home

es.roulettebotplus.com

Domain Information

Server location:
Dublin City, Ireland (IE)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
roulettebotplus.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Dr.Web
Program.Unwanted.217
100.00%

Reason Heuristics
PUP.OTSDWEBSERVICES.Installer (M)
100.00%

The domain es.roulettebotplus.com has been seen to resolve to the following 2 IP addresses.

52.17.39.155
ec2-52-17-39-155.eu-west-1.compute.amazonaws.com
July 3, 2016

52.17.58.248
ec2-52-17-58-248.eu-west-1.compute.amazonaws.com
July 3, 2016

File downloads found at URLs served by es.roulettebotplus.com.

2 / 68      (Adware)
http://es.roulettebotplus.com/download_now.php  (rbpsetup_olxte.exe)

The following 3 files have been seen to comunicate with es.roulettebotplus.com in live environments.

TCP » 52.17.39.155:80
mupdater.exe (MUpdater)

TCP » 52.17.58.248:80
mupdater.exe (MUpdater)

TCP » 52.17.39.155:80
mupdater.exe (MUpdater)

TCP » 52.17.39.155:80
rbpsetup_olxte.exe (RBPlus Setup by O.T.S.D WEB SERVICES)

TCP » 52.17.58.248:80
mupdater.exe (MUpdater)

TCP » 52.17.58.248:80
rbpsetup_olxte.exe (RBPlus Setup by O.T.S.D WEB SERVICES)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.