{
  "aliases": [
    "dimanorat",
    "donnect",
    "obstinate mogwai",
    "trochilusrat"
  ],
  "attack_id": null,
  "attack_name": null,
  "attack_url": null,
  "counts": {
    "domain": 31,
    "ipv4": 45,
    "url": 44
  },
  "first_seen": {
    "domain": {
      "cariolis.com": "2024-10-12",
      "dns-stream.com": "2024-10-12",
      "down.soft-update.com": "2024-10-12",
      "down.softupdate.com": "2024-10-12",
      "go.thejra.com": "2024-10-12",
      "help.springnow.net": "2024-10-12",
      "home.thejra.com": "2024-10-12",
      "hoteldinamo.com": "2024-10-12",
      "hy.indiatopsite.com": "2024-10-12",
      "imail.indiatopsite.com": "2024-10-12",
      "indiatopsite.com": "2024-10-12",
      "iss-tass.com": "2024-10-12",
      "lion.thejra.com": "2024-10-12",
      "macbook.thejra.com": "2024-10-12",
      "my.thejra.com": "2024-10-12",
      "parking.samogony.com": "2024-10-12",
      "pitmanbed.space": "2024-10-12",
      "puzirik.com": "2024-10-12",
      "reformamebel.com": "2024-10-12",
      "rhodesauto.space": "2024-10-12",
      "rralphfood.space": "2024-10-12",
      "seanpi.thejra.com": "2024-10-12",
      "secure.thejra.com": "2024-10-12",
      "skypi.thejra.com": "2024-10-12",
      "soft-update.com": "2024-10-12",
      "softupdate.com": "2024-10-12",
      "ssl.hoteldinamo.com": "2024-10-12",
      "tes.indiatopsite.com": "2024-10-12",
      "ttl.huzfs.com": "2024-10-12",
      "vorots.ru": "2024-10-12",
      "yandexcloud.samogony.com": "2024-10-12"
    },
    "ipv4": {
      "108.160.136.200:443": "2024-10-12",
      "116.251.217.104:443": "2024-10-12",
      "122.192.11.114:443": "2024-10-12",
      "122.96.34.142:443": "2024-10-12",
      "139.162.111.143:443": "2024-10-12",
      "139.84.139.176:443": "2024-10-12",
      "149.28.189.102:443": "2024-10-12",
      "158.247.203.87:443": "2024-10-12",
      "181.215.229.119:443": "2024-10-12",
      "185.132.125.154:443": "2024-10-12",
      "185.167.116.30:443": "2024-10-12",
      "185.4.66.116:443": "2024-10-12",
      "188.116.22.90:443": "2024-10-12",
      "188.130.160.144:443": "2024-10-12",
      "192.121.171.190:443": "2024-10-12",
      "192.121.47.214:443": "2024-10-12",
      "192.248.153.215:443": "2024-10-12",
      "193.47.34.229:443": "2024-10-12",
      "194.68.26.142:443": "2024-10-12",
      "194.68.26.164:443": "2024-10-12",
      "213.135.67.198:443": "2024-10-12",
      "213.183.54.200:443": "2024-10-12",
      "213.183.56.238:443": "2024-10-12",
      "213.183.57.73:443": "2024-10-12",
      "27.102.115.153:443": "2024-10-12",
      "31.192.234.35:443": "2024-10-12",
      "31.214.157.5:443": "2024-10-12",
      "38.180.29.3:443": "2024-10-12",
      "38.54.16.120:443": "2024-10-12",
      "45.12.67.18:443": "2024-10-12",
      "45.150.64.23:443": "2024-10-12",
      "46.161.15.98:443": "2024-10-12",
      "46.8.43.28:443": "2024-10-12",
      "5.188.33.50:443": "2024-10-12",
      "5.8.33.45:443": "2024-10-12",
      "51.79.191.204:443": "2024-10-12",
      "85.159.208.143:443": "2024-10-12",
      "86.105.227.126:443": "2024-10-12",
      "86.106.102.119:443": "2024-10-12",
      "92.119.159.22:443": "2024-10-12",
      "92.243.66.166:443": "2024-10-12",
      "92.38.160.212:443": "2024-10-12",
      "92.38.160.7:443": "2024-10-12",
      "94.177.123.215:443": "2024-10-12",
      "95.179.249.142:443": "2024-10-12"
    },
    "url": {
      "http://108.160.136.200": "2024-10-12",
