ThreatFox IOC Database

You are viewing the ThreatFox database entry for url https://potty.com/.

Database Entry


IOC ID:1846627
IOC: https://potty.com/
IOC Type :url
Threat Type :payload_delivery
Malware: IClickFix
Confidence Level : Confidence level is high (100%)
Is compromised? : True
ASN:AS47583 AS-HOSTINGER
Country:- LT
First seen:2026-07-08 18:35:38 UTC
Last seen:never
UUID:37f1301a-7ae1-11f1-97fa-42010aa4000a
Reporter HaloSword
Reward 5 credits from ThreatFox
Tags:ClickFix

Avatar
HaloSword
Observed on pottty.com, presenting a fake Cloudflare "Verify you are human" page. The verification prompt is a ClickFix lure designed to abuse user interaction and execute attacker-provided commands via the Windows Run dialog or terminal. Users should avoid following the instructions and treat this domain as malicious infrastructure associated with ClickFix campaigns.