp
US 8.8.8.8:53 www.tsklogistik.eu udp
AT 152.53.65.220:443 www.tsklogistik.eu tcp
US 8.8.8.8:53 220.65.53.152.in-addr.arpa udp
US 8.8.8.8:53 27.173.122.153.in-addr.arpa udp
US 8.8.8.8:53 narcert.com udp
US 160.153.0.21:443 narcert.com tcp
US 160.153.0.21:443 narcert.com tcp
US 160.153.0.21:443 narcert.com tcp
US 8.8.8.8:53 associacioesportivapolitg.cat udp
FR 94.23.80.4:443 associacioesportivapolitg.cat tcp
US 8.8.8.8:53 sla-paris.com udp
FR 51.91.98.250:443 sla-paris.com tcp
US 8.8.8.8:53 www.sla-paris.com udp
FR 51.91.98.250:443 www.sla-paris.com tcp
US 8.8.8.8:53 21.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 4.80.23.94.in-addr.arpa udp
US 8.8.8.8:53 250.98.91.51.in-addr.arpa udp
US 8.8.8.8:53 latribuessentielle.com udp
FR 213.186.33.5:443 latribuessentielle.com tcp
US 8.8.8.8:53 hvccfloorcare.com udp
US 3.18.7.81:443 hvccfloorcare.com tcp
US 3.19.116.195:443 hvccfloorcare.com tcp
US 8.8.8.8:53 colorofhorses.com udp
US 8.8.8.8:53 humancondition.com udp
US 172.66.42.253:443 humancondition.com tcp
US 8.8.8.8:53 www.humancondition.com udp
US 172.66.42.253:443 www.humancondition.com tcp
US 8.8.8.8:53 253.42.66.172.in-addr.arpa udp
US 8.8.8.8:53 hotelzentral.at udp
AT 93.189.31.34:443 hotelzentral.at tcp
US 8.8.8.8:53 www.hotelzentral.at udp
AT 93.189.31.34:443 www.hotelzentral.at tcp
US 8.8.8.8:53 34.31.189.93.in-addr.arpa udp
US 8.8.8.8:53 kosterra.com udp
US 35.215.114.69:443 kosterra.com tcp
US 8.8.8.8:53 polzine.net udp
JP 52.69.52.231:443 polzine.net tcp
US 8.8.8.8:53 69.114.215.35.in-addr.arpa udp
US 8.8.8.8:53 panelsandwichmadrid.es udp
ES 185.161.98.72:443 panelsandwichmadrid.es tcp
US 8.8.8.8:53 231.52.69.52.in-addr.arpa udp
US 8.8.8.8:53 morawe-krueger.de udp
DE 89.107.188.143:443 morawe-krueger.de tcp
US 8.8.8.8:53 72.98.161.185.in-addr.arpa udp
US 8.8.8.8:53 143.188.107.89.in-addr.arpa udp
US 8.8.8.8:53 xn--vrftet-pua.biz udp
DK 94.231.103.100:443 xn--vrftet-pua.biz tcp
US 8.8.8.8:53 eraorastudio.com udp
US 198.54.115.34:443 eraorastudio.com tcp
US 8.8.8.8:53 shadebarandgrillorlando.com udp
US 190.92.159.133:443 shadebarandgrillorlando.com tcp
US 8.8.8.8:53 100.103.231.94.in-addr.arpa udp
US 8.8.8.8:53 34.115.54.198.in-addr.arpa udp
US 8.8.8.8:53 133.159.92.190.in-addr.arpa udp
US 8.8.8.8:53 calxplus.eu udp
US 8.8.8.8:53 365questions.org udp
FR 78.40.8.65:443 365questions.org tcp
FR 78.40.8.65:443 365questions.org tcp
US 8.8.8.8:53 videomarketing.pro udp
US 104.21.24.63:443 videomarketing.pro tcp
US 8.8.8.8:53 spinheal.ru udp
US 8.8.8.8:53 65.8.40.78.in-addr.arpa udp
US 8.8.8.8:53 63.24.21.104.in-addr.arpa udp
RU 31.31.205.163:443 spinheal.ru tcp
US 8.8.8.8:53 dupontsellshomes.com udp
US 70.40.220.182:443 dupontsellshomes.com tcp
US 8.8.8.8:53 centromarysalud.com udp
US 8.8.8.8:53 163.205.31.31.in-addr.arpa udp
FR 15.236.15.196:443 centromarysalud.com tcp
US 8.8.8.8:53 chrissieperry.com udp
AU 35.213.220.12:443 chrissieperry.com tcp
US 8.8.8.8:53 182.220.40.70.in-addr.arpa udp
US 8.8.8.8:53 196.15.236.15.in-addr.arpa udp
US 8.8.8.8:53 12.220.213.35.in-addr.arpa udp
US 8.8.8.8:53 atozdistribution.co.uk udp
US 8.8.8.8:53 podsosnami.ru udp
RU 31.31.196.204:443 podsosnami.ru tcp
US 104.21.30.13:443 travelffeine.com tcp
US 8.8.8.8:53 204.196.31.31.in-addr.arpa udp
US 8.8.8.8:53 13.30.21.104.in-addr.arpa udp
US 8.8.8.8:53 americafirstcommittee.org udp
US 172.67.164.161:443 americafirstcommittee.org tcp
US 8.8.8.8:53 161.164.67.172.in-addr.arpa udp
US 8.8.8.8:53 raschlosser.de udp
DE 185.245.99.134:443 raschlosser.de tcp
US 8.8.8.8:53 www.raschlosser.de udp
DE 185.245.99.134:443 www.raschlosser.de tcp
US 8.8.8.8:53 poultrypartners.nl udp
US 8.8.8.8:53 134.99.245.185.in-addr.arpa udp
NL 185.223.163.47:443 poultrypartners.nl tcp
US 8.8.8.8:53 roadwarrior.app udp
FR 52.222.201.70:443 roadwarrior.app tcp
US 8.8.8.8:53 huesges-gruppe.de udp
DE 185.159.122.22:443 huesges-gruppe.de tcp
US 8.8.8.8:53 www.huesges-gruppe.de udp
DE 185.159.122.22:443 www.huesges-gruppe.de tcp
US 8.8.8.8:53 47.163.223.185.in-addr.arpa udp
US 8.8.8.8:53 70.201.222.52.in-addr.arpa udp
US 8.8.8.8:53 22.122.159.185.in-addr.arpa udp
US 8.8.8.8:53 wellplast.se udp
DE 172.105.94.142:443 wellplast.se tcp
US 8.8.8.8:53 advizewealth.com udp
US 185.230.63.171:443 advizewealth.com tcp
US 8.8.8.8:53 142.94.105.172.in-addr.arpa udp
US 8.8.8.8:53 danubecloud.com udp
US 3.94.41.167:443 danubecloud.com tcp
US 8.8.8.8:53 171.63.230.185.in-addr.arpa udp
US 52.86.6.113:443 danubecloud.com tcp
US 8.8.8.8:53 dw-css.de udp
DE 64.190.63.222:443 dw-css.de tcp
US 8.8.8.8:53 mariposapropaneaz.com udp
US 76.223.67.189:443 mariposapropaneaz.com tcp
US 8.8.8.8:53 aurum-juweliere.de udp
FI 95.217.148.141:443 aurum-juweliere.de tcp
US 8.8.8.8:53 e6.i.lencr.org udp
GB 2.18.27.76:80 e6.i.lencr.org tcp
US 8.8.8.8:53 189.67.223.76.in-addr.arpa udp
US 8.8.8.8:53 141.148.217.95.in-addr.arpa udp
US 8.8.8.8:53 www.aurum-juweliere.de udp
FI 95.217.148.141:443 www.aurum-juweliere.de tcp
US 8.8.8.8:53 jobcenterkenya.com udp
US 38.31.150.230:443 jobcenterkenya.com tcp
US 8.8.8.8:53 76.27.18.2.in-addr.arpa udp
US 8.8.8.8:53 aselbermachen.com udp
US 8.8.8.8:53 tux-espacios.com udp
US 107.161.179.93:443 tux-espacios.com tcp
US 8.8.8.8:53 answerstest.ru udp
RU 92.53.96.50:443 answerstest.ru tcp
US 8.8.8.8:53 93.179.161.107.in-addr.arpa udp
US 8.8.8.8:53 kampotpepper.gives udp
US 8.8.8.8:53 monark.com udp
US 13.248.155.104:443 monark.com tcp
US 8.8.8.8:53 cranleighscoutgroup.org udp
NL 20.82.12.44:443 cranleighscoutgroup.org tcp
US 8.8.8.8:53 coffreo.biz udp
US 172.67.24.65:443 coffreo.biz tcp
US 8.8.8.8:53 104.155.248.13.in-addr.arpa udp
US 8.8.8.8:53 50.96.53.92.in-addr.arpa udp
US 8.8.8.8:53 65.24.67.172.in-addr.arpa udp
US 8.8.8.8:53 44.12.82.20.in-addr.arpa udp
US 8.8.8.8:53 thomas-hospital.de udp
DE 167.233.15.238:443 thomas-hospital.de tcp
US 8.8.8.8:53 hkr-reise.de udp
US 8.8.8.8:53 238.15.233.167.in-addr.arpa udp
FR 5.35.241.68:443 hkr-reise.de tcp
US 8.8.8.8:53 www.hkr-reise.de udp
FR 5.35.241.68:443 www.hkr-reise.de tcp
US 8.8.8.8:53 executiveairllc.com udp
US 50.28.18.55:443 executiveairllc.com tcp
US 8.8.8.8:53 68.241.35.5.in-addr.arpa udp
US 8.8.8.8:53 vesinhnha.com.vn udp
VN 103.74.118.108:443 vesinhnha.com.vn tcp
US 8.8.8.8:53 55.18.28.50.in-addr.arpa udp
US 8.8.8.8:53 108.118.74.103.in-addr.arpa udp
US 8.8.8.8:53 aodaichandung.com udp
US 8.8.8.8:53 lukeshepley.wordpress.com udp
US 192.0.78.13:443 lukeshepley.wordpress.com tcp
US 8.8.8.8:53 copystar.co.uk udp
DE 217.160.0.115:443 copystar.co.uk tcp
DE 217.160.0.115:443 copystar.co.uk tcp
DE 217.160.0.115:443 copystar.co.uk tcp
US 8.8.8.8:53 noesis.tech udp
IN 143.110.186.61:443 noesis.tech tcp
US 8.8.8.8:53 115.0.160.217.in-addr.arpa udp
US 8.8.8.8:53 montrium.com udp
US 99.83.190.102:443 montrium.com tcp
US 8.8.8.8:53 www.montrium.com udp
IE 63.35.51.142:443 www.montrium.com tcp
US 8.8.8.8:53 61.186.110.143.in-addr.arpa udp
US 8.8.8.8:53 zenderthelender.com udp
US 162.159.140.127:443 zenderthelender.com tcp
US 8.8.8.8:53 theduke.de udp
DE 217.160.0.111:443 theduke.de tcp
US 8.8.8.8:53 102.190.83.99.in-addr.arpa udp
US 8.8.8.8:53 142.51.35.63.in-addr.arpa udp
US 8.8.8.8:53 127.140.159.162.in-addr.arpa udp
US 8.8.8.8:53 111.0.160.217.in-addr.arpa udp
US 8.8.8.8:53 rebeccarisher.com udp
US 104.156.253.187:443 rebeccarisher.com tcp
US 8.8.8.8:53 187.253.156.104.in-addr.arpa udp
US 8.8.8.8:53 levdittliv.se udp
US 172.67.155.122:443 levdittliv.se tcp
US 8.8.8.8:53 fitforme.com udp
US 104.26.9.199:443 fitforme.com tcp
US 8.8.8.8:53 abogadoengijon.es udp