      "http://116.251.217.104": "2024-10-12",
      "http://122.192.11.114": "2024-10-12",
      "http://122.96.34.142": "2024-10-12",
      "http://139.162.111.143": "2024-10-12",
      "http://139.84.139.176": "2024-10-12",
      "http://149.28.189.102": "2024-10-12",
      "http://158.247.203.87": "2024-10-12",
      "http://181.215.229.119": "2024-10-12",
      "http://185.132.125.154": "2024-10-12",
      "http://185.167.116.30": "2024-10-12",
      "http://185.4.66.116": "2024-10-12",
      "http://188.116.22.90": "2024-10-12",
      "http://188.130.160.144": "2024-10-12",
      "http://192.121.171.190": "2024-10-12",
      "http://192.121.47.214": "2024-10-12",
      "http://192.248.153.215": "2024-10-12",
      "http://193.47.34.229": "2024-10-12",
      "http://194.68.26.142": "2024-10-12",
      "http://194.68.26.164": "2024-10-12",
      "http://213.135.67.198": "2024-10-12",
      "http://213.183.54.200": "2024-10-12",
      "http://213.183.56.238": "2024-10-12",
      "http://213.183.57.73": "2024-10-12",
      "http://27.102.115.153": "2024-10-12",
      "http://31.192.234.35": "2024-10-12",
      "http://31.214.157.5": "2024-10-12",
      "http://38.180.29.3": "2024-10-12",
      "http://38.54.16.120": "2024-10-12",
      "http://45.12.67.18": "2024-10-12",
      "http://46.161.15.98": "2024-10-12",
      "http://46.8.43.28": "2024-10-12",
      "http://5.188.33.50": "2024-10-12",
      "http://5.8.33.45": "2024-10-12",
      "http://51.79.191.204": "2024-10-12",
      "http://85.159.208.143": "2024-10-12",
      "http://86.105.227.126": "2024-10-12",
      "http://86.106.102.119": "2024-10-12",
      "http://92.119.159.22": "2024-10-12",
      "http://92.243.66.166": "2024-10-12",
      "http://92.38.160.212": "2024-10-12",
      "http://92.38.160.7": "2024-10-12",
      "http://94.177.123.215": "2024-10-12",
      "http://95.179.249.142": "2024-10-12"
    }
  },
  "first_seen_precision": {
    "domain": {},
    "ipv4": {},
    "url": {}
  },
  "first_seen_range": {
    "earliest": "2024-10-12",
    "latest": "2024-10-12"
  },
  "generated_at": "2026-08-08T03:26:30+00:00",
  "indicators": {
    "domain": [
      "cariolis.com",
      "dns-stream.com",
      "down.soft-update.com",
      "down.softupdate.com",
      "go.thejra.com",
      "help.springnow.net",
      "home.thejra.com",
      "hoteldinamo.com",
      "hy.indiatopsite.com",
      "imail.indiatopsite.com",
      "indiatopsite.com",
      "iss-tass.com",
      "lion.thejra.com",
      "macbook.thejra.com",
      "my.thejra.com",
      "parking.samogony.com",
      "pitmanbed.space",
      "puzirik.com",
      "reformamebel.com",
      "rhodesauto.space",
      "rralphfood.space",
      "seanpi.thejra.com",
      "secure.thejra.com",
      "skypi.thejra.com",
      "soft-update.com",
      "softupdate.com",
      "ssl.hoteldinamo.com",
      "tes.indiatopsite.com",
      "ttl.huzfs.com",
      "vorots.ru",
      "yandexcloud.samogony.com"
    ],
    "ipv4": [
      "108.160.136.200:443",
      "116.251.217.104:443",
      "122.192.11.114:443",
      "122.96.34.142:443",
      "139.162.111.143:443",
      "139.84.139.176:443",
      "149.28.189.102:443",
      "158.247.203.87:443",
      "181.215.229.119:443",
      "185.132.125.154:443",
      "185.167.116.30:443",
      "185.4.66.116:443",
      "188.116.22.90:443",
      "188.130.160.144:443",
      "192.121.171.190:443",
      "192.121.47.214:443",
      "192.248.153.215:443",
