Domain > serverfault.com

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as not malicious

Files that talk to serverfault.com

MD5	A/V
2547fed8afb5aeea9b6bd6beee643774	[Trojan.FakeJava] [Downloader] [TROJ_SPNV.03BA14] [Troj/Trackr-AB] [Trj/CI.A] [Trojan.SuspectCRC]

Whois

Property	Value
Email	sysadmin-team@stackoverflow.com
NameServer	CF-DNS02.SERVERFAULT.COM
Created	2009-03-15 00:00:00
Changed	2014-08-28 00:00:00
Expires	2017-03-15 00:00:00
Registrar	NAME.COM, INC.

DNS Resolutions

Date	IP Address
2015-03-04	190.93.246.183 (ClassC)
2015-03-04	190.93.247.183 (ClassC)
2023-08-15	151.101.193.69 (ClassC)
2023-09-11	151.101.129.69 (ClassC)
2023-09-15	151.101.1.69 (ClassC)
2023-10-16	104.18.22.101 (ClassC)
2023-10-25	104.18.23.101 (ClassC)
2025-04-05	172.64.148.218 (ClassC)
2025-05-06	104.18.39.38 (ClassC)

HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 1909Server: VarnishRetry-After: 0Content-Type: text/htmlAccept-Ranges: bytesDate: Fri, 04 Aug 2023 18:26:08 GMTVia: 1.1 varnishX-Served-By: cache

!DOCTYPE html>html>head>    meta http-equivContent-Type contenttext/html; charsetUTF-8 />    title>Forbidden - Stack Exchange/title>    style typetext/css>		body		{			color: #333;			font-family: Helvetica Neue, Arial, sans-serif;			font-size: 14px;			background: #fff url(img/bg-noise.png) repeat left top;			line-height: 1.4;		}		h1		{			font-size: 170%;			line-height: 34px;			font-weight: normal;		}		a { color: #366fb3; }		a:visited { color: #12457c; }		.wrapper {			width:960px;			margin: 100px auto;			text-align:left;		}		.msg {			float: left;			width: 700px;			padding-top: 18px;			margin-left: 18px;		}    /style>/head>body>    div classwrapper>		div stylefloat: left;>			img srchttps://cdn.sstatic.net/stackexchange/img/apple-touch-icon.png altStack Exchange />		/div>		div classmsg>			h1>Access Denied/h1>                        p>This IP address (52.40.234.105) has been blocked from access to our services. If you believe this to be in error, please contact us at a hrefmailto:team@stackexchange.com?SubjectBlocked%2052.40.234.105%20(Request%20ID%3A%201394649735-BFI)>team@stackexchange.com/a>./p>                        p>When contacting us, please include the following information in the email:/p>                        p>Method: block/p>                        p>XID: 1394649735-BFI/p>                        p>IP: 52.40.234.105/p>                        p>X-Forwarded-For: /p>                        p>User-Agent: /p>                                                p>Time: Fri, 04 Aug 2023 18:26:08 GMT/p>                        p>URL: serverfault.com//p>                        p>Browser Location: span idjslocation>(not loaded)/span>/p>		/div>	/div>	script>document.getElementById(jslocation).innerHTML  window.location.href;/script>/body>/html>

Port 443

HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 1922Server: VarnishRetry-After: 0Content-Type: text/htmlAccept-Ranges: bytesDate: Fri, 04 Aug 2023 18:26:08 GMTVia: 1.1 varnishX-Served-By: cache

!DOCTYPE html>html>head>    meta http-equivContent-Type contenttext/html; charsetUTF-8 />    title>Forbidden - Stack Exchange/title>    style typetext/css>		body		{			color: #333;			font-family: Helvetica Neue, Arial, sans-serif;			font-size: 14px;			background: #fff url(img/bg-noise.png) repeat left top;			line-height: 1.4;		}		h1		{			font-size: 170%;			line-height: 34px;			font-weight: normal;		}		a { color: #366fb3; }		a:visited { color: #12457c; }		.wrapper {			width:960px;			margin: 100px auto;			text-align:left;		}		.msg {			float: left;			width: 700px;			padding-top: 18px;			margin-left: 18px;		}    /style>/head>body>    div classwrapper>		div stylefloat: left;>			img srchttps://cdn.sstatic.net/stackexchange/img/apple-touch-icon.png altStack Exchange />		/div>		div classmsg>			h1>Access Denied/h1>                        p>This IP address (52.40.234.105) has been blocked from access to our services. If you believe this to be in error, please contact us at a hrefmailto:team@stackexchange.com?SubjectBlocked%2052.40.234.105%20(Request%20ID%3A%204044337753-BFI)>team@stackexchange.com/a>./p>                        p>When contacting us, please include the following information in the email:/p>                        p>Method: block/p>                        p>XID: 4044337753-BFI/p>                        p>IP: 52.40.234.105/p>                        p>X-Forwarded-For: 52.40.234.105/p>                        p>User-Agent: /p>                                                p>Time: Fri, 04 Aug 2023 18:26:08 GMT/p>                        p>URL: serverfault.com//p>                        p>Browser Location: span idjslocation>(not loaded)/span>/p>		/div>	/div>	script>document.getElementById(jslocation).innerHTML  window.location.href;/script>/body>/html>

Subdomains

Date	Domain	IP
meta.serverfault.com	2023-08-31	151.101.129.69
blog.serverfault.com	2025-03-28	198.252.206.19
jobs.serverfault.com	2025-04-28	104.18.32.7
careers.serverfault.com	2025-04-24	104.18.32.7
chat.serverfault.com	2025-02-23	104.18.39.38
dev.serverfault.com	2024-09-17	172.66.0.89
www.serverfault.com	2023-08-04	151.101.129.69

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]