They just can't keep their sites off the Great Satan's servers

[Aaron]

icpalestine.ir/.org, domains of "The International Conference on Palestinian Intifada" that sport a favicon and banner both with the official seal of the Islamic Republic, are nominally hosted in Iran, but redirect to icpalestine.com. The latter is hosted in the United States.

Name: icpalestine.com
Address: 74.84.139.20

NetRange:       74.84.128.0 - 74.84.159.255
CIDR:           74.84.128.0/19
OriginAS:       AS14361
NetName:        HOPONE-DCA3-1
NetHandle:      NET-74-84-128-0-1
Parent:         NET-74-0-0-0-0
NetType:        Direct Allocation
Comment:        HopOne Internet Corp.(R)
Comment:        The Foundation of Internet Success.(R)
RegDate:        2007-05-08
Updated:        2012-02-24
Ref:            http://whois.arin.net/rest/net/NET-74-84-128-0-1

OrgName:        HopOne Internet Corporation
OrgId:          HOPO
Address:        3311 South 120th Place
City:           Tukwila
StateProv:      WA
PostalCode:     98168-5125
Country:        US
RegDate:        1999-12-02
Updated:        2008-10-04
Comment:        HopOne Internet Corp.(R)
Comment:        "The Foundation of Internet Success."(R)
Comment:        www.hopone.net
Ref:            http://whois.arin.net/rest/org/HOPO

ReferralServer: rwhois://rwhois.hopone.net:4321

OrgAbuseHandle: ABUSE958-ARIN
OrgAbuseName:   Abuse Department
OrgAbusePhone:  206-438-5909
OrgAbuseEmail:  abuse@hopone.net
OrgAbuseRef:    http://whois.arin.net/rest/poc/ABUSE958-ARIN

OrgTechHandle: HJ48-ARIN
OrgTechName:   Jass, Haralds
OrgTechPhone:  +1-206-438-5909
OrgTechEmail:  hjass@hopone.net
OrgTechRef:    http://whois.arin.net/rest/poc/HJ48-ARIN

RAbuseHandle: ABUSE958-ARIN
RAbuseName:   Abuse Department
RAbusePhone:  206-438-5909
RAbuseEmail:  abuse@hopone.net
RAbuseRef:    http://whois.arin.net/rest/poc/ABUSE958-ARIN

RTechHandle: HJ48-ARIN
RTechName:   Jass, Haralds
RTechPhone:  +1-206-438-5909
RTechEmail:  hjass@hopone.net
RTechRef:    http://whois.arin.net/rest/poc/HJ48-ARIN

Reverse IP for 74.84.139.20

aavteam.com
abnoud.ir
abyanehco.com
afshinmanesh.com
airway2009.com
amalislamimovment.org
anthropometry.ir
astg.ir
avagroup.co.ir
avatv.net
avayeentezar.ir
bayanresaneh.com
bimehasia3272.com
biofluxbiotech.com
caspian-co.com
citypharmacist.ir
dhtco.com
dralirezajalali.com
ebm.ir
emamzaman.com
emamzaman.net
emamzaman.org
esteghlalnovin.ir
falahi.ir
foodonline.ir
fws-co.com
gamtechnic.ir
ghazanfarinia.ir
ghorb.info
ghorb.net
ghorb.org
hedayatresaneh.com
hizbullahcyber.com
hoodano.com
icpalestin.com
icpalestine.com
ir-hifi.com
irancansat.com
iranianspain.com
irankamja.com
irmob.info
irmob.ir
ironnasr-co.com
istgah1.com
kalayab.com
kalayab.ir
kalayab.net
kalayab.org
karamoz8.com
kavoshyeksosaz.com
khaatamolanbiya.com
khodromehr.com
khodroyab.com
kmgbiotech.com
liliume.com
maskankar.com
med.ir
medline.ir
moh.gov.ir
moradian.info
mousavidoust.com
mtsa.ir
nedayefan.com
nlz.ir
nowarnews.com
omid-afagh.com
paintballir.com
parande.ir
partnt.com
pasargad-optic.com
qoba.info
qoba.net
raspin.net
razmentezaran.com
romaysa.com
sadeghi-mdf.com
sadra-telecom.com
salamatnegar.com
salamatnegar.ir
sazcocompany.com
sefidroodastane.ir
sofalgar.com
soltaniebm.com
tabib.ir
tahlilnews.com
talashinsurance.com
talashinsurance.ir
tim.ir
truckiran.ir
xcms.ir
yousefvand.ir