      "193.47.34.229:443",
      "194.68.26.142:443",
      "194.68.26.164:443",
      "213.135.67.198:443",
      "213.183.54.200:443",
      "213.183.56.238:443",
      "213.183.57.73:443",
      "27.102.115.153:443",
      "31.192.234.35:443",
      "31.214.157.5:443",
      "38.180.29.3:443",
      "38.54.16.120:443",
      "45.12.67.18:443",
      "45.150.64.23:443",
      "46.161.15.98:443",
      "46.8.43.28:443",
      "5.188.33.50:443",
      "5.8.33.45:443",
      "51.79.191.204:443",
      "85.159.208.143:443",
      "86.105.227.126:443",
      "86.106.102.119:443",
      "92.119.159.22:443",
      "92.243.66.166:443",
      "92.38.160.212:443",
      "92.38.160.7:443",
      "94.177.123.215:443",
      "95.179.249.142:443"
    ],
    "url": [
      "http://108.160.136.200",
      "http://116.251.217.104",
      "http://122.192.11.114",
      "http://122.96.34.142",
      "http://139.162.111.143",
      "http://139.84.139.176",
      "http://149.28.189.102",
      "http://158.247.203.87",
      "http://181.215.229.119",
      "http://185.132.125.154",
      "http://185.167.116.30",
      "http://185.4.66.116",
      "http://188.116.22.90",
      "http://188.130.160.144",
      "http://192.121.171.190",
      "http://192.121.47.214",
      "http://192.248.153.215",
      "http://193.47.34.229",
      "http://194.68.26.142",
      "http://194.68.26.164",
      "http://213.135.67.198",
      "http://213.183.54.200",
      "http://213.183.56.238",
      "http://213.183.57.73",
      "http://27.102.115.153",
      "http://31.192.234.35",
      "http://31.214.157.5",
      "http://38.180.29.3",
      "http://38.54.16.120",
      "http://45.12.67.18",
      "http://46.161.15.98",
      "http://46.8.43.28",
      "http://5.188.33.50",
      "http://5.8.33.45",
      "http://51.79.191.204",
      "http://85.159.208.143",
      "http://86.105.227.126",
      "http://86.106.102.119",
      "http://92.119.159.22",
      "http://92.243.66.166",
      "http://92.38.160.212",
      "http://92.38.160.7",
      "http://94.177.123.215",
      "http://95.179.249.142"
    ]
  },
  "last_modified": "2026-01-02T23:10:15+00:00",
  "maltrail_groups": [
    "OBSMOGWAI"
  ],
  "references": [
    "https://rt-solar.ru/solar-4rays/blog/4753/",
    "https://www.virustotal.com/gui/file/6989ae1a39c696d798a0439f519bd243d23f42c27d08c7ccadc822f914eed4bc/detection",
    "https://x.com/XakepRU/status/1844785033208316090"
  ],
  "related": [],
  "slug": "OBSMOGWAI",
  "timeline": [
    {
      "counts": {
        "domain": 31,
        "ipv4": 45,
        "url": 44
      },
      "first_seen": "2024-10-12",
      "indicators": {
        "domain": [
          "cariolis.com",
          "dns-stream.com",
          "down.soft-update.com",
          "down.softupdate.com",
          "go.thejra.com",
          "help.springnow.net",
          "home.thejra.com",
          "hoteldinamo.com",
          "hy.indiatopsite.com",
          "imail.indiatopsite.com",
          "indiatopsite.com",
          "iss-tass.com",
          "lion.thejra.com",
          "macbook.thejra.com",
          "my.thejra.com",
          "parking.samogony.com",
          "pitmanbed.space",
          "puzirik.com",
          "reformamebel.com",
          "rhodesauto.space",
          "rralphfood.space",
          "seanpi.thejra.com",
          "secure.thejra.com",
          "skypi.thejra.com",
          "soft-update.com",
          "softupdate.com",
