Dear blog readers,
I’ve decided to share with everyone a currently active domain portfolio used and managed by Iran’s Mabna hackers which aims to assist everyone in their cyber attack campaign attribution campaigns including in cyber threat actor attribution campaigns.
Sample currently active domain list used and operated by Iran’s Mabna hackers:
mlibo.ml
blibo.ga
azll.cf
azlll.cf
lzll.cf
jlll.cf
elll.cf
lllib.cf
tsll.cf
ulll.tk
tlll.cf
libt.ga
libk.ga
libf.ga
libe.ga
liba.gq
libver.ml
ntll.tk
ills.cf
vtll.cf
clll.tk
stll.tk
llii.xyz
lill.pro
eduv.icu
univ.red
unir.cf
unir.gq
unisv.xyz
unir.ml
unin.icu
unie.ml
unip.gq
unie.ga
unip.cf
nimc.ga
nimc.ml
savantaz.cf
unie.gq
unip.ga
unip.ml
unir.ga
untc.me
jhbn.me
unts.me
uncr.me
lib-service.com
unvc.me
untf.me
nimc.cf
anvc.me
ebookfafa.com
nicn.gq
untc.ir
librarylog.in
llli.nl
lllf.nl
libg.tk
ttil.nl
llil.nl
lliv.nl
llit.site
flil.cf
e-library.me
cill.ml
fill.cf
libm.ga
eill.cf
llib.cf
eill.ga
nuec.cf
illl.cf
cnen.cf
aill.nl
eill.nl
mlib.cf
ulll.cf
nlll.cf
clll.nl
llii.cf
etll.cf
1edu.in
aill.cf
atna.cf
atti.cf
aztt.tk
cave.gq
ccli.cf
cnma.cf
cntt.cf
crll.tk
csll.cf
ctll.tk
cvnc.ga
cvve.cf
czll.tk
cztt.tk
euca.cf
euce.in
ezll.tk
ezplog.in
ezproxy.tk
eztt.tk
flll.cf
iell.tk
iull.tk
izll.tk
lett.cf
lib1.bid
lib1.pw
libb.ga
libe.ml
libg.cf
libg.ga
libg.gq
libloan.xyz
libnicinfo.xyz
libraryme.ir
libt.ml
libu.gq
lill.gq
llbt.tk
llib.ga
llic.cf
llic.tk
llil.cf
llit.cf
lliv.tk
llse.cf
ncll.tk
ncnc.cf
nctt.tk
necr.ga
nika.ga
nsae.ml
nuec.ml
rill.cf
rnva.cf
rtll.tk
sctt.cf
shibboleth.link
sitl.tk
slli.cf
till.cf
titt.cf
uill.cf
uitt.tk
ulibe.ml
ulibr.ga
umlib.ml
umll.tk
uni-lb.com
unll.tk
utll.tk
vsre.cf
web2lib.info
xill.tk
zedviros.ir
zill.cf
Stay tuned!
