Exposing Ashiyane Digital Security Domains | WhoisXML API

Threat Reports

Exposing 100+ Domains Possibly Belonging to the Ashiyane Digital Security Team

The Ashiyane Digital Security Team is known to be a gray hat network security company based in Iran.1 It has been allegedly connected to several state-sponsored attacks against various countries over the years. 

Despite the shutdown of the associated Ashiyane Forum in 2018, domains potentially tied to some of its members can still be uncovered.

To help with providing relevant intelligence to the security community, WhoisXML API Threat Researcher Dancho Danchev uncovered a total of 147 domains with ties to individuals connected to the Ashiyane Digital Security Team or the Ashiyane Forum.

The artifacts featured in the report can serve as good starting points to help with cyber campaign attribution and more in-depth investigations.

Get access to our findings and uncover more on your own. Download the report now.


  • [1] https://www.recordedfuture.com/ashiyane-forum-history/
Try our WhoisXML API for free
Get started