Current (as of this morning) guidance from OFAC re: service provision and Iran sanctions:

http://www.treasury.gov/resource-cen...et_freedom.pdf

As regards HopOne and any sites likely to be associated with the IRI, the following is relevant:

The authorizations in section 560.540 of the ITR are subject to certain restrictions. This section does not authorize (1) the direct or indirect exportation of services or software with knowledge or reason to know that such services or software are intended for the Government of Iran; (2) the direct or indirect exportation of any goods or technology listed on the Commerce Control List in the EAR, 15 C.F.R. part 774, supplement No. 1 ("CCL"), except for software necessary to enable the services authorized by the personal communications general license that is classified as mass market software under ECCN 5D992 of the EAR; (3) the direct or indirect exportation of Intemet connectivity services or telecommunications transmission facilities (such as satellite links or dedicated lines); or (4) the direct or indirect exportation of web-hosting services that are for purposes other than personal communications or of domain name registration services. (See ITR, section 560.540(b).)

[Arieh]

Cross-reference to http://forum.internet-haganah.com/sh...ullahcyber-com

[Arieh]

Cross Reference - http://forum.internet-haganah.com/sh...t-not-for-thee

More links between the Iranian Ministry of Culture and Cyber-Hezbollah, in the person of Ali Fallah

[Arieh]

icpalestine.com registered to "IT, ershad", ie the Ministry of Culture's IT department.

email contact is mkhadem61@gmail.com

This is Mostafa Khademolmele

He also uses (more commonly) mkhadem61@yahoo.com and seems to work for the Iranian Govt setting up websites. I assume the Ministry of Culture but he's also the registrant of domain names linked to other ministries, eg Trade.

His name appears on oodles of Iranian Govt sites, most obviously Ershad.Gov.Ir, an old domain for the Iranian Culture ministry. Here are a few:

fashnews.ir - 184.107.251.18 (Canada) - pro-regime blog, doesn't openly appear to be linked to the regime
opencd.ir - 178.162.154.251 (Germany) - site plugging a free CD from the Culture Ministry that has special Iranian versions of PHP, SQLite, Apache, jFramework and Firefox. Because they really think people are that stupid!
gostareshonline.ir 209.172.44.100 (Canada) - Industry/economics news site, openly linked to the regime.
mfeb.ir - 184.107.251.18 (Canada) state-run religious institute.

Probably worth having a poke at those 3 IPs

[Aaron]

