home

ww6.royalvegas.me

Anne Lawrence

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in London, England within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
Key-Systems GmbH

Server location:
England, United Kingdom (GB)

ASN:
AS36983 OTR-A,ZA

Root domain:
royalvegas.me

Whois:
1 royalvegas.me record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.MicroGaming.Installer.Meta (M)
100.00%

The domain ww6.royalvegas.me has been seen to resolve to the following IP address.

193.169.206.144
livechat.dmgamingsystems.com
June 21, 2016

File downloads found at URLs served by ww6.royalvegas.me.

1 / 68      (PUP)
http://ww6.royalvegas.me/download.casino?file_name=RoyalVegas.exe&ul=it&offerid=88334405-D336-4932-AB55-D50BFCDCA786&linkid=0AB1051C-22B2-4eb8-891B-F37096CA675C&pageid=F5E0C573-D0D9-4d02-B986-94D7711CA662&pageurl=/content/.../default.aspx&casinoid=229&banner_tag=ad470039  (e45e5e333e0a8c6886f19fcdb34a71b3)

The following 5 files have been seen to comunicate with ww6.royalvegas.me in live environments.

TCP » 193.169.206.144:80
royalvegas.exe (MicrogamingInstall)

TCP » 193.169.206.144:80
royalvegas.exe (MicrogamingInstall)

TCP » 193.169.206.144:80
royalvegas.exe (MicrogamingInstall)

TCP » 193.169.206.144:80
royalvegas.exe (MicrogamingInstall)

TCP » 193.169.206.144:80
royalvegas.exe (MicrogamingInstall)

URL:
http://ww6.royalvegas.me/

Google Analytics:
UA-614249

Title:
“Royal Vegas Online Casino - Vegas style casino online giochi”

Description:
“Royal Vegas Online Casino has over 200 casino games. Get $/£/€100 Free to play casino games at this Vegas style online casino.”

Web server:
Microsoft-IIS/7.0 (ASP.NET) (Version: 4.0.30319)

platinumplaycasino.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.