Domain > superuser.com

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as not malicious

Files that talk to superuser.com

MD5	A/V
2547fed8afb5aeea9b6bd6beee643774	[Trojan.FakeJava] [Downloader] [TROJ_SPNV.03BA14] [Troj/Trackr-AB] [Trj/CI.A] [Trojan.SuspectCRC]

Whois

Property	Value
Email	sysadmin-team@stackoverflow.com
NameServer	CF-DNS02.SUPERUSER.COM
Created	1995-11-01 00:00:00
Changed	2014-05-09 00:00:00
Expires	2016-10-31 00:00:00
Registrar	NAME.COM, INC.

DNS Resolutions

Date	IP Address
2012-08-12	64.34.119.12 (ClassC)
2013-04-01	69.59.197.21 (ClassC)
2013-09-25	198.252.206.16 (ClassC)
2014-02-17	198.252.206.140 (ClassC)
2014-02-25	190.93.246.58 (ClassC)
2014-02-26	141.101.114.59 (ClassC)
2014-02-27	190.93.247.58 (ClassC)
2014-03-01	190.93.245.58 (ClassC)
2014-03-04	190.93.244.58 (ClassC)
2014-06-04	69.59.197.16 (ClassC)
2015-11-07	104.16.126.192 (ClassC)
2015-11-09	104.16.33.193 (ClassC)
2015-11-09	104.16.125.192 (ClassC)
2015-11-09	104.16.127.192 (ClassC)
2015-11-09	104.16.32.193 (ClassC)
2019-12-13	151.101.1.69 (ClassC)
2019-12-13	151.101.65.69 (ClassC)
2023-08-04	151.101.193.69 (ClassC)
2023-09-16	151.101.129.69 (ClassC)
2023-10-13	104.18.8.56 (ClassC)
2023-10-25	104.18.9.56 (ClassC)
2025-03-27	172.64.144.177 (ClassC)
2025-04-01	104.18.43.79 (ClassC)

HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 1907Server: VarnishRetry-After: 0Content-Type: text/htmlAccept-Ranges: bytesDate: Fri, 04 Aug 2023 18:58:49 GMTVia: 1.1 varnishX-Served-By: cache

!DOCTYPE html>html>head>    meta http-equivContent-Type contenttext/html; charsetUTF-8 />    title>Forbidden - Stack Exchange/title>    style typetext/css>		body		{			color: #333;			font-family: Helvetica Neue, Arial, sans-serif;			font-size: 14px;			background: #fff url(img/bg-noise.png) repeat left top;			line-height: 1.4;		}		h1		{			font-size: 170%;			line-height: 34px;			font-weight: normal;		}		a { color: #366fb3; }		a:visited { color: #12457c; }		.wrapper {			width:960px;			margin: 100px auto;			text-align:left;		}		.msg {			float: left;			width: 700px;			padding-top: 18px;			margin-left: 18px;		}    /style>/head>body>    div classwrapper>		div stylefloat: left;>			img srchttps://cdn.sstatic.net/stackexchange/img/apple-touch-icon.png altStack Exchange />		/div>		div classmsg>			h1>Access Denied/h1>                        p>This IP address (52.40.234.105) has been blocked from access to our services. If you believe this to be in error, please contact us at a hrefmailto:team@stackexchange.com?SubjectBlocked%2052.40.234.105%20(Request%20ID%3A%201550522461-BFI)>team@stackexchange.com/a>./p>                        p>When contacting us, please include the following information in the email:/p>                        p>Method: block/p>                        p>XID: 1550522461-BFI/p>                        p>IP: 52.40.234.105/p>                        p>X-Forwarded-For: /p>                        p>User-Agent: /p>                                                p>Time: Fri, 04 Aug 2023 18:58:49 GMT/p>                        p>URL: superuser.com//p>                        p>Browser Location: span idjslocation>(not loaded)/span>/p>		/div>	/div>	script>document.getElementById(jslocation).innerHTML  window.location.href;/script>/body>/html>

Port 443

HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 1920Server: VarnishRetry-After: 0Content-Type: text/htmlAccept-Ranges: bytesDate: Fri, 04 Aug 2023 18:58:49 GMTVia: 1.1 varnishX-Served-By: cache

!DOCTYPE html>html>head>    meta http-equivContent-Type contenttext/html; charsetUTF-8 />    title>Forbidden - Stack Exchange/title>    style typetext/css>		body		{			color: #333;			font-family: Helvetica Neue, Arial, sans-serif;			font-size: 14px;			background: #fff url(img/bg-noise.png) repeat left top;			line-height: 1.4;		}		h1		{			font-size: 170%;			line-height: 34px;			font-weight: normal;		}		a { color: #366fb3; }		a:visited { color: #12457c; }		.wrapper {			width:960px;			margin: 100px auto;			text-align:left;		}		.msg {			float: left;			width: 700px;			padding-top: 18px;			margin-left: 18px;		}    /style>/head>body>    div classwrapper>		div stylefloat: left;>			img srchttps://cdn.sstatic.net/stackexchange/img/apple-touch-icon.png altStack Exchange />		/div>		div classmsg>			h1>Access Denied/h1>                        p>This IP address (52.40.234.105) has been blocked from access to our services. If you believe this to be in error, please contact us at a hrefmailto:team@stackexchange.com?SubjectBlocked%2052.40.234.105%20(Request%20ID%3A%203030285810-BFI)>team@stackexchange.com/a>./p>                        p>When contacting us, please include the following information in the email:/p>                        p>Method: block/p>                        p>XID: 3030285810-BFI/p>                        p>IP: 52.40.234.105/p>                        p>X-Forwarded-For: 52.40.234.105/p>                        p>User-Agent: /p>                                                p>Time: Fri, 04 Aug 2023 18:58:49 GMT/p>                        p>URL: superuser.com//p>                        p>Browser Location: span idjslocation>(not loaded)/span>/p>		/div>	/div>	script>document.getElementById(jslocation).innerHTML  window.location.href;/script>/body>/html>

Subdomains

Date	Domain	IP
meta.superuser.com	2023-08-31	151.101.129.69
chat.superuser.com	2025-03-01	172.64.144.177
dev.superuser.com	2024-09-02	172.66.0.89
www.superuser.com	2023-08-04	151.101.65.69

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]