home

www.salesmanago.pl

Domain Information

Server location:
Slaskie, Poland (PL)

ASN:
AS31242 TKPSA-AS 3S S.A.,PL

Root domain:
salesmanago.pl

The domain www.salesmanago.pl has been seen to resolve to the following IP address.

89.25.223.83
host892522383.static.3s.pl
April 5, 2016

File downloads found at URLs served by www.salesmanago.pl.

0 / 68
http://www.salesmanago.pl/rd.htm?url=http://sklep.rp.pl/files/temp/MK2016/.../SetupBR2403.exe&smclient=81a7e9ec-a579-4d50-9924-83240f105651&utm_medium=rule&utm_campaign=podpis&smconv=d9cb2baf-c3cc-465e-8740-779d7560c506&smlid=2  (650945eed343b1f4ac2c63ce0d695cbe)

0 / 68
http://www.salesmanago.pl/rd.htm?url=http://sklep.rp.pl/files/temp/MK2016/.../SetupMK2403.exe&smclient=f28ffa8a-dbcc-4fee-809f-34db87451038&utm_medium=rule&utm_campaign=sklepMK&smconv=c281dad9-7575-46de-b45e-c98b48911ab3&smlid=2  (c6dp8spq.exe)

0 / 68
http://www.salesmanago.pl/rd.htm?url=http://sklep.rp.pl/files/temp/MK2016/.../SetupMK2403.exe&smclient=f28ffa8a-dbcc-4fee-809f-34db87451038&utm_medium=rule&utm_campaign=sklepMK&smconv=c281dad9-7575-46de-b45e-c98b48911ab3&smlid=2  (02f9e844e3bfe52b16c58993872feda7)

0 / 68
http://www.salesmanago.pl/rd.htm?url=http://sklep.rp.pl/files/temp/MK2016/.../SetupBR2403.exe&smclient=79025cbb-3373-486a-8ad0-042341c54ad1&utm_medium=rule&utm_campaign=podpis&smconv=11ab3df2-fa93-460d-9db7-98f31d0d075e&smlid=2  (mała księgowość (br) 2016.exe)

0 / 68
http://www.salesmanago.pl/rd.htm?url=http://sklep.rp.pl/files/temp/MK2016/.../SetupMK2403n.exe&smclient=6bee9f0e-c7ef-41a7-8c11-c74db2c76264&utm_medium=rule&utm_campaign=sklepMK&smconv=92fda37d-db6e-4604-bfec-4681e074751e&smlid=3  (f2bed86a76eb576de21e5629db9c8754)

0 / 68
http://www.salesmanago.pl/rd.htm?url=http://sklep.rp.pl/files/temp/MK2016/.../SetupMK2403.exe&smclient=8bfeadeb-e718-4bb4-a0a5-df5de8164f8f&utm_medium=rule&utm_campaign=sklepMK&smconv=c84bb919-8df6-4140-b71d-bf7839f0f5c0&smlid=2  (c6dp8spq.exe)

0 / 68
http://www.salesmanago.pl/rd.htm?url=http://sklep.rp.pl/files/temp/MK2016/.../SetupBR2403.exe&smclient=d138fb25-8851-4760-a3c9-c87c151d9963&utm_medium=rule&utm_campaign=podpis&smconv=bb801c03-d8a6-4ae2-9c3f-01b54cf6d113&smlid=2  (d3fec82ec23775b0e3a6a4c9b61de59b)

0 / 68
http://www.salesmanago.pl/rd.htm?url=http://sklep.rp.pl/files/temp/MK2016/.../SetupMK2403.exe&smclient=8e33ef36-8d3c-4565-a009-d593c3090f61&utm_medium=rule&utm_campaign=sklepMK&smconv=38ca80be-12c2-43bb-9af2-9e9aaf875a34&smlid=2  (c6dp8spq.exe)

0 / 68
http://www.salesmanago.pl/rd.htm?url=http://sklep.rp.pl/files/temp/MK2016/.../SetupMK2403.exe&smclient=7033496b-d719-4f31-a7b3-f567c3b1559d&utm_medium=rule&utm_campaign=sklepMK&smconv=19455a4f-c5e5-4c50-9620-47a9345f7164&smlid=2  (c6dp8spq.exe)

