banksmediation.com Threat Intelligence and Information
Apr 25, 2022
domainpage
Host Location
Dig Results
- Got answer:
- -»HEADER«- opcode: QUERY, status: NOERROR, id: 8319
- flags: qr rd ra QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
- OPT PSEUDOSECTION:
- EDNS: version: 0, flags: udp: 1232
- QUESTION SECTION:
- banksmediation.com. IN A
- ANSWER SECTION:
- banksmediation.com. 595 IN A 198.185.159.144
- banksmediation.com. 595 IN A 198.49.23.145
- banksmediation.com. 595 IN A 198.185.159.145
- banksmediation.com. 595 IN A 198.49.23.144
- Query time: 8 msec
- SERVER: 192.168.1.153(192.168.1.1)
- WHEN: Sat Apr 30 23:31:29 UTC 2022
- MSG SIZE rcvd: 111
DNS Records
- SOA ns29.domaincontrol.com 97.74.104.15
- NS ns29.domaincontrol.com 97.74.104.15
- NS ns29.domaincontrol.com 2603:5:2181::f
- NS ns30.domaincontrol.com 173.201.72.15
- NS ns30.domaincontrol.com 2603:5:2281::f
- MX banksmediation-com.mail.protection.outlook.com 104.47.66.10
- MX banksmediation-com.mail.protection.outlook.com 104.47.59.138
- A banksmediation.com 198.185.159.145
- A banksmediation.com 198.49.23.145
- A banksmediation.com 198.185.159.144
- A banksmediation.com 198.49.23.144
- SRV _sipfederationtls._tcp.banksmediation.com sipfed.online.lync.com 52.113.66.203 5061 1
- SRV _sipfederationtls._tcp.banksmediation.com sipfed.online.lync.com 2603:1047:0:b::f 5061 1
- SRV _sip._tls.banksmediation.com sipdir.online.lync.com 52.113.66.144 443 1
- SRV _sip._tls.banksmediation.com sipdir.online.lync.com 2603:1047:0:b::f 443 1
- SRV _sip._tls.banksmediation.com sipdir.online.lync.com 2603:1047:0:a::f 443 1
- SRV _sip._tls.banksmediation.com sipdir.online.lync.com 2603:1047:0:1::b 443 1
- SRV _sip._tls.banksmediation.com sipdir.online.lync.com 2603:1047:0:2::b 443 1
- SRV _sip._tls.banksmediation.com sipdir.online.lync.com 2603:1047:0:8::f 443 1
- SRV _sip._tls.banksmediation.com sipdir.online.lync.com 2603:1047:0:9::f 443 1
Whois Data
- Domain Name: BANKSMEDIATION.COM
- Registry Domain ID: 2601603700_DOMAIN_COM-VRSN
- Registrar URL: http://www.godaddy.com
- Updated Date: 2022-03-31T16:45:29Z
- Creation Date: 2021-03-30T15:20:18Z
- Registry Expiry Date: 2023-03-30T15:20:18Z
- Registrar: GoDaddy.com, LLC
- Registrar IANA ID: 146
- Registrar Abuse Contact Email: abuse@godaddy.com
- Registrar Abuse Contact Phone: 480-624-2505
- Name Server: NS29.DOMAINCONTROL.COM
- Name Server: NS30.DOMAINCONTROL.COM
- DNSSEC: unsigned
- Domain Name: banksmediation.com
- Registry Domain ID: 2601603700_DOMAIN_COM-VRSN
- Registrar URL: https://www.godaddy.com
- Updated Date: 2022-03-31T11:45:27Z
- Creation Date: 2021-03-30T10:20:18Z
