home

hma-pro-vpn.soft32.com

I.T.N.T. SRL

Domain Information

The domain hma-pro-vpn.soft32.com registered by I.T.N.T. SRL was initially registered in September of 2003 through ENOM, INC.. The domain hosts various software downloads. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.

This Soft32 domain (part of the Soft32.com site) displays information for the software program hma pro vpn as well as provides 'free' downloads managed through the Soft32's Download Manager (which might include potentially unwanted offers such as the AVG Toolbar).
Registrar:
ENOM, INC.

Server location:
Massachusetts, United States (US)

Create date:
Monday, September 29, 2003

Expires date:
Sunday, September 29, 2024

Updated date:
Monday, October 6, 2014

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:
soft32.com

Whois:
2 soft32.com records

Scanner detections:
Detections  (80% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.ZuluSoftSRL.R, PUP.Installer.ITNTSRL.R, PUP.Downloader.Bundler.Soft32 (M), PUP.Downloader.Bundler.Soft32.Installer (M)
88.89%

Malwarebytes
PUP.Optional.Soft32.A, PUP.Soft32Downloader, PUP.Optional.Zulu
33.33%

NANO AntiVirus
Riskware.Nsis.Downloader.cvxhzw, Riskware.Win32.Downloader.cvxhzw
33.33%

Dr.Web
Adware.Downware.2152, Adware.Downware.971, Adware.Downware.9012
33.33%

VIPRE Antivirus
Soft32Downloader, Threat.4783370
33.33%

Agnitum Outpost
PUA.Soft32Downloader, PUA.Downware
22.22%

SUPERAntiSpyware
PUP.Downloader/Variant, Trojan.Agent/Gen-Nullo[Short]
22.22%

Avira AntiVirus
APPL/Downloader.Gen
22.22%

Vba32 AntiVirus
AdWare.DownloadWare.mz, TScope.Trojan.MSIL
22.22%

ESET NOD32
Win32/Soft32Downloader.D potentially unwanted application, MSIL/Soft32Downloader.C potentially unwanted application
22.22%

Sophos
PsExec
11.11%

ViRobot
Worm.Win32.A.Luder.3433360
11.11%

ESET NOD32
MSIL/Soft32Downloader (variant)
11.11%

nProtect
Adware/W32.Agent.1116952
11.11%

F-Prot
W32/Soft32Download.C.gen
11.11%

The domain hma-pro-vpn.soft32.com has been seen to resolve to the following 10 IP addresses.

151.101.20.249
July 22, 2016

23.235.39.249
February 9, 2016

23.235.46.249
December 4, 2015

199.27.76.249
December 4, 2015

23.235.39.184
January 8, 2015

199.27.76.184
January 8, 2015

23.67.242.43
a23-67-242-43.deploy.static.akamaitechnologies.com
June 13, 2014

23.67.242.80
a23-67-242-80.deploy.static.akamaitechnologies.com
April 14, 2014

23.67.242.57
a23-67-242-57.deploy.static.akamaitechnologies.com
April 14, 2014

23.67.242.72
a23-67-242-72.deploy.static.akamaitechnologies.com
April 14, 2014

File downloads found at URLs served by hma-pro-vpn.soft32.com.

2 / 68
http://hma-pro-vpn.soft32.com/get/file/id/.../  (hmaprovpn2.6.9install.exe)

1 / 68      (Adware)
http://hma-pro-vpn.soft32.com/get/file/id/.../  (hma pro vpn setup.exe)

1 / 68      (Adware)
http://hma-pro-vpn.soft32.com/get/file/id/.../?rel=center  (hma pro vpn setup.exe)

0 / 68
http://hma-pro-vpn.soft32.com/goto/file/id/.../  (HMA-Pro-VPN-2.8.19.0-install.exe)

1 / 68      (Adware)
http://hma-pro-vpn.soft32.com/get/file/id/.../  (hma pro vpn setup.exe)

1 / 68      (Adware)
http://hma-pro-vpn.soft32.com/get/file/id/.../  (hma pro vpn setup.exe)

0 / 68
http://hma-pro-vpn.soft32.com/get/file/id/.../  (HMA-Pro-VPN-2.8.19.0-install.exe)

1 / 68      (Adware)
http://hma-pro-vpn.soft32.com/get/file/id/.../  (hma-pro-vpn.exe)

0 / 68
http://hma-pro-vpn.soft32.com/get/file/id/.../?rel=breadcrumbno_download_manager=true  (HMA-Pro-VPN-2.8.19.0-install.exe)

0 / 68
http://hma-pro-vpn.soft32.com/get/file/id/.../?no_download_manager=true  (HMA-Pro-VPN-2.8.19.0-install.exe)

14 / 68    (Adware)
http://hma-pro-vpn.soft32.com/get/file/id/.../?rel=center  (hma pro vpn setup.exe)

16 / 68    (Adware)
http://hma-pro-vpn.soft32.com/get/file/id/.../  (hma pro vpn setup.exe)

6 / 68      (Adware)
http://hma-pro-vpn.soft32.com/get/file/id/.../  (hma pro vpn setup.exe)

The following 74 files have been seen to comunicate with hma-pro-vpn.soft32.com in live environments.

TCP » 199.27.76.249:443
product support.crx

TCP » 23.235.39.249:443
discountapp_1.0.0.0.crx

TCP » 23.235.39.249:443
savingsplugin_1.0.crx

TCP » 23.235.46.249:443
product support.crx

TCP » 23.235.46.249:443
product support.crx

TCP » 23.235.46.249:443
couponmatcher_1.0.0.0.crx

TCP » 23.67.242.43:80
nghakcphkjghdodhhjgpnnlhejchcbnm.crx

TCP » 23.67.242.43:80
aifdgljlemodageeoallebffdalbkdcg.crx

TCP » 23.67.242.43:80
almenbocikgmpakgajpcgmkdibnlgjdf.crx

TCP » 23.67.242.43:80
kafkdchcfcgmhbclmadkaogljgbohpmc.crx

TCP » 23.67.242.43:80
jmgljjjdcnkojjjanclhnnibggbnglhm.crx

TCP » 23.67.242.43:80
drop_to_s.crx

TCP » 23.67.242.57:80
songza.crx

TCP » 23.67.242.57:80
sidebar.crx

TCP » 23.67.242.57:80
socialframework.crx

TCP » 23.67.242.57:80
facebook.crx

TCP » 23.67.242.57:80
365scores.crx

TCP » 23.67.242.57:80
accuweather.crx

TCP » 23.67.242.57:80
feedly.crx

TCP » 23.67.242.57:80
instagram.crx

 
Latest 20 of 74 files

URL:
http://hma-pro-vpn.soft32.com/

Google Analytics:
UA-110868

Title:
“Download HMA! Pro VPN 2.8.19”

Description:
“HMA! Pro VPN free download. Get the latest version now. Securely encrypt your internet connection and protect your online identity.”

Web server:
nginx

Facebook:
Likes:  14
Shares:  21
Comments:  1

Statistics are for the previous month.

soft32.com.br

soft32.fr

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.