home

login.gg.pl

Domain Information

Server location:
Mazowieckie, Poland (PL)

ASN:
AS43325 GADU-GADU-AS GG Network S.A.,PL

The domain login.gg.pl has been seen to resolve to the following 2 IP addresses.

91.214.239.65
ip-91-214-239-65.gadu-gadu.pl
May 4, 2015

91.214.239.64
ip-91-214-239-64.gadu-gadu.pl
May 4, 2015

File downloads found at URLs served by login.gg.pl.

0 / 68
https://login.gg.pl/rd_login?IMToken=94970405007867e705ce190eXY6MgNvZsaBDERCh&redirect_url=http://www.fookes.com/ftp/.../EzThmb_Setup.exe  (f925ceb24167d2ab8f9efece691c02b4)

0 / 68
https://login.gg.pl/rd_login?IMToken=f7210a05002aec7bfd2c160epeXoHRTZgl5tjMGV&redirect_url=http://www.tronik.pl/atrax/.../AtraxGPS_v301b.exe  (f5d84b3d8fd0e336313a79de4cae6403)

0 / 68
https://login.gg.pl/rd_login?IMToken=185d0e05004c9c0a5b10160eC2DnQUp8trjlNe6y&redirect_url=http://www.teamviewer.com/.../TeamViewer_Setup_pl.exe  (65f14f98fa4902b1f292466a985981e2)

0 / 68
https://login.gg.pl/rd_login?IMToken=220404050053d58fa5db110e2SRbkWEKIwANzHhe&redirect_url=http://www.localize.fr.pl/instalki/pl/.../IncrediMail25_5302_nowak_br.exe  (09e1496047caaa6f6c60efa3db2ef820)

0 / 68
https://login.gg.pl/rd_login?IMToken=c2ff07050064166169a1110e0yPneidhkqxGXlTg&redirect_url=http://www.clonedvd.net/.../DVDXPlayerSetup.exe  (b142b865f2aaaf1516e792dd66657381)

1 / 68      (inconclusive)
https://login.gg.pl/rd_login?IMToken=dbe91d050033fd0d29260c0eI41rwc7NdBkV3xma&redirect_url=http://screenshu.com/p/_download/latest/.../screenSHU-setup.exe  (c951335bd0273e0135ad0ac13cf20bb5)

0 / 68
https://login.gg.pl/rd_login?IMToken=196c0c0500b1146c5a83180ebsuAMyRiwlZzNhPY&redirect_url=http://download.qt.io/official_releases/qt/5.5/.../qt-opensource-windows-x86-mingw492-5.5.1.exe  (ed8d97790607724937ac8a274b7ca292)

0 / 68
https://login.gg.pl/rd_login?IMToken=9ae40505002fa7a60951130egI5zmXOKuvtSTkh4&redirect_url=http://bladeandsoul.ncsoft.com/.../44444874:JjoCdbLNT:m:1:1421453599:4025CC36A578BA17929724A06589DA6A:r  (bns_cbt lite installer.exe)

0 / 68
https://login.gg.pl/rd_login?IMToken=fd3f1005004a50fb5c880f0eNiUMw1ZH2bROFGyd&redirect_url=http://www.amazon.com/.../ref=klp_win  (kindleforpc-installer.exe)

The following file have been seen to comunicate with login.gg.pl in live environments.

TCP » 91.214.239.64:443
browser.exe (Speed Browser by Smart Applications)

TCP » 91.214.239.64:80
browser.exe (Speed Browser by Smart Applications)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.