home

radsteroids.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain radsteroids.com is registered by proxy through GODADDY.COM, LLC and was originally registered in July of 2013. The hosted servers are located in Ashburn, Virginia within the United States. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Friday, July 19, 2013

Expires date:
Saturday, July 19, 2014

Updated date:
Friday, July 19, 2013

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Whois:
1 radsteroids.com record

The domain radsteroids.com has been seen to resolve to the following 8 IP addresses.

54.230.39.162
server-54-230-39-162.jfk1.r.cloudfront.net
May 2, 2014

54.230.38.184
server-54-230-38-184.jfk1.r.cloudfront.net
May 2, 2014

204.246.169.113
server-204-246-169-113.jfk1.r.cloudfront.net
May 2, 2014

204.246.169.228
server-204-246-169-228.jfk1.r.cloudfront.net
May 2, 2014

204.246.169.157
server-204-246-169-157.jfk1.r.cloudfront.net
May 2, 2014

54.230.38.186
server-54-230-38-186.jfk1.r.cloudfront.net
May 2, 2014

204.246.169.179
server-204-246-169-179.jfk1.r.cloudfront.net
May 2, 2014

54.230.37.188
server-54-230-37-188.jfk1.r.cloudfront.net
May 2, 2014

The following 12 files have been seen to comunicate with radsteroids.com in live environments.

TCP » 54.230.37.188:80
browser.exe (Browser)

TCP » 204.246.169.113:80
amisetup0103__15940.exe

TCP » 204.246.169.113:80
awhea1a.tmp

TCP » 54.230.38.184:80
dcytdkiemon_amodk_setup.exe

TCP » 54.230.38.184:443
nsx7f3e.tmp

TCP » 54.230.38.186:80
oswye.exe (Virtual by Virtual Group)

TCP » 54.230.38.186:443
DownloadManager.exe (DownloadManager)

TCP » 54.230.38.186:443
setup_42cd63.exe

TCP » 54.230.38.186:443
nso34ca.tmp

TCP » 54.230.38.186:443
nsd9152.tmp

TCP » 54.230.38.186:443
u1603.exe

TCP » 54.230.39.162:80
feeddemon.exe (by NewsGator Technologies)

May 2, 2014
d.radsteroids.com

URL:
http://radsteroids.com/

Google Analytics:
UA-42630574

Title:
“Radsteroids: The Web's Worst Nightmare”

Description:
“Radsteroids - Destroy any website.”

Network:
Amazon Cloudfront

Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.