Entity record
Mojtaba GHAL'EH-KUHIPerson
Mojtaba GHAL'EH-KUHI appears on the OFAC Specially Designated Nationals (SDN) List, designated by US OFAC under program CYBER4; reflected as observed on 2026-08-26.
Designations
- Designated by US OFAC under program CYBER4. Other entities under CYBER4
Deep-research findings
Factual findings gathered from public and official sources about this entity, each attributed to a verifiable source. These are composed facts, each traceable to the linked source — not a narrative we have written, and not a risk judgement or allegation by us. Read each source directly.
Date of birth
OFAC SDN entry lists DOB 29 Jun 1988, POB Iran, Iranian National ID No. 2900670063, and digital currency addresses XBT 1GXeCkFQq7SYo6B7wdLAPkkri6NFTFB7No and ETH 0x1b8579cf6ab12ea6b74ac5fa41f3829a3cb61e6e.
Roles & positions
Per Treasury, since at least summer 2023 Ghal'eh-Kuhi and Behzad Mesri have led a group of Iranian malicious cyber actors that frequently conducts computer network exploitations on behalf, or for the benefit, of Iran's Ministry of Intelligence and Security (MOIS).
Status changes
Designated by OFAC on 2026-08-24 pursuant to E.O. 13694, as further amended, for being responsible for or complicit in, or having engaged in, cyber-enabled activities originating in substantial part outside the United States.
Adverse media
Per Treasury, in spring 2025 Ghal'eh-Kuhi and Saber Shahbazi Balujeh compromised and exfiltrated data from an Iranian telecommunications company.
Key properties
- Date of birth
- Place of birth
- Iran
- Nationality
- Iran
Identifiers
- National ID No.
- 2900670063 · Iran
- Gender
- Male
- Digital Currency Address - XBT
- 1GXeCkFQq7SYo6B7wdLAPkkri6NFTFB7No
- Digital Currency Address - ETH
- 0x1b8579cf6ab12ea6b74ac5fa41f3829a3cb61e6e
- Email Address
- amandalekhaym@gmail.com
- Email Address
- lekhaymp@gmail.com
- Email Address
- lekhaymf@gmail.com
- Email Address
- lekhaymo@gmail.com
- Email Address
- Spamtools.net@gmail.com
- Email Address
- mojtabaurmia@gmail.com
- Email Address
- mehdicfive@yahoo.com
- Email Address
- mojtabaurmia@yahoo.com
- Additional Sanctions Information -
- Subject to Secondary Sanctions
Addresses
IranSource list & list version
| Source list | List version | Manifest SHA-256 | Status | Verify |
|---|---|---|---|---|
| OFAC Specially Designated Nationals (SDN) ListSanctions list US Department of the Treasury, Office of Foreign Assets Control | 20260613-001 | 866713678725ea39… | List version (signing pending) | manifest |
About these sources
The US Treasury's Office of Foreign Assets Control (OFAC) Specially Designated Nationals and Blocked Persons List — the United States' primary sanctions list, naming persons, companies, vessels and aircraft whose property is blocked under US sanctions authorities (IEEPA, TWEA, the Kingpin Act, Global Magnitsky, and program-specific executive orders).
What a match means: A match is a direct US sanctions hit — the named party is designated and, absent a license, US persons are generally barred from dealing with them; escalate immediately rather than clearing the alert yourself.
First observed ; last confirmed present in OFAC Specially Designated Nationals (SDN) List list version 20260613-001, observed .
This page reflects the official OFAC Specially Designated Nationals (SDN) List, version 20260613-001, as observed on 2026-08-26. ProofAML is not the issuing authority.
Request a correction or dispute (distinguishes a data-handling error on our side from the underlying official designation, which is the issuing authority's record).
How to cite this page
Mojtaba GHAL'EH-KUHI. ProofAML. This page reflects the official OFAC Specially Designated Nationals (SDN) List, version 20260613-001, as observed on 2026-08-26. ProofAML is not the issuing authority. URL: https://proofaml.com/people/mojtaba-ghal-eh-kuhi-nk4eaa3c2f/
Machine-readable export (FTM + lineage): /data/entities/4e.json (record key nk4eaa3c2f)