Iranian Government & Hezbollah Infrastructure - Collected 2026-01-04
Collected from HTTP Set-Cookie headers during OSINT
| # | Source Domain | Cookie Name | Hash Value |
|---|---|---|---|
| 1 | moqawama.org.lb | PHPSESSID | 83d0d0dde0bdea9c508fb780f5e22330 |
| 2 | audio.moqawama.org.lb | sec_session_id | 78278a485df2a5807e6d9c45158a989e |
| 3 | gallery.moqawama.org.lb | sec_session_id | d0130803e2bad19514db5f13679dbd1f |
Collected from farsnews.ir API response headers
| # | Source Domain | Cookie Name | Hash Value | Notes |
|---|---|---|---|---|
| 4 | farsnews.ir | cookiesession1 | 678B286B29F37FAC96F0F1CB00C133DC | Expires Jan 2027, HttpOnly |
Found in HTML source - content-based cache busting
| # | Source Domain | Pattern | Hash Value |
|---|---|---|---|
| 5 | almanar.com.lb | mnrminify_[MD5].css | 3c902298363cd2282b362f860e54fe29 |
Found in formx.khamenei.link API JSON response
| # | Source Domain | Parameter | Hash Value | Purpose |
|---|---|---|---|---|
| 6 | formx.khamenei.link | c= | ae8373ca17dc9561f317 | Redirect/click tracking |
Found in DNS TXT record - proves Google account ownership
| # | Source Domain | Location | Token Value |
|---|---|---|---|
| 7 | khamenei.ir | DNS TXT Record | FrS79LKnklz_7cQGdeYYR5RW-gtYz2sm3JWIVWo24W0 |
Found in HTML <script> tags - Google has full traffic visibility
| # | Source Domain | Property ID | Type |
|---|---|---|---|
| 8 | khamenei.ir | UA-6238962-2 | Universal Analytics |
| 9 | khamenei.ir | G-8MVZ1HLJT0 | GA4 |
| 10 | almanar.com.lb | UA-199941297-1 | Universal Analytics |
| 11 | almanar.com.lb | G-JJ1SM3JFZW | GA4 |
| 12 | tasnimnews.com | G-MGYZR3Q3BS | GA4 |
| 13 | presstv.ir | G-F359E8PMME | GA4 |
| 14 | mehrnews.com | G-ERSHRYVTBP | GA4 |
| 15 | defapress.ir | G-94BW46TZJM | GA4 |
| 16 | moqawama.org.lb | G-Z8F3HPDSWG | GA4 |
Found in HTML - links multiple sites together
| # | Container ID | Primary Domain | Linked Sites |
|---|---|---|---|
| 17 | GTM-TLJW8TR | almanar.com.lb | almanar.com.lb, almanartv.com.lb, manartv.com.lb |
| 18 | GTM-PZ3N9B8 | tasnimnews.com | IRGC media network |
Found in HTML - Microsoft records full user sessions
| # | Source Domain | Project ID | Notes |
|---|---|---|---|
| 19 | almanar.com.lb | cgaike4iub | Primary project |
| 20 | almanar.com.lb | cs22bibpe3 | Secondary project |
| 21 | mehrnews.com | o2z34ibfin | Session recording enabled |