Domain > askubuntu.com

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as not malicious

Files that talk to askubuntu.com

MD5	A/V
2547fed8afb5aeea9b6bd6beee643774	[Trojan.FakeJava] [Downloader] [TROJ_SPNV.03BA14] [Troj/Trackr-AB] [Trj/CI.A] [Trojan.SuspectCRC]
7210b3b79e47e8f297f83ae4fcd4d90e

Whois

Property	Value
Email	sysadmin-team@stackoverflow.com
NameServer	ROXY.NS.CLOUDFLARE.COM
Created	2010-07-30 00:00:00
Changed	2016-02-04 00:00:00
Expires	2016-07-30 00:00:00
Registrar	NAME.COM, INC.

DNS Resolutions

Date	IP Address
2012-09-01	64.34.119.12 (ClassC)
2014-06-23	198.252.206.24 (ClassC)
2023-08-13	151.101.129.69 (ClassC)
2023-08-23	151.101.65.69 (ClassC)
2023-09-16	151.101.193.69 (ClassC)
2023-10-13	104.18.22.73 (ClassC)
2023-10-24	104.18.23.73 (ClassC)
2025-06-30	172.64.150.156 (ClassC)
2025-08-10	104.18.37.100 (ClassC)

HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 1907Server: VarnishRetry-After: 0Content-Type: text/htmlAccept-Ranges: bytesDate: Fri, 04 Aug 2023 16:26:09 GMTVia: 1.1 varnishX-Served-By: cache

!DOCTYPE html>html>head>    meta http-equivContent-Type contenttext/html; charsetUTF-8 />    title>Forbidden - Stack Exchange/title>    style typetext/css>		body		{			color: #333;			font-family: Helvetica Neue, Arial, sans-serif;			font-size: 14px;			background: #fff url(img/bg-noise.png) repeat left top;			line-height: 1.4;		}		h1		{			font-size: 170%;			line-height: 34px;			font-weight: normal;		}		a { color: #366fb3; }		a:visited { color: #12457c; }		.wrapper {			width:960px;			margin: 100px auto;			text-align:left;		}		.msg {			float: left;			width: 700px;			padding-top: 18px;			margin-left: 18px;		}    /style>/head>body>    div classwrapper>		div stylefloat: left;>			img srchttps://cdn.sstatic.net/stackexchange/img/apple-touch-icon.png altStack Exchange />		/div>		div classmsg>			h1>Access Denied/h1>                        p>This IP address (52.40.234.105) has been blocked from access to our services. If you believe this to be in error, please contact us at a hrefmailto:team@stackexchange.com?SubjectBlocked%2052.40.234.105%20(Request%20ID%3A%202877161630-BFI)>team@stackexchange.com/a>./p>                        p>When contacting us, please include the following information in the email:/p>                        p>Method: block/p>                        p>XID: 2877161630-BFI/p>                        p>IP: 52.40.234.105/p>                        p>X-Forwarded-For: /p>                        p>User-Agent: /p>                                                p>Time: Fri, 04 Aug 2023 16:26:09 GMT/p>                        p>URL: askubuntu.com//p>                        p>Browser Location: span idjslocation>(not loaded)/span>/p>		/div>	/div>	script>document.getElementById(jslocation).innerHTML  window.location.href;/script>/body>/html>

Port 443

HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 1920Server: VarnishRetry-After: 0Content-Type: text/htmlAccept-Ranges: bytesDate: Fri, 04 Aug 2023 16:26:09 GMTVia: 1.1 varnishX-Served-By: cache

!DOCTYPE html>html>head>    meta http-equivContent-Type contenttext/html; charsetUTF-8 />    title>Forbidden - Stack Exchange/title>    style typetext/css>		body		{			color: #333;			font-family: Helvetica Neue, Arial, sans-serif;			font-size: 14px;			background: #fff url(img/bg-noise.png) repeat left top;			line-height: 1.4;		}		h1		{			font-size: 170%;			line-height: 34px;			font-weight: normal;		}		a { color: #366fb3; }		a:visited { color: #12457c; }		.wrapper {			width:960px;			margin: 100px auto;			text-align:left;		}		.msg {			float: left;			width: 700px;			padding-top: 18px;			margin-left: 18px;		}    /style>/head>body>    div classwrapper>		div stylefloat: left;>			img srchttps://cdn.sstatic.net/stackexchange/img/apple-touch-icon.png altStack Exchange />		/div>		div classmsg>			h1>Access Denied/h1>                        p>This IP address (52.40.234.105) has been blocked from access to our services. If you believe this to be in error, please contact us at a hrefmailto:team@stackexchange.com?SubjectBlocked%2052.40.234.105%20(Request%20ID%3A%202186845929-BFI)>team@stackexchange.com/a>./p>                        p>When contacting us, please include the following information in the email:/p>                        p>Method: block/p>                        p>XID: 2186845929-BFI/p>                        p>IP: 52.40.234.105/p>                        p>X-Forwarded-For: 52.40.234.105/p>                        p>User-Agent: /p>                                                p>Time: Fri, 04 Aug 2023 16:26:09 GMT/p>                        p>URL: askubuntu.com//p>                        p>Browser Location: span idjslocation>(not loaded)/span>/p>		/div>	/div>	script>document.getElementById(jslocation).innerHTML  window.location.href;/script>/body>/html>

Subdomains

Date	Domain	IP
meta.askubuntu.com	2025-05-25	104.18.37.100
chat.askubuntu.com	2025-05-19	172.64.150.156
www.askubuntu.com	2023-08-09	151.101.129.69

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]