          "ssl.hoteldinamo.com",
          "tes.indiatopsite.com",
          "ttl.huzfs.com",
          "vorots.ru",
          "yandexcloud.samogony.com"
        ],
        "ipv4": [
          "108.160.136.200:443",
          "116.251.217.104:443",
          "122.192.11.114:443",
          "122.96.34.142:443",
          "139.162.111.143:443",
          "139.84.139.176:443",
          "149.28.189.102:443",
          "158.247.203.87:443",
          "181.215.229.119:443",
          "185.132.125.154:443",
          "185.167.116.30:443",
          "185.4.66.116:443",
          "188.116.22.90:443",
          "188.130.160.144:443",
          "192.121.171.190:443",
          "192.121.47.214:443",
          "192.248.153.215:443",
          "193.47.34.229:443",
          "194.68.26.142:443",
          "194.68.26.164:443",
          "213.135.67.198:443",
          "213.183.54.200:443",
          "213.183.56.238:443",
          "213.183.57.73:443",
          "27.102.115.153:443",
          "31.192.234.35:443",
          "31.214.157.5:443",
          "38.180.29.3:443",
          "38.54.16.120:443",
          "45.12.67.18:443",
          "45.150.64.23:443",
          "46.161.15.98:443",
          "46.8.43.28:443",
          "5.188.33.50:443",
          "5.8.33.45:443",
          "51.79.191.204:443",
          "85.159.208.143:443",
          "86.105.227.126:443",
          "86.106.102.119:443",
          "92.119.159.22:443",
          "92.243.66.166:443",
          "92.38.160.212:443",
          "92.38.160.7:443",
          "94.177.123.215:443",
          "95.179.249.142:443"
        ],
        "url": [
          "http://108.160.136.200",
          "http://116.251.217.104",
          "http://122.192.11.114",
          "http://122.96.34.142",
          "http://139.162.111.143",
          "http://139.84.139.176",
          "http://149.28.189.102",
          "http://158.247.203.87",
          "http://181.215.229.119",
          "http://185.132.125.154",
          "http://185.167.116.30",
          "http://185.4.66.116",
          "http://188.116.22.90",
          "http://188.130.160.144",
          "http://192.121.171.190",
          "http://192.121.47.214",
          "http://192.248.153.215",
          "http://193.47.34.229",
          "http://194.68.26.142",
          "http://194.68.26.164",
          "http://213.135.67.198",
          "http://213.183.54.200",
          "http://213.183.56.238",
          "http://213.183.57.73",
          "http://27.102.115.153",
          "http://31.192.234.35",
          "http://31.214.157.5",
          "http://38.180.29.3",
          "http://38.54.16.120",
          "http://45.12.67.18",
          "http://46.161.15.98",
          "http://46.8.43.28",
          "http://5.188.33.50",
          "http://5.8.33.45",
          "http://51.79.191.204",
          "http://85.159.208.143",
          "http://86.105.227.126",
          "http://86.106.102.119",
          "http://92.119.159.22",
          "http://92.243.66.166",
          "http://92.38.160.212",
          "http://92.38.160.7",
          "http://94.177.123.215",
          "http://95.179.249.142"
        ]
      },
      "precision": "exact",
      "references": [
        "https://x.com/XakepRU/status/1844785033208316090",
        "https://rt-solar.ru/solar-4rays/blog/4753/",
        "https://www.virustotal.com/gui/file/6989ae1a39c696d798a0439f519bd243d23f42c27d08c7ccadc822f914eed4bc/detection"
      ],
      "total": 120
    }
  ]
}