{
  "aliases": [],
  "attack_id": null,
  "attack_name": null,
  "attack_url": null,
  "counts": {
    "domain": 112
  },
  "first_seen": {
    "domain": {
      "247adbiz.net": "2015-03-18",
      "ad-noise.net": "2015-03-18",
      "ad-servicestats.net": "2015-03-18",
      "ad-void.com": "2015-03-18",
      "adsbizsimple.com": "2015-03-18",
      "adservicestats.com": "2015-03-18",
      "advancing-technology.com": "2015-03-18",
      "afkarehroshan.com": "2015-03-18",
      "amazinggreentechshop.com": "2015-03-18",
      "arabtechmessenger.net": "2015-03-18",
      "arm2pie.com": "2015-03-18",
      "avidnewssource.com": "2015-03-18",
      "aynachatsrv.com": "2015-03-18",
      "bazandegan.com": "2015-03-18",
      "brittlefilet.com": "2015-03-18",
      "business-made-fun.com": "2015-03-18",
      "businessdealsblog.com": "2015-03-18",
      "businessdirectnessource.com": "2015-03-18",
      "businessedgeadvance.com": "2015-03-18",
      "charging-technology.com": "2015-03-18",
      "charmedno1.com": "2015-03-18",
      "cigape.net": "2015-03-18",
      "coffeehausblog.com": "2015-03-18",
      "computertechanalysis.com": "2015-03-18",
      "config.getmyip.com": "2015-03-18",
      "cribdare2no.com": "2015-03-18",
      "crisptic01.net": "2015-03-18",
      "customerscreensavers.com": "2015-03-18",
      "damavandkuh.com": "2015-03-18",
      "darakht.com": "2015-03-18",
      "dowelsobject.com": "2015-03-18",
      "downloadmpplayer.com": "2015-03-18",
      "dt1blog.com": "2016-02-23",
      "easyadvertonline.com": "2015-03-18",
      "fliteilex.com": "2015-03-18",
      "fnlpic.com": "2015-03-18",
      "following-technology.com": "2015-03-18",
      "forboringbusinesses.com": "2016-02-23",
      "forgotten-deals.com": "2015-03-18",
      "foroushi.net": "2015-03-18",
      "functional-business.com": "2015-03-18",
      "gar-tech.com": "2015-03-18",
      "ghalibaft.com": "2015-03-18",
      "globalnetworkanalys.com": "2015-03-18",
      "goldadpremium.com": "2015-03-18",
      "goodbizez.com": "2015-03-18",
      "havakhosh.com": "2015-03-18",
      "honarkhabar.com": "2015-03-18",
      "honarkhaneh.net": "2015-03-18",
      "housedman.com": "2015-03-18",
      "industry-deals.com": "2015-03-18",
      "islamicmarketing.net": "2015-03-18",
      "itemagic.net": "2015-03-18",
      "listennewsnetwork.com": "2015-03-18",
      "mashinkhabar.com": "2015-03-18",
      "meevehdar.com": "2015-03-18",
      "melding-technology.com": "2015-03-18",
      "micraamber.net": "2015-03-18",
      "mimicrice.com": "2015-03-18",
      "monster-ads.net": "2015-03-18",
      "myhousetechnews.com": "2015-03-18",
      "newip427.changeip.net": "2015-03-18",
      "newjunk4u.com": "2015-03-18",
      "newsterminalvelocity.com": "2015-03-18",
      "nickleplatedads.com": "2015-03-18",
      "noticiasftpsrv.com": "2015-03-18",
      "nowruzbakher.com": "2015-03-18",
      "parskabab.com": "2015-03-18",
      "phoneysoap.com": "2015-03-18",
      "platads.com": "2015-03-18",
      "posed2shade.com": "2015-03-18",
      "quickupdateserv.com": "2015-03-18",
      "quik-serv.com": "2015-03-18",
      "rampagegramar.com": "2015-03-18",
      "rapidlyserv.com": "2015-03-18",
      "rehabretie.com": "2015-03-18",
      "roshanavar.com": "2015-03-18",
      "rubi4edit.com": "2015-03-18",
      "rubiccrum.com": "2015-03-18",
      "rubriccrumb.com": "2015-03-18",
      "selective-business.com": "2015-03-18",
      "serv-load.com": "2015-03-18",
      "sherkatkonandeh.com": "2015-03-18",
      "sherkhundi.com": "2015-03-18",
      "slayinglance.com": "2015-03-18",
      "speedynewsclips.com": "2015-03-18",
      "standardsandpraiserepurpose.com": "2015-03-18",
      "subad-server.com": "2015-03-18",
      "successful-marketing-now.com": "2015-03-18",
      "suddenplot.com": "2015-03-18",
      "taking-technology.com": "2015-03-18",
      "team4heat.net": "2015-03-18",
      "teatac4bath.com": "2015-03-18",
      "techasiamusicsvr.com": "2015-03-18",
      "technicads.com": "2015-03-18",
      "technicalconsumerreports.com": "2015-03-18",
      "technicaldigitalreporting.com": "2015-03-18",
