home

get.cabgoing.com

Domain Information

Server location:
Massachusetts, United States (US)

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:
cabgoing.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Solimba, PUP.Solimba.Vetaform (M)
100.00%

Dr.Web
Trojan.DownLoader11.57090
50.00%

ESET NOD32
MSIL/Solimba.AK.gen potentially unwanted application
50.00%

AVG
Adware BundleApp_r.AI
50.00%

Comodo Security
Application.Win32.Firseria.GH
50.00%

Avira AntiVirus
APPL/Firseria.Gen
50.00%

Vba32 AntiVirus
Downware.Morstar
50.00%

Panda Antivirus
Trj/Genetic.gen, Generic Suspicious
50.00%

VIPRE Antivirus
Threat.4758821
50.00%

K7 AntiVirus
DoS-Trojan , Unwanted-Program
50.00%

Sophos
Generic PUA OL, Solimba Installer
50.00%

Fortinet FortiGate
Riskware/Morstar
50.00%

Zillya! Antivirus
Downloader.Morstar.Win32.329, Backdoor.PePatch.Win32.64748
50.00%

AhnLab V3 Security
PUP/Win32.Solimba
50.00%

IKARUS anti.virus
AdWare.BundleApp
50.00%

The domain get.cabgoing.com has been seen to resolve to the following 3 IP addresses.

204.11.56.48
June 22, 2016

23.0.160.216
a23-0-160-216.deploy.static.akamaitechnologies.com
February 28, 2015

23.0.160.207
a23-0-160-207.deploy.static.akamaitechnologies.com
February 28, 2015

File downloads found at URLs served by get.cabgoing.com.

1 / 68      (Adware)
http://get.cabgoing.com/n/3.2.96/.../????? ????????? ?? ??? ??? ????? ? ???????.pdf.exe  (الاسس الاسلاميه في فكر ابن خلدون و نظرياته.pdf.exe)

1 / 68      (Adware)
http://get.cabgoing.com/n/3.2.96/.../???? ????? ?????? ??????.pdf.exe  (ظروف العمل والرضى المهني.pdf.exe)

23 / 68    (Adware)
http://get.cabgoing.com/n/3.2.95/.../plugin.video.hubwizard-1.1.5.zip.exe  (21ebd2598c0830c8b427382758bfaead)

34 / 68    (Adware)
http://get.cabgoing.com/n/3.2.96/.../AFBCamaroKingelonK2RootedKitkat.rar.exe  (d590ef5e6c09dc319709f4ba7f22e06b)

The following 17 files have been seen to comunicate with get.cabgoing.com in live environments.

TCP » 204.11.56.48:80
chrome.crx

TCP » 204.11.56.48:80
chrome.crx

TCP » 23.0.160.207:80
nllglicabeaeakbjjmaagmecjafaiogo.crx

TCP » 23.0.160.207:80
ikmmoeahaadgojcbgelllpgcidhnjaec.crx

TCP » 23.0.160.207:80
bhdcjoidbplldnnckdhbnfaijbgbcoff.crx

TCP » 23.0.160.207:80
gaeefepfglcilcepkkdgdpiocemcclel.crx

TCP » 23.0.160.207:80
bfljcmhmofodeoclddimkhnjaldglnmf.crx

TCP » 23.0.160.207:80
pkdckhjgcnlhkfdndbpnfepipconbhkl.crx

TCP » 23.0.160.207:80
o5ewuunzoj.exe

TCP » 23.0.160.216:80
iTunes.exe (iTunes by Apple)

TCP » 23.0.160.216:80
gjjofdeodiofmmdlnbgpeekgefglmkfj.crx

TCP » 23.0.160.216:80
kheplajlialegkhogehgdbhaogeikfag.crx

TCP » 23.0.160.216:80
idipklkclglaeaidmeedenepljfnfbfn.crx

TCP » 23.0.160.216:80
ioeoeknoofgmflombeebbhpddabifcfo.crx

TCP » 23.0.160.216:80
gmhhhiljddfafnapfeffelbdilmmdhma.crx

TCP » 23.0.160.216:80
kheplajlialegkhogehgdbhaogeikfag.crx

TCP » 23.0.160.216:80
bjenifhdbikcfkdibbokmiknmnmcfcjl.crx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.