home

irfanview.soft32.com

I.T.N.T. SRL

Domain Information

The domain irfanview.soft32.com registered by I.T.N.T. SRL was initially registered in September of 2003 through ENOM, INC.. The domain hosts various software downloads. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.

This Soft32 domain (part of the Soft32.com site) displays information for the software program irfanview as well as provides 'free' downloads managed through the Soft32's Download Manager (which might include potentially unwanted offers such as the AVG Toolbar).
Registrar:
ENOM, INC.

Server location:
Massachusetts, United States (US)

Create date:
Monday, September 29, 2003

Expires date:
Friday, September 29, 2023

Updated date:
Wednesday, August 6, 2014

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:
soft32.com

Whois:
2 soft32.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.ZuluSoftSRL.P, PUP.Downloader.Bundler.Soft32.Installer (M)
100.00%

Malwarebytes
PUP.Optional.Soft32.A
66.67%

NANO AntiVirus
Riskware.Nsis.Downloader.cvxhzw
66.67%

Dr.Web
Adware.Downware.2152
66.67%

VIPRE Antivirus
Soft32Downloader, Threat.4783370
66.67%

ESET NOD32
MSIL/Soft32Downloader (variant)
33.33%

ESET NOD32
MSIL/Soft32Downloader.C potentially unwanted application
33.33%

McAfee
SoftDropper
33.33%

Trend Micro House Call
Suspici.899A27F2
33.33%

Agnitum Outpost
PUA.Soft32Downloader
33.33%

Avira AntiVirus
APPL/Downloader.Gen
33.33%

herdProtect (fuzzy)
a variant of 87612c7865627bcf0dea840ae1a547e2c3dc114e
33.33%

The domain irfanview.soft32.com has been seen to resolve to the following 7 IP addresses.

199.27.76.249
May 23, 2016

23.235.46.249
May 23, 2016

199.27.76.184
August 13, 2014

23.235.46.184
August 13, 2014

23.67.242.57
a23-67-242-57.deploy.static.akamaitechnologies.com
April 14, 2014

23.67.242.72
a23-67-242-72.deploy.static.akamaitechnologies.com
April 14, 2014

23.67.242.80
a23-67-242-80.deploy.static.akamaitechnologies.com
April 14, 2014

File downloads found at URLs served by irfanview.soft32.com.

1 / 68      (Adware)
http://irfanview.soft32.com/get/file/id/.../?lp=dsa&tg=ro&kw=_cat:soft32.com&mt=b&ad=34930678499&pl=&ds=s&uid=14138860604065769bffaf8b60b6aa83465a74968e&_ga=1577911650.1413886058&gclid=CPb_sYjAvcECFQoUwwodH3kA3g  (irfanview setup.exe)

11 / 68    (Adware)
http://irfanview.soft32.com/get/file/id/1208380/?lp=dsa&tg=ro&kw=_cat:soft32.com&mt=b&ad=34930678499&pl=&ds=s&utm_expid=81788-5.eGUbT21UQXy-TYbR1pGx-g.0&utm_referrer=http://www.google.ro/aclk?sa=l&ai=CHYmDHc_ZU8jaIuS8ywPfroDQDaOIhrgEq4STtoIB-LWwrUoIABABIMmYogsoAlCo5cyxBWCDxeGF9BugAf3_69IDyAEBqQJKDlB0FmuUPqoEIk_QC0DvN0zbujdmC0b082gfonocnIx0aQZ8vMmVOYu3yqGABZBOugUTCLfA0ITk7r8CFcOzcgodcBsAA8oFAKAGLIAH6_-TLYgHAZAHAqgHpr4b&ei=Hc_ZU_e9H8PnygPwtoAY&sig=AOD64_3WGLovtA00bKxRr4qKeGpxSWCr7A&rct=j&q=&sqi=2&ved=0CB4Q0Qw&adurl=http://irfanview.soft32.com//?lp=dsa&tg=ro&kw=_cat:soft32.com&mt=b&ad=34930678499&pl=&ds=s&uid=1406783257082b2e42d749de8ef1d4ab611a2edd37&_ga=96630081.1406783257&gclid=Cj0KEQjwr-KeBRCMh92Ax9rNgJ8BEiQA1OVm-Oi5OKRJQwgCkE2MgEMxmEcoKx0jKfkEFnH-1v5Aqt0aAs_W8P8HAQ  (irfanview setup.exe)

6 / 68      (Adware)
http://irfanview.soft32.com/get/file/id/.../?lp=adwords&kw=Irfanview download&mt=e&ad=25477444758&pl=&ds=s&gclid=CIzmqdfuuLgCFfBcMgodQk4Atg  (irfanview setup.exe)

The following 66 files have been seen to comunicate with irfanview.soft32.com in live environments.

TCP » 199.27.76.249:443
product support.crx

TCP » 23.235.46.249:443
product support.crx

TCP » 23.235.46.249:443
product support.crx

TCP » 23.235.46.249:443
couponmatcher_1.0.0.0.crx

TCP » 23.67.242.57:80
songza.crx

TCP » 23.67.242.57:80
sidebar.crx

TCP » 23.67.242.57:80
socialframework.crx

TCP » 23.67.242.57:80
facebook.crx

TCP » 23.67.242.57:80
365scores.crx

TCP » 23.67.242.57:80
accuweather.crx

TCP » 23.67.242.57:80
feedly.crx

TCP » 23.67.242.57:80
instagram.crx

TCP » 23.67.242.57:80
youtube.crx

TCP » 23.67.242.57:80
feedly.crx

TCP » 23.67.242.57:80
tunein.crx

TCP » 23.67.242.57:80
songza.crx

TCP » 23.67.242.57:80
ondemandapp.crx

TCP » 23.67.242.57:80
rdio.crx

TCP » 23.67.242.57:80
instagram.crx

TCP » 23.67.242.57:80
facebook.crx

 
Latest 20 of 66 files

URL:
http://irfanview.soft32.com/

Google Analytics:
UA-110868

Title:
“Download IrfanView 4.37”

Description:
“IrfanView free download. Get the latest version now. IrfanView - very popular image viewer”

Web server:
nginx

soft32.com.br

soft32.fr

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.