www.imdn.org

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain www.imdn.org is registered by proxy through GoDaddy.com, LLC (R91-LROR). This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the Hudson Valley Host network.
Registrar:
GoDaddy.com, LLC (R91-LROR)

Server location:
New York, United States (US)

ASN:
AS36352 AS-COLOCROSSING - ColoCrossing,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.ParetoLogic.Optional.Installer.Meta (L), PUP.Optional.Installer
100.00%

Dr.Web
Trojan.Crossrider1.1621
75.00%

Trend Micro House Call
Suspicious_GEN.F47V1119, Suspicious_GEN.F47V0429
50.00%

McAfee
Artemis!9B8D97161AE5
50.00%

Agnitum Outpost
Riskware.Agent
50.00%

ESET NOD32
Win32/ReImageRepair.E potentially unwanted (variant), Win32/ReImageRepair.F potentially unwanted
50.00%

Fortinet FortiGate
Riskware/ReImageRepair
50.00%

Baidu Antivirus
PUA.Win32.ReImageRepair
50.00%

herdProtect (fuzzy)
a variant of 3d37449f32d1a44822a2eb9df54648f27564eb7d
25.00%

AVG
Adware Skodna.Generic
25.00%

Zillya! Antivirus
Downloader.Agent.Win32.241821
25.00%

The domain www.imdn.org has been seen to resolve to the following IP address.

host.colocrossing.com
November 29, 2014

File downloads found at URLs served by www.imdn.org.

11 / 68    (PUP)
http://www.imdn.org/.../download  (reimagerepair.exe)

2 / 68      (PUP)

7 / 68      (PUP)
http://www.imdn.org/.../download  (reimagerepair.exe)

2 / 68      (PUP)
http://www.imdn.org/.../download  (regcureprosetup.exe)

URL:
http://www.imdn.org/

Title:
“IMDN | Tech Support”

Web server:
Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 PHP/5.3.24 (PHP/5.3.24)