ES 185.47.12.73:443 abogadoengijon.es tcp
US 8.8.8.8:53 122.155.67.172.in-addr.arpa udp
US 8.8.8.8:53 199.9.26.104.in-addr.arpa udp
US 8.8.8.8:53 73.12.47.185.in-addr.arpa udp
US 8.8.8.8:53 kevinjodea.com udp
US 172.67.220.52:443 kevinjodea.com tcp
US 8.8.8.8:53 faroairporttransfers.net udp
US 162.213.251.210:443 faroairporttransfers.net tcp
US 173.208.199.194:443 igfap.com tcp
US 8.8.8.8:53 52.220.67.172.in-addr.arpa udp
US 8.8.8.8:53 centuryrs.com udp
US 8.8.8.8:53 blewback.com udp
US 8.8.8.8:53 ora-it.de udp
FR 176.28.10.103:443 ora-it.de tcp
US 8.8.8.8:53 www.ora-it.de udp
FR 176.28.10.103:443 www.ora-it.de tcp
US 8.8.8.8:53 210.251.213.162.in-addr.arpa udp
US 8.8.8.8:53 194.199.208.173.in-addr.arpa udp
US 8.8.8.8:53 103.10.28.176.in-addr.arpa udp
US 8.8.8.8:53 limassoldriving.com udp
US 108.163.225.126:443 limassoldriving.com tcp
US 8.8.8.8:53 126.225.163.108.in-addr.arpa udp
US 8.8.8.8:53 nosuchthingasgovernment.com udp
US 104.219.248.46:443 nosuchthingasgovernment.com tcp
US 8.8.8.8:53 iviaggisonciliegie.it udp
GB 77.95.113.179:443 iviaggisonciliegie.it tcp
US 8.8.8.8:53 46.248.219.104.in-addr.arpa udp
US 198.185.159.144:443 thefixhut.com tcp
US 8.8.8.8:53 179.113.95.77.in-addr.arpa udp
US 8.8.8.8:53 www.thefixhut.com udp
US 198.49.23.144:443 www.thefixhut.com tcp
US 8.8.8.8:53 patrickfoundation.net udp
US 8.8.8.8:53 herbstfeststaefa.ch udp
CH 217.26.52.28:443 herbstfeststaefa.ch tcp
US 8.8.8.8:53 144.159.185.198.in-addr.arpa udp
US 8.8.8.8:53 walter-lemm.de udp
DE 5.35.225.156:443 walter-lemm.de tcp
US 8.8.8.8:53 toreria.es udp
US 8.8.8.8:53 the-virtualizer.com udp
FR 5.175.14.53:443 the-virtualizer.com tcp
US 8.8.8.8:53 villa-marrakesch.de udp
US 8.8.8.8:53 pasivect.co.uk udp
US 8.8.8.8:53 live-con-arte.de udp
DE 138.201.29.115:443 live-con-arte.de tcp
US 8.8.8.8:53 surespark.org.uk udp
FR 155.133.142.6:443 surespark.org.uk tcp
US 8.8.8.8:53 28.52.26.217.in-addr.arpa udp
US 8.8.8.8:53 156.225.35.5.in-addr.arpa udp
US 8.8.8.8:53 53.14.175.5.in-addr.arpa udp
US 8.8.8.8:53 115.29.201.138.in-addr.arpa udp
US 8.8.8.8:53 htchorst.nl udp
NL 2.56.226.118:443 htchorst.nl tcp
US 8.8.8.8:53 www.htchorst.nl udp
NL 2.56.226.118:443 www.htchorst.nl tcp
US 8.8.8.8:53 6.142.133.155.in-addr.arpa udp
US 8.8.8.8:53 118.226.56.2.in-addr.arpa udp
US 8.8.8.8:53 saka.gr udp
DE 138.201.194.220:443 saka.gr tcp
US 8.8.8.8:53 geekwork.pl udp
PL 94.154.117.119:443 geekwork.pl tcp
US 8.8.8.8:53 220.194.201.138.in-addr.arpa udp
US 8.8.8.8:53 journeybacktolife.com udp
US 3.130.204.160:443 journeybacktolife.com tcp
US 3.130.253.23:443 journeybacktolife.com tcp
US 8.8.8.8:53 mountsoul.de udp
DE 35.207.98.7:443 mountsoul.de tcp
US 8.8.8.8:53 7.98.207.35.in-addr.arpa udp
US 8.8.8.8:53 funjose.org.gt udp
US 34.174.238.219:443 funjose.org.gt tcp
US 8.8.8.8:53 www.funjose.org.gt udp
US 34.174.238.219:443 www.funjose.org.gt tcp
US 8.8.8.8:53 219.238.174.34.in-addr.arpa udp
US 8.8.8.8:53 creative-waves.co.uk udp
US 8.8.8.8:53 manutouchmassage.com udp
US 8.8.8.8:53 mediaplayertest.net udp
US 8.8.8.8:53 vitavia.lt udp
EE 217.146.69.43:443 vitavia.lt tcp
US 8.8.8.8:53 43.69.146.217.in-addr.arpa udp
US 8.8.8.8:53 osterberg.fi udp
FI 185.220.77.1:443 osterberg.fi tcp
US 8.8.8.8:53 pierrehale.com udp
FR 155.133.142.13:443 pierrehale.com tcp
US 8.8.8.8:53 asgestion.com udp
ES 185.66.41.224:443 asgestion.com tcp
US 8.8.8.8:53 13.142.133.155.in-addr.arpa udp
US 8.8.8.8:53 1.77.220.185.in-addr.arpa udp
US 8.8.8.8:53 airconditioning-waalwijk.nl udp
US 8.8.8.8:53 224.41.66.185.in-addr.arpa udp
US 8.8.8.8:53 rushhourappliances.com udp
GB 91.108.103.179:443 rushhourappliances.com tcp
US 8.8.8.8:53 artotelamsterdam.com udp
US 141.193.213.21:443 artotelamsterdam.com tcp
US 8.8.8.8:53 cursosgratuitosnainternet.com udp
US 8.8.8.8:53 baylegacy.com udp
US 141.193.213.10:443 baylegacy.com tcp
US 8.8.8.8:53 21.213.193.141.in-addr.arpa udp
US 8.8.8.8:53 179.103.108.91.in-addr.arpa udp
SE 93.158.97.64:443 campus2day.de tcp
US 8.8.8.8:53 personalenhancementcenter.com udp
US 54.241.44.184:443 personalenhancementcenter.com tcp
US 8.8.8.8:53 10.213.193.141.in-addr.arpa udp
US 8.8.8.8:53 godekcenter.com udp
US 54.241.44.184:443 godekcenter.com tcp
US 8.8.8.8:53 184.44.241.54.in-addr.arpa udp
US 8.8.8.8:53 64.97.158.93.in-addr.arpa udp
US 8.8.8.8:53 www.godekcenter.com udp
US 54.241.44.184:443 www.godekcenter.com tcp
US 8.8.8.8:53 strandcampingdoonbeg.com udp
IE 78.137.164.83:443 strandcampingdoonbeg.com tcp
US 8.8.8.8:53 83.164.137.78.in-addr.arpa udp
US 8.8.8.8:53 cirugiauretra.es udp
US 8.8.8.8:53 bradynursery.com udp
US 35.215.111.114:443 bradynursery.com tcp
US 8.8.8.8:53 team-montage.dk udp
US 8.8.8.8:53 114.111.215.35.in-addr.arpa udp
DE 46.4.208.59:443 team-montage.dk tcp
US 8.8.8.8:53 iwr.nl udp
NL 5.157.80.172:443 iwr.nl tcp
US 8.8.8.8:53 59.208.4.46.in-addr.arpa udp
US 8.8.8.8:53 babcockchurch.org udp
US 76.223.54.146:443 babcockchurch.org tcp
US 8.8.8.8:53 172.80.157.5.in-addr.arpa udp
US 8.8.8.8:53 simulatebrain.com udp
US 8.8.8.8:53 d1franchise.com udp
US 199.60.103.140:443 d1franchise.com tcp
US 8.8.8.8:53 edelman.jp udp
US 18.209.206.50:443 edelman.jp tcp
US 8.8.8.8:53 www.edelman.jp udp
US 18.209.206.50:443 www.edelman.jp tcp
US 8.8.8.8:53 146.54.223.76.in-addr.arpa udp
US 8.8.8.8:53 140.103.60.199.in-addr.arpa udp
US 8.8.8.8:53 50.206.209.18.in-addr.arpa udp
US 8.8.8.8:53 sojamindbody.com udp
US 8.8.8.8:53 lebellevue.fr udp
CH 185.177.62.150:443 lebellevue.fr tcp
CH 185.177.62.150:443 lebellevue.fr tcp
US 8.8.8.8:53 wurmpower.at udp
FR 85.25.185.59:443 wurmpower.at tcp
US 8.8.8.8:53 150.62.177.185.in-addr.arpa udp
US 8.8.8.8:53 bptdmaluku.com udp
GB 185.151.30.179:443 bptdmaluku.com tcp
US 8.8.8.8:53 winrace.no udp
NO 77.88.77.99:443 winrace.no tcp
US 8.8.8.8:53 59.185.25.85.in-addr.arpa udp
US 8.8.8.8:53 179.30.151.185.in-addr.arpa udp
US 8.8.8.8:53 www.winrace.no udp
NO 77.88.77.99:443 www.winrace.no tcp
US 8.8.8.8:53 ungsvenskarna.se udp
SE 185.21.145.101:443 ungsvenskarna.se tcp
US 8.8.8.8:53 99.77.88.77.in-addr.arpa udp
US 8.8.8.8:53 boompinoy.com udp
US 8.8.8.8:53 dirittosanitario.biz udp
DE 3.73.135.230:443 dirittosanitario.biz tcp
US 8.8.8.8:53 smokeysstoves.com udp
US 35.209.217.183:443 smokeysstoves.com tcp
US 8.8.8.8:53 www.smokeysstoves.com udp
US 35.209.217.183:443 www.smokeysstoves.com tcp
US 8.8.8.8:53 101.145.21.185.in-addr.arpa udp
US 8.8.8.8:53 230.135.73.3.in-addr.arpa udp
US 8.8.8.8:53 thailandholic.com udp
US 204.11.56.48:443 thailandholic.com tcp
US 8.8.8.8:53 dpo-as-a-service.com udp
GB 89.116.109.248:443 dpo-as-a-service.com tcp
US 8.8.8.8:53 spd-ehningen.de udp
DE 109.237.138.15:443 spd-ehningen.de tcp
US 8.8.8.8:53 48.56.11.204.in-addr.arpa udp
US 8.8.8.8:53 agence-chocolat-noir.com udp
FR 213.186.33.5:443 agence-chocolat-noir.com tcp
US 8.8.8.8:53 248.109.116.89.in-addr.arpa udp
US 8.8.8.8:53 15.138.237.109.in-addr.arpa udp
US 8.8.8.8:53 mrsfieldskc.com udp
US 8.8.8.8:53 kamahouse.net udp
US 8.8.8.8:53 pasvenska.se udp
US 104.21.85.71:443 pasvenska.se tcp
US 8.8.8.8:53 71.85.21.104.in-addr.arpa udp
US 8.8.8.8:53 hatech.io udp
US 8.8.8.8:53 abl1.net udp
US 172.67.141.28:443 abl1.net tcp
US 8.8.8.8:53 www.abl1.net udp
US 104.21.54.188:443 www.abl1.net tcp
US 8.8.8.8:53 www.ablfunding.com udp
US 172.67.201.254:443 www.ablfunding.com tcp
US 8.8.8.8:53 rumahminangberdaya.com udp
US 8.8.8.8:53 burkert-ideenreich.de udp
DE 188.40.2.8:443 burkert-ideenreich.de tcp
US 8.8.8.8:53 188.54.21.104.in-addr.arpa udp
US 8.8.8.8:53 28.141.67.172.in-addr.arpa udp
US 8.8.8.8:53 254.201.67.172.in-addr.arpa udp
