home

gotmyfile.me

WhoisGuard, Inc.  (Proxy Registrant)

Domain Information

The domain gotmyfile.me is registered by proxy through NameCheap R216-ME (1068) and was originally registered in June of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Atlanta, Georgia within the United States which resides on the Namecheap, Inc. network.
Registrar:
NameCheap R216-ME (1068)

Server location:
Georgia, United States (US)

Create date:
Saturday, June 6, 2015

Expires date:
Monday, June 6, 2016

Updated date:
Wednesday, August 5, 2015

ASN:
AS22612 NAMECHEAP-NET - Namecheap, Inc., US

Whois:
1 gotmyfile.me record

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

McAfee
Artemis!6F1E83C83F1C, Artemis!A5F5155575B0, Artemis!5B46443F5326, Artemis!68F15793CD17, Artemis!05383DDEC5DD, Artemis!8803CC904BDE
60.00%

F-Prot
W32/NetFilter-PUA.B, W32/Adware.ALMA, W32/NetFilter-PUA.B (exact, not disinfectable), W32/Adware.ALMA (exact, not disinfectable)
58.00%

Kaspersky
not-a-virus:NetTool.Win64.NetFilter, not-a-virus:AdWare.Win32.Midia
58.00%

AVG
WebFilter.X, Generic6, Generic7, Adware Generic7.JFC, Adware Generic6.AAKX
58.00%

K7 AntiVirus
Adware , Riskware , Unwanted-Program
56.00%

ESET NOD32
Win32/InstallCore.ACQ.gen potentially unwanted (variant), Win32/Adware.BrAppWare (variant)
56.00%

G Data
Win32.Application.InstallCore.EG, Trojan.Generic.15047783, Adware.Agent.PPG, Gen:Variant.Adware.Graftor.180946, Trojan.Generic.15339704
56.00%

Emsisoft Anti-Malware
Trojan.Generic.15047783, Adware.Agent.PPG, Gen:Variant.Adware.Graftor.180946, Trojan.Generic.15339704, Dropped:Adware.Agent.PPG
56.00%

MicroWorld eScan
Trojan.Generic.15047783, Adware.Agent.PPG, Gen:Variant.Adware.Graftor.180946, Trojan.Generic.15339704, Dropped:Adware.Agent.PPG, Trojan.GenericKD.2882809, Gen:Heur.Conjar.1, Gen:Trojan.Heur.KT.2.2w3@aiB9HBoi, Gen:Trojan.Heur.KT.2.5v3@am8DJbdi
54.00%

VIPRE Antivirus
Yontoo, NetFilter, Trojan.Win32.Generic
54.00%

NANO AntiVirus
Trojan.Nsis.Pincav.doipia, Trojan.Win64.Fraudster.dvddue, Trojan.Win32.Fraudster.dzgdce, Trojan.Win64.Fraudster.dwsthj
54.00%

Bitdefender
Trojan.Generic.15047783, Adware.Agent.PPG, Gen:Variant.Adware.Graftor.180946, Trojan.Generic.15339704, Dropped:Adware.Agent.PPG
54.00%

Agnitum Outpost
Riskware.NetFilter, PUA.BrAppWare
54.00%

F-Secure
Trojan.Generic.15047783, Adware.Agent.PPG, Gen:Variant.Adware.Graftor, Trojan.Generic.15339704
54.00%

Trend Micro
TROJ_GE.0CE9FD10, TROJ_GE.7FD2C1AB, TROJ_GE.935152FB, TROJ_GE.9117ECA2, TROJ_GE.5038646B, TROJ_GE.5D7EAACE, TROJ_GE.593D26FF
54.00%

The domain gotmyfile.me has been seen to resolve to the following 4 IP addresses.

198.54.117.210
parkingpage.namecheap.com
June 7, 2016

82.221.105.13
May 16, 2016

82.221.105.12
February 1, 2016

198.50.209.5
January 3, 2016

File downloads found at URLs served by gotmyfile.me.

1 / 68      (PUP)
http://gotmyfile.me/.../310714_br.exe  (a871f8bcbb48322c30123e403b5311c2)

30 / 68    (PUP)
http://gotmyfile.me/.../291014_nj.exe  (nlxligahai4s4yrdaspjnlxligahai4s4yrdaspjnlxligahai4s4yrdaspj_nj.exe)

1 / 68      (PUP)
http://gotmyfile.me/.../310714_mb.exe  (9ezmocr91hb6qewj25efrn5c2s_has.exe)

34 / 68    (PUP)
http://gotmyfile.me/.../280815_cr.exe  (07a2adb6639a712f63b3703d506267ab)

11 / 68    (PUP)
http://gotmyfile.me/.../310714_is.exe  (ti60iflmturt7064djcit_is.exe)

URL:
http://gotmyfile.me/

Title:
“Em manutencao”

Web server:
nginx/1.0.15 (PHP/5.6.13)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.