Domain > stackoverflow.com

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as not malicious

Files that talk to stackoverflow.com

MD5	A/V
2547fed8afb5aeea9b6bd6beee643774	[Trojan.FakeJava] [Downloader] [TROJ_SPNV.03BA14] [Troj/Trackr-AB] [Trj/CI.A] [Trojan.SuspectCRC]
0b060dfcb3bb65a453deecbadb642760
ac59460ff3ad8f551a3c873514eda22c
be21158ed69f43951be05794084e7725
16871719f351051d45610a9cea771e52
e68a0ae403b6ee5d9df42e4fb21c10b2	[BehavesLike.Win32.Dropper.cc]
2ca589943a5a8a2dfce8e6f556504818

Whois

Property	Value
Email	sysadmin-team@stackoverflow.com
NameServer	CF-DNS02.STACKOVERFLOW.COM
Created	2003-12-26 00:00:00
Changed	2014-05-09 00:00:00
Expires	2015-12-26 00:00:00
Registrar	NAME.COM, INC.

DNS Resolutions

Date	IP Address
2012-06-08	64.34.119.12 (ClassC)
2013-01-06	69.59.197.21 (ClassC)
2013-01-29	69.59.197.22 (ClassC)
2014-02-18	198.252.206.140 (ClassC)
2014-05-16	69.59.197.16 (ClassC)
2014-10-26	198.252.206.16 (ClassC)
2014-10-26	198.252.206.16 (ClassC)
2015-05-17	104.16.24.251 (ClassC)
2015-07-24	104.16.25.251 (ClassC)
2015-07-30	104.16.102.85 (ClassC)
2015-07-31	104.16.106.85 (ClassC)
2015-07-31	104.16.103.85 (ClassC)
2015-07-31	104.16.104.85 (ClassC)
2015-07-31	104.16.105.85 (ClassC)
2015-11-07	104.16.35.249 (ClassC)
2015-11-07	104.16.36.249 (ClassC)
2015-11-07	104.16.37.249 (ClassC)
2015-11-07	104.16.33.249 (ClassC)
2015-11-07	104.16.34.249 (ClassC)
2016-05-05	151.101.1.5 (ClassC)
2016-05-05	151.101.65.5 (ClassC)
2016-05-06	151.101.193.5 (ClassC)
2016-05-06	151.101.129.5 (ClassC)
2022-11-11	192.35.222.204 (ClassC)
2023-08-15	151.101.129.69 (ClassC)
2023-09-09	151.101.65.69 (ClassC)
2023-09-21	151.101.1.69 (ClassC)
2023-09-24	151.101.193.69 (ClassC)
2023-10-09	104.18.23.201 (ClassC)
2023-10-21	104.18.22.201 (ClassC)
2024-12-14	172.64.155.249 (ClassC)
2024-12-25	104.18.32.7 (ClassC)

HTTP/1.1 403 ForbiddenServer: VarnishRetry-After: 0Content-Type: text/htmlContent-Length: 1932Accept-Ranges: bytesDate: Sun, 23 Jun 2019 22:33:08 GMTVia: 1.1 varnishConnection: closeX-Served-By: cache

!DOCTYPE html>html>head>    meta http-equivContent-Type contenttext/html; charsetUTF-8 />    title>Forbidden - Stack Exchange/title>    style typetext/css>		body		{			color: #333;			font-family: Helvetica Neue, Arial, sans-serif;			font-size: 14px;			background: #fff url(img/bg-noise.png) repeat left top;			line-height: 1.4;		}		h1		{			font-size: 170%;			line-height: 34px;			font-weight: normal;		}		a { color: #366fb3; }		a:visited { color: #12457c; }		.wrapper {			width:960px;			margin: 100px auto;			text-align:left;		}		.msg {			float: left;			width: 700px;			padding-top: 18px;			margin-left: 18px;		}    /style>/head>body>    div classwrapper>		div stylefloat: left;>			img srchttps://cdn.sstatic.net/stackexchange/img/apple-touch-icon.png altStack Exchange />		/div>		div classmsg>			h1>Access Denied/h1>                        p>This IP address (52.40.234.105) has been blocked from access to our services. If you believe this to be in error, please contact us at a hrefmailto:team@stackexchange.com?SubjectBlocked%2052.40.234.105%20(Request%20ID%3A%201807644005-SEA)>team@stackexchange.com/a>./p>                        p>When contacting us, please include the following information in the email:/p>                        p>Method: block/p>                        p>XID: 1807644005-SEA/p>                        p>IP: 52.40.234.105/p>                        p>X-Forwarded-For: /p>                        p>User-Agent: /p>                        p>Reason: Agent./p>                        p>Time: Sun, 23 Jun 2019 22:33:08 GMT/p>                        p>URL: stackoverflow.com//p>                        p>Browser Location: span idjslocation>(not loaded)/span>/p>		/div>	/div>	script>document.getElementById(jslocation).innerHTML  window.location.href;/script>/body>/html>

