mhdebr[.]ir

Analysis of the domain mhdebr.ir, registered through IR-MIHAN-20051129, reveals that it is currently active and flagged as a high-risk generic phishing site. The domain resolves to the IP address 89.42.211.171 and is listed on three security blocklists: PhishDestroy, PhishingDB, and BLP-Malware. The presence of the domain in 50 threat intelligence pulses on AlienVault OTX and its Gridinsoft trust score of 0/100 further substantiate the high risk level. The site's page title is 'PAKBAN', and the technologies detected include Leaflet, jQuery, and HTTP/3. The SSL certificate is issued by Let's Encrypt. Given the high number of security vendors flagging this domain and its appearance on multiple blocklists, network defenders are advised to block access to mhdebr.ir and monitor for any related malicious activities. The exact content and purpose of the site have not been fully analyzed, but the available evidence strongly suggests that it poses a significant threat.