{
  "aliases": [],
  "attack_id": null,
  "attack_name": null,
  "attack_url": null,
  "counts": {
    "domain": 134
  },
  "first_seen": {
    "domain": {
      "1e100.tech": "2020-01-09",
      "1m100.tech": "2020-01-09",
      "ads-youtube.net": "2020-01-09",
      "ads-youtube.online": "2020-01-09",
      "ads-youtube.tech": "2020-01-09",
      "akamai.press": "2020-01-09",
      "akamaitechnology.com": "2020-01-09",
      "akamaitechnology.tech": "2020-01-09",
      "alkamaihd.com": "2020-01-09",
      "alkamaihd.net": "2020-01-09",
      "azurewebsites.tech": "2020-01-09",
      "big-windowss.com": "2017-04-12",
      "britishnews.press": "2020-01-09",
      "broadcast-microsoft.tech": "2020-01-09",
      "cachevideo.com": "2020-01-09",
      "cachevideo.online": "2020-01-09",
      "cachevideo.xyz": "2020-01-09",
      "chromeupdates.online": "2020-01-09",
      "chromium.online": "2020-01-09",
      "cissco.net": "2020-01-09",
      "clalit.press": "2020-01-09",
      "cloud-analyzer.com": "2020-01-09",
      "cloudflare-analyse.com": "2020-01-09",
      "cloudflare-analyse.xyz": "2020-01-09",
      "cloudflare-statics.com": "2020-01-09",
      "cloudflare.news": "2020-01-09",
      "cloudflare.site": "2020-01-09",
      "cloudmicrosoft.net": "2020-01-09",
      "cortana-search.com": "2020-01-09",
      "digicert.online": "2020-01-09",
      "digicert.space": "2020-01-09",
      "digicert.xyz": "2020-01-09",
      "dnsserv.host": "2020-01-09",
      "elasticbeanstalk.tech": "2020-01-09",
      "f-tqn.com": "2020-01-09",
      "fb-nameserver.com": "2020-01-09",
      "fb-statics.com": "2020-01-09",
      "fb-statics.info": "2020-01-09",
      "fbcdn.bid": "2020-01-09",
      "fbexternal-a.press": "2020-01-09",
      "fbexternal-a.pw": "2020-01-09",
      "fbstatic-a.space": "2017-04-12",
      "fbstatic-a.xyz": "2017-04-12",
      "fbstatic-akamaihd.com": "2017-04-12",
      "fdgdsg.xyz": "2020-01-09",
      "githubapp.online": "2020-01-09",
      "githubapp.tech": "2020-01-09",
      "githubusecontent.tech": "2020-01-09",
      "gmailtagmanager.com": "2017-04-12",
      "google-api-analyse.com": "2020-01-09",
      "google-api-update.com": "2020-01-09",
      "hamedia.xyz": "2020-01-09",
      "hotseller.info": "2020-01-09",
      "intel-api.com": "2020-01-09",
      "intelchip.org": "2020-01-09",
      "ipresolver.org": "2020-01-09",
      "javaupdator.com": "2020-01-09",
      "jguery.net": "2020-01-09",
      "jguery.online": "2020-01-09",
      "kernel4windows.in": "2017-04-12",
      "labs-cloudfront.com": "2020-01-09",
      "mcafee-analyzer.com": "2020-01-09",
      "mcafee-monitoring.com": "2020-01-09",
      "mcafeemonitoring.com": "2020-01-09",
      "micro-windows.in": "2017-04-12",
      "microsoft-ds.com": "2020-01-09",
      "microsoft-security.host": "2020-01-09",
      "microsoft-tool.com": "2020-01-09",
      "microsoftserver.org": "2020-01-09",
      "mpmicrosoft.com": "2020-01-09",
      "mssqlupdate.com": "2020-01-09",
      "mswordupdate15.com": "2017-04-12",
      "mswordupdate16.com": "2017-04-12",
      "mswordupdate17.com": "2017-04-12",
      "myservers.site": "2020-01-09",
      "mywindows24.in": "2017-04-12",
      "nameserver.win": "2020-01-09",
      "nasr.xyz": "2020-01-09",
      "newsfeeds-microsoft.press": "2020-01-09",
      "nsserver.host": "2020-01-09",
      "officeapps-live.com": "2020-01-09",
      "officeapps-live.net": "2020-01-09",
      "officeapps-live.org": "2020-01-09",
      "onlinewebcam.press": "2020-01-09",
      "outlook360.net": "2020-01-09",
      "outlook360.org": "2020-01-09",
      "owa-microsoft.online": "2020-01-09",
      "patch7-windows.com": "2017-04-12",