Reverse IP Lookup Results—185 domains hosted on IP address 184.107.251.18

7celsius.com
7iran.com
90min.ir
abouzarenahavand.ir
alamati.com
alamati.ir
allamehzadeh.com
alphabetholdings.com
aminrayane.com
anjomanke.com
apadanatours.com
apadanatours.ir
apadanatours.net
apadanatours.org
arazblog.com
aseiran.ir
ata-nut.com
ata-nut.org
ataxi-co.com
atnima.com
bafteshahr.com
bagherpourshirazi.com
behjam.com
behsazan-acc.com
berasmekhandeh.com
betadesigner.com
bgk-ir.com
bonyansanat.com
boshrouyeh.com
businessplan.ir
cgy.ir
chabahar.org
choobsazan.ir
choobsazan.net
choobsazan.org
daroosaz.com
dca.ir
degafilm.com
digital-gallery.net
digitalimage.ir
dokmeh.biz
donyaefarda.ir
dorodgaran.com
dorodgaran.ir
doroodgaran.com
doroodgaran.ir
dr-geramy.com
dr-mandegar.com
dr-mandegar.ir
emirates-hermes.com
fairna.ir
farakoh.ir
farartcollection.com
faraztrading.com
farzadmoradi.com
farzadmoradi.ir
fashnews.com
fashnews.ir
fatanehdadkhah.com
fgpars.com
fgpars.net
flatyerevan.com
forood.net
ghatehsazan.com
gordji.com
greenday.ir
gtp.ir
hackish.ir
hanie.ir
hatefbehpardaz.ir
hatefco.com
hnaco.com
honarmandonline.ir
iauda.ac.ir
iaudolatabad.ac.ir
imspars.com
iran-economy.com
iranianendosurg.org
iranina.ir
iranina.org
iranindustrial.ir
iranmapa.com
irenetootia.com
irse.ir
istatrading.com
itfs.ir
karafarin.biz
karin-shabdis.com
kermashan.ir
khabaredaroosazan.com
kheiriyehniki.ir
ksgp.ir
laeleazna.ir
lar-samacollege.ir
lightingpricelist.com
luxeoptic.com
luxeoptic.ir
madares-eslami.com
mahgasht.ir
mahgasht.org
mania-tech.com
markazit.ir
mazidpic.com
mcstudies.com
mcstudies.ir
medianews.ir
mehregan-tower.com
mehrimankish.com
mfeb.ir
mfib.ir
mooze.ir
mostafavipress.com
mowlaei.ir
naclinic.ir
naderebrahimi.ir
navakeng.com
navidkhosravi.com
nemov.ir
nfmc.ir
nikantradeco.com
niktasvir.com
nimakhosravi.com
nokiasoftware.ir
nokiaworld.ir
oghabemakou.com
pansinopetroleum.com
parsianrobotic.ir
parsidic.ir
parsina.ir
payamekarfarmayan.com
payatechgostar.com
pendashteh.ir
petroalmas.com
pishine.ir
ptscoltd.com
purifier-co.com
pzz.ir
rahagasht.com
rahavaranco.com
rahyabfgp.com
ramandtoos.com
rasemmedical.com
rastayab.com
reyhanehsaadat.com
reyhanehsaadat.ir
reyhanehsaadat.net
reyhanehsaadat.org
sadrapardaz.com
sazokar.ir
sepehrsanat.com
shahrvandfile.com
shelkom.com
shetmab.com
siminekrami.com
sipimex.com
sips.ir
sirusglass.com
smiptel.com
swiran.com
syrusmehhr.com
tadbirgostaran.ir
takcheragh.com
taklight.com
talarpack.com
tarbiatsalari.ir
tarhenavid.com
tavonco.com
tavonco.org
teheran.ir
tehransara.ir
thenomadgallery.com
titansanat.com
tjnsa.com
tmat.ir
tmgtuning.com
tofico.com
tofico.ir
trg-co.com
trg.ir
ttpc.ir
ultima-hw.com
unitedplanetholdings.com
wasco-ir.com
yadavaran.ir
yashar-samimi.com

[Aaron]

Reverse IP Lookup Results—37 domains hosted on IP address 178.162.154.251
Web Site
40post.ir
aghaedeshie.ir
alborzkanoon.ir
aoe.ir
arzeshi.ir
ayandehsaz.com
cvs.ir
ejazquran.com
etebaran.com
ethost.ir
howzeh-karaj.com
howzeh-karaj.ir
iranian-net.com
iranian-net.ir
jamekhatam.com
jframework.info
kazemabedi.ir
keva.ir
kzm.ir
maanavi.ir
masjedkhatam.com
maskan-online.com
mehrportal.net
modiremrooz.ir
montazermahdi.ir
opencd.ir
opendisc.ir
opendvd.ir
poss.ir
raheamir.ir
sandogh.net
sbce.ir
silix.ir
sutb.ir
takneveshteha.com
takneveshteha.ir
tanghim.com