Port 443

HTTP/1.1 403 ForbiddenServer: VarnishRetry-After: 0Content-Type: text/htmlContent-Length: 1943Accept-Ranges: bytesDate: Sun, 23 Jun 2019 22:33:08 GMTVia: 1.1 varnishConnection: closeX-Served-By: cache

!DOCTYPE html>html>head>    meta http-equivContent-Type contenttext/html; charsetUTF-8 />    title>Forbidden - Stack Exchange/title>    style typetext/css>		body		{			color: #333;			font-family: Helvetica Neue, Arial, sans-serif;			font-size: 14px;			background: #fff url(img/bg-noise.png) repeat left top;			line-height: 1.4;		}		h1		{			font-size: 170%;			line-height: 34px;			font-weight: normal;		}		a { color: #366fb3; }		a:visited { color: #12457c; }		.wrapper {			width:960px;			margin: 100px auto;			text-align:left;		}		.msg {			float: left;			width: 700px;			padding-top: 18px;			margin-left: 18px;		}    /style>/head>body>    div classwrapper>		div stylefloat: left;>			img srchttps://cdn.sstatic.net/stackexchange/img/apple-touch-icon.png altStack Exchange />		/div>		div classmsg>			h1>Access Denied/h1>                        p>This IP address (52.40.234.105) has been blocked from access to our services. If you believe this to be in error, please contact us at a hrefmailto:team@stackexchange.com?SubjectBlocked%2052.40.234.105%20(Request%20ID%3A%20818697847-SEA)>team@stackexchange.com/a>./p>                        p>When contacting us, please include the following information in the email:/p>                        p>Method: block/p>                        p>XID: 818697847-SEA/p>                        p>IP: 52.40.234.105/p>                        p>X-Forwarded-For: 52.40.234.105/p>                        p>User-Agent: /p>                        p>Reason: Agent./p>                        p>Time: Sun, 23 Jun 2019 22:33:08 GMT/p>                        p>URL: stackoverflow.com//p>                        p>Browser Location: span idjslocation>(not loaded)/span>/p>		/div>	/div>	script>document.getElementById(jslocation).innerHTML  window.location.href;/script>/body>/html>

Subdomains

Date	Domain	IP
meta.stackoverflow.com	2023-08-04	151.101.193.69
43210.meta.stackoverflow.com	2024-12-21	172.64.155.249
ru.meta.stackoverflow.com	2024-07-10	172.64.155.249
dev.meta.stackoverflow.com	2024-07-10	104.18.32.7
clc.stackoverflow.com	2023-08-04	151.101.129.69
dev.bonfire.stackoverflow.com	2024-12-15	104.18.40.213
blog.stackoverflow.com	2024-08-30	104.18.32.7
dev.blog.stackoverflow.com	2024-12-22	172.66.0.89
email.stackoverflow.com	2024-12-19	104.18.32.7
hello.stackoverflow.com	2024-11-21	3.208.127.243
jobs.stackoverflow.com	2024-10-04	198.252.206.17
rads.stackoverflow.com	2024-03-22	172.64.155.249
es.stackoverflow.com	2024-09-02	172.64.155.249
careers.stackoverflow.com	2014-02-18	198.252.206.17
dev.careers.stackoverflow.com	2023-11-24	104.18.32.7
business.stackoverflow.com	2024-09-02	104.18.32.7
insights.stackoverflow.com	2023-08-04	151.101.193.69
dev.insights.stackoverflow.com	2023-12-23	172.64.155.249
chat.stackoverflow.com	2024-05-15	198.252.206.29
talent.stackoverflow.com	2024-08-21	172.64.155.249
dev.talent.stackoverflow.com	2024-03-27	104.18.32.7
enterpriseenrollment.stackoverflow.com	2024-10-20	20.189.172.161
pt.stackoverflow.com	2023-08-18	151.101.129.69
ru.stackoverflow.com	2023-08-04	151.101.1.69
meta.ru.stackoverflow.com	2023-08-29	198.252.206.16
dev.stackoverflow.com	2024-11-25	172.66.0.89
meta.dev.stackoverflow.com	2024-11-25	172.66.0.89
www.stackoverflow.com	2023-09-24	151.101.193.69

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]