Earlier today, I posted many reasons why I believe Iran is behind the Mapping Project.
Now I have one more.
A look at the domain information for their website Jisrcollective[dot]com shows registry by the US-based company Namecheap Inc, through its subsidiary Withheld for Privacy ehf (an online privacy service), with an address in Iceland:
According to Jennifer Dyer, a retired US Naval intelligence officer, for a group like this, that’s a classic tell that someone did a comprehensive set-up to operate them as a front.
In 2021, the US cyber watchdog CISA (agency of US Dept of Homeland Security) put out a warning on malware sources with domains registered to the same Iceland address/company. Texas also has a case against a pair of bad actors registered by Namecheap’s Iceland company.
Those things mean it’s common for bad actors to register anonymously with this privacy service.
Interestingly, Namecheap also accepts payment via Bitcoin:
This could mean that in theory, its clients can remain anonymous even to Namecheap.
In other words, all signs (still) point towards Iran.
(I have added this all to my previous post)
