home

portal.snxd.com

racksys

Domain Information

The domain portal.snxd.com registered by racksys was initially registered in June of 2006 through GODADDY.COM, LLC. The hosted servers are located in Ashburn, Virginia within the United States. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Tuesday, June 20, 2006

Expires date:
Thursday, June 20, 2019

Updated date:
Thursday, December 8, 2011

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
snxd.com

Whois:
1 snxd.com record

The domain portal.snxd.com has been seen to resolve to the following 14 IP addresses.

54.225.131.124
ec2-54-225-131-124.compute-1.amazonaws.com
September 15, 2016

107.20.217.62
ec2-107-20-217-62.compute-1.amazonaws.com
September 15, 2016

107.21.207.206
ec2-107-21-207-206.compute-1.amazonaws.com
June 8, 2016

54.225.187.190
ec2-54-225-187-190.compute-1.amazonaws.com
May 19, 2016

54.235.78.180
ec2-54-235-78-180.compute-1.amazonaws.com
February 22, 2016

165.225.130.235
May 23, 2014

165.225.130.241
May 23, 2014

165.225.130.238
May 23, 2014

165.225.131.5
May 23, 2014

165.225.130.239
May 23, 2014

165.225.130.240
May 23, 2014

165.225.131.4
May 23, 2014

165.225.129.253
May 23, 2014

165.225.130.237
May 23, 2014

File downloads found at URLs served by portal.snxd.com.

0 / 68
http://portal.snxd.com/configureinstance?dlmid=54eceaed9385a08e6f000003&workflow={"downloadToken":"04ab0ac39453a6fc4fb19fc6be148f03d063ccdc4618ca1e7f6ad981f22a88d6bd070bbe90645ef2e8d55bf86414ce2abaff782ad5862320ff"}  (omnisphere_2_upgrade_download_manager.exe)

0 / 68
http://portal.snxd.com/configureinstance?dlmid=5286969578a3c3fe44000002&workflow={"standardDownload":[{"metafile":"http://metadata.cdn.snxd.com/E_A233E28563D7EDABCACE778EAA70CAEA8E246EF3"}],"urlredirect":[{"beginsWith":"http://www.academicsuperstore.com","append":"?Transactionid=54982&MachineId={PrimaryMac}"}]}  (journeyed.exe)

0 / 68
http://portal.snxd.com/configureinstance?dlmid=55d39f1c54b8345d0800000a&workflow={"downloadToken":"04ab0ac39453a6fc4fb19fc6be148f03d063ccdc4618ca1e7f6adf8ff3208ed3fd2d269a43e06871df541c65936832ed711407999a269be810"}  (omnisphere_2_upgrade_download_manager.exe)

0 / 68
http://portal.snxd.com/configureinstance?dlmid=55d3a2cf54b8345d0800000b&workflow={"standardDownload":[{"metafile":"http://metadata.cdn.snxd.com/E_D2F071BC8F2B5A0CCCA9EC67E1A9FF3F1B6A68F2"}],"urlredirect":[{"beginsWith":"http://www.academicsuperstore.com","append":"?Transactionid=59582&MachineId={PrimaryMac}"}]}  (journeyed.exe)

0 / 68
http://portal.snxd.com/configureinstance?dlmid=5286969578a3c3fe44000002&workflow={"standardDownload":[{"metafile":"http://metadata.cdn.snxd.com/E_3749B38118672CCCDFC4AEBF026061BE50FAD8B1"}],"urlredirect":[{"beginsWith":"http://www.academicsuperstore.com","append":"?Transactionid=44942&MachineId={PrimaryMac}"}]}  (journeyed.exe)

The following 2 files have been seen to comunicate with portal.snxd.com in live environments.

TCP » 107.21.207.206:80
client.exe

TCP » 107.21.207.206:80
WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

URL:
http://portal.snxd.com/

Title:
“portal”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.6.2 (Express)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.