      "patch8-windows.com": "2017-04-12",
      "patchthiswindows.com": "2017-04-12",
      "qoldenlines.net": "2020-01-09",
      "sdlc-esd-oracle.online": "2020-01-09",
      "sharepoint-microsoft.co": "2020-01-09",
      "sphotos-b.bid": "2020-01-09",
      "sphotos-b.pw": "2020-01-09",
      "ssl-gstatic.net": "2020-01-09",
      "ssl-gstatic.online": "2020-01-09",
      "static.news": "2020-01-09",
      "symcd.site": "2020-01-09",
      "symcd.xyz": "2020-01-09",
      "tehila.co": "2020-01-09",
      "tehila.global": "2020-01-09",
      "tehila.info": "2020-01-09",
      "tehila.press": "2020-01-09",
      "trendmicro.tech": "2020-01-09",
      "twiter-statics.com": "2020-01-09",
      "twiter-statics.info": "2020-01-09",
      "un-webmail.com": "2020-01-09",
      "updatedrivers.org": "2020-01-09",
      "walla.press": "2020-01-09",
      "win-api.com": "2020-01-09",
      "win-update.com": "2020-01-09",
      "win-updates.com": "2020-01-09",
      "windefender.org": "2020-01-09",
      "windowkernel.com": "2017-04-12",
      "windowkernel14.com": "2020-01-09",
      "windows-10patch.in": "2017-04-12",
      "windows-api.com": "2020-01-09",
      "windows-drive20.com": "2017-04-12",
      "windows-india.in": "2017-04-12",
      "windows-kernel.in": "2017-04-12",
      "windows24-kernel.in": "2017-04-12",
      "windowskernel.com": "2020-01-09",
      "windowskernel.in": "2017-04-12",
      "windowskernel.net": "2020-01-09",
      "windowskernel14.com": "2017-04-12",
      "windowslayer.in": "2017-04-12",
      "windowssup.in": "2017-04-12",
      "windowsupup.com": "2017-04-12",
      "winfeedback.net": "2020-01-09",
      "winupdate64.com": "2020-01-09",
      "winupdate64.net": "2020-01-09",
      "winupdate64.org": "2020-01-09",
      "winupdate64.us": "2020-01-09"
    }
  },
  "first_seen_precision": {
    "domain": {}
  },
  "first_seen_range": {
    "earliest": "2017-04-12",
    "latest": "2020-01-09"
  },
  "generated_at": "2026-08-08T03:26:30+00:00",
  "indicators": {
    "domain": [
      "1e100.tech",
      "1m100.tech",
      "ads-youtube.net",
      "ads-youtube.online",
      "ads-youtube.tech",
      "akamai.press",
      "akamaitechnology.com",
      "akamaitechnology.tech",
      "alkamaihd.com",
      "alkamaihd.net",
      "azurewebsites.tech",
      "big-windowss.com",
      "britishnews.press",
      "broadcast-microsoft.tech",
      "cachevideo.com",
      "cachevideo.online",
      "cachevideo.xyz",
      "chromeupdates.online",
      "chromium.online",
      "cissco.net",
      "clalit.press",
      "cloud-analyzer.com",
      "cloudflare-analyse.com",
      "cloudflare-analyse.xyz",
      "cloudflare-statics.com",
      "cloudflare.news",
      "cloudflare.site",
      "cloudmicrosoft.net",
      "cortana-search.com",
      "digicert.online",
      "digicert.space",
      "digicert.xyz",
      "dnsserv.host",
      "elasticbeanstalk.tech",
      "f-tqn.com",
      "fb-nameserver.com",
      "fb-statics.com",
      "fb-statics.info",
      "fbcdn.bid",
      "fbexternal-a.press",
      "fbexternal-a.pw",
      "fbstatic-a.space",
      "fbstatic-a.xyz",
      "fbstatic-akamaihd.com",
      "fdgdsg.xyz",
      "githubapp.online",
      "githubapp.tech",
      "githubusecontent.tech",
      "gmailtagmanager.com",
      "google-api-analyse.com",
      "google-api-update.com",
      "hamedia.xyz",
      "hotseller.info",
      "intel-api.com",
      "intelchip.org",
      "ipresolver.org",
      "javaupdator.com",
      "jguery.net",
      "jguery.online",
      "kernel4windows.in",
      "labs-cloudfront.com",
      "mcafee-analyzer.com",
      "mcafee-monitoring.com",