US 8.8.8.8:53 dutchbrewingcoffee.com udp
US 107.178.223.183:443 dutchbrewingcoffee.com tcp
US 8.8.8.8:53 thewellnessmimi.com udp
US 8.8.8.8:53 spacecitysisters.org udp
US 198.49.23.144:443 spacecitysisters.org tcp
US 8.8.8.8:53 183.223.178.107.in-addr.arpa udp
US 8.8.8.8:53 8.2.40.188.in-addr.arpa udp
US 8.8.8.8:53 www.spacecitysisters.org udp
US 198.49.23.144:443 www.spacecitysisters.org tcp
US 8.8.8.8:53 myzk.site udp
US 8.8.8.8:53 ncuccr.org udp
US 192.124.249.56:443 ncuccr.org tcp
US 8.8.8.8:53 financescorecard.com udp
US 44.230.85.241:443 financescorecard.com tcp
US 8.8.8.8:53 56.249.124.192.in-addr.arpa udp
US 8.8.8.8:53 antonmack.de udp
SK 37.9.175.132:443 operaslovakia.sk tcp
US 8.8.8.8:53 paulisdogshop.de udp
DE 85.10.215.20:443 paulisdogshop.de tcp
US 8.8.8.8:53 kedak.de udp
US 104.21.12.218:443 kedak.de tcp
US 8.8.8.8:53 241.85.230.44.in-addr.arpa udp
US 8.8.8.8:53 132.175.9.37.in-addr.arpa udp
US 149.28.115.51:443 firstpaymentservices.com tcp
US 8.8.8.8:53 20.215.10.85.in-addr.arpa udp
US 8.8.8.8:53 218.12.21.104.in-addr.arpa udp
US 8.8.8.8:53 bafuncs.org udp
GB 3.9.206.124:443 bafuncs.org tcp
US 8.8.8.8:53 51.115.28.149.in-addr.arpa udp
US 8.8.8.8:53 caribdoctor.org udp
US 8.8.8.8:53 scenepublique.net udp
US 8.8.8.8:53 starsarecircular.org udp
US 185.230.63.171:443 starsarecircular.org tcp
US 8.8.8.8:53 securityfmm.com udp
US 8.8.8.8:53 stormwall.se udp
US 8.8.8.8:53 drnice.de udp
DE 78.47.54.3:443 drnice.de tcp
US 8.8.8.8:53 124.206.9.3.in-addr.arpa udp
US 8.8.8.8:53 geisterradler.de udp
US 8.8.8.8:53 mooreslawngarden.com udp
US 8.8.8.8:53 modestmanagement.com udp
GB 62.100.206.104:443 modestmanagement.com tcp
US 8.8.8.8:53 onlyresultsmarketing.com udp
US 162.243.165.239:443 onlyresultsmarketing.com tcp
US 8.8.8.8:53 3.54.47.78.in-addr.arpa udp
US 8.8.8.8:53 104.206.100.62.in-addr.arpa udp
US 8.8.8.8:53 239.165.243.162.in-addr.arpa udp
DE 128.140.39.110:443 talentwunder.com tcp
US 8.8.8.8:53 110.39.140.128.in-addr.arpa udp
US 8.8.8.8:53 veybachcenter.de udp
DE 85.13.161.99:443 veybachcenter.de tcp
DE 85.13.161.99:443 veybachcenter.de tcp
US 8.8.8.8:53 trulynolen.co.uk udp
N/A 127.0.0.1:443 tcp
US 8.8.8.8:53 99.161.13.85.in-addr.arpa udp
US 8.8.8.8:53 pcprofessor.com udp
US 184.170.246.76:443 pcprofessor.com tcp
US 8.8.8.8:53 pcprofessor.edu udp
US 184.170.246.76:443 pcprofessor.edu tcp
US 184.170.246.76:443 pcprofessor.edu tcp
US 8.8.8.8:53 76.246.170.184.in-addr.arpa udp
US 8.8.8.8:53 hardinggroup.com udp
US 35.208.165.110:443 hardinggroup.com tcp
US 8.8.8.8:53 howardcompanies.com udp
US 34.174.141.74:443 howardcompanies.com tcp
US 8.8.8.8:53 110.165.208.35.in-addr.arpa udp
US 8.8.8.8:53 ouryoungminds.wordpress.com udp
US 192.0.78.13:443 ouryoungminds.wordpress.com tcp
US 8.8.8.8:53 plv.media udp
US 8.8.8.8:53 74.141.174.34.in-addr.arpa udp
US 66.42.112.66:443 plv.media tcp
US 8.8.8.8:53 handi-jack-llc.com udp
US 8.8.8.8:53 yamalevents.com udp
US 160.153.0.180:443 yamalevents.com tcp
US 8.8.8.8:53 66.112.42.66.in-addr.arpa udp
US 8.8.8.8:53 sandd.nl udp
GB 2.18.27.154:443 sandd.nl tcp
US 8.8.8.8:53 diversiapsicologia.es udp
DE 217.160.0.121:443 diversiapsicologia.es tcp
US 8.8.8.8:53 180.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 154.27.18.2.in-addr.arpa udp
US 8.8.8.8:53 121.0.160.217.in-addr.arpa udp
US 8.8.8.8:53 samnewbyjax.com udp
US 8.8.8.8:53 naturalrapids.com udp
US 74.220.199.6:443 naturalrapids.com tcp
US 8.8.8.8:53 kafu.ch udp
CH 83.166.138.66:443 kafu.ch tcp
US 8.8.8.8:53 girlillamarketing.com udp
US 99.83.190.102:443 girlillamarketing.com tcp
US 8.8.8.8:53 www.girlillamarketing.com udp
IE 34.249.200.254:443 www.girlillamarketing.com tcp
US 8.8.8.8:53 66.138.166.83.in-addr.arpa udp
US 8.8.8.8:53 campusoutreach.org udp
US 50.116.39.119:443 campusoutreach.org tcp
US 8.8.8.8:53 254.200.249.34.in-addr.arpa udp
US 8.8.8.8:53 biapi-coaching.fr udp
FR 91.134.190.181:443 biapi-coaching.fr tcp
US 8.8.8.8:53 119.39.116.50.in-addr.arpa udp
US 8.8.8.8:53 www.monalisacoaching.com udp
FR 91.134.190.181:443 www.monalisacoaching.com tcp
US 8.8.8.8:53 groupe-frayssinet.fr udp
FR 162.19.75.184:443 groupe-frayssinet.fr tcp
FR 162.19.75.184:443 groupe-frayssinet.fr tcp
US 8.8.8.8:53 fensterbau-ziegler.de udp
DE 82.212.214.7:443 fensterbau-ziegler.de tcp
US 8.8.8.8:53 184.75.19.162.in-addr.arpa udp
US 8.8.8.8:53 181.190.134.91.in-addr.arpa udp
US 8.8.8.8:53 www.fensterbauziegler.de udp
DE 82.212.214.7:443 www.fensterbauziegler.de tcp
US 8.8.8.8:53 abogados-en-alicante.es udp
ES 185.186.169.202:443 abogados-en-alicante.es tcp
US 8.8.8.8:53 7.214.212.82.in-addr.arpa udp
US 8.8.8.8:53 fiscalsort.com udp
ES 212.227.37.46:443 fiscalsort.com tcp
US 8.8.8.8:53 durganews.com udp
US 172.232.25.148:443 durganews.com tcp
US 8.8.8.8:53 202.169.186.185.in-addr.arpa udp
US 8.8.8.8:53 46.37.227.212.in-addr.arpa udp
US 8.8.8.8:53 div-vertriebsforschung.de udp
US 8.8.8.8:53 sarbatkhalsafoundation.org udp
US 160.153.0.167:443 sarbatkhalsafoundation.org tcp
US 8.8.8.8:53 148.25.232.172.in-addr.arpa udp
US 8.8.8.8:53 vickiegrayimages.com udp
US 160.153.0.86:443 vickiegrayimages.com tcp
US 8.8.8.8:53 camsadviser.com udp
US 8.8.8.8:53 iwelt.de udp
DE 82.212.215.131:443 iwelt.de tcp
US 8.8.8.8:53 167.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 86.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 www.iwelt.de udp
DE 82.212.215.131:443 www.iwelt.de tcp
US 8.8.8.8:53 coding-marking.com udp
FR 164.132.235.17:443 coding-marking.com tcp
US 8.8.8.8:53 castillobalduz.es udp
ES 78.136.73.185:443 castillobalduz.es tcp
US 8.8.8.8:53 www.castillobalduz.es udp
US 8.8.8.8:53 185.73.136.78.in-addr.arpa udp
ES 78.136.73.185:443 www.castillobalduz.es tcp
ES 78.136.73.185:443 www.castillobalduz.es tcp
NO 194.63.249.211:443 oslomf.no tcp
US 8.8.8.8:53 woodworkersolution.com udp
US 77.247.126.152:443 woodworkersolution.com tcp
US 8.8.8.8:53 atalent.fi udp
US 76.76.21.21:443 atalent.fi tcp
US 8.8.8.8:53 harpershologram.wordpress.com udp
US 192.0.78.12:443 harpershologram.wordpress.com tcp
US 8.8.8.8:53 lefumetdesdombes.com udp
FR 164.132.235.17:443 lefumetdesdombes.com tcp
US 8.8.8.8:53 lachofikschiet.nl udp
NL 212.32.242.248:443 lachofikschiet.nl tcp
US 8.8.8.8:53 kmbshipping.co.uk udp
US 141.193.213.10:443 kmbshipping.co.uk tcp
US 8.8.8.8:53 echtveilig.nl udp
NL 136.144.130.40:443 echtveilig.nl tcp
US 8.8.8.8:53 248.242.32.212.in-addr.arpa udp
US 8.8.8.8:53 ligiercenter-sachsen.de udp
DE 138.201.183.11:443 ligiercenter-sachsen.de tcp
US 8.8.8.8:53 www.ligiercenter-sachsen.de udp
DE 138.201.183.11:443 www.ligiercenter-sachsen.de tcp
US 8.8.8.8:53 40.130.144.136.in-addr.arpa udp
US 8.8.8.8:53 11.183.201.138.in-addr.arpa udp
US 8.8.8.8:53 www.teilefreund.de udp
DE 138.201.183.11:443 www.teilefreund.de tcp
US 8.8.8.8:53 gymnasedumanagement.com udp
FR 51.83.116.214:443 gymnasedumanagement.com tcp
US 8.8.8.8:53 gymnasedumanagement.fr udp
FR 51.83.116.214:443 gymnasedumanagement.fr tcp
US 8.8.8.8:53 214.116.83.51.in-addr.arpa udp
US 8.8.8.8:53 suncrestcabinets.ca udp
DK 185.58.213.110:443 suncrestcabinets.ca tcp
US 8.8.8.8:53 anthonystreetrimming.com udp
US 107.21.217.230:443 anthonystreetrimming.com tcp
US 8.8.8.8:53 110.213.58.185.in-addr.arpa udp
US 8.8.8.8:53 gonzalezfornes.es udp
US 8.8.8.8:53 aniblinova.wordpress.com udp
US 192.0.78.13:443 aniblinova.wordpress.com tcp
US 8.8.8.8:53 naturstein-hotte.de udp
DE 78.46.10.150:443 naturstein-hotte.de tcp
US 8.8.8.8:53 fitnessingbyjessica.com udp
US 34.174.248.197:443 fitnessingbyjessica.com tcp
