home

get.potgoing.com

Domain Information

Server location:
Massachusetts, United States (US)

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:
potgoing.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Solimba, PUP.Solimba.Vetaform (M)
100.00%

Dr.Web
Trojan.DownLoader11.57090
33.33%

Kaspersky
not-a-virus:Downloader.Win32.Morstar
33.33%

ESET NOD32
MSIL/Solimba.AK.gen potentially unwanted application
33.33%

AVG
Adware BundleApp_r.AI
33.33%

NANO AntiVirus
Trojan.Win32.Morstar.dmuxrd
33.33%

Comodo Security
Application.Win32.Firseria.GH
33.33%

Avira AntiVirus
APPL/Firseria.Gen
33.33%

Vba32 AntiVirus
Downware.Morstar
33.33%

Panda Antivirus
Trj/Genetic.gen
33.33%

VIPRE Antivirus
Threat.4758821
33.33%

Malwarebytes
PUP.Optional.Firseria
33.33%

Baidu Antivirus
Adware.Win32.Solimba
33.33%

K7 AntiVirus
DoS-Trojan
33.33%

McAfee
Trojan.Artemis!E7462CDF5929
33.33%

The domain get.potgoing.com has been seen to resolve to the following 3 IP addresses.

204.11.56.48
July 8, 2016

23.0.160.198
a23-0-160-198.deploy.static.akamaitechnologies.com
February 15, 2015

23.0.160.216
a23-0-160-216.deploy.static.akamaitechnologies.com
February 15, 2015

File downloads found at URLs served by get.potgoing.com.

1 / 68      (Adware)
http://get.potgoing.com/n/3.2.96/.../???? ?????? ???? ??????? ??? ????? ????? ??????? ??????.rar.exe  (كتاب الطالب لغتي الخالدة أول متوسط الفصل الدراسي الثاني.rar.exe)

1 / 68      (Adware)
http://get.potgoing.com/n/3.2.96/.../lfs !.rar.exe  (b6d0ab23b54e9e1ca66503e37ce455fb)

34 / 68    (Adware)
http://get.potgoing.com/n/3.2.96/.../GT-P5100.rar.exe  (d9ed8b32f251a51a507dc6158cdc41fa)

The following 20 files have been seen to comunicate with get.potgoing.com in live environments.

TCP » 204.11.56.48:80
chrome.crx

TCP » 204.11.56.48:80
chrome.crx

TCP » 23.0.160.198:80
jusched.exe (Java Platform SE Auto Updater 2 0 by Sun Microsystems)

TCP » 23.0.160.198:80
abadlpnchipkpeikchblnfiicfdoabei.crx

TCP » 23.0.160.198:80
najacfdolllggobgahokmbofjfmboefn.crx

TCP » 23.0.160.198:80
abadlpnchipkpeikchblnfiicfdoabei.crx

TCP » 23.0.160.198:80
faicigiapfhoenaedanigbmkniiocadi.crx

TCP » 23.0.160.198:80
mdlmhpgkmkkcfglakcnlagmbbmkcfcfj.crx

TCP » 23.0.160.198:80
fjnfffadddalhgdjnfamfnfabihbaijo.crx

TCP » 23.0.160.198:80
dkemfkimiodmfocfmnaomllkkneapgoj.crx

TCP » 23.0.160.198:80
jkchbcdpiplmepnccafoeaiimohjodkm.crx

TCP » 23.0.160.198:80
jmieclcdlejjnojiicgabeljjoinbgle.crx

TCP » 23.0.160.216:80
iTunes.exe (iTunes by Apple)

TCP » 23.0.160.216:80
gjjofdeodiofmmdlnbgpeekgefglmkfj.crx

TCP » 23.0.160.216:80
kheplajlialegkhogehgdbhaogeikfag.crx

TCP » 23.0.160.216:80
idipklkclglaeaidmeedenepljfnfbfn.crx

TCP » 23.0.160.216:80
ioeoeknoofgmflombeebbhpddabifcfo.crx

TCP » 23.0.160.216:80
gmhhhiljddfafnapfeffelbdilmmdhma.crx

TCP » 23.0.160.216:80
kheplajlialegkhogehgdbhaogeikfag.crx

TCP » 23.0.160.216:80
bjenifhdbikcfkdibbokmiknmnmcfcjl.crx

 
Latest 20 of 22 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.