      "mcafeemonitoring.com",
      "micro-windows.in",
      "microsoft-ds.com",
      "microsoft-security.host",
      "microsoft-tool.com",
      "microsoftserver.org",
      "mpmicrosoft.com",
      "mssqlupdate.com",
      "mswordupdate15.com",
      "mswordupdate16.com",
      "mswordupdate17.com",
      "myservers.site",
      "mywindows24.in",
      "nameserver.win",
      "nasr.xyz",
      "newsfeeds-microsoft.press",
      "nsserver.host",
      "officeapps-live.com",
      "officeapps-live.net",
      "officeapps-live.org",
      "onlinewebcam.press",
      "outlook360.net",
      "outlook360.org",
      "owa-microsoft.online",
      "patch7-windows.com",
      "patch8-windows.com",
      "patchthiswindows.com",
      "qoldenlines.net",
      "sdlc-esd-oracle.online",
      "sharepoint-microsoft.co",
      "sphotos-b.bid",
      "sphotos-b.pw",
      "ssl-gstatic.net",
      "ssl-gstatic.online",
      "static.news",
      "symcd.site",
      "symcd.xyz",
      "tehila.co",
      "tehila.global",
      "tehila.info",
      "tehila.press",
      "trendmicro.tech",
      "twiter-statics.com",
      "twiter-statics.info",
      "un-webmail.com",
      "updatedrivers.org",
      "walla.press",
      "win-api.com",
      "win-update.com",
      "win-updates.com",
      "windefender.org",
      "windowkernel.com",
      "windowkernel14.com",
      "windows-10patch.in",
      "windows-api.com",
      "windows-drive20.com",
      "windows-india.in",
      "windows-kernel.in",
      "windows24-kernel.in",
      "windowskernel.com",
      "windowskernel.in",
      "windowskernel.net",
      "windowskernel14.com",
      "windowslayer.in",
      "windowssup.in",
      "windowsupup.com",
      "winfeedback.net",
      "winupdate64.com",
      "winupdate64.net",
      "winupdate64.org",
      "winupdate64.us"
    ]
  },
  "last_modified": "2026-01-02T23:10:15+00:00",
  "maltrail_groups": [
    "MIDDLEEAST"
  ],
  "references": [
    "https://blog.talosintelligence.com/2020/01/mideast-tensions-preparations.html",
    "https://otx.alienvault.com/pulse/5e1662a18a0e7b520b9cab43"
  ],
  "related": [
    {
      "evidence": [
        {
          "detail": "25 shared indicators",
          "kind": "infrastructure",
          "weight": 25.0
        }
      ],
      "slug": "G0052"
    },
    {
      "evidence": [
        {
          "detail": "1 shared indicator",
          "kind": "infrastructure",
          "weight": 1.0
        }
      ],
      "slug": "G0007"
    }
  ],
  "slug": "MIDDLEEAST",
  "timeline": [
    {
      "counts": {
        "domain": 109
      },
      "first_seen": "2020-01-09",
      "indicators": {
        "domain": [
          "1e100.tech",
          "1m100.tech",
          "ads-youtube.net",
          "ads-youtube.online",
          "ads-youtube.tech",
          "akamai.press",
          "akamaitechnology.com",
          "akamaitechnology.tech",
          "alkamaihd.com",
          "alkamaihd.net",
          "azurewebsites.tech",
          "britishnews.press",
          "broadcast-microsoft.tech",
          "cachevideo.com",
          "cachevideo.online",
          "cachevideo.xyz",
          "chromeupdates.online",
          "chromium.online",
          "cissco.net",
          "clalit.press",
          "cloud-analyzer.com",
          "cloudflare-analyse.com",
          "cloudflare-analyse.xyz",
          "cloudflare-statics.com",
          "cloudflare.news",
          "cloudflare.site",
          "cloudmicrosoft.net",
          "cortana-search.com",
          "digicert.online",
          "digicert.space",
          "digicert.xyz",
          "dnsserv.host",
          "elasticbeanstalk.tech",
