HEZBOLLAH DNS INFRASTRUCTURE
=============================

ALMANAR.COM.LB:
- Nameservers: ns1.awt-lb.com, ns2.awt-lb.com
- AWT-LB.COM DNS: 185.112.156.85 (Budapest, Hungary)
- ASN: AS210772 NewPush Europe Kft.
- Hostname: test44.sebalinux.eu

MOQAWAMA.ORG.LB:
- Nameservers: ns41-44.cloudns.net
- ClouDNS = Bulgarian free DNS provider
- Hosting IP: 91.109.206.65 (Chekhov, Moscow)
- ASN: AS199669 Okay-Telecom Ltd.
- Hostname: mq.webking1.net

WHY IT MATTERS:
- Using Eastern European DNS (Hungary, Bulgaria)
- Not using Lebanese DNS infrastructure
- Harder to trace/takedown
- ClouDNS = free, anonymous-friendly
- AWT-LB appears to be custom Hezbollah DNS

KEY INSIGHT: awt-lb.com = "AWT Lebanon"
- Likely Hezbollah-controlled DNS service
- Hosted outside Lebanon for protection