US 8.8.8.8:53 230.217.21.107.in-addr.arpa udp
US 8.8.8.8:53 alvinschwartz.wordpress.com udp
US 192.0.78.13:443 alvinschwartz.wordpress.com tcp
US 8.8.8.8:53 maryloutaylor.com udp
US 54.82.172.55:443 maryloutaylor.com tcp
US 8.8.8.8:53 150.10.46.78.in-addr.arpa udp
US 8.8.8.8:53 197.248.174.34.in-addr.arpa udp
US 54.205.192.227:443 maryloutaylor.com tcp
US 8.8.8.8:53 liliesandbeauties.org udp
US 8.8.8.8:53 iyahayki.nl udp
NL 62.221.215.82:443 iyahayki.nl tcp
US 8.8.8.8:53 simoneblum.de udp
US 8.8.8.8:53 xlarge.at udp
DE 5.22.145.121:443 xlarge.at tcp
US 8.8.8.8:53 82.215.221.62.in-addr.arpa udp
DE 5.22.145.16:443 xlarge.at tcp
US 8.8.8.8:53 atmos-show.com udp
CZ 46.8.8.100:443 atmos-show.com tcp
US 8.8.8.8:53 houseofplus.com udp
US 3.33.251.168:443 houseofplus.com tcp
US 3.33.251.168:443 houseofplus.com tcp
US 8.8.8.8:53 100.8.8.46.in-addr.arpa udp
US 3.33.251.168:443 houseofplus.com tcp
US 8.8.8.8:53 tenacitytenfold.com udp
US 8.8.8.8:53 hoteledenpadova.it udp
US 8.8.8.8:53 hokagestore.com udp
US 209.58.148.145:443 hokagestore.com tcp
US 8.8.8.8:53 168.251.33.3.in-addr.arpa udp
US 8.8.8.8:53 145.148.58.209.in-addr.arpa udp
US 192.0.78.12:443 alvinschwartz.wordpress.com tcp
US 8.8.8.8:53 joyeriaorindia.com udp
ES 89.17.195.40:443 joyeriaorindia.com tcp
ES 89.17.195.40:443 joyeriaorindia.com tcp
US 8.8.8.8:53 julis-lsa.de udp
DE 185.53.177.20:443 julis-lsa.de tcp
US 8.8.8.8:53 40.195.17.89.in-addr.arpa udp
US 8.8.8.8:53 yourobgyn.net udp
US 104.21.8.148:443 yourobgyn.net tcp
US 8.8.8.8:53 theletter.company udp
US 8.8.8.8:53 20.177.53.185.in-addr.arpa udp
US 8.8.8.8:53 148.8.21.104.in-addr.arpa udp
US 3.33.130.190:443 theletter.company tcp
US 8.8.8.8:53 190.130.33.3.in-addr.arpa udp
US 8.8.8.8:53 ceres.org.au udp
AU 43.250.142.137:443 ceres.org.au tcp
US 8.8.8.8:53 137.142.250.43.in-addr.arpa udp
US 8.8.8.8:53 glennroberts.co.nz udp
NZ 120.138.30.85:443 glennroberts.co.nz tcp
US 8.8.8.8:53 www.greservices.nz udp
US 8.8.8.8:53 85.30.138.120.in-addr.arpa udp
NZ 120.138.30.85:443 www.greservices.nz tcp
US 8.8.8.8:53 platformier.com udp
US 8.8.8.8:53 wychowanieprzedszkolne.pl udp
PL 77.55.253.214:443 wychowanieprzedszkolne.pl tcp
US 8.8.8.8:53 crosspointefellowship.church udp
US 74.208.236.106:443 crosspointefellowship.church tcp
US 8.8.8.8:53 214.253.55.77.in-addr.arpa udp
US 8.8.8.8:53 106.236.208.74.in-addr.arpa udp
US 8.8.8.8:53 newyou.at udp
AT 81.19.159.78:443 newyou.at tcp
US 8.8.8.8:53 highlinesouthasc.com udp
US 172.67.162.61:443 highlinesouthasc.com tcp
US 173.231.220.89:443 delawarecorporatelaw.com tcp
US 8.8.8.8:53 78.159.19.81.in-addr.arpa udp
US 8.8.8.8:53 gratispresent.se udp
US 8.8.8.8:53 61.162.67.172.in-addr.arpa udp
US 8.8.8.8:53 89.220.231.173.in-addr.arpa udp
US 104.21.46.52:443 gratispresent.se tcp
US 8.8.8.8:53 spargel-kochen.de udp
DE 87.238.193.48:443 spargel-kochen.de tcp
US 8.8.8.8:53 smartypractice.com udp
US 8.8.8.8:53 musictreehouse.net udp
US 8.8.8.8:53 catholicmusicfest.com udp
US 208.91.197.195:443 catholicmusicfest.com tcp
US 8.8.8.8:53 48.193.238.87.in-addr.arpa udp
US 8.8.8.8:53 52.46.21.104.in-addr.arpa udp
US 8.8.8.8:53 jbbjw.com udp
US 172.65.190.172:443 jbbjw.com tcp
US 172.65.190.172:443 jbbjw.com tcp
US 172.65.190.172:443 jbbjw.com tcp
US 8.8.8.8:53 yousay.site udp
US 162.241.224.155:443 yousay.site tcp
US 8.8.8.8:53 172.190.65.172.in-addr.arpa udp
US 8.8.8.8:53 155.224.241.162.in-addr.arpa udp
US 8.8.8.8:53 spectrmash.ru udp
RU 77.222.56.169:443 spectrmash.ru tcp
US 8.8.8.8:53 triactis.com udp
FR 145.239.37.162:443 triactis.com tcp
US 8.8.8.8:53 peterstrobos.com udp
FR 213.186.33.2:443 peterstrobos.com tcp
US 8.8.8.8:53 169.56.222.77.in-addr.arpa udp
US 8.8.8.8:53 www.peterstrobos.com udp
US 8.8.8.8:53 162.37.239.145.in-addr.arpa udp
US 8.8.8.8:53 2.33.186.213.in-addr.arpa udp
FR 213.186.33.2:443 www.peterstrobos.com tcp
US 8.8.8.8:53 mepavex.nl udp
BE 217.21.184.250:443 mepavex.nl tcp
US 8.8.8.8:53 rimborsobancario.net udp
US 8.8.8.8:53 kindersitze-vergleich.de udp
DE 185.159.123.48:443 kindersitze-vergleich.de tcp
US 8.8.8.8:53 hashkasolutindo.com udp
US 8.8.8.8:53 onlybacklink.com udp
US 208.100.26.245:443 onlybacklink.com tcp
US 8.8.8.8:53 48.123.159.185.in-addr.arpa udp
US 8.8.8.8:53 collaborativeclassroom.org udp
US 162.159.135.42:443 collaborativeclassroom.org tcp
US 8.8.8.8:53 www.collaborativeclassroom.org udp
US 162.159.135.42:443 www.collaborativeclassroom.org tcp
US 8.8.8.8:53 245.26.100.208.in-addr.arpa udp
US 8.8.8.8:53 zzyjtsgls.com udp
US 8.8.8.8:53 drinkseed.com udp
US 192.185.20.95:443 drinkseed.com tcp
US 8.8.8.8:53 tandartspraktijkhartjegroningen.nl udp
NL 89.31.58.92:443 tandartspraktijkhartjegroningen.nl tcp
US 8.8.8.8:53 werkkring.nl udp
BE 83.217.86.218:443 werkkring.nl tcp
US 8.8.8.8:53 95.20.185.192.in-addr.arpa udp
US 8.8.8.8:53 92.58.31.89.in-addr.arpa udp
US 8.8.8.8:53 knowledgemuseumbd.com udp
US 8.8.8.8:53 elpa.se udp
SE 159.253.26.222:443 elpa.se tcp
US 8.8.8.8:53 www.elpa.se udp
SE 159.253.26.222:443 www.elpa.se tcp
US 8.8.8.8:53 222.26.253.159.in-addr.arpa udp
US 8.8.8.8:53 globedivers.wordpress.com udp
US 192.0.78.12:443 globedivers.wordpress.com tcp
US 8.8.8.8:53 cyntox.com udp
US 199.60.103.16:443 cyntox.com tcp
US 8.8.8.8:53 upmrkt.co udp
ZA 196.40.97.190:443 upmrkt.co tcp
US 8.8.8.8:53 16.103.60.199.in-addr.arpa udp
US 8.8.8.8:53 190.97.40.196.in-addr.arpa udp
US 8.8.8.8:53 marchand-sloboda.com udp
US 8.8.8.8:53 vancouver-print.ca udp
US 24.38.41.117:443 vancouver-print.ca tcp
US 8.8.8.8:53 minuteman.com udp
US 24.38.41.117:443 minuteman.com tcp
US 8.8.8.8:53 117.41.38.24.in-addr.arpa udp
DE 89.110.151.38:443 makeitcount.at tcp
US 8.8.8.8:53 ausair.com.au udp
US 8.8.8.8:53 mank.de udp
DE 176.52.247.15:443 mank.de tcp
US 8.8.8.8:53 38.151.110.89.in-addr.arpa udp
US 8.8.8.8:53 www.mank.de udp
DE 176.52.247.15:443 www.mank.de tcp
US 8.8.8.8:53 15.247.52.176.in-addr.arpa udp
US 8.8.8.8:53 adultgamezone.com udp
LT 84.32.84.32:443 adultgamezone.com tcp
LT 84.32.84.32:443 adultgamezone.com tcp
LT 84.32.84.32:443 adultgamezone.com tcp
US 8.8.8.8:53 wmiadmin.com udp
DE 185.53.177.52:443 wmiadmin.com tcp
US 8.8.8.8:53 stampagrafica.es udp
ES 82.98.178.174:443 stampagrafica.es tcp
US 8.8.8.8:53 officehymy.com udp
JP 157.112.183.48:443 officehymy.com tcp
US 8.8.8.8:53 52.177.53.185.in-addr.arpa udp
US 8.8.8.8:53 174.178.98.82.in-addr.arpa udp
US 8.8.8.8:53 biortaggivaldelsa.com udp
IT 185.221.175.252:443 biortaggivaldelsa.com tcp
US 8.8.8.8:53 craigmccabe.fun udp
US 8.8.8.8:53 rafaut.com udp
FR 54.36.91.62:443 rafaut.com tcp
US 8.8.8.8:53 norovirus-ratgeber.de udp
DE 85.10.214.209:443 norovirus-ratgeber.de tcp
US 8.8.8.8:53 48.183.112.157.in-addr.arpa udp
US 8.8.8.8:53 252.175.221.185.in-addr.arpa udp
US 8.8.8.8:53 62.91.36.54.in-addr.arpa udp
US 8.8.8.8:53 moveonnews.com udp
US 8.8.8.8:53 dublikator.com udp
UA 185.68.16.210:443 dublikator.com tcp
US 8.8.8.8:53 209.214.10.85.in-addr.arpa udp
US 8.8.8.8:53 210.16.68.185.in-addr.arpa udp
US 8.8.8.8:53 rieed.de udp
US 8.8.8.8:53 mrsplans.net udp
US 100.24.208.97:443 mrsplans.net tcp
US 8.8.8.8:53 tanzschule-kieber.de udp
FR 92.204.55.63:443 tanzschule-kieber.de tcp
US 8.8.8.8:53 ahouseforlease.com udp
US 8.8.8.8:53 anteniti.com udp
UA 185.104.45.128:443 anteniti.com tcp
US 8.8.8.8:53 97.208.24.100.in-addr.arpa udp
US 8.8.8.8:53 63.55.204.92.in-addr.arpa udp
FR 146.59.209.152:443 selfoutlet.com tcp
US 8.8.8.8:53 alhashem.net udp
US 199.59.243.227:443 alhashem.net tcp
US 8.8.8.8:53 hebkft.hu udp
HU 185.33.55.101:443 hebkft.hu tcp
US 8.8.8.8:53 128.45.104.185.in-addr.arpa udp
