home

angry-birds.soft32.com

I.T.N.T. SRL

Domain Information

The domain angry-birds.soft32.com registered by I.T.N.T. SRL was initially registered in September of 2003 through ENOM, INC.. The domain hosts various software downloads. The hosted servers are located in Dulles, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).

This Soft32 domain (part of the Soft32.com site) displays information for the software program angry birds as well as provides 'free' downloads managed through the Soft32's Download Manager (which might include potentially unwanted offers such as the AVG Toolbar).
Registrar:
ENOM, INC.

Server location:
Virginia, United States (US)

Create date:
Monday, September 29, 2003

Expires date:
Sunday, September 29, 2024

Updated date:
Monday, October 6, 2014

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
soft32.com

Whois:
1 soft32.com record

Scanner detections:
Detections  (75% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Downloader.Bundler.Soft32.Installer, PUP.Downloader.Bundler.Soft32.Installer (M), PUP.Downloader.Bundler.Soft32 (M)
100.00%

F-Prot
W32/Soft32Download.A.gen
33.33%

ESET NOD32
Win32/Soft32Downloader.C potentially unwanted application
33.33%

Dr.Web
Adware.Downware.10466
33.33%

VIPRE Antivirus
Threat.4783370
33.33%

Quick Heal
PUA.Itntsrl.Gen
33.33%

Malwarebytes
PUP.Optional.AdBundle
33.33%

K7 AntiVirus
Trojan
33.33%

NANO AntiVirus
Riskware.Win32.Downloader.cvxhzw
33.33%

Trend Micro House Call
HV_ZYX_BK0846A5.TOMC
33.33%

Agnitum Outpost
PUA.Soft32Downloader
33.33%

Comodo Security
Application.Win32.Agent.S
33.33%

Avira AntiVirus
APPL/Downware.AK
33.33%

AhnLab V3 Security
Adware/Win32.Bundler
33.33%

Rising Antivirus
PE:PUF.Soft32Downloader!1.9C52
33.33%

The domain angry-birds.soft32.com has been seen to resolve to the following 11 IP addresses.

52.84.127.49
server-52-84-127-49.iad16.r.cloudfront.net
September 3, 2016

52.84.127.238
server-52-84-127-238.iad16.r.cloudfront.net
September 3, 2016

52.84.127.171
server-52-84-127-171.iad16.r.cloudfront.net
September 3, 2016

52.84.127.161
server-52-84-127-161.iad16.r.cloudfront.net
September 3, 2016

52.84.127.157
server-52-84-127-157.iad16.r.cloudfront.net
September 3, 2016

52.84.127.146
server-52-84-127-146.iad16.r.cloudfront.net
September 3, 2016

52.84.127.95
server-52-84-127-95.iad16.r.cloudfront.net
September 3, 2016

52.84.127.80
server-52-84-127-80.iad16.r.cloudfront.net
September 3, 2016

23.235.39.249
February 14, 2016

199.27.76.249
June 19, 2015

23.235.46.249
June 19, 2015

File downloads found at URLs served by angry-birds.soft32.com.

1 / 68      (Adware)
http://angry-birds.soft32.com/get/file/id/.../?lp=adwords&tg=us&kw=Angry birds full games free&mt=p&ad=36261446358&pl=&ds=s&gclid=CN6nwuruobwCFSFo7AodZxEACA  (angry birds setup.exe)

0 / 68
http://angry-birds.soft32.com/get/file/id/.../?no_download_manager=true  (34742924_stp.exe)

1 / 68      (Adware)
http://angry-birds.soft32.com/get/file/.../799862?guid=6b2985d184c802054bee8deb6486cf1e&properties[Program Subdomain]=angry-birds&properties[Program Name]=Angry Birds&properties[Site]=www.soft32.com&properties[Source]=adwords&gclid=CIaT6cb82rICFYXJtAod_xcA9Q&  (angry birds setup.exe)

16 / 68    (Adware)
http://angry-birds.soft32.com/get/file/.../799862?gclid=CKXWo4-SibMCFURxQgodOVgAiQ&  (angry birds setup.exe)

The following 6 files have been seen to comunicate with angry-birds.soft32.com in live environments.

TCP » 199.27.76.249:443
product support.crx

TCP » 23.235.39.249:443
discountapp_1.0.0.0.crx

TCP » 23.235.39.249:443
savingsplugin_1.0.crx

TCP » 23.235.46.249:443
product support.crx

TCP » 23.235.46.249:443
product support.crx

TCP » 23.235.46.249:443
couponmatcher_1.0.0.0.crx

URL:
http://angry-birds.soft32.com/

Google Analytics:
UA-110868

Title:
“Download Angry Birds 3.0.0”

Description:
“Angry Birds free download. Get the latest version now. The survival of the Angry Birds is at stake. Dish out revenge on the green pigs”

Network:
Amazon Cloudfront

Web server:
nginx

Facebook:
Likes:  36
Shares:  19

Statistics are for the previous month.

soft32.com.br

soft32.fr

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.