Hola confirmed they have reached out to MB and they have not responded to them yet.
It's a legitimate dst domain/ip and action from the plugin.
-Software Information-
Version: 4.2.3.96
Components Version: 1.0.1122
Update Package Version: 1.0.33750
License: Premium
-System Information-
OS: Windows 10 (Build 19041.630)
CPU: x64
File System: NTFS
User: System
-Blocked Website Details-
Malicious Website: 1
, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Blocked, -1, -1, 0.0.0, ,
-Website Data-
Category: Trojan
Domain: zagent1964.hola.org
IP Address: 68.183.110.92
Port: 22222
Type: Outbound
File: C:\Program Files (x86)\Mozilla Firefox\firefox.exe