US 8.8.8.8:53 152.209.59.146.in-addr.arpa udp
US 8.8.8.8:53 wraithco.com udp
US 216.55.169.119:443 wraithco.com tcp
US 8.8.8.8:53 101.55.33.185.in-addr.arpa udp
US 8.8.8.8:53 argos.wityu.fund udp
US 141.193.213.11:443 argos.wityu.fund tcp
US 8.8.8.8:53 broseller.com udp
DE 89.31.143.90:443 broseller.com tcp
DE 89.31.143.90:443 broseller.com tcp
DE 89.31.143.90:443 broseller.com tcp
US 8.8.8.8:53 bildungsunderlebnis.haus udp
DE 5.35.226.24:443 bildungsunderlebnis.haus tcp
US 8.8.8.8:53 antiaginghealthbenefits.com udp
US 8.8.8.8:53 littlebird.salon udp
US 199.59.243.227:443 littlebird.salon tcp
US 8.8.8.8:53 11.213.193.141.in-addr.arpa udp
US 8.8.8.8:53 24.226.35.5.in-addr.arpa udp
US 8.8.8.8:53 danholzmann.com udp
DE 185.181.104.242:443 danholzmann.com tcp
US 8.8.8.8:53 turkcaparbariatrics.com udp
TR 213.159.7.167:443 turkcaparbariatrics.com tcp
US 8.8.8.8:53 www.turkcaparbariatrics.com udp
TR 213.159.7.167:443 www.turkcaparbariatrics.com tcp
US 8.8.8.8:53 167.7.159.213.in-addr.arpa udp
US 8.8.8.8:53 muamuadolls.com udp
US 172.67.219.40:443 muamuadolls.com tcp
US 8.8.8.8:53 40.219.67.172.in-addr.arpa udp
US 8.8.8.8:53 minipara.com udp
US 8.8.8.8:53 stoneys.ch udp
CH 217.26.48.101:443 stoneys.ch tcp
US 8.8.8.8:53 schlafsack-test.net udp
US 8.8.8.8:53 rehabilitationcentersinhouston.net udp
US 8.8.8.8:53 fannmedias.com udp
US 8.8.8.8:53 resortmtn.com udp
US 3.33.251.168:443 resortmtn.com tcp
US 3.33.251.168:443 resortmtn.com tcp
US 3.33.251.168:443 resortmtn.com tcp
US 8.8.8.8:53 dlc.berlin udp
US 192.124.249.84:443 dlc.berlin tcp
US 8.8.8.8:53 101.48.26.217.in-addr.arpa udp
US 8.8.8.8:53 www.dlc.berlin udp
US 192.124.249.84:443 www.dlc.berlin tcp
US 8.8.8.8:53 84.249.124.192.in-addr.arpa udp
US 8.8.8.8:53 mbxvii.com udp
US 3.33.130.190:443 mbxvii.com tcp
US 8.8.8.8:53 chavesdoareeiro.com udp
US 8.8.8.8:53 bouncingbonanza.com udp
US 107.163.254.247:443 bouncingbonanza.com tcp
US 8.8.8.8:53 digivod.de udp
BE 185.175.196.88:443 digivod.de tcp
US 8.8.8.8:53 judithjansen.com udp
NL 185.135.241.57:443 judithjansen.com tcp
US 8.8.8.8:53 trackyourconstruction.com udp
US 8.8.8.8:53 mountaintoptinyhomes.com udp
US 172.232.4.213:443 mountaintoptinyhomes.com tcp
US 8.8.8.8:53 57.241.135.185.in-addr.arpa udp
US 8.8.8.8:53 cleliaekiko.online udp
US 8.8.8.8:53 shiresresidential.com udp
GB 188.240.191.167:443 shiresresidential.com tcp
US 8.8.8.8:53 abbeysalesandlettingsgroup.co.uk udp
GB 185.151.30.212:443 abbeysalesandlettingsgroup.co.uk tcp
US 8.8.8.8:53 austinlchurch.com udp
US 75.2.70.75:443 austinlchurch.com tcp
US 8.8.8.8:53 www.austinlchurch.com udp
US 8.8.8.8:53 213.4.232.172.in-addr.arpa udp
US 8.8.8.8:53 167.191.240.188.in-addr.arpa udp
US 8.8.8.8:53 212.30.151.185.in-addr.arpa udp
US 8.8.8.8:53 75.70.2.75.in-addr.arpa udp
IE 34.249.200.254:443 www.austinlchurch.com tcp
US 8.8.8.8:53 epwritescom.wordpress.com udp
US 192.0.78.13:443 epwritescom.wordpress.com tcp
US 8.8.8.8:53 deltacleta.cat udp
ES 185.66.41.210:443 deltacleta.cat tcp
US 8.8.8.8:53 blogdecachorros.com udp
US 75.2.37.224:443 blogdecachorros.com tcp
US 8.8.8.8:53 210.41.66.185.in-addr.arpa udp
US 8.8.8.8:53 puertamatic.es udp
DE 144.76.199.3:443 puertamatic.es tcp
US 8.8.8.8:53 224.37.2.75.in-addr.arpa udp
US 8.8.8.8:53 3.199.76.144.in-addr.arpa udp
US 8.8.8.8:53 portoesdofarrobo.com udp
US 8.8.8.8:53 devok.info udp
US 104.21.48.1:443 devok.info tcp
US 8.8.8.8:53 ahoravision.com udp
US 104.21.27.169:443 ahoravision.com tcp
US 8.8.8.8:53 yaioa.com udp
SG 139.99.120.6:443 yaioa.com tcp
US 8.8.8.8:53 169.27.21.104.in-addr.arpa udp
US 8.8.8.8:53 maestrojumpinmusic.com udp
SG 139.99.120.6:443 maestrojumpinmusic.com tcp
US 8.8.8.8:53 6.120.99.139.in-addr.arpa udp
US 8.8.8.8:53 marathonerpaolo.com udp
US 199.59.243.227:443 marathonerpaolo.com tcp
US 8.8.8.8:53 coastalbridgeadvisors.com udp
US 70.32.23.95:443 coastalbridgeadvisors.com tcp
US 8.8.8.8:53 teknoz.net udp
US 8.8.8.8:53 irishmachineryauctions.com udp
NL 35.214.182.106:443 irishmachineryauctions.com tcp
US 8.8.8.8:53 95.23.32.70.in-addr.arpa udp
US 8.8.8.8:53 ctrler.cn udp
HK 119.28.54.134:443 ctrler.cn tcp
US 8.8.8.8:53 106.182.214.35.in-addr.arpa udp
US 8.8.8.8:53 mir-na-iznanku.com udp
UA 185.68.16.177:443 mir-na-iznanku.com tcp
US 8.8.8.8:53 daklesa.de udp
DE 178.250.15.192:443 daklesa.de tcp
US 8.8.8.8:53 forestlakeuca.org.au udp
US 8.8.8.8:53 pmcimpact.com udp
US 8.8.8.8:53 leeuwardenstudentcity.nl udp
FR 15.236.230.5:443 leeuwardenstudentcity.nl tcp
US 8.8.8.8:53 www.leeuwardenstudentcity.nl udp
FR 15.236.230.5:443 www.leeuwardenstudentcity.nl tcp
US 8.8.8.8:53 134.54.28.119.in-addr.arpa udp
US 8.8.8.8:53 177.16.68.185.in-addr.arpa udp
US 8.8.8.8:53 192.15.250.178.in-addr.arpa udp
US 8.8.8.8:53 5.230.236.15.in-addr.arpa udp
US 8.8.8.8:53 deschl.net udp
DE 178.63.103.80:443 deschl.net tcp
US 8.8.8.8:53 80.103.63.178.in-addr.arpa udp
AE 193.123.91.179:443 faizanullah.com tcp
US 8.8.8.8:53 bookspeopleplaces.com udp
US 3.215.100.79:443 bookspeopleplaces.com tcp
US 8.8.8.8:53 pelorus.group udp
US 3.33.130.190:443 pelorus.group tcp
US 8.8.8.8:53 179.91.123.193.in-addr.arpa udp
US 8.8.8.8:53 zonamovie21.net udp
US 8.8.8.8:53 haremnick.com udp
US 172.232.25.148:443 haremnick.com tcp
US 8.8.8.8:53 jvanvlietdichter.nl udp
BE 188.208.37.47:443 jvanvlietdichter.nl tcp
US 8.8.8.8:53 79.100.215.3.in-addr.arpa udp
US 8.8.8.8:53 dr-tremel-rednitzhembach.de udp
DE 159.69.74.75:443 dr-tremel-rednitzhembach.de tcp
AU 116.90.53.15:443 you-bysia.com.au tcp
US 8.8.8.8:53 75.74.69.159.in-addr.arpa udp
US 8.8.8.8:53 youbysia.com.au udp
US 198.49.23.145:443 youbysia.com.au tcp
US 8.8.8.8:53 15.53.90.116.in-addr.arpa udp
US 8.8.8.8:53 drugdevice.org udp
DE 136.243.147.81:443 wien-mitte.co.at tcp
US 8.8.8.8:53 andersongilmour.co.uk udp
US 8.8.8.8:53 microcirc.net udp
US 18.209.127.182:443 microcirc.net tcp
US 8.8.8.8:53 81.147.243.136.in-addr.arpa udp
US 8.8.8.8:53 jusibe.com udp
US 172.67.192.199:443 jusibe.com tcp
US 8.8.8.8:53 101gowrie.com udp
US 8.8.8.8:53 199.192.67.172.in-addr.arpa udp
US 8.8.8.8:53 smithmediastrategies.com udp
US 50.87.170.173:443 smithmediastrategies.com tcp
US 8.8.8.8:53 173.170.87.50.in-addr.arpa udp
US 8.8.8.8:53 slimani.net udp
US 69.163.178.50:443 slimani.net tcp
US 8.8.8.8:53 www.slimani.net udp
US 69.163.178.50:443 www.slimani.net tcp
US 8.8.8.8:53 50.178.163.69.in-addr.arpa udp
RO 81.181.102.24:443 urmasiimariiuniri.ro tcp
US 8.8.8.8:53 romeguidedvisit.com udp
NL 35.214.139.14:443 romeguidedvisit.com tcp
US 8.8.8.8:53 www.rgvincoming.com udp
US 34.120.190.48:443 www.rgvincoming.com tcp
US 8.8.8.8:53 24.102.181.81.in-addr.arpa udp
US 8.8.8.8:53 14.139.214.35.in-addr.arpa udp
US 34.120.190.48:443 www.rgvincoming.com tcp
US 8.8.8.8:53 48.190.120.34.in-addr.arpa udp
US 8.8.8.8:53 mylovelybluesky.com udp
MY 103.130.153.151:443 mylovelybluesky.com tcp
US 8.8.8.8:53 jorgobe.at udp
DK 46.30.213.127:443 jorgobe.at tcp
DK 46.30.213.127:443 jorgobe.at tcp
DK 46.30.213.127:443 jorgobe.at tcp
US 8.8.8.8:53 151.153.130.103.in-addr.arpa udp
US 8.8.8.8:53 agence-referencement-naturel-geneve.net udp
US 8.8.8.8:53 dareckleyministries.com udp
CA 54.39.143.67:443 dareckleyministries.com tcp
US 8.8.8.8:53 www.dareckleyministries.com udp
CA 54.39.143.67:443 www.dareckleyministries.com tcp
US 8.8.8.8:53 127.213.30.46.in-addr.arpa udp
US 8.8.8.8:53 67.143.39.54.in-addr.arpa udp
CA 54.39.143.67:443 www.dareckleyministries.com tcp
US 8.8.8.8:53 ateliergamila.com udp
US 8.8.8.8:53 fransespiegels.nl udp
CA 23.227.38.65:443 fransespiegels.nl tcp
