Domain > askubuntu.com

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as not malicious

Files that talk to askubuntu.com

MD5	A/V
2547fed8afb5aeea9b6bd6beee643774	[Trojan.FakeJava] [Downloader] [TROJ_SPNV.03BA14] [Troj/Trackr-AB] [Trj/CI.A] [Trojan.SuspectCRC]
7210b3b79e47e8f297f83ae4fcd4d90e

Whois

Property	Value
Email	sysadmin-team@stackoverflow.com
NameServer	ROXY.NS.CLOUDFLARE.COM
Created	2010-07-30 00:00:00
Changed	2016-02-04 00:00:00
Expires	2016-07-30 00:00:00
Registrar	NAME.COM, INC.

DNS Resolutions

Date	IP Address
2012-09-01	64.34.119.12 (ClassC)
2013-04-01	69.59.197.21 (ClassC)
2013-07-18	198.252.206.16 (ClassC)
2014-05-16	69.59.197.24 (ClassC)
2014-06-23	198.252.206.24 (ClassC)
2014-11-04	104.16.19.44 (ClassC)
2014-11-04	104.16.15.44 (ClassC)
2014-11-04	104.16.16.44 (ClassC)
2014-11-04	104.16.17.44 (ClassC)
2014-11-04	104.16.18.44 (ClassC)
2014-12-01	198.252.206.148 (ClassC)
2015-11-07	104.16.113.188 (ClassC)
2015-11-07	104.16.109.188 (ClassC)
2015-11-08	104.16.110.188 (ClassC)
2015-11-08	104.16.111.188 (ClassC)
2015-11-09	104.16.112.188 (ClassC)
2019-12-13	151.101.1.69 (ClassC)
2023-08-13	151.101.129.69 (ClassC)
2023-08-23	151.101.65.69 (ClassC)
2023-09-16	151.101.193.69 (ClassC)
2023-10-13	104.18.22.73 (ClassC)
2023-10-24	104.18.23.73 (ClassC)
2025-11-07	104.18.37.100 (ClassC)
2025-11-11	172.64.150.156 (ClassC)
2026-01-21	198.252.206.1 (ClassC)

HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 1907Server: VarnishRetry-After: 0Content-Type: text/htmlAccept-Ranges: bytesDate: Fri, 04 Aug 2023 16:26:09 GMTVia: 1.1 varnishX-Served-By: cache

!DOCTYPE html>html>head>    meta http-equivContent-Type contenttext/html; charsetUTF-8 />    title>Forbidden - Stack Exchange/title>    style typetext/css>		body		{			color: #333;			font-family: Helvetica Neue, Arial, sans-serif;			font-size: 14px;			background: #fff url(img/bg-noise.png) repeat left top;			line-height: 1.4;		}		h1		{			font-size: 170%;			line-height: 34px;			font-weight: normal;		}		a { color: #366fb3; }		a:visited { color: #12457c; }		.wrapper {			width:960px;			margin: 100px auto;			text-align:left;		}		.msg {			float: left;			width: 700px;			padding-top: 18px;			margin-left: 18px;		}    /style>/head>body>    div classwrapper>		div stylefloat: left;>			img srchttps://cdn.sstatic.net/stackexchange/img/apple-touch-icon.png altStack Exchange />		/div>		div classmsg>			h1>Access Denied/h1>                        p>This IP address (52.40.234.105) has been blocked from access to our services. If you believe this to be in error, please contact us at a hrefmailto:team@stackexchange.com?SubjectBlocked%2052.40.234.105%20(Request%20ID%3A%202877161630-BFI)>team@stackexchange.com/a>./p>                        p>When contacting us, please include the following information in the email:/p>                        p>Method: block/p>                        p>XID: 2877161630-BFI/p>                        p>IP: 52.40.234.105/p>                        p>X-Forwarded-For: /p>                        p>User-Agent: /p>                                                p>Time: Fri, 04 Aug 2023 16:26:09 GMT/p>                        p>URL: askubuntu.com//p>                        p>Browser Location: span idjslocation>(not loaded)/span>/p>		/div>	/div>	script>document.getElementById(jslocation).innerHTML  window.location.href;/script>/body>/html>

Port 443

HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 1920Server: VarnishRetry-After: 0Content-Type: text/htmlAccept-Ranges: bytesDate: Fri, 04 Aug 2023 16:26:09 GMTVia: 1.1 varnishX-Served-By: cache

!DOCTYPE html>html>head>    meta http-equivContent-Type contenttext/html; charsetUTF-8 />    title>Forbidden - Stack Exchange/title>    style typetext/css>		body		{			color: #333;			font-family: Helvetica Neue, Arial, sans-serif;			font-size: 14px;			background: #fff url(img/bg-noise.png) repeat left top;			line-height: 1.4;		}		h1		{			font-size: 170%;			line-height: 34px;			font-weight: normal;		}		a { color: #366fb3; }		a:visited { color: #12457c; }		.wrapper {			width:960px;			margin: 100px auto;			text-align:left;		}		.msg {			float: left;			width: 700px;			padding-top: 18px;			margin-left: 18px;		}    /style>/head>body>    div classwrapper>		div stylefloat: left;>			img srchttps://cdn.sstatic.net/stackexchange/img/apple-touch-icon.png altStack Exchange />		/div>		div classmsg>			h1>Access Denied/h1>                        p>This IP address (52.40.234.105) has been blocked from access to our services. If you believe this to be in error, please contact us at a hrefmailto:team@stackexchange.com?SubjectBlocked%2052.40.234.105%20(Request%20ID%3A%202186845929-BFI)>team@stackexchange.com/a>./p>                        p>When contacting us, please include the following information in the email:/p>                        p>Method: block/p>                        p>XID: 2186845929-BFI/p>                        p>IP: 52.40.234.105/p>                        p>X-Forwarded-For: 52.40.234.105/p>                        p>User-Agent: /p>                                                p>Time: Fri, 04 Aug 2023 16:26:09 GMT/p>                        p>URL: askubuntu.com//p>                        p>Browser Location: span idjslocation>(not loaded)/span>/p>		/div>	/div>	script>document.getElementById(jslocation).innerHTML  window.location.href;/script>/body>/html>

Subdomains

Date	Domain	IP
meta.askubuntu.com	2025-10-27	104.18.37.100
chat.askubuntu.com	2025-09-18	172.64.150.156
www.askubuntu.com	2023-08-09	151.101.129.69

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]