home

qassa.pl

Domain Information

Server location:
Flevoland, Netherlands (NL)

The domain qassa.pl has been seen to resolve to the following 4 IP addresses.

194.48.214.68
hw1.hcbmedia.nl
November 17, 2014

194.48.214.64
hw4.hcbmedia.nl
November 17, 2014

194.48.214.59
hw3.hcbmedia.nl
November 17, 2014

194.48.214.69
hw2.hcbmedia.nl
November 17, 2014

The following 4 files have been seen to comunicate with qassa.pl in live environments.

TCP » 194.48.214.64:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 194.48.214.64:80
gcextension.crx

TCP » 194.48.214.68:80
gcextension.crx

TCP » 194.48.214.69:80
gcextension.crx

November 17, 2014
www.qassa.pl

moneymilioner.pl

moneymiljonair.nl

moneymillionnaire.fr

qassa.nl

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.