          "f-tqn.com",
          "fb-nameserver.com",
          "fb-statics.com",
          "fb-statics.info",
          "fbcdn.bid",
          "fbexternal-a.press",
          "fbexternal-a.pw",
          "fdgdsg.xyz",
          "githubapp.online",
          "githubapp.tech",
          "githubusecontent.tech",
          "google-api-analyse.com",
          "google-api-update.com",
          "hamedia.xyz",
          "hotseller.info",
          "intel-api.com",
          "intelchip.org",
          "ipresolver.org",
          "javaupdator.com",
          "jguery.net",
          "jguery.online",
          "labs-cloudfront.com",
          "mcafee-analyzer.com",
          "mcafee-monitoring.com",
          "mcafeemonitoring.com",
          "microsoft-ds.com",
          "microsoft-security.host",
          "microsoft-tool.com",
          "microsoftserver.org",
          "mpmicrosoft.com",
          "mssqlupdate.com",
          "myservers.site",
          "nameserver.win",
          "nasr.xyz",
          "newsfeeds-microsoft.press",
          "nsserver.host",
          "officeapps-live.com",
          "officeapps-live.net",
          "officeapps-live.org",
          "onlinewebcam.press",
          "outlook360.net",
          "outlook360.org",
          "owa-microsoft.online",
          "qoldenlines.net",
          "sdlc-esd-oracle.online",
          "sharepoint-microsoft.co",
          "sphotos-b.bid",
          "sphotos-b.pw",
          "ssl-gstatic.net",
          "ssl-gstatic.online",
          "static.news",
          "symcd.site",
          "symcd.xyz",
          "tehila.co",
          "tehila.global",
          "tehila.info",
          "tehila.press",
          "trendmicro.tech",
          "twiter-statics.com",
          "twiter-statics.info",
          "un-webmail.com",
          "updatedrivers.org",
          "walla.press",
          "win-api.com",
          "win-update.com",
          "win-updates.com",
          "windefender.org",
          "windowkernel14.com",
          "windows-api.com",
          "windowskernel.com",
          "windowskernel.net",
          "winfeedback.net",
          "winupdate64.com",
          "winupdate64.net",
          "winupdate64.org",
          "winupdate64.us"
        ]
      },
      "precision": "exact",
      "references": [
        "https://blog.talosintelligence.com/2020/01/mideast-tensions-preparations.html",
        "https://otx.alienvault.com/pulse/5e1662a18a0e7b520b9cab43"
      ],
      "total": 109
    },
    {
      "counts": {
        "domain": 25
      },
      "first_seen": "2017-04-12",
      "indicators": {
        "domain": [
          "big-windowss.com",
          "fbstatic-a.space",
          "fbstatic-a.xyz",
          "fbstatic-akamaihd.com",
          "gmailtagmanager.com",
          "kernel4windows.in",
          "micro-windows.in",
          "mswordupdate15.com",
          "mswordupdate16.com",
          "mswordupdate17.com",
          "mywindows24.in",
          "patch7-windows.com",
          "patch8-windows.com",
          "patchthiswindows.com",
          "windowkernel.com",
          "windows-10patch.in",
          "windows-drive20.com",
          "windows-india.in",
          "windows-kernel.in",
          "windows24-kernel.in",
          "windowskernel.in",
          "windowskernel14.com",
          "windowslayer.in",
          "windowssup.in",
          "windowsupup.com"
        ]
      },
      "precision": "exact",
      "references": [
        "https://blog.talosintelligence.com/2020/01/mideast-tensions-preparations.html",
        "https://otx.alienvault.com/pulse/5e1662a18a0e7b520b9cab43"
      ],
      "total": 25
    }
  ]
}