Domain > admin.upshift.work

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-03-16	52.84.52.106 (ClassC)
2024-09-01	18.161.6.25 (ClassC)
2024-11-05	18.161.6.76 (ClassC)
2025-06-07	18.161.6.38 (ClassC)
2025-11-03	3.169.173.18 (ClassC)
2025-11-16	3.169.173.10 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 3995Connection: keep-aliveDate: Sun, 01 Sep 2024 03:56:29 GMTLast-Modified: Tue, 27 Aug 2024 09:19:30 GMTETag: b8de6f1ec5518aadf38fef5bf2adc553Ser

!DOCTYPE html>html langen>  head>    meta charsetutf-8 />    meta nameviewport contentwidthdevice-width, initial-scale1, minimum-scale1 />    meta nametheme-color content#000000 />    meta namedescription contentIts Work Made Easy! />    link relicon href./favicon.ico />    !-- Need to be changed -->    link      relicon      typeimage/png      sizes16x16      hrefhttps://upshift-staging-monday.s3.amazonaws.com/static-assets/favicon-16x16.png    />    link      hrefhttps://fonts.googleapis.com/css?familyRoboto:400,400italic,500,500italic,700,700italic,900,900italic,300italic,300,100italic,100      relstylesheet    />    !--      manifest.json provides metadata used when your web app is installed on a      users mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/    -->    !-- link relmanifest href%PUBLIC_URL%/manifest.json /> -->    !--      Notice the use of %PUBLIC_URL% in the tags above.      It will be replaced with the URL of the `public` folder during the build.      Only files inside the `public` folder can be referenced from the HTML.      Unlike /favicon.ico or favicon.ico, %PUBLIC_URL%/favicon.ico will      work correctly both with client-side routing and a non-root public URL.      Learn how to configure a non-root public URL by running `npm run build`.    -->    title>Upshift/title>    script typemodule crossorigin src/static/js/index-758c58c4.js>/script>  /head>  script>    !(function () {      var analytics  (window.analytics  window.analytics || )      if (!analytics.initialize)        if (analytics.invoked)          window.console && console.error && console.error(Segment snippet included twice.)        else {          analytics.invoked  !0          analytics.methods              trackSubmit,            trackClick,            trackLink,            trackForm,            pageview,            identify,            reset,            group,            track,            ready,            alias,            debug,            page,            once,            off,

Subdomains

Date	Domain	IP
api.upshift.work	2024-10-27	99.84.66.87
admin.upshift.work	2024-09-01	18.161.6.25
app.upshift.work	2025-09-14	3.169.173.64
new.upshift.work	2024-06-14	204.246.191.117

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > admin.upshift.work

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains