www.roulettebotplus.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain www.roulettebotplus.com is registered by proxy through GODADDY.COM, LLC and was originally registered in December of 2010. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Registrar:
GODADDY.COM, LLC

Server location:
Dublin City, Ireland (IE)

Create date:
Monday, December 6, 2010

Expires date:
Wednesday, December 6, 2017

Updated date:
Saturday, November 24, 2012

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.OTSDWEBSERVICES.Q, PUP.Installer.OTSDWEBSERVICES.O, PUP.Installer.OTSDWEBSERVICES.k, PUP.OTSDWEBSERVICES.Installer (M)
100.00%

Dr.Web
Program.Unwanted.70, Program.Unwanted.217
33.33%

Bkav FE
W32.HfsAdware
11.11%

Trend Micro House Call
Suspicious_GEN.F47V0127
11.11%

The domain www.roulettebotplus.com has been seen to resolve to the following 3 IP addresses.

ec2-52-17-58-248.eu-west-1.compute.amazonaws.com
January 5, 2016

ec2-52-17-39-155.eu-west-1.compute.amazonaws.com
January 5, 2016

January 14, 2014

File downloads found at URLs served by www.roulettebotplus.com.

2 / 68      (Adware)

1 / 68      (Adware)

3 / 68      (Adware)

2 / 68      (Adware)

2 / 68      (Adware)

1 / 68      (Adware)

2 / 68      (Adware)

1 / 68      (Adware)

2 / 68      (Adware)

2 / 68      (Adware)

2 / 68      (Adware)

2 / 68      (Adware)

1 / 68      (Adware)

2 / 68      (Adware)

1 / 68      (Adware)

2 / 68      (Adware)

1 / 68      (Adware)

2 / 68      (Adware)

2 / 68      (Adware)

3 / 68      (Adware)

3 / 68      (Adware)
http://www.roulettebotplus.com/RBPSetup_6188i.exe  (a80a982609b81e8416c1f26b08b4135e)

2 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
http://www.roulettebotplus.com/cdownload_230257.php  (installer_1fc923d3c1773586433328a38fdefcee.exe)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

 
Latest 30 of 60 download URLs

The following 3 files have been seen to comunicate with www.roulettebotplus.com in live environments.

URL:
http://www.roulettebotplus.com/

Google Analytics:
UA-30319375

Title:
“Roulette Strategy - Methods – Tricks and Roulette systems | Roulette Bot Plus”

Description:
“Roulette Bot Plus is the world's first fully automated software that accurately analyzes the game of Roulette by using Algo-Analysis Technology™, and does all the betting automatically for you.”

Network:
Amazon Web Services (AWS), running an EC2 instance

SSL certificate subject:
CN=www.roulettebotplus.com, O=O.T.S.D WEB SERVICES LTD, L=Tel Aviv, S=Tel Aviv, C=IL

SSL certificate issuer:
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Web server:
Apache

Facebook:
Likes:  3,649
Shares:  2,527
Comments:  145

Compete.com:
US visitors:  4,296

Statistics are for the previous month.