[Aaron]

Reverse IP Lookup Results—348 domains hosted on IP address 209.172.44.100

1greencard.com
2minz.com
7negah.com
aa-saeidi.com
abadlift.com
abniroo.com
advertis.ir
afarinesh-research.org
afrabasketball.com
afsharturbo.ir
aftaab8.com
akkasishop.com
alavi-kb.ir
alborzins.ir
alborzmicrosystem.com
alborzms.ir
alfatej.com
ali-razi.com
ali-razi.ir
alita-realestate.com
alitahome.com
alitalab.com
alzahrango.com
aminmajd.com
anjomanghalam.ir
apgroups.net
aramin-vac.com
araminco.ir
arashizadyar.com
arashy.com
archimedic.com
arghavaan.com
arghotel.ir
arianasgari.com
arianlady.com
ariatraderoad.com
arvinweb.com
aryan-trade.com
aryasoor.com
aryasoor.net
aryavision.com
aryaware.ir
aryaware.net
asarahome.com
asifairan.ir
atiedaran.com
azarsimab.com
azinboard.com
babaksohrabi.com
badrossamagallery.com
baharsite.com
bamdadeu.com
basirgostar.net
bazargard.ir
bazarjo.com
behroooz.com
bina-afzar.com
bolhasani.com
boursema.com
boursema.ir
butia.co
butia.ir
canadayar.org
cdrsample.net
chamanifard.com
cidssoft.com
cina.ir
coopeh.com
damoontrading.com
doorbinabzar.com
dotissdesign.org
eccoiran.com
ecisi.com
economyschool.ir
ehdas-rd.com
ehsanix.com
elinazbs.com
eparizi.com
erfanix.com
erteghayasuj.ir
ethnodiffusion.com
ethnopub.com
fantazio.com
farhad-alitalab.com
farshid-monfared.com
farvardinstone.com
fd2012.com
fd2012.ir
ferdosibank.net
ferdosibank.org
ferdosicredit.com
ferdosicredit.ir
ferdosicredit.net
ferdosicredit.org
ferdosifinance.com
ferdosifinance.net
fereydounmusic.com
filterharaz.com
firoozian.com
firouzi-alborzins.ir
foroughraihani.com
fountainvalleyautowash.com
frosty-sun.com
fxpoloor.com
gam-abi.com
gam-abi.net
gamandpartners.com
gamedeveloper.ir
gamkb.ir
ganjeii.com
ghelyoon.net
ghotbiart.com
gilamard.com
giottos.ir
gohar-rahnavard.com
golabit.com
golafrouz.com
gostareshonline.com
gostareshonline.ir
granpayeh.com
hadavinia.com
hadavinia.ir
hafizmonthly.net
haftnegah.com
hamidghanbari.com
hamidreza.com
hamrahearshad.com
happymonstersland.com
harazfilter.com
harpakco.com
heidarian.com
honar30nema.com
honarcinema.com
hoomanlatifi.com
hooshmand-market.com
hrl-co.com
humaan.org
iaoemarkazi.ir
ictna.ir
ifm.ir
ifmtuning.com
ifmtuning.net
ifmtuning.org
imanirad.net
imenrayan.ir
imensazanpishro.com
imensazanpishro.ir
imentadbirviera.com
impgco.com
infopen.ir
iqboard.ir
iran-sama.com
iranarvin.com
irangalaxy.com
iranpingpong.net
iranturkeman.com
irdb.ir
isfahan2.com
islamic-iranian-arts.org
isoroush.ir
ispsecurity.org
istna.ir
itccertificate.com
itviera.com
kalayetebiran-co.com
kalayetebiran-co.ir
kalayetebiran.ir
kayhan-pallet.com
kbvet.org.ir
