home

dl.mob4u.ir

Domain Information

Server location:
Nord-Pas-De-Calais, France (FR)

ASN:
AS16276 OVH OVH SAS,FR

Root domain:
mob4u.ir

The domain dl.mob4u.ir has been seen to resolve to the following 2 IP addresses.

37.187.130.192
server9fd.axspace.com
June 5, 2016

5.9.31.18
mihanwebhost.com
April 20, 2016

File downloads found at URLs served by dl.mob4u.ir.

1 / 68      (PUP)
http://dl.mob4u.ir/app/.../Zapya.1.8.0.2.exe  (cf9901a744b31b078f36e65e07de68bb)

0 / 68
http://dl.mob4u.ir/app/.../Iromusic_Full(Www.Mob4u.iR).exe  (iromusic_f ull.exe)

0 / 68
http://dl.mob4u.ir/app/.../TelegramDesktop.0.9.48(Www.Mob4u.iR).exe  (tsetup.0.9.48.exe)

0 / 68
http://dl.mob4u.ir/app/.../Iromusic3Beta(Www.Mob4u.iR).exe  (iromusic3beta-www.kamyabdl.com.exe)

0 / 68
http://dl.mob4u.ir/app/.../Telegram-Desktop-v0.9.26(Mob4u.iR).exe  (bzj+0a+g.exe)

The following 2 files have been seen to comunicate with dl.mob4u.ir in live environments.

TCP » 37.187.130.192:80
OrbitDM.exe (Orbit Downloader by Orbitdownloader.com)

TCP » 5.9.31.18:80
OrbitDM.exe (Orbit Downloader by Orbitdownloader.com)

application98.ir

appratech.net

upzone.ir

cibdownload.ir

mellimobile.com

mihangraph.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.