- Registrar Registration Expiration Date: 2023-03-30T10:20:18Z
- Registrar: GoDaddy.com, LLC
- Registrar IANA ID: 146
- Registrar Abuse Contact Email: abuse@godaddy.com
- Registrar Abuse Contact Phone: +1.4806242505
- Registry Registrant ID: Not Available From Registry
- Registrant Name: Registration Private
- Registrant Organization: Domains By Proxy, LLC
- Registrant Street: DomainsByProxy.com
- Registrant Street: 2155 E Warner Rd
- Registrant City: Tempe
- Registrant State/Province: Arizona
- Registrant Postal Code: 85284
- Registrant Country: US
- Registrant Phone: +1.4806242599
- Registrant Phone Ext:
- Registrant Fax: +1.4806242598
- Registrant Fax Ext:
- Registry Tech ID: Not Available From Registry
- Tech Name: Registration Private
- Tech Organization: Domains By Proxy, LLC
- Tech Street: DomainsByProxy.com
- Tech Street: 2155 E Warner Rd
- Tech City: Tempe
- Tech State/Province: Arizona
- Tech Postal Code: 85284
- Tech Country: US
- Tech Phone: +1.4806242599
- Tech Phone Ext:
- Tech Fax: +1.4806242598
- Tech Fax Ext:
- Registry Admin ID: Not Available From Registry
- Admin Name: Registration Private
- Admin Organization: Domains By Proxy, LLC
- Admin Street: DomainsByProxy.com
- Admin Street: 2155 E Warner Rd
- Admin City: Tempe
- Admin State/Province: Arizona
- Admin Postal Code: 85284
- Admin Country: US
- Admin Phone: +1.4806242599
- Admin Phone Ext:
- Admin Fax: +1.4806242598
- Admin Fax Ext:
- Name Server: NS29.DOMAINCONTROL.COM
- Name Server: NS30.DOMAINCONTROL.COM
- DNSSEC: unsigned
SSL Certificate Information
- Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number:
- 04:4a:2d:db:3d:33:32:e3:d9:b3:ae:a2:f5:2e:45:f6:c6:9b
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: C = US, O = Let’s Encrypt, CN = R3
- Validity
- Not Before: Apr 21 11:39:28 2022 GMT
- Not After : Jul 20 11:39:27 2022 GMT
- Subject: CN = banksmediation.com
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- RSA Public-Key: (2048 bit)
- Modulus:
- 00:88:b2:30:1e:d1:eb:64:0e:ed:e6:75:b7:b5:53:
- ec:6c:52:9d:22:6a:13:91:b6:ff:7c:fa:fc:47:9f:
- 83:2d:c0:3d:96:1a:75:c8:9c:17:18:7a:bb:f3:af:
- 21:20:0e:d9:50:38:6a:0f:74:f3:88:ef:e0:10:da:
- 8b:15:d9:ea:07:c3:9b:0a:f5:f1:87:23:65:46:30:
- bc:6c:20:85:5c:f3:1a:ea:0b:57:6f:9b:cb:1c:90:
- 2c:52:79:5a:9c:cb:71:bd:ef:2e:4a:09:c3:8b:81:
- a2:da:06:68:49:38:ff:c7:29:bf:50:e1:94:58:1e:
- 9c:bc:d3:81:44:12:58:09:af:8c:cd:de:50:04:d5:
- 9e:53:ce:c9:d7:41:01:a0:53:f7:ee:51:91:35:0c:
- 0a:cc:53:66:70:41:b7:a6:1f:b7:c2:32:2f:ea:b0:
- c1:6c:9d:7b:2c:1a:47:77:52:d8:9e:2f:08:4b:db:
- 40:ec:bc:86:4b:8b:0c:a7:d3:55:1e:7b:ab:ee:20:
