home

mhotspot.soft32.com

I.T.N.T. SRL

Domain Information

The domain mhotspot.soft32.com registered by I.T.N.T. SRL was initially registered in September of 2003 through ENOM, INC.. The domain hosts various software downloads. The hosted servers are located in Dulles, Virginia within the United States. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).

This Soft32 domain (part of the Soft32.com site) displays information for the software program mhotspot as well as provides 'free' downloads managed through the Soft32's Download Manager (which might include potentially unwanted offers such as the AVG Toolbar).
Registrar:
ENOM, INC.

Server location:
Virginia, United States (US)

Create date:
Monday, September 29, 2003

Expires date:
Sunday, September 29, 2024

Updated date:
Monday, October 6, 2014

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
soft32.com

Whois:
2 soft32.com records

Scanner detections:
Detections  (88% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.OpenCandy.Installer (L), PUP.Downloader.Bundler.Soft32.Installer (M), PUP.Downloader.Bundler.Soft32 (M)
85.71%

ESET NOD32
Win32/OpenCandy potentially unsafe application, Win32/Small.L virus
28.57%

Comodo Security
UnclassifiedMalware
14.29%

Fortinet FortiGate
W32/OpenCandy.CPH!tr
14.29%

VIPRE Antivirus
Threat.4786065
14.29%

Microsoft Security Essentials
Threat.Undefined
14.29%

F-Prot
W32/Downloader.BL.gen
14.29%

avast!
Win32:Madangel
14.29%

Dr.Web
Win32.Vgard
14.29%

McAfee
Virus.W32/Alisa.d
14.29%

Kaspersky
Virus.Win32.Small
14.29%

The domain mhotspot.soft32.com has been seen to resolve to the following 47 IP addresses.

