Domain > bat.gloat.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-10-26	104.18.20.112 (ClassC)

HTTP/1.1 200 OKDate: Sun, 26 Oct 2025 17:48:44 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-alivex-amz-id-2: EJckQ6TcPkFj8SB7+9qyTfplW93pst9X7HAPNQnOJ6noEO3S/g0DwMKjH96SMOplGyM39F/tu0Mx-amz-request-id: WTZH13HV0K91EVQKLast-Modified: Sun, 26 Oct 2025 09:24:03 GMTContent-Security-Policy: default-src self; script-src data: report-sample self unsafe-eval unsafe-inline https://s1.addpipe.com https://gloat-fe-static-public.s3.amazonaws.com https://challenges.cloudflare.com https://performance.radar.cloudflare.com https://cdnjs.cloudflare.com/ajax/libs/ https://rs.fullstory.com https://edge.fullstory.com https://*.gloat.com https://www.google.com https://maps.googleapis.com https://www.gstatic.com https://widget.intercom.io https://js.intercomcdn.com https://cdn.jsdelivr.net https://survey.survicate.com https://surveys-static-prd.survicate-cdn.com https://use.typekit.net https://*.usetiful.com https://playerserver.walkme.com https://cdn.walkme.com; style-src report-sample self unsafe-inline https://gloat-fe-static-public.s3.amazonaws.com https://fonts.googleapis.com https://cdn.jsdelivr.net https://surveys-static.survicate.com/fonts/fonts.css https://surveys-static-prd.survicate-cdn.com https://*.usetiful.com https://cdn.walkme.com; object-src none; base-uri self; connect-src data: self https://s1.addpipe.com wss://*.addpipe.com https://dev-dylan-euc1.s3.amazonaws.com https://gloat-staging-transaction.s3.eu-central-1.amazonaws.com https://gloat-transaction.s3.amazonaws.com https://gloat-staging-transaction.s3.amazonaws.com https://gloat-dev-transaction.s3.amazonaws.com https://inner-mobility.s3-eu-west-1.amazonaws.com https://dev-assets-incoming-euc1.s3.amazonaws.com https://int-assets-incoming-euc1.s3.amazonaws.com https://stg-assets-incoming-euc1.s3.amazonaws.com https://prod-assets-incoming-euc1.s3.amazonaws.com https://rs.fullstory.com https://edge.fullstory.com https://gloat.com https://*.gloat.com https://clients.gloat.com https://*.intercom.io wss://*.intercom.io https://uploads.intercomcdn.com https://*.ingest.sentry.io https://sentry.io https://*.split.io https://respondent.survicate.com https://survey.survicate.com https://*.usetiful.com https://*.walkme.com; font-src data: self https://fonts.gstatic.com https://*.intercomcdn.com https://use.typekit.net; frame-src self https://*.quicksight.aws.amazon.com https://www.figma.com https://player.vimeo.com https://cdn.walkme.com https://s3.walkmeusercontent.com https://www.youtube.com; img-src data: self * blob: https://*.usetiful.com; manifest-src self; media-src data: self https://*.addpipe.com https://gloat-imob-assets.s3.amazonaws.com https://gloat-staging-assets.s3.amazonaws.com https://gloat-dev-assets.s3.amazonaws.com https://*.gloat.com https://js.intercomcdn.com https://www.youtube.com; worker-src blob: https://*.gloat.com; frame-ancestors self https://*.gloat.com https://*.gloat-staging.gloat.com *.teams.microsoft.com teams.microsoft.com *.skype.com; report-uri https://62de4fca90d65793425d9477.endpoint.csper.io?v39;x-amz-server-side-encryption: AES256x-amz-version-id: QcYwhkJ6qVkE5_.y13gjVoYXZ9G3um70Accept-Ranges: bytesReferrer-Policy: no-referrer-when-downgradeServer: cloudflarePermissions-Policy: midi()expires: Sun, 26 Oct 2025 17:49:04 GMTCache-Control: public, max-age20cf-cache-status: EXPIREDX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffStrict-Transport-Security: max-age63072000; includeSubDomains; preloadVary: accept-encodingCF-RAY: 994bc945ccf8ccd1-PDXalt-svc: h3:443; ma86400

!doctype html>html classnotranslate translateno langen>head>link relpreconnect hrefhttps://fonts.gstatic.com>link relstylesheet hrefhttps://fonts.googleapis.com/css2?familyRoboto:ital,wght@0,400;0,500;0,700;1,400;1,500;1,700&displayswap crossoriginanonymous>meta http-equivContent-Security-Policy contentdefault-src * self blob: data: gap:; style-src * self unsafe-inline blob: data: gap:; script-src * self unsafe-eval unsafe-inline blob: data: gap:; object-src * self blob: data: gap:; img-src * self unsafe-inline blob: data: gap:; connect-src self * unsafe-inline blob: data: gap:; frame-src * self blob: data: gap:;>link relstylesheet hrefhttps://fonts.googleapis.com/css2?familyPoppins:wght@300;400;500;600;700&displayswa crossoriginanonymous>link relstylesheet hrefhttps://fonts.googleapis.com/css2?familyMaterial+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,0 crossoriginanonymous>meta http-equivX-UA-Compatible contentIEedge>meta nameviewport contentwidthdevice-width,initial-scale1>meta charsetutf-8>meta namerobots contentnoindex,nofollow>base href/>script typemodule crossorigin src/static/dist/assets/app-CkkzLbdX.js>/script>/head>body>div idmain-app-container>/div>div idportal>/div>script>const apiHost  ;      if (apiHost) {        localStorage.setItem(apiHost, apiHost);      }/script>script>// env is changed to correct name during deployment      window.__env  production;      window.__RELEASE_NAME__  release-25.10;      window.__BRANCH_NAME__  release-25.10;      window.__COMMIT_HASH__  2c079d9;      window.__BASE_PATH__  /static/dist;      window.__PUBLIC_PATH__  /static/dist/assets/;      window.__VERSION__  25.10;      window.__SURVICATE_WORKSPACE_ID__  357b2b6c05cec4c6e5aa7392bdc2466d;	  window.__SENTRY_RELEASE__  career@prod-2c079d9;	  window.__SENTRY_ENVIRONMENT__  production;/script>/body>/html>

Subdomains

Date	Domain	IP
test-hsbc.gloat.com	2024-06-10	52.17.172.131
lampuchina.gloat-staging.gloat.com	2025-05-05	104.21.82.84
auth.gloat.com	2025-10-25	104.18.20.112
omnicom.gloat.com	2025-07-01	104.18.20.112
bat.gloat.com	2025-10-26	104.18.20.112
www.gloat.com	2025-05-13	141.193.213.21

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > bat.gloat.com

Is this malicious?

DNS Resolutions

Port 443

Subdomains