US 8.8.8.8:53 65.38.227.23.in-addr.arpa udp
US 8.8.8.8:53 oceanastudios.com udp
US 192.124.249.107:443 oceanastudios.com tcp
US 8.8.8.8:53 craftleathermnl.com udp
US 8.8.8.8:53 admos-gleitlager.de udp
DE 81.169.145.149:443 admos-gleitlager.de tcp
US 8.8.8.8:53 107.249.124.192.in-addr.arpa udp
US 8.8.8.8:53 149.145.169.81.in-addr.arpa udp
US 8.8.8.8:53 otto-bollmann.de udp
DE 87.230.43.198:443 otto-bollmann.de tcp
US 8.8.8.8:53 jiloc.com udp
GB 169.197.114.138:443 jiloc.com tcp
US 8.8.8.8:53 138.114.197.169.in-addr.arpa udp
US 8.8.8.8:53 www.jiloc.com udp
GB 169.197.114.138:443 www.jiloc.com tcp
US 8.8.8.8:53 vannesteconstruct.be udp
DK 46.30.213.139:443 vannesteconstruct.be tcp
US 8.8.8.8:53 cerebralforce.net udp
US 8.8.8.8:53 makeflowers.ru udp
RU 23.111.202.89:443 makeflowers.ru tcp
US 8.8.8.8:53 139.213.30.46.in-addr.arpa udp
US 8.8.8.8:53 i-trust.dk udp
DK 94.231.106.19:443 i-trust.dk tcp
US 8.8.8.8:53 89.202.111.23.in-addr.arpa udp
US 8.8.8.8:53 19.106.231.94.in-addr.arpa udp
US 8.8.8.8:53 drfoyle.com udp
US 13.248.169.48:443 drfoyle.com tcp
US 8.8.8.8:53 ccpbroadband.com udp
US 35.212.37.164:443 ccpbroadband.com tcp
US 8.8.8.8:53 imadarchid.com udp
US 172.67.184.99:443 imadarchid.com tcp
US 8.8.8.8:53 164.37.212.35.in-addr.arpa udp
US 8.8.8.8:53 psa-sec.de udp
US 172.67.72.178:443 psa-sec.de tcp
US 8.8.8.8:53 99.184.67.172.in-addr.arpa udp
US 8.8.8.8:53 lapmangfpt.info.vn udp
VN 202.92.4.5:443 lapmangfpt.info.vn tcp
US 8.8.8.8:53 178.72.67.172.in-addr.arpa udp
US 8.8.8.8:53 zimmerei-deboer.de udp
DE 91.184.32.130:443 zimmerei-deboer.de tcp
FR 51.91.223.60:443 vetapharma.fr tcp
US 8.8.8.8:53 130.32.184.91.in-addr.arpa udp
US 8.8.8.8:53 60.223.91.51.in-addr.arpa udp
US 8.8.8.8:53 seminoc.com udp
BE 34.77.225.87:443 seminoc.com tcp
US 8.8.8.8:53 www.seminoc.com udp
BE 34.77.225.87:443 www.seminoc.com tcp
US 8.8.8.8:53 csgospeltips.se udp
US 8.8.8.8:53 boisehosting.net udp
US 216.250.122.17:443 boisehosting.net tcp
US 8.8.8.8:53 87.225.77.34.in-addr.arpa udp
US 8.8.8.8:53 ilive.lt udp
LT 185.5.53.29:443 ilive.lt tcp
US 8.8.8.8:53 toponlinecasinosuk.co.uk udp
US 172.67.160.188:443 toponlinecasinosuk.co.uk tcp
US 8.8.8.8:53 17.122.250.216.in-addr.arpa udp
US 8.8.8.8:53 29.53.5.185.in-addr.arpa udp
US 8.8.8.8:53 188.160.67.172.in-addr.arpa udp
US 8.8.8.8:53 botanicinnovations.com udp
US 141.193.213.20:443 botanicinnovations.com tcp
US 8.8.8.8:53 4net.guru udp
US 13.248.169.48:443 4net.guru tcp
US 8.8.8.8:53 coding-machine.com udp
FR 164.132.235.17:443 coding-machine.com tcp
US 8.8.8.8:53 20.213.193.141.in-addr.arpa udp
US 8.8.8.8:53 sachnendoc.com udp
SG 172.96.191.104:443 sachnendoc.com tcp
US 8.8.8.8:53 xn--fnsterputssollentuna-39b.se udp
SE 93.188.2.51:443 xn--fnsterputssollentuna-39b.se tcp
US 8.8.8.8:53 104.191.96.172.in-addr.arpa udp
US 8.8.8.8:53 hogahojder.se udp
SE 46.16.236.23:443 hogahojder.se tcp
US 8.8.8.8:53 hairstylesnow.site udp
US 8.8.8.8:53 worldhealthbasicinfo.com udp
US 8.8.8.8:53 mediaclan.info udp
AT 94.136.22.200:443 mediaclan.info tcp
US 8.8.8.8:53 23.236.16.46.in-addr.arpa udp
US 8.8.8.8:53 51.2.188.93.in-addr.arpa udp
US 8.8.8.8:53 comparatif-lave-linge.fr udp
US 8.8.8.8:53 xn--thucmctc-13a1357egba.com udp
US 8.8.8.8:53 gantungankunciakrilikbandung.com udp
US 8.8.8.8:53 pferdebiester.de udp
DE 80.237.130.138:443 pferdebiester.de tcp
US 8.8.8.8:53 200.22.136.94.in-addr.arpa udp
US 8.8.8.8:53 mytechnoway.com udp
US 8.8.8.8:53 corendonhotels.com udp
NL 136.144.215.188:443 corendonhotels.com tcp
US 8.8.8.8:53 www.corendonhotels.com udp
NL 136.144.215.188:443 www.corendonhotels.com tcp
US 8.8.8.8:53 perbudget.com udp
US 3.33.251.168:443 perbudget.com tcp
US 3.33.251.168:443 perbudget.com tcp
US 3.33.251.168:443 perbudget.com tcp
US 8.8.8.8:53 smhydro.com.pl udp
PL 89.161.222.203:443 smhydro.com.pl tcp
US 8.8.8.8:53 188.215.144.136.in-addr.arpa udp
US 8.8.8.8:53 ventti.com.ar udp
US 8.8.8.8:53 parkcf.nl udp
DE 18.156.169.48:443 parkcf.nl tcp
US 8.8.8.8:53 203.222.161.89.in-addr.arpa udp
US 8.8.8.8:53 datacenters-in-europe.com udp
LU 188.93.172.5:443 datacenters-in-europe.com tcp
US 8.8.8.8:53 kadesignandbuild.co.uk udp
US 104.21.32.1:443 kadesignandbuild.co.uk tcp
US 8.8.8.8:53 48.169.156.18.in-addr.arpa udp
US 8.8.8.8:53 5.172.93.188.in-addr.arpa udp
US 8.8.8.8:53 autodujos.lt udp
LT 79.98.28.30:443 autodujos.lt tcp
US 8.8.8.8:53 1.32.21.104.in-addr.arpa udp
US 8.8.8.8:53 30.28.98.79.in-addr.arpa udp
US 8.8.8.8:53 2ekeus.nl udp
NL 62.212.88.194:443 2ekeus.nl tcp
US 8.8.8.8:53 194.88.212.62.in-addr.arpa udp
US 8.8.8.8:53 carolinepenn.com udp
GB 77.68.103.74:443 carolinepenn.com tcp
US 8.8.8.8:53 birnam-wood.com udp
US 8.8.8.8:53 74.103.68.77.in-addr.arpa udp
AU 202.74.68.188:443 birnam-wood.com tcp
US 8.8.8.8:53 jameskibbie.com udp
CA 66.70.219.208:443 jameskibbie.com tcp
US 8.8.8.8:53 tetinfo.in udp
US 172.67.211.14:443 tetinfo.in tcp
US 8.8.8.8:53 208.219.70.66.in-addr.arpa udp
US 8.8.8.8:53 www.tetinfo.in udp
US 172.67.211.14:443 www.tetinfo.in tcp
US 8.8.8.8:53 14.211.67.172.in-addr.arpa udp
US 8.8.8.8:53 greenfieldoptimaldentalcare.com udp
US 172.67.208.135:443 greenfieldoptimaldentalcare.com tcp
US 8.8.8.8:53 www.kozykennelsjoliet.com udp
US 104.21.2.122:443 www.kozykennelsjoliet.com tcp
US 8.8.8.8:53 insidegarage.pl udp
US 8.8.8.8:53 135.208.67.172.in-addr.arpa udp
PL 194.181.228.90:443 insidegarage.pl tcp
US 8.8.8.8:53 122.2.21.104.in-addr.arpa udp
US 8.8.8.8:53 90.228.181.194.in-addr.arpa udp
US 8.8.8.8:53 euro-trend.pl udp
PL 185.238.73.63:443 euro-trend.pl tcp
US 8.8.8.8:53 carlosja.com udp
GB 52.84.90.14:443 carlosja.com tcp
US 8.8.8.8:53 analiticapublica.es udp
US 172.67.184.40:443 analiticapublica.es tcp
US 8.8.8.8:53 sergiojimenez.net udp
ES 91.146.101.136:443 sergiojimenez.net tcp
US 8.8.8.8:53 40.184.67.172.in-addr.arpa udp
US 8.8.8.8:53 14.90.84.52.in-addr.arpa udp
US 8.8.8.8:53 aprepol.com udp
US 8.8.8.8:53 136.101.146.91.in-addr.arpa udp
ES 31.47.78.30:443 aprepol.com tcp
US 8.8.8.8:53 www.aprepol.com udp
ES 31.47.78.30:443 www.aprepol.com tcp
US 8.8.8.8:53 pmc-services.de udp
DE 188.68.47.165:443 pmc-services.de tcp
US 8.8.8.8:53 www.pmc-services.de udp
DE 188.68.47.165:443 www.pmc-services.de tcp
US 8.8.8.8:53 165.47.68.188.in-addr.arpa udp
US 8.8.8.8:53 sedevo.de udp
DE 217.160.0.177:443 sedevo.de tcp
US 8.8.8.8:53 notsilentmd.org udp
US 8.8.8.8:53 irinaverwer.com udp
NL 31.204.147.5:443 irinaverwer.com tcp
NL 31.204.147.5:443 irinaverwer.com tcp
NL 31.204.147.5:443 irinaverwer.com tcp
US 8.8.8.8:53 177.0.160.217.in-addr.arpa udp
US 8.8.8.8:53 ki-lowroermond.nl udp
NL 141.138.169.222:443 ki-lowroermond.nl tcp
US 8.8.8.8:53 5.147.204.31.in-addr.arpa udp
US 8.8.8.8:53 expandet.dk udp
US 104.21.112.1:443 expandet.dk tcp
US 8.8.8.8:53 newstap.com.ng udp
US 104.21.59.24:443 newstap.com.ng tcp
US 8.8.8.8:53 222.169.138.141.in-addr.arpa udp
US 8.8.8.8:53 24.59.21.104.in-addr.arpa udp
US 8.8.8.8:53 backstreetpub.com udp
US 3.18.7.81:443 backstreetpub.com tcp
US 3.19.116.195:443 backstreetpub.com tcp
US 8.8.8.8:53 bbsmobler.se udp
US 75.2.93.142:443 bbsmobler.se tcp
US 8.8.8.8:53 142.93.2.75.in-addr.arpa udp
US 8.8.8.8:53 victoriousfestival.co.uk udp
GB 35.177.75.40:443 victoriousfestival.co.uk tcp
US 8.8.8.8:53 www.victoriousfestival.co.uk udp
GB 35.177.75.40:443 www.victoriousfestival.co.uk tcp
US 8.8.8.8:53 40.75.177.35.in-addr.arpa udp
US 8.8.8.8:53 theshungiteexperience.com.au udp
US 192.124.249.65:443 theshungiteexperience.com.au tcp
US 8.8.8.8:53 65.249.124.192.in-addr.arpa udp
US 8.8.8.8:53 www.theshungiteexperience.com.au udp
