- First seen
- Last seen
Indicator overview
INDICATOR PROFILEThe VirusSign analysis is supported by the detection, confidence, classification and relationship signals available for this indicator.
- Domain
- stellarinfo.com
- TLD
- com
- Root domain
- stellarinfo.com
- Resolved geo
- United States
- Resolved IP
- 13.226.251.6
- Country
- United States
- DGA risk
- low
- DGA score
- 27.0
- Domain age days
- 10024.0
- Registrar
- GoDaddy.com, LLC
Connected context
Key findings
OBSERVED EVIDENCEReview the detections and related infrastructure.
Suspicious. A limited set of engine detections is present (5%).
15 related indicators are shown across 3 relationship group(s). Additional relationship intelligence is available through API and data access.
Analysis signals
OBSERVEDExpand a connection to run an additional public query. This page allows up to 3 expansions; each counts toward your query limit.
Compare when indicators were first seen, last seen and observed. Switch to Lifecycle to connect events for the same IOC.
Review approximate infrastructure locations and geographic concentration.
No observations in this view
Available evidence appears in the other investigation lenses.
Visible connections
Related intelligence
Pivot across connected files and infrastructure with analysis signals and supporting context.
Related files
Files observed communicating with, containing, or otherwise linked to this indicator.
Related domains
Domains associated with this indicator.
Related URLs
URLs associated with this indicator.
4462f508b0dac655d80a732b6684ac0427ca9a0fc0d832f7a04ca791f6f9e649
First seen
2022-10-29T12:47:32Z
3aac787df76bb39a811de64373df9a264c858dc148d88f5caa978eb94db6a8eb
First seen
2022-10-30T20:18:45Z
6c68801aba6fbadf096f4c933115394d298c78398a5a8dd3c770239c0349edf2
First seen
2022-10-30T20:18:45Z
61f084560cf9b8112a607478bf25869e7df7f03f3e9dc953bf0b5a966bd21891
First seen
2022-10-30T22:11:40Z
7ff0ce81e5f2db7516b82b2549d1242727e09c80df05933f7b024f099ec59116
First seen
2022-10-29T23:05:30Z
Analysis details
Freshness: Recent · Last seen 12 days ago.
- Detection rate
- 5%
- detection
- 5 · Engine detection rate; color may also reflect VirusSign confidence.
Overview
- Domain
- stellarinfo.com
- TLD
- com
- Root domain
- stellarinfo.com
- Resolved geo
- United States
- Resolved IP
- 13.226.251.6
- Country
- United States
- DGA risk
- low
- DGA score
- 27.0
- Domain age days
- 10024.0
- Registrar
- GoDaddy.com, LLC
- Created
- 1999-06-05T14:36:38Z
- Expiry
- 2030-06-05T14:37:15Z
- First seen
- 2023-10-01T07:29:11Z
- Last seen
- 2026-11-02T19:07:17Z
Key findings
A focused interpretation of the evidence, relationships and observation history that matter most.
Review the detections and related infrastructure.
Suspicious. A limited set of engine detections is present (5%).
15 related indicators are shown across 3 relationship group(s). Additional relationship intelligence is available through API and data access.
16 timestamped observations are arranged from 1992-06-19 to 2024-11-05. These are observation or metadata times, not execution order.
1 infrastructure/location point(s) are visible on the map. 1 point(s) are country-level approximate.
Why this verdict
Review the reported detections, analysis confidence and supporting context.
The VirusSign analysis is supported by the detection, confidence, classification and relationship signals available for this indicator.
Reported engine detection rate. A low rate alone does not establish that the indicator is benign.
3 relationship group(s) provide pivot and infrastructure context.
Last seen 12 days ago.
Signals reflect the intelligence returned in this report. Missing values mean not reported, not zero. Related indicators are investigation leads, not proof of shared malicious activity.
Domain profile
summarySelected domain intelligence summary.
- Root domain
- stellarinfo.com
- Resolved IP
- 13.226.251.6
- Resolved geo
- United States
- Country
- United States
- DGA risk
- low
- DGA score
- 27.0
- Domain age days
- 10024.0
- Registrar
- GoDaddy.com, LLC
- Created
- 1999-06-05T14:36:38Z
- Expiry
- 2030-06-05T14:37:15Z
Infrastructure
selected detailsSelected observations and details. Additional structured data are available through API and data access.
- 5+ passive DNS records
- 1 DNS records
- 0 unique IPs
- 0 related domains
View details · 3 shown
- Type
- A
- Type
- MX
- Type
- NS
- 1 certificates observed
- 1 issuers
- 1 subjects
View details · 1 shown
- Subject
- www.stellarinfo.com
- Issuer
- DigiCert EV RSA CA G2