The scan of 1.gg on 23 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with 1.gg?

2 analysed samples communicate with this URL, including Zusy, Tedy.

How was 1.gg checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

1.gg - URL scan, 23 Aug 2026

MalwareAnalyzer by Cyble scanned 1.gg and returned a unknown verdict (score -12). The page resolved to 93.179.125.71 on Cluster Logic Inc in HK. 6 domains and 1 IP were contacted, over 3 HTTP requests. 2 malware samples communicate with this URL (Zusy, Tedy). This is a point-in-time observation from 23 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -12) · Confidence 15%
Scanned URL: https://1.gg/
Domain: 1.gg · IP: 93.179.125.71 · AS25820 · HK
Page title: 1.gg
HTTP status: 200 · text/html; charset=utf-8
TLS issuer: C=US, O=Let's Encrypt, CN=YE2 · valid to Oct 11 01: · subject CN=1.gg
HTTP requests captured: 3
Scan tier: fast · observed 2026-08-23 04:32:34 UTC

Malware communicating with this URL (2)

These samples were observed contacting or being served from 1.gg. Each links to its full analysis.

Zusy - referenced · f1f9aae7513ae2d45b66cc6cd20d3e5b · first seen 2026-08-23
Tedy - referenced · c47aaed6e7345f32c0e33f8217128642 · first seen 2026-08-20

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post

Contacted infrastructure

93.179.125.71 - AS25820 Cluster Logic Inc (Hong Kong)

Observed indicators

1.gg
libs.baidu.com
fonts.googleapis.com
www.4.cn
s96.cnzz.com
s13.cnzz.com
93.179.125.71
https://1.gg/
http://libs.baidu.com/jquery/1.9.0/jquery.js
https://fonts.googleapis.com/css?family=Voltaire
http://www.4.cn/search/detail/pid/9276381/ref/10163
http://s96.cnzz.com/stat.php?id=2222&web_id=2222
https://s13.cnzz.com/z_stat.php?id=707379&web_id=707379

Other scans of 1.gg (1)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

20 Aug 2026 - unknown

Questions about 1.gg

Is 1.gg safe?: The scan of 1.gg on 23 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with 1.gg?: 2 analysed samples communicate with this URL, including Zusy, Tedy.
How was 1.gg checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of 1.gg

Scanned on MalwareAnalyzer by Cyble · Open interactive scan