If I’m not mistaken, the attackers were using this URL for Reliable Recent News - which appears to be seized indeed:
This reference is found on page 50 of the following lawsuit by the United States of America versus “certain domains”:
https://www.justice.gov/d9/2024-09/doppelganger_affidavit_9.4.24.pdf
Interesting how the malign actors are colloquially referred to as “Doppelganger”.
You’re awesome - have a great day. Thank you.