home

www.allslotscasino.com

Nexigames

Domain Information

The domain www.allslotscasino.com registered by Nexigames was initially registered in April of 1999 through INSTRA CORPORATION PTY, LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Campbell, California within the United States which resides on the CDNetworks Inc. network.
Registrar:
INSTRA CORPORATION PTY, LTD.

Server location:
California, United States (US)

Create date:
Sunday, April 25, 1999

Expires date:
Saturday, April 25, 2015

Updated date:
Saturday, April 19, 2014

ASN:
AS36408 CDNETWORKSUS-02 - CDNetworks Inc., US

Root domain:
allslotscasino.com

Whois:
1 allslotscasino.com record

Scanner detections:
Detections  (80% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP, PUP.MicroGaming.Installer.Meta (M)
80.00%

F-Prot
W32/Casino.P.gen
20.00%

Avira AntiVirus
GAME/Casino.Gen
20.00%

ESET NOD32
Win32/PrimeCasino (variant)
20.00%

K7 AntiVirus
Unwanted-Program
20.00%

G Data
Win32.Application.Primecasino
20.00%

IKARUS anti.virus
PUA.PrimeCasino
20.00%

Trend Micro House Call
HV_CASINO_BL132A32.TOMC
20.00%

SUPERAntiSpyware
PUP.Casino
20.00%

The domain www.allslotscasino.com has been seen to resolve to the following 6 IP addresses.

66.114.52.124
i1-h0-s1025.p1-iad.cdngp.net
June 4, 2016

174.35.27.125
June 2, 2016

66.114.52.102
June 2, 2016

66.114.52.17
May 21, 2016

66.114.52.21
October 9, 2014

66.114.52.20
October 9, 2014

File downloads found at URLs served by www.allslotscasino.com.

1 / 68      (PUP)
http://.../dwnl.php?bTag=&bTag2=&bTag3=&bTag4=&bTag5=&loggedin=0&file_name=&ul=en&rafid=http://.../download&PCMGUID=&  (allslots.exe)

1 / 68      (PUP)
http://.../dwnl.php?filename=AllSlots.exe&bTag=as_sj10002_www-2Eallslotscasino-2Ecom_en_index-2Ehtml_all-20slots-20casino_www_google_co_il&ul=en&ref=http://.../&bTag4=24293048,4b605228-984a-42f2-5973-b23ca328facf&bTag3=default  (e7ad16b739dd815a4712c4a6462165de)

1 / 68      (PUP)
http://.../dwnl.php?bTag=as_sj10002_www-2Eallslotscasino-2Ecom_en_-252Fau-252F_nkf20131031001820_www_google_com_au&bTag2=&bTag3=&bTag4=&bTag5=&loggedin=0&file_name=&ul=en&rafid=http://.../download&PCMGUID=&  (allslots.exe)

1 / 68      (Malware)
http://www.allslotscasino.com/dwnl.php?filename=AllSlots.exe&bTag=asks_6001&ul=de&ref=http://www.allslotscasino.com/.../casinode.html&bTag4=15120573,7105e971-69e1-493f-c170-005c18c403b5&bTag3=default  (3b7940c6c310be0f77f275ba407b09fe)

8 / 68      (inconclusive)
http://www.allslotscasino.com/dwnl.php?filename=AllSlots.exe&bTag=notag_telechargement_casino_en_ligne.html_www.allslotscasino.com_lemoteur_ke_voila_fr&ul=fr&ref=http://www.allslotscasino.com/.../telechargement-casino-en-ligne.html#_&bTag4=24763513,de2dab61-0cf3-440d-ad7d-e481b7b59b81&bTag3=default  (182abe601886924f71f52f9ced5a9660)

The following 24 files have been seen to comunicate with www.allslotscasino.com in live environments.

TCP » 66.114.52.21:80
1468567241.exe

TCP » 66.114.52.20:80
Iminent.Messengers.exe (Iminent Messengers by Iminent)

TCP » 66.114.52.17:80
1468567241.exe

TCP » 66.114.52.17:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.20:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.20:80
bobrowser.exe (BoBrowser by The BoBrowser Authors)

TCP » 66.114.52.21:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.21:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.21:80
umbrella282_upd.exe (Iminent Service by Iminent)

TCP » 66.114.52.20:80
tools_update.exe

TCP » 66.114.52.21:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.20:80
1468567241.exe

TCP » 66.114.52.17:80
umbrella282_upd.exe (Iminent Service by Iminent)

TCP » 66.114.52.20:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.21:80
claraupdater_new.exe (ClaraUpdater by ClaraLabs)

TCP » 66.114.52.20:80
gamelogin.exe (gamelogin by 337 Technology Limited)

TCP » 66.114.52.20:80
umbrella282_upd.exe (Iminent Service by Iminent)

TCP » 66.114.52.20:80
Iminent.Messengers.exe (Iminent Messengers by Iminent)

TCP » 66.114.52.21:80
weathermini.exe (The Desktop Weather by ShenZhen Enode Techology co,.Ltd)

TCP » 66.114.52.17:80
3.9.0.124_20140513022949.exe (The KMPlayer by PandoraTV)

 
Latest 20 of 65 files

URL:
http://www.allslotscasino.com/

Google Analytics:
UA-41249746

Title:
“All Slots Online Casino | $30 Free + $500 Bonus | #1 Slots Casino”

Description:
“All Slots Casino offers the best online slots and more than 500 online casino games. Join All Slots and get $€ 30 Free plus a $€ 500 Welcome Package.”

Web server:
PWS/8.0.25

Facebook:
Likes:  1,775
Shares:  283
Comments:  141

Twitter:
Shares:  164

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.