US 192.124.249.65:443 www.theshungiteexperience.com.au tcp
US 8.8.8.8:53 phantastyk.com udp
HK 206.119.6.195:443 phantastyk.com tcp
US 8.8.8.8:53 iyengaryogacharlotte.com udp
US 65.60.36.230:443 iyengaryogacharlotte.com tcp
US 8.8.8.8:53 195.6.119.206.in-addr.arpa udp
US 8.8.8.8:53 creamery201.com udp
US 185.230.63.171:443 creamery201.com tcp
US 8.8.8.8:53 230.36.60.65.in-addr.arpa udp
US 8.8.8.8:53 xltyu.com udp
CN 43.143.202.221:443 xltyu.com tcp
US 8.8.8.8:53 employeesurveys.com udp
US 209.17.116.163:443 employeesurveys.com tcp
US 8.8.8.8:53 humanityplus.org udp
US 198.49.23.145:443 humanityplus.org tcp
US 8.8.8.8:53 liikelataamo.fi udp
US 34.149.81.128:443 liikelataamo.fi tcp
US 162.159.140.127:443 zenderthelender.com tcp
US 172.66.0.125:443 zenderthelender.com tcp
US 8.8.8.8:53 sofavietxinh.com udp
US 104.21.33.154:443 sofavietxinh.com tcp
US 8.8.8.8:53 128.81.149.34.in-addr.arpa udp
US 8.8.8.8:53 125.0.66.172.in-addr.arpa udp
US 104.21.33.154:443 sofavietxinh.com tcp
US 8.8.8.8:53 katketytaanet.fi udp
US 8.8.8.8:53 apprendrelaudit.com udp
FR 54.36.91.62:443 apprendrelaudit.com tcp
US 8.8.8.8:53 pixelarttees.com udp
US 54.205.192.227:443 pixelarttees.com tcp
US 54.82.172.55:443 pixelarttees.com tcp
US 8.8.8.8:53 celularity.com udp
US 141.193.213.10:443 celularity.com tcp
US 76.223.54.146:443 4net.guru tcp
US 8.8.8.8:53 blacksirius.de udp
DE 185.185.24.227:443 blacksirius.de tcp
US 8.8.8.8:53 227.24.185.185.in-addr.arpa udp
US 8.8.8.8:53 sporthamper.com udp
CA 23.227.38.32:443 sporthamper.com tcp
US 8.8.8.8:53 beautychance.se udp
US 8.8.8.8:53 bsaship.com udp
NO 194.63.249.219:443 bsaship.com tcp
US 8.8.8.8:53 32.38.227.23.in-addr.arpa udp
US 8.8.8.8:53 219.249.63.194.in-addr.arpa udp
US 8.8.8.8:53 cortec-neuro.com udp
DE 217.160.0.189:443 cortec-neuro.com tcp
US 8.8.8.8:53 189.0.160.217.in-addr.arpa udp
US 8.8.8.8:53 modelmaking.nl udp
NL 88.214.28.139:443 modelmaking.nl tcp
US 8.8.8.8:53 noixdecocom.fr udp
FR 195.154.181.211:443 noixdecocom.fr tcp
US 8.8.8.8:53 www.noixdecocom.fr udp
FR 195.154.181.211:443 www.noixdecocom.fr tcp
US 8.8.8.8:53 139.28.214.88.in-addr.arpa udp
US 8.8.8.8:53 211.181.154.195.in-addr.arpa udp
US 8.8.8.8:53 associationanalytics.com udp
US 141.193.213.20:443 associationanalytics.com tcp
US 8.8.8.8:53 elimchan.com udp
NL 141.138.168.151:443 elimchan.com tcp
US 8.8.8.8:53 i-arslan.de udp
DE 85.13.163.93:443 i-arslan.de tcp
US 8.8.8.8:53 dsl-ip.de udp
DE 185.242.112.149:443 dsl-ip.de tcp
US 8.8.8.8:53 tuuliautio.fi udp
FI 5.44.245.22:443 tuuliautio.fi tcp
US 8.8.8.8:53 151.168.138.141.in-addr.arpa udp
US 8.8.8.8:53 93.163.13.85.in-addr.arpa udp
US 8.8.8.8:53 149.112.242.185.in-addr.arpa udp
DE 207.180.235.18:443 bigasgrup.com tcp
US 8.8.8.8:53 www.bigasgrup.com udp
DE 207.180.235.18:443 www.bigasgrup.com tcp
US 8.8.8.8:53 18.235.180.207.in-addr.arpa udp
US 8.8.8.8:53 upplandsspar.se udp
SE 46.16.236.26:443 upplandsspar.se tcp
US 8.8.8.8:53 upplandsparkapital.se udp
SE 46.16.236.26:443 upplandsparkapital.se tcp
SE 46.16.236.26:443 upplandsparkapital.se tcp
US 8.8.8.8:53 26.236.16.46.in-addr.arpa udp
US 8.8.8.8:53 tips.technology udp
US 76.223.54.146:443 tips.technology tcp
US 8.8.8.8:53 cafemattmeera.com udp
US 8.8.8.8:53 notmissingout.com udp
US 185.230.63.186:443 notmissingout.com tcp
US 185.230.63.186:443 notmissingout.com tcp
US 185.230.63.186:443 notmissingout.com tcp
US 8.8.8.8:53 triggi.de udp
BE 185.76.237.177:443 triggi.de tcp
US 8.8.8.8:53 186.63.230.185.in-addr.arpa udp
US 8.8.8.8:53 skanah.com udp
LU 198.251.89.144:443 skanah.com tcp
US 8.8.8.8:53 courteney-cox.net udp
US 8.8.8.8:53 tulsawaterheaterinstallation.com udp
NL 109.237.209.175:443 vloeren-nu.nl tcp
US 8.8.8.8:53 144.89.251.198.in-addr.arpa udp
US 8.8.8.8:53 175.209.237.109.in-addr.arpa udp
US 8.8.8.8:53 www.vloeren-nu.nl udp
NL 109.237.209.175:443 www.vloeren-nu.nl tcp
NL 109.237.209.175:443 www.vloeren-nu.nl tcp
NL 109.237.209.175:443 www.vloeren-nu.nl tcp
US 8.8.8.8:53 twohourswithlena.wordpress.com udp
US 192.0.78.12:443 twohourswithlena.wordpress.com tcp
US 8.8.8.8:53 rocketccw.com udp
US 198.185.159.144:443 rocketccw.com tcp
US 8.8.8.8:53 gununiversity.com udp
US 104.21.52.33:443 gununiversity.com tcp
US 8.8.8.8:53 luxurytv.jp udp
US 8.8.8.8:53 quickyfunds.com udp
US 8.8.8.8:53 gemeentehetkompas.nl udp
US 8.8.8.8:53 simpkinsedwards.co.uk udp
US 104.21.31.22:443 simpkinsedwards.co.uk tcp
US 8.8.8.8:53 www.simpkinsedwards.co.uk udp
US 172.67.174.169:443 www.simpkinsedwards.co.uk tcp
US 8.8.8.8:53 22.31.21.104.in-addr.arpa udp
US 8.8.8.8:53 33.52.21.104.in-addr.arpa udp
US 8.8.8.8:53 malychanieruchomoscipremium.com udp
PL 79.96.76.244:443 malychanieruchomoscipremium.com tcp
US 8.8.8.8:53 169.174.67.172.in-addr.arpa udp
US 8.8.8.8:53 shonacox.com udp
US 162.241.123.12:443 shonacox.com tcp
US 8.8.8.8:53 244.76.96.79.in-addr.arpa udp
US 8.8.8.8:53 hotelsolbh.com.br udp
US 8.8.8.8:53 artige.com udp
NL 185.10.159.69:443 artige.com tcp
US 8.8.8.8:53 12.123.241.162.in-addr.arpa udp
US 8.8.8.8:53 69.159.10.185.in-addr.arpa udp
US 8.8.8.8:53 gasolspecialisten.se udp
SE 31.193.252.186:443 gasolspecialisten.se tcp
US 8.8.8.8:53 186.252.193.31.in-addr.arpa udp
US 8.8.8.8:53 baronloan.org udp
US 162.159.134.42:443 baronloan.org tcp
US 8.8.8.8:53 caffeinternet.it udp
US 8.8.8.8:53 milestoneshows.com udp
US 208.90.68.80:443 milestoneshows.com tcp
US 8.8.8.8:53 kariokids.com udp
US 8.8.8.8:53 vyhino-zhulebino-24.ru udp
US 8.8.8.8:53 brigitte-erler.com udp
US 8.8.8.8:53 coursio.com udp
NL 64.227.72.13:443 coursio.com tcp
US 8.8.8.8:53 fundaciongregal.org udp
ES 178.23.56.80:443 fundaciongregal.org tcp
US 8.8.8.8:53 13.72.227.64.in-addr.arpa udp
US 8.8.8.8:53 80.56.23.178.in-addr.arpa udp
US 8.8.8.8:53 qualitus.com udp
DE 136.243.1.43:443 qualitus.com tcp
US 8.8.8.8:53 43.1.243.136.in-addr.arpa udp
US 8.8.8.8:53 mirjamholleman.nl udp
US 8.8.8.8:53 zervicethai.co.th udp
US 8.8.8.8:53 kalkulator-oszczednosci.pl udp
PL 54.38.49.27:443 kalkulator-oszczednosci.pl tcp
US 8.8.8.8:53 vermoote.de udp
DE 85.215.214.106:443 vermoote.de tcp
US 8.8.8.8:53 restaurantesszimmer.de udp
DE 91.107.239.23:443 restaurantesszimmer.de tcp
US 8.8.8.8:53 27.49.38.54.in-addr.arpa udp
US 8.8.8.8:53 frontierweldingllc.com udp
US 216.152.143.240:443 frontierweldingllc.com tcp
US 8.8.8.8:53 tradiematepro.com.au udp
AU 119.148.70.243:443 tradiematepro.com.au tcp
US 8.8.8.8:53 23.239.107.91.in-addr.arpa udp
US 8.8.8.8:53 106.214.215.85.in-addr.arpa udp
US 8.8.8.8:53 www.tradiematepro.com.au udp
AU 119.148.70.243:443 www.tradiematepro.com.au tcp
US 8.8.8.8:53 243.70.148.119.in-addr.arpa udp
US 8.8.8.8:53 macabaneaupaysflechois.com udp
US 8.8.8.8:53 n1-headache.com udp
FR 79.137.75.185:443 n1-headache.com tcp
US 8.8.8.8:53 southeasternacademyofprosthodontics.org udp
US 8.8.8.8:53 familypark40.com udp
FR 213.186.33.24:443 familypark40.com tcp
US 8.8.8.8:53 185.75.137.79.in-addr.arpa udp
US 8.8.8.8:53 24.33.186.213.in-addr.arpa udp
US 8.8.8.8:53 sportsmassoren.com udp
DK 94.231.106.24:443 sportsmassoren.com tcp
US 8.8.8.8:53 basisschooldezonnewijzer.nl udp
NL 85.10.159.174:443 basisschooldezonnewijzer.nl tcp
US 8.8.8.8:53 24.106.231.94.in-addr.arpa udp
US 8.8.8.8:53 paymybill.guru udp
US 192.124.249.119:443 paymybill.guru tcp
US 8.8.8.8:53 119.249.124.192.in-addr.arpa udp
US 8.8.8.8:53 syndikat-asphaltfieber.de udp
FR 92.204.236.49:443 syndikat-asphaltfieber.de tcp
US 8.8.8.8:53 www.syndikat-asphaltfieber.de udp
FR 92.204.236.49:443 www.syndikat-asphaltfieber.de tcp
US 8.8.8.8:53 49.236.204.92.in-addr.arpa udp