52.84.127.224
server-52-84-127-224.iad16.r.cloudfront.net
September 16, 2016

52.84.127.205
server-52-84-127-205.iad16.r.cloudfront.net
September 16, 2016

52.84.127.182
server-52-84-127-182.iad16.r.cloudfront.net
September 16, 2016

52.84.127.96
server-52-84-127-96.iad16.r.cloudfront.net
September 16, 2016

52.84.127.87
server-52-84-127-87.iad16.r.cloudfront.net
September 16, 2016

52.84.127.85
server-52-84-127-85.iad16.r.cloudfront.net
September 16, 2016

52.84.127.68
server-52-84-127-68.iad16.r.cloudfront.net
September 16, 2016

52.84.127.236
server-52-84-127-236.iad16.r.cloudfront.net
September 16, 2016

52.84.127.157
server-52-84-127-157.iad16.r.cloudfront.net
September 4, 2016

52.84.127.146
server-52-84-127-146.iad16.r.cloudfront.net
September 4, 2016

52.84.127.95
server-52-84-127-95.iad16.r.cloudfront.net
September 4, 2016

52.84.127.80
server-52-84-127-80.iad16.r.cloudfront.net
September 4, 2016

52.84.127.49
server-52-84-127-49.iad16.r.cloudfront.net
September 4, 2016

52.84.127.238
server-52-84-127-238.iad16.r.cloudfront.net
September 4, 2016

52.84.127.171
server-52-84-127-171.iad16.r.cloudfront.net
September 4, 2016

52.84.127.161
server-52-84-127-161.iad16.r.cloudfront.net
September 4, 2016

52.85.147.248
server-52-85-147-248.iad12.r.cloudfront.net
September 1, 2016

52.85.147.221
server-52-85-147-221.iad12.r.cloudfront.net
September 1, 2016

52.85.147.208
server-52-85-147-208.iad12.r.cloudfront.net
September 1, 2016

52.85.147.182
server-52-85-147-182.iad12.r.cloudfront.net
September 1, 2016

52.85.147.155
server-52-85-147-155.iad12.r.cloudfront.net
September 1, 2016

52.85.147.128
server-52-85-147-128.iad12.r.cloudfront.net
September 1, 2016

52.85.147.85
server-52-85-147-85.iad12.r.cloudfront.net
September 1, 2016

52.85.147.47
server-52-85-147-47.iad12.r.cloudfront.net
September 1, 2016

52.85.142.254
server-52-85-142-254.iad12.r.cloudfront.net
August 20, 2016

52.85.142.209
server-52-85-142-209.iad12.r.cloudfront.net
August 20, 2016

52.85.142.196
server-52-85-142-196.iad12.r.cloudfront.net
August 20, 2016

52.85.142.147
server-52-85-142-147.iad12.r.cloudfront.net
August 20, 2016

52.85.142.135
server-52-85-142-135.iad12.r.cloudfront.net
August 20, 2016

52.85.142.70
server-52-85-142-70.iad12.r.cloudfront.net
August 20, 2016

 
Showing 30 of 47 IP Addresses

File downloads found at URLs served by mhotspot.soft32.com.

1 / 68      (Adware)
http://mhotspot.soft32.com/get/file/id/.../  (mhotspot setup.exe)

1 / 68      (Adware)
http://mhotspot.soft32.com/get/file/id/.../  (mhotspot setup.exe)

1 / 68      (Adware)
http://mhotspot.soft32.com/get/file/id/.../?rel=center  (mhotspot setup.exe)

1 / 68      (Adware)
http://mhotspot.soft32.com/get/file/id/.../?lp=dsa&tg=in&kw=_inpage:Home Windows Internet Internet Tools&mt=b&ad=34358254363&pl=&ds=s&gclid=CLC4vsCbzr4CFRYMjgod5RwAKw  (mhotspot setup.exe)

1 / 68      (Adware)
http://mhotspot.soft32.com/get/file/id/.../?lp=dsa&tg=ro&kw=_inpage:Home Windows Internet Internet-Tools&mt=b&ad=45172167539&pl=&ds=s&uid=1413869111dde03bde7efbcacc8eb3ef5eec6766c4&_ga=1247765157.1413868847&gclid=CKOyoZb7u8ECFfMZtAodukgAxQ  (mhotspot setup.exe)

8 / 68      (Malware)
http://mhotspot.soft32.com/goto/file/id/.../  (mHotspot.exe)

0 / 68
http://mhotspot.soft32.com/goto/file/id/.../?iframe=true&width=420&height=200&javascript=true&no_download_manager=1  (mHotspot.exe)

0 / 68
http://mhotspot.soft32.com/goto/file/id/.../  (mHotspot.exe)

4 / 68      (PUP)
http://mhotspot.soft32.com/get/file/id/.../  (mhotspot_setup_6.5.2.1.exe)

4 / 68      (PUP)
http://mhotspot.soft32.com/get/file/id/.../?no_download_manager=true  (mhotspot_setup_6.5.2.1.exe)

The following 32 files have been seen to comunicate with mhotspot.soft32.com in live environments.

TCP » 52.85.147.208:443
online-guardian-v2.0.9.exe

TCP » 52.85.142.135:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.147:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.85.142.196:80
mobogenieP2sp.exe (mobogenie by mobogenie.com)

TCP » 52.84.127.87:443
browser.exe (speed browser by Smart Applications)

TCP » 52.85.142.70:443
clearscreenplayerbrowser.exe

TCP » 52.85.142.147:443
clearscreenplayerbrowser.exe

TCP » 52.85.147.208:443
online-guardian-v2.0.9.exe

TCP » 52.85.142.135:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.85.142.209:443
jingling.exe

TCP » 52.85.142.46:443
browser.exe (Browser)

TCP » 52.85.142.46:80
GPlayer.exe (by Exent Technologies)

TCP » 52.85.142.70:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.85.142.46:443
whatsapptime.exe

TCP » 52.85.142.70:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.70:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.85.147.208:443
apptrailers.exe

TCP » 52.85.142.196:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.46:443
messengertime.exe

TCP » 52.85.142.209:80
geniecleaner.exe (Genie Cleaner by Oppoos.com)

 
Latest 20 of 55 files

URL:
http://mhotspot.soft32.com/

Google Analytics:
UA-110868

Title:
“Download mhotspot 6.5.2.1”

Description:
“mhotspot free download. Get the latest version now. mhotspot turns your laptop into a wifi hotpot(no need to install)”

Network:
Amazon Cloudfront

Web server:
nginx

Facebook:
Likes:  11
Shares:  11

Statistics are for the previous month.

soft32.com.br

soft32.fr

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.