dnl.imtoolpack.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain dnl.imtoolpack.com is registered by proxy through GODADDY.COM, LLC and was originally registered in October of 2009. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Fort Lauderdale, Florida within the United States which resides on the BroadbandONE, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Florida, United States (US)

Create date:
Friday, October 2, 2009

Expires date:
Sunday, October 2, 2016

Updated date:
Monday, August 10, 2015

ASN:
AS13645 BROADBANDONE - BroadbandONE, Inc.

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Crawler.Q, PUP.Crawler.Installer, PUP.Crawler.CrawlerG.Installer (M)
100.00%

Dr.Web
Program.Unwanted.45, riskware program Program.Unwanted.331, is riskware program Program.Unwanted.45
75.00%

McAfee
Artemis!78B92FE167B1, Artemis!C7AEC58BB7CA
50.00%

Trend Micro House Call
Suspicious_GEN.F47V0714, Suspicious_GEN.F47V0227
50.00%

ESET NOD32
Win32/Toolbar.Crawler.A potentially unwanted application
50.00%

K7 AntiVirus
Unwanted-Program
25.00%

Clam AntiVirus
Win.Adware.PCFixSpeed
25.00%

Baidu Antivirus
PUA.Win32.Crawler
25.00%

ESET NOD32
Win32/Toolbar.Crawler
25.00%

herdProtect (fuzzy)
a variant of 05f4d318a8cb1ea2ee33a4dec4c555fd7a8d09f7
25.00%

The domain dnl.imtoolpack.com has been seen to resolve to the following IP address.

May 2, 2015

File downloads found at URLs served by dnl.imtoolpack.com.

3 / 68      (Adware)

1 / 68      (Adware)

8 / 68      (PUP)

6 / 68      (Adware)

The following 33 files have been seen to comunicate with dnl.imtoolpack.com in live environments.

 
Latest 20 of 33 files

URL:
http://dnl.imtoolpack.com/

Google Analytics:
UA-10427277

Title:
“Crawler.com”

Web server:
Microsoft-IIS/7.0 (ASP.NET) (Version: 2.0.50727)