- 23:2d:15:73:16:82:78:f7:51:4f:8e:e8:17:36:b1:
- 13:95:ce:e9:8f:b3:ff:48:82:c3:bc:cb:bc:52:6b:
- 23:b6:9e:7d:d2:50:bc:d4:63:82:bf:16:34:b8:aa:
- c0:57:d0:fc:a7:a5:9c:e0:45:48:4f:b1:cd:36:95:
- 94:b5
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- X509v3 Basic Constraints: critical
- CA:FALSE
- X509v3 Subject Key Identifier:
- EE:56:06:07:2B:C2:2F:A2:0D:AE:92:29:F7:FD:D5:70:FB:15:45:F2
- X509v3 Authority Key Identifier:
- keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
- Authority Information Access:
- OCSP - URI:http://r3.o.lencr.org
- CA Issuers - URI:http://r3.i.lencr.org/
- X509v3 Subject Alternative Name:
- DNS:banksmediation.com
- X509v3 Certificate Policies:
- Policy: 2.23.140.1.2.1
- Policy: 1.3.6.1.4.1.44947.1.1.1
- CPS: http://cps.letsencrypt.org
- CT Precertificate SCTs:
- Signed Certificate Timestamp:
- Version : v1 (0x0)
- Log ID : 41:C8:CA:B1:DF:22:46:4A:10:C6:A1:3A:09:42:87:5E:
- 4E:31:8B:1B:03:EB:EB:4B:C7:68:F0:90:62:96:06:F6
- Timestamp : Apr 21 12:39:28.217 2022 GMT
- Extensions: none
- Signature : ecdsa-with-SHA256
- 30:46:02:21:00:DC:F0:5A:A9:E9:83:65:46:58:83:F5:
- 66:1A:2F:F0:04:7B:8C:BF:42:99:65:73:E1:09:97:97:
- 3C:4C:5F:7D:F6:02:21:00:C1:C8:CE:58:6E:47:49:34:
- EE:D3:4E:65:06:1F:E1:6B:5F:50:8E:FB:40:7C:65:2B:
- 3E:5F:49:9D:7D:9C:BD:6D
- Signed Certificate Timestamp:
- Version : v1 (0x0)
- Log ID : 29:79:BE:F0:9E:39:39:21:F0:56:73:9F:63:A5:77:E5:
- BE:57:7D:9C:60:0A:F8:F9:4D:5D:26:5C:25:5D:C7:84
- Timestamp : Apr 21 12:39:28.192 2022 GMT
- Extensions: none
- Signature : ecdsa-with-SHA256
- 30:45:02:21:00:E1:E6:40:A4:A3:F9:82:3B:47:FD:2F:
- D1:F0:13:92:10:BA:06:D0:4B:C0:00:40:4A:17:51:88:
- 79:94:79:4A:D8:02:20:11:09:E3:FC:BF:63:39:EF:9C:
- 00:B7:0B:69:95:7D:89:12:3C:3A:6B:21:A2:D3:D8:03:
- D3:DF:EC:59:26:59:46
- Signature Algorithm: sha256WithRSAEncryption
- 4d:3e:a4:6b:7a:14:0a:3c:07:fe:ce:b0:d6:be:29:5a:c7:ca:
- b6:1f:6b:6c:1f:e2:83:ba:07:3c:df:12:d9:e1:18:d0:f1:66:
- eb:be:4f:81:0b:bc:67:54:a0:c2:13:f2:0e:2f:91:57:8e:1f:
- ed:17:21:e0:00:bd:58:63:bb:ab:07:af:e8:df:74:46:b9:3a:
- 81:bd:ba:c9:85:22:9d:84:9f:0b:90:d3:02:6a:75:b8:d6:c2:
- 80:84:2e:a8:5c:75:8b:e1:31:74:ab:ed:c0:cd:84:4b:ed:b9:
- ba:0d:1b:4b:7b:02:19:64:52:b3:0c:78:93:b5:7a:b6:ed:6f:
- d0:65:80:66:d1:dc:ec:06:50:27:09:4b:a0:e3:2c:88:bc:b1:
- 5b:00:18:b6:3f:bc:5e:20:9d:87:d3:b6:5c:e2:22:a5:72:6d:
- 2d:bb:ff:a3:0f:ff:0c:8f:66:4a:d3:0f:4e:67:d4:b2:df:a6:
- ac:bb:21:11:9f:58:ee:a9:c7:1c:10:72:90:a9:b9:f8:09:ab:
- e6:5d:97:8a:0c:aa:ea:ae:89:37:9c:4c:39:de:59:b0:79:76:
- bc:e9:4e:69:81:46:55:12:a9:10:a7:ba:55:c9:cd:a9:82:64:
- 88:cc:b2:31:0e:86:ee:7b:d9:78:b7:cd:6b:fd:91:20:b0:03:
- 26:f9:0e:16