50.202.50.148
Intelligence Briefing: 50.202.50.148
The IP address 50.202.50.148 was identified as a High Risk endpoint with a risk score of 70. Ownership was attributed to Efficient Capital Management, LLC (ASN 36040), located in Virginia, US, yet TLS certificates presented by the host claimed identity for *.googlevideo.com via Google Trust Services. Geolocation validation failed due to a contradiction between the claimed US location and RTT physics, which measured a distance of 6337km. The analysis noted 5 threat siblings within the /24 subnet and categorized the host as a Suspicious Host. Despite the absence of specific threat indicators or blacklist entries, the system recommended blocking the address with critical severity. Firewall rules were generated for iptables, nginx, and pf to mitigate potential exposure.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Efficient Capital Management, LLC. |
| ASN | AS36040 |
| Network Name | EFFICIENT-CAPITAL-MGMT-1 |
| CIDR Block | 50.202.50.0/24 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 6/6 domains |
| DMARC | 6/6 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 6 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | gvs 1.0 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.googlevideo.com*.a1.googlevideo.com*.a1.googlevads-cn.com*.bdn.dev*.origin-test.bdn.dev*.c.doc-0-0-sj.sj.googleusercontent.com*.c.2mdn.net*.c.2mdn-cn.net*.dai.googlevideo.com*.dai.googlevads-cn.com |
| Valid From | 2026-08-25T12:31:58+00:00 |
| Valid Until | 2026-11-03T12:31:57+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 69 days |
| Serial Number | 084E824A2845148312CB3C37A232E6C0 |
| Thumbprint | D28C16474D6045AA435DAF3112D33871978604F5 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 33% | 2 | 4 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 26% | 10 | 17 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-13 10:53:18 UTC |
| Last Seen | 2026-09-20 18:59:35 UTC |
| Profile Built | 2026-09-20 19:11:36 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 37 |
Full dossier details are available via our API.