      "technicserv.com": "2015-03-18",
      "technicupdate.com": "2015-03-18",
      "technology-revealed.com": "2015-03-18",
      "techsupportpwr.com": "2015-03-18",
      "thesuperdeliciousnews.com": "2015-03-18",
      "timelywebsitehostesses.com": "2015-03-18",
      "toofanshadid.com": "2015-03-18",
      "tropiccritics.com": "2015-03-18",
      "unite3tubes.com": "2015-03-18",
      "unwashedsound.com": "2015-03-18",
      "wangluoruanjian.com": "2015-03-18",
      "webbizwild.com": "2015-03-18",
      "webuysupplystore.mooo.com": "2015-03-18",
      "xlivehost.com": "2015-03-18",
      "zhalehziba.com": "2015-03-18"
    }
  },
  "first_seen_precision": {
    "domain": {}
  },
  "first_seen_range": {
    "earliest": "2015-03-18",
    "latest": "2016-02-23"
  },
  "generated_at": "2026-08-08T03:26:30+00:00",
  "indicators": {
    "domain": [
      "247adbiz.net",
      "ad-noise.net",
      "ad-servicestats.net",
      "ad-void.com",
      "adsbizsimple.com",
      "adservicestats.com",
      "advancing-technology.com",
      "afkarehroshan.com",
      "amazinggreentechshop.com",
      "arabtechmessenger.net",
      "arm2pie.com",
      "avidnewssource.com",
      "aynachatsrv.com",
      "bazandegan.com",
      "brittlefilet.com",
      "business-made-fun.com",
      "businessdealsblog.com",
      "businessdirectnessource.com",
      "businessedgeadvance.com",
      "charging-technology.com",
      "charmedno1.com",
      "cigape.net",
      "coffeehausblog.com",
      "computertechanalysis.com",
      "config.getmyip.com",
      "cribdare2no.com",
      "crisptic01.net",
      "customerscreensavers.com",
      "damavandkuh.com",
      "darakht.com",
      "dowelsobject.com",
      "downloadmpplayer.com",
      "dt1blog.com",
      "easyadvertonline.com",
      "fliteilex.com",
      "fnlpic.com",
      "following-technology.com",
      "forboringbusinesses.com",
      "forgotten-deals.com",
      "foroushi.net",
      "functional-business.com",
      "gar-tech.com",
      "ghalibaft.com",
      "globalnetworkanalys.com",
      "goldadpremium.com",
      "goodbizez.com",
      "havakhosh.com",
      "honarkhabar.com",
      "honarkhaneh.net",
      "housedman.com",
      "industry-deals.com",
      "islamicmarketing.net",
      "itemagic.net",
      "listennewsnetwork.com",
      "mashinkhabar.com",
      "meevehdar.com",
      "melding-technology.com",
      "micraamber.net",
      "mimicrice.com",
      "monster-ads.net",
      "myhousetechnews.com",
      "newip427.changeip.net",
      "newjunk4u.com",
      "newsterminalvelocity.com",
      "nickleplatedads.com",
      "noticiasftpsrv.com",
      "nowruzbakher.com",
      "parskabab.com",
      "phoneysoap.com",
      "platads.com",
      "posed2shade.com",
      "quickupdateserv.com",
      "quik-serv.com",
      "rampagegramar.com",
      "rapidlyserv.com",
      "rehabretie.com",
      "roshanavar.com",
      "rubi4edit.com",
      "rubiccrum.com",
      "rubriccrumb.com",
      "selective-business.com",
      "serv-load.com",
      "sherkatkonandeh.com",
      "sherkhundi.com",
      "slayinglance.com",
      "speedynewsclips.com",
      "standardsandpraiserepurpose.com",
      "subad-server.com",
      "successful-marketing-now.com",
      "suddenplot.com",
      "taking-technology.com",
      "team4heat.net",
      "teatac4bath.com",
      "techasiamusicsvr.com",
      "technicads.com",
      "technicalconsumerreports.com",
      "technicaldigitalreporting.com",
      "technicserv.com",
      "technicupdate.com",
      "technology-revealed.com",
      "techsupportpwr.com",
      "thesuperdeliciousnews.com",
      "timelywebsitehostesses.com",
      "toofanshadid.com",
      "tropiccritics.com",
      "unite3tubes.com",
      "unwashedsound.com",
      "wangluoruanjian.com",
      "webbizwild.com",
      "webuysupplystore.mooo.com",
      "xlivehost.com",
      "zhalehziba.com"
    ]
  },
  "last_modified": "2026-01-02T23:10:15+00:00",
  "maltrail_groups": [
    "EQUATIONGROUP"
  ],
  "references": [
    "http://securelist.com/files/2015/02/Equation_group_questions_and_answers.pdf"
  ],
  "related": [],
  "slug": "EQUATIONGROUP",