keivanbehbahani.com
kelasor.ir
khademin14masoom.com
khanehhonar.org
khoobtarin.com
khoobtarin.ir
khoobtarinha.com
khoobtarinha.ir
kianmt.com
koohsan.com
kurdfair.ir
kurdshora.ir
lavazza.ir
lianbazar.com
lianmusic.com
linguistic.ir
maharts.com
mahsavahdat.com
majnoonian.com
marjan-nama.com
marmoolak.net
masihateb.ir
maskansazankb.ir
matisa.ir
maziarmiri.com
medianband.com
mehrsan.ir
mehrsan.net
metajoin.ir
mftbu.info
mgciran.com
minafactory.com
miraschb.com
mirasolgoo.com
mirzaeico.com
modirangroup.org
mohammadtolouei.com
morsalin.com
motamedarya.com
msdb.fr
mtpchemical.com
myteacher.ir
naghshava.net
negarandkourosh.com
netnegar.com
newgenetic.com
nikaphotogallery.com
niko-negaresh.com
niksafar.com
nilapub.com
nodid.com
nooshi.org
nsavin.com
officemuseum.ir
oghabian.net
oilgas.ir
oldpersianweb.com
oudlajan.com
overlandstorage.ir
padidab.ir
pardisenamel.com
parsamgostardarya.com
parsamgostardarya.org
parsian-restaurant.com
parsianafzar.com
parsianafzar.ir
parsianlub.com
parsiansoft.ir
parsziggurat.ir
passargad.ir
payamejarrah.com
pds.co.ir
pds.ir
pegasus-he.com
peikarehpub.com
persiamagazine.ir
persian-holding.com
persianhosted.net
persianisatis.com
persianprints.com
pfnicico.ir
pimeraco.com
pirgholi.com
ppec.ir
ppn-co.net
pqf.ir
procurement-consultant.ir
productiveproduct.com
ptewiki.com
qazaal.com
radraftar.com
ranadabiri.com
rangahang.com
ravananimation.com
rheem.ir
rootooshbashi.com
rozhin-sanat.com
sabzsepidar.com
safarkadeh.com
saket.ws
salehoffline.com
samaei.com
samaranginkaman.com
sedayeabadan.ir
seekingwords.com
sefe-org.com
semnanchemie.com
sepehrins.ir
setareh-sahabi.com
setcup.ir
shahhoseini.net
shamsetoos.ir
shamstoos.com
shamstoos.ir
sheed.ir
sheilagallery.com
shemsheshomal.com
shirozhan.com
shirozhan.ir
shomalacademy.com
signal2noise.ir
silvermetalco.com
sivanfilter.com
skymoon.co
slashsbin.com
sogand.net
songhor.com
sorbi.us
soroushe-izad.com
soshians.ir
spa.ir
srbme.com
steelmate-ae.com
subtlegroups.com
taba-towzin.com
tableautiles.com
taherianstudio.com
taktv.net
tamiraat.com
tardid.com
tarheravagh.ir
tarjome4u.com
tasmehmajd.com
tassvir.com
testeonline.ir
thelonelyrave.ir
tinaco.biz
tizhoosh.net
tjmcs.com
tourismleaders.com
tpscocrane.com
translate4u.ir
ubnt.ir
uncocoder.com
valatadbir.com
valatadbir.ir
variandarou.com
virayesh.ir
virayesh.net
warenplastic.com
webalive.ir
webdesignunit.com
weblog.ir
websis.ir
websys.ir
xorshid.com
yasplast.com
yasuj-samacollege.ir
yasuj-samaschools.ir
yazd-tech.com
zahrarosewaterco.com
zakipour.com
zarfchin.ir
zinniafamily.biz
zinniafamily.net
zinniafamily.org
znetco.com
znetco.net
zorluplastic.com