US 8.8.8.8:53 greenpark.ch udp
CH 149.126.6.52:443 greenpark.ch tcp
US 8.8.8.8:53 psc.de udp
DE 185.146.238.134:443 psc.de tcp
US 8.8.8.8:53 52.6.126.149.in-addr.arpa udp
US 8.8.8.8:53 134.238.146.185.in-addr.arpa udp
FR 188.165.23.19:443 corona-handles.com tcp
US 8.8.8.8:53 higadograsoweb.com udp
US 8.8.8.8:53 pickanose.com udp
US 104.21.58.81:443 pickanose.com tcp
US 8.8.8.8:53 19.23.165.188.in-addr.arpa udp
US 8.8.8.8:53 81.58.21.104.in-addr.arpa udp
US 8.8.8.8:53 tophumanservicescourses.com udp
US 104.155.138.21:443 tophumanservicescourses.com tcp
US 8.8.8.8:53 daniel-akermann-architektur-und-planung.ch udp
CH 217.26.52.17:443 daniel-akermann-architektur-und-planung.ch tcp
US 8.8.8.8:53 sportverein-tambach.de udp
US 104.21.59.198:443 sportverein-tambach.de tcp
US 8.8.8.8:53 instatron.net udp
US 8.8.8.8:53 smogathon.com udp
US 8.8.8.8:53 17.52.26.217.in-addr.arpa udp
FR 178.32.149.185:443 smogathon.com tcp
US 8.8.8.8:53 fotoideaymedia.es udp
ES 82.223.39.41:443 fotoideaymedia.es tcp
US 8.8.8.8:53 roygolden.com udp
US 50.16.12.56:443 roygolden.com tcp
US 8.8.8.8:53 185.149.32.178.in-addr.arpa udp
US 8.8.8.8:53 41.39.223.82.in-addr.arpa udp
US 8.8.8.8:53 blumenhof-wegleitner.at udp
AT 81.19.159.57:443 blumenhof-wegleitner.at tcp
US 8.8.8.8:53 56.12.16.50.in-addr.arpa udp
US 8.8.8.8:53 57.159.19.81.in-addr.arpa udp
US 8.8.8.8:53 oldschoolfun.net udp
NL 103.13.210.239:443 oldschoolfun.net tcp
US 8.8.8.8:53 sweering.fr udp
FR 2.15.210.106:443 sweering.fr tcp
FR 2.15.210.106:443 sweering.fr tcp
FR 2.15.210.106:443 sweering.fr tcp
US 8.8.8.8:53 enovos.de udp
DE 185.175.199.0:443 enovos.de tcp
US 8.8.8.8:53 239.210.13.103.in-addr.arpa udp
US 8.8.8.8:53 withahmed.com udp
DE 139.162.191.157:443 withahmed.com tcp
US 172.67.128.48:443 cimanchesterescorts.co.uk tcp
US 8.8.8.8:53 www.cimanchesterescorts.co.uk udp
US 104.21.0.184:443 www.cimanchesterescorts.co.uk tcp
US 104.21.0.184:443 www.cimanchesterescorts.co.uk tcp
US 8.8.8.8:53 157.191.162.139.in-addr.arpa udp
US 8.8.8.8:53 48.128.67.172.in-addr.arpa udp
US 8.8.8.8:53 alysonhoward.com udp
US 172.67.195.179:443 alysonhoward.com tcp
US 8.8.8.8:53 mank.de udp
US 8.8.8.8:53 184.0.21.104.in-addr.arpa udp
US 8.8.8.8:53 179.195.67.172.in-addr.arpa udp
DE 176.52.247.15:443 mank.de tcp
US 8.8.8.8:53 www.mank.de udp
DE 176.52.247.15:443 www.mank.de tcp
US 8.8.8.8:53 transportesycementoshidalgo.es udp
ES 185.232.41.243:443 transportesycementoshidalgo.es tcp
US 8.8.8.8:53 wolf-glas-und-kunst.de udp
DE 5.44.111.37:443 wolf-glas-und-kunst.de tcp
US 8.8.8.8:53 243.41.232.185.in-addr.arpa udp
US 8.8.8.8:53 webhostingsrbija.rs udp
US 172.67.142.216:443 webhostingsrbija.rs tcp
US 8.8.8.8:53 37.111.44.5.in-addr.arpa udp
US 8.8.8.8:53 216.142.67.172.in-addr.arpa udp
US 8.8.8.8:53 manifestinglab.com udp
US 162.159.135.42:443 manifestinglab.com tcp
US 8.8.8.8:53 nakupunafoundation.org udp
US 141.193.213.11:443 nakupunafoundation.org tcp
US 8.8.8.8:53 fitnessbazaar.com udp
US 8.8.8.8:53 alfa-stroy72.com udp
US 8.8.8.8:53 denovofoodsgroup.com udp
FR 185.246.44.131:443 bloggyboulga.net tcp
FR 185.246.44.131:443 bloggyboulga.net tcp
US 8.8.8.8:53 pointos.com udp
US 166.62.108.36:443 pointos.com tcp
US 8.8.8.8:53 131.44.246.185.in-addr.arpa udp
US 8.8.8.8:53 36.108.62.166.in-addr.arpa udp
US 8.8.8.8:53 tastewilliamsburg.com udp
US 72.52.224.19:443 tastewilliamsburg.com tcp
US 35.215.125.133:443 craigvalentineacademy.com tcp
US 8.8.8.8:53 19.224.52.72.in-addr.arpa udp
US 8.8.8.8:53 133.125.215.35.in-addr.arpa udp
US 8.8.8.8:53 nijaplay.com udp
US 8.8.8.8:53 mousepad-direkt.de udp
FR 5.175.14.15:443 mousepad-direkt.de tcp
US 8.8.8.8:53 15.14.175.5.in-addr.arpa udp
US 8.8.8.8:53 wacochamber.com udp
US 216.128.142.183:443 wacochamber.com tcp
US 104.21.82.85:443 liveottelut.com tcp
US 8.8.8.8:53 www.bestcasino.com udp
US 104.21.10.96:443 www.bestcasino.com tcp
US 8.8.8.8:53 art2gointerieurprojecten.nl udp
NL 37.72.99.133:443 art2gointerieurprojecten.nl tcp
US 8.8.8.8:53 183.142.128.216.in-addr.arpa udp
US 8.8.8.8:53 85.82.21.104.in-addr.arpa udp
US 8.8.8.8:53 96.10.21.104.in-addr.arpa udp
US 8.8.8.8:53 133.99.72.37.in-addr.arpa udp
US 8.8.8.8:53 gmto.fr udp
FR 213.186.33.40:443 gmto.fr tcp
US 8.8.8.8:53 40.33.186.213.in-addr.arpa udp
US 8.8.8.8:53 todocaracoles.com udp
US 8.8.8.8:53 ampisolabergeggi.it udp
FR 51.178.206.226:443 ampisolabergeggi.it tcp
US 8.8.8.8:53 www.ampisolabergeggi.it udp
FR 51.178.206.226:443 www.ampisolabergeggi.it tcp
US 8.8.8.8:53 westdeptfordbuyrite.com udp
US 104.16.23.78:443 westdeptfordbuyrite.com tcp
US 8.8.8.8:53 226.206.178.51.in-addr.arpa udp
US 8.8.8.8:53 digi-talents.com udp
ES 46.226.40.217:443 digi-talents.com tcp
US 8.8.8.8:53 78.23.16.104.in-addr.arpa udp
US 8.8.8.8:53 flexicloud.hk udp
US 8.8.8.8:53 highimpactoutdoors.net udp
US 165.140.69.88:443 highimpactoutdoors.net tcp
US 8.8.8.8:53 88.69.140.165.in-addr.arpa udp
US 8.8.8.8:53 parking.netgateway.eu udp
DE 91.210.226.175:443 parking.netgateway.eu tcp
US 8.8.8.8:53 corelifenutrition.com udp
US 8.8.8.8:53 profectis.de udp
DE 87.118.76.247:443 profectis.de tcp
US 8.8.8.8:53 175.226.210.91.in-addr.arpa udp
US 8.8.8.8:53 midmohandyman.com udp
US 3.33.251.168:443 midmohandyman.com tcp
US 3.33.251.168:443 midmohandyman.com tcp
US 3.33.251.168:443 midmohandyman.com tcp
US 8.8.8.8:53 fotoscondron.com udp
ES 217.76.156.252:443 fotoscondron.com tcp
US 8.8.8.8:53 richard-felix.co.uk udp
GB 185.199.220.79:443 richard-felix.co.uk tcp
US 8.8.8.8:53 richardfelix.co.uk udp
GB 185.199.220.79:443 richardfelix.co.uk tcp
US 8.8.8.8:53 erstatningsadvokaterne.dk udp
DK 46.36.210.13:443 erstatningsadvokaterne.dk tcp
US 8.8.8.8:53 79.220.199.185.in-addr.arpa udp
US 8.8.8.8:53 stacyloeb.com udp
US 160.153.0.98:443 stacyloeb.com tcp
US 8.8.8.8:53 13.210.36.46.in-addr.arpa udp
US 8.8.8.8:53 praxis-foerderdiagnostik.de udp
DE 206.81.31.151:443 praxis-foerderdiagnostik.de tcp
US 8.8.8.8:53 www.praxis-foerderdiagnostik.de udp
DE 206.81.31.151:443 www.praxis-foerderdiagnostik.de tcp
LU 80.92.65.144:443 bargningavesta.se tcp
US 8.8.8.8:53 98.0.153.160.in-addr.arpa udp
US 8.8.8.8:53 151.31.81.206.in-addr.arpa udp
US 8.8.8.8:53 aco-media.nl udp
NL 46.182.180.88:443 aco-media.nl tcp
US 8.8.8.8:53 mymoneyforex.com udp
US 8.8.8.8:53 nsec.se udp
US 8.8.8.8:53 88.180.182.46.in-addr.arpa udp
US 141.193.213.11:443 nakupunafoundation.org tcp
US 8.8.8.8:53 navyfederalautooverseas.com udp
GB 92.122.54.107:443 navyfederalautooverseas.com tcp
US 8.8.8.8:53 107.54.122.92.in-addr.arpa udp
FR 213.186.33.24:443 familypark40.com tcp
NL 45.82.191.77:443 carrybrands.nl tcp
US 8.8.8.8:53 www.carrybrands.nl udp
NL 45.82.191.77:443 www.carrybrands.nl tcp
US 8.8.8.8:53 77.191.82.45.in-addr.arpa udp
NL 45.82.191.77:443 www.carrybrands.nl tcp
US 8.8.8.8:53 lescomtesdemean.be udp
US 8.8.8.8:53 antenanavi.com udp
US 8.8.8.8:53 woodleyacademy.org udp
US 208.69.169.161:443 woodleyacademy.org tcp
US 8.8.8.8:53 torgbodenbollnas.se udp
DK 46.30.211.38:443 torgbodenbollnas.se tcp
US 8.8.8.8:53 verbisonline.com udp
US 8.8.8.8:53 educar.org udp
US 172.67.190.103:443 educar.org tcp
US 8.8.8.8:53 161.169.69.208.in-addr.arpa udp
US 8.8.8.8:53 38.211.30.46.in-addr.arpa udp

Files

C:\Recovery\265062875m-readme.txt

MD5 5dcaf611d7afa4e7ba779397bb2ceafd
SHA1 0ece987646e9e20f6788dd3ecebff911364d1151
SHA256 78d15f567929d0d51f719a9958dfbc3bdd8b14c39d698c3dc7dcf8ec36b727cc
SHA512 08396ecceb24fc8f4a8d9f738ad4a2a3651859673778c6dc5db5b883b9b14b28cba59f57e0f969586003d5b967249e98f818c321ef9ff086e297932f9912de86