0 / 68
http://www.salesmanago.pl/rd.htm?url=http://sklep.rp.pl/files/temp/MK2016/.../SetupMK2403.exe&smclient=68a23d7b-b6aa-49f3-a68e-87abe9ff9cb1&utm_medium=rule&utm_campaign=sklepMK&smconv=d009084e-f423-4834-b7ba-af42c613cd28&smlid=2  (c6dp8spq.exe)

0 / 68
http://www.salesmanago.pl/rd.htm?url=http://sklep.rp.pl/files/temp/MK2016/.../SetupMK2403.exe&smclient=8d1a5fab-eef6-4e08-b1c9-e32758df34b6&utm_medium=rule&utm_campaign=sklepMK&smconv=b83b583a-445e-4c7b-81d0-63bbd83c5e7c&smlid=3  (02f9e844e3bfe52b16c58993872feda7)

0 / 68
http://www.salesmanago.pl/rd.htm?url=http://sklep.rp.pl/files/temp/MK2016/.../SetupBR2403.exe&smclient=bf84b377-1321-437c-946b-80796e037221&utm_medium=rule&utm_campaign=podpis&smconv=3228f042-481d-4683-9bcd-d9be5d8e3c3c&smlid=2  (650945eed343b1f4ac2c63ce0d695cbe)

0 / 68
https://www.salesmanago.pl/optIn.htm?uid=2c9e9531-b9dd-4880-bfaa-ba1888ae5399&sec=dec558ebd688ee0a6ee75cdb75afe63940f4c2d0e9e69da94d1ee15966597be4&co=0f36efed-c082-4d0e-b466-03b660ea2937&redirect=http://static.presspublica.pl/web/rp/static-pages/pit2014/.../Setup.exe&tags=Potwierdzil_Formularz_Pit_2014, Pobral_poradnik_Pit_2014, Gremi_zgoda, Gremi_zgoda-podmioty, &smclient=2c9e9531-b9dd-4880-bfaa-ba1888ae5399&smconv=form-confirmation&smlid=2&utm_source=salesmanago&utm_medium=smtp&utm_campaign=default  (c567c26aa66433080b70f3c4570da74f)

0 / 68
http://www.salesmanago.pl/rd.htm?url=http://sklep.rp.pl/files/temp/MK2016/.../SetupMK2403.exe&smclient=308a74de-026e-490a-b134-e900bab0caa4&utm_medium=rule&utm_campaign=sklepMK&smconv=cb5098c8-9bec-40ae-bf31-911b9a34571f&smlid=2  (c6dp8spq.exe)

0 / 68
http://www.salesmanago.pl/rd.htm?url=http://sklep.rp.pl/files/temp/MK2016/.../SetupMKS2403.exe&smclient=988f4925-a7c7-4f4e-a597-a7b1acd007f6&utm_medium=rule&utm_campaign=sklepMKS&smconv=239decf0-9c8b-4218-ae85-cb6ab59a6bc2&smlid=2  (f940a9bc61461b3d45580f4245158097)

0 / 68
http://www.salesmanago.pl/rd.htm?url=http://sklep.rp.pl/files/temp/MK2016/.../SetupMK2403.exe&smclient=d526421b-cf58-4cb7-afd7-e28158e123be&utm_medium=rule&utm_campaign=sklepMK&smconv=355e09fb-8cf7-4204-b75d-9ea5db6409c1&smlid=2  (c6dp8spq.exe)

The following 5 files have been seen to comunicate with www.salesmanago.pl in live environments.

TCP » 89.25.223.83:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 89.25.223.83:443
online-guardian-v2.0.9.exe

TCP » 89.25.223.83:80
genieutils.exe

TCP » 89.25.223.83:443
crossbrowse.exe (Crossbrowse)

TCP » 89.25.223.83:443
citrio.exe (Citrio by CatalinaGroup)

emlgrid.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.