  "timeline": [
    {
      "counts": {
        "domain": 2
      },
      "first_seen": "2016-02-23",
      "indicators": {
        "domain": [
          "dt1blog.com",
          "forboringbusinesses.com"
        ]
      },
      "precision": "exact",
      "references": [
        "http://securelist.com/files/2015/02/Equation_group_questions_and_answers.pdf"
      ],
      "total": 2
    },
    {
      "counts": {
        "domain": 110
      },
      "first_seen": "2015-03-18",
      "indicators": {
        "domain": [
          "247adbiz.net",
          "ad-noise.net",
          "ad-servicestats.net",
          "ad-void.com",
          "adsbizsimple.com",
          "adservicestats.com",
          "advancing-technology.com",
          "afkarehroshan.com",
          "amazinggreentechshop.com",
          "arabtechmessenger.net",
          "arm2pie.com",
          "avidnewssource.com",
          "aynachatsrv.com",
          "bazandegan.com",
          "brittlefilet.com",
          "business-made-fun.com",
          "businessdealsblog.com",
          "businessdirectnessource.com",
          "businessedgeadvance.com",
          "charging-technology.com",
          "charmedno1.com",
          "cigape.net",
          "coffeehausblog.com",
          "computertechanalysis.com",
          "config.getmyip.com",
          "cribdare2no.com",
          "crisptic01.net",
          "customerscreensavers.com",
          "damavandkuh.com",
          "darakht.com",
          "dowelsobject.com",
          "downloadmpplayer.com",
          "easyadvertonline.com",
          "fliteilex.com",
          "fnlpic.com",
          "following-technology.com",
          "forgotten-deals.com",
          "foroushi.net",
          "functional-business.com",
          "gar-tech.com",
          "ghalibaft.com",
          "globalnetworkanalys.com",
          "goldadpremium.com",
          "goodbizez.com",
          "havakhosh.com",
          "honarkhabar.com",
          "honarkhaneh.net",
          "housedman.com",
          "industry-deals.com",
          "islamicmarketing.net",
          "itemagic.net",
          "listennewsnetwork.com",
          "mashinkhabar.com",
          "meevehdar.com",
          "melding-technology.com",
          "micraamber.net",
          "mimicrice.com",
          "monster-ads.net",
          "myhousetechnews.com",
          "newip427.changeip.net",
          "newjunk4u.com",
          "newsterminalvelocity.com",
          "nickleplatedads.com",
          "noticiasftpsrv.com",
          "nowruzbakher.com",
          "parskabab.com",
          "phoneysoap.com",
          "platads.com",
          "posed2shade.com",
          "quickupdateserv.com",
          "quik-serv.com",
          "rampagegramar.com",
          "rapidlyserv.com",
          "rehabretie.com",
          "roshanavar.com",
          "rubi4edit.com",
          "rubiccrum.com",
          "rubriccrumb.com",
          "selective-business.com",
          "serv-load.com",
          "sherkatkonandeh.com",
          "sherkhundi.com",
          "slayinglance.com",
          "speedynewsclips.com",
          "standardsandpraiserepurpose.com",
          "subad-server.com",
          "successful-marketing-now.com",
          "suddenplot.com",
          "taking-technology.com",
          "team4heat.net",
          "teatac4bath.com",
          "techasiamusicsvr.com",
          "technicads.com",
          "technicalconsumerreports.com",
          "technicaldigitalreporting.com",
          "technicserv.com",
          "technicupdate.com",
          "technology-revealed.com",
          "techsupportpwr.com",
          "thesuperdeliciousnews.com",
          "timelywebsitehostesses.com",
          "toofanshadid.com",
          "tropiccritics.com",
          "unite3tubes.com",
          "unwashedsound.com",
          "wangluoruanjian.com",
          "webbizwild.com",
          "webuysupplystore.mooo.com",
          "xlivehost.com",
          "zhalehziba.com"
        ]
      },
      "precision": "exact",
      "references": [
        "http://securelist.com/files/2015/02/Equation_group_questions_and_answers.pdf"
      ],
      "total": 110
    }
  ]
}