home

ir51.uploadboy.com

Xafox Technology

Domain Information

The domain ir51.uploadboy.com registered by Xafox Technology was initially registered in October of 2012 through REALTIME REGISTER BV. The hosted servers are located in Tehran, Tehran within Iran which resides on the RIPE Network Coordination Centre network.
Registrar:
REALTIME REGISTER BV

Server location:
Tehran, Iran (IR)

Create date:
Friday, October 19, 2012

Expires date:
Thursday, October 19, 2017

Updated date:
Monday, May 16, 2016

ASN:
AS43754 ASIATECH Asiatech Data Transfer Inc PLC, IR

Root domain:
uploadboy.com

Whois:
1 uploadboy.com record

The domain ir51.uploadboy.com has been seen to resolve to the following IP address.

185.49.85.3
hosted-by.hostdl.com.asiatech.ir
May 29, 2016

File downloads found at URLs served by ir51.uploadboy.com.

0 / 68
http://ir51.uploadboy.com:8080/d/.../Autumn.Sonata.1978.720p.srt  (eb76482520334250d76897db99346e81)

0 / 68
http://ir51.uploadboy.com:8080/d/.../stellar10.rar  (bbca1c3cee350a616c63305c04678cd9)

0 / 68
http://ir51.uploadboy.com:8080/d/.../BlueStacks 2.0.2.5623 Mod Rooted.exe  (bluestacks_supersu_setup_mod.exe)

0 / 68
http://ir51.uploadboy.com:8080/d/.../BlueStacks 2.0.2.5623 Mod Rooted.exe  (bluestacks_supersu_setup_mod.exe)

0 / 68
http://ir51.uploadboy.com:8080/d/.../BlueStacks 2.0.2.5623 Mod Rooted.exe  (bluestacks_supersu_setup_mod.exe)

0 / 68
http://ir51.uploadboy.com:8080/d/.../Winning.eleven.3-www.downloads98.com.exe  (b5ec3668b6b4bdcbe58ca785c6a7a141)

The following 3 files have been seen to comunicate with ir51.uploadboy.com in live environments.

TCP » 185.49.85.3:8080
OrbitDM.exe (Orbit Downloader by Orbitdownloader.com)

TCP » 185.49.85.3:8080
OrbitDM.exe (Orbit Downloader by Orbitdownloader.com)

TCP » 185.49.85.3:80
googleupdate.exe (AutoPlay Media Studio Launcher)

URL:
http://ir51.uploadboy.com/

Web server:
Apache/2.2.15 (CentOS)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.