Domain > gisticinc.com

More information on this domain is in AlienVault OTX

Files that talk to gisticinc.com

MD5	A/V
c13e53d49ee042d5922a38690b6e01d8	[Win32/Upatre.RHNfDIB] [Trojan-DownloaderW32/Upatre.I] [Trojan.DownLoad3.28161] [Trojan.Downloader.JQNN] [Trojan.Downloader.JQNN] [Trojan.Bublik] [TrojanDownloader.Upatre.V4] [Mal/Upatre-A] [TROJ_UPATRE.SMJ9] [Trojan.Bublik.Win32.13545] [Trojan.Downloader.JQNN] [Trojan-Spy.Zbot] [W32/Trojan3.HZQ] [W32/Trojan.CVPW-4098] [Trojan.Email.FakeDoc] [Trojan.Downloader.JQNN] [TrojanDownloaderWin32/Upatre.AA] [Trojan.Downloader.JQNN] [W32/Bublik.CHRL!tr] [Trojan.Zbot] [Crypt_s.GHA] [Win32/TrojanDownloader.Waski.A] [Trojan.Downloader.JQNN] [TR/Dldr.JQNN] [Downloader-FSH!C13E53D49EE0]
ce3ec57d8864a798039e2894435484fb	[Trojan.Downloader.JQNN] [Crypt_s.GHA] [TrojanDownloader.Upatre.V4] [Trojan-Spy.Zbot] [TR/Dldr.JQNN] [Trojan.Downloader.JQNN] [Trojan.Email.FakeDoc] [Trojan.DownLoad3.28161] [Downloader-FSH!CE3EC57D8864] [Trojan.Downloader.JQNN] [TrojanDownloaderWin32/Upatre.AA] [Trojan.Downloader.JQNN] [Trojan.Downloader.JQNN] [Win32/TrojanDownloader.Waski.A] [Trojan.Downloader.JQNN] [Mal/Upatre-A] [W32/Bublik.CHRL!tr] [Trojan.Zbot] [W32/Trojan.CVPW-4098] [TROJ_UPATRE.SMJ9] [W32/Trojan3.HZQ] [Win32/Upatre.RHNfDIB] [Trojan.Bublik] [Trojan-DownloaderW32/Upatre.I] [Trojan.Bublik.Win32.13545]
042e86d32d8dabfef1b2b97be4861a4b	[Win32/Upatre.RHNfDIB] [Downloader-FSH!042E86D32D8D] [TR/Dldr.JQNN] [Trojan.Downloader.JQNN] [Win32/TrojanDownloader.Waski.A] [Crypt_s.GHA] [Trojan.Zbot] [W32/Bublik.CHRL!tr] [Trojan.Downloader.JQNN] [TrojanDownloaderWin32/Upatre.AA] [Trojan.Downloader.JQNN] [Trojan.Email.FakeDoc] [W32/Trojan.CVPW-4098] [W32/Trojan3.HZQ] [Trojan-Spy.Zbot] [Trojan.Downloader.JQNN] [Trojan.Bublik.Win32.13545] [TROJ_UPATRE.SMJ9] [Mal/Upatre-A] [TrojanDownloader.Upatre.V4] [Trojan.Bublik] [Trojan.Downloader.JQNN] [Trojan.Downloader.JQNN] [Trojan.DownLoad3.28161] [Trojan-DownloaderW32/Upatre.I]
4ffd3a23677b25e0f83689c791e277c0	[Artemis!4FFD3A23677B] [W32/Trojan3.HZQ] [Upatre.CD] [Trojan.Downloader.JQNN] [W32/Trojan.CVPW-4098] [W32.SameL.Trojan] [TrojanPWS.Zbot.r4] [BackDoor-FBYB] [Trojan.Email.FakeDoc] [Trojan.Bublik!c5qu1Ya/GAA] [Trojan.Zbot] [Upatre.CJ] [Win32/Upatre.RHNfDIB] [TROJ_UPATRE.YQU] [Trojan.Win32.Bublik.chsy] [Trojan.Win32.DownLoad3.cwgize] [UnclassifiedMalware] [Trojan.DownLoad3.28161] [TR/Dldr.JQNN] [Mal/Upatre-A] [Trojan/Win32.Bublik] [TrojanDownloader:Win32/Upatre.O] [Trojan/Win32.Zbot] [Trojan.Bublik] [Win32/TrojanDownloader.Waski.A] [Trojan-Spy.Zbot] [W32/Kryptik.BZEQ!tr] [Crypt_s.GHA] [Trojan.Win32.Waski.A] [Win32/Trojan.Downloader.96e]
d1237875e4c3191215d82b1633701393	[Upatre.CD] [Mal/DrodZp-A]

Whois

Property	Value
NameServer	NS2.SITEGROUND242.COM
Created	2006-02-03 00:00:00
Changed	2015-02-04 00:00:00
Expires	2016-02-03 00:00:00
Registrar	TUCOWS DOMAINS INC.

DNS Resolutions

Date	IP Address
2014-04-07	127.0.0.1 (ClassC)
2014-04-10	216.97.233.10 (ClassC)
2014-06-27	181.224.136.166 (ClassC)
2019-09-06	146.66.64.166 (ClassC)
2024-04-10	184.154.47.42 (ClassC)
2024-12-25	96.127.129.50 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Thu, 23 May 2019 17:17:54 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control:

!DOCTYPE html>html langen-US>head>	meta charsetUTF-8>	meta http-equivX-UA-Compatible contentIEedge>	meta nameviewport contentwidthdevice-width, initial-scale1>		link relshortcut icon hrefhttps://gisticinc.com/wp-content/uploads/2019/03/GLogoSquare-White-64.png typeimage/x-icon>	!-- wp-head -->	title>Gistic Research Inc – Go Beyond Boundaries/title>!-- Added by Simplest Gallery Plugin v. 4.4 BEGIN -->!-- SG default gallery type is: lightbox_labeled -->!-- Added by FancyBox WITH labels BEGIN -->!-- Lighbox module for Simplest Gallery, v. 1.1 -->!-- Added by FancyBox WITH labels END -->!-- Added by Simplest Gallery Plugin END -->link reldns-prefetch href//www.google.com />link reldns-prefetch href//fonts.googleapis.com />link reldns-prefetch href//s.w.org />link relalternate typeapplication/rss+xml titleGistic Research Inc » Feed hrefhttps://gisticinc.com/feed/ />link relalternate typeapplication/rss+xml titleGistic Research Inc » Comments Feed hrefhttps://gisticinc.com/comments/feed/ />		script typetext/javascript>			window._wpemojiSettings  {baseUrl:https://s.w.org/images/core/emoji/12.0.0-1/72x72/,ext:.png,svgUrl:https://s.w.org/images/core/emoji/12.0.0-1/svg/,svgExt:.svg,source:{concatemoji:https://gisticinc.com/wp-includes/js/wp-emoji-release.min.js?ver5.2.1}};			!function(a,b,c){function d(a,b){var cString.fromCharCode;l.clearRect(0,0,k.width,k.height),l.fillText(c.apply(this,a),0,0);var dk.toDataURL();l.clearRect(0,0,k.width,k.height),l.fillText(c.apply(this,b),0,0);var ek.toDataURL();return de}function e(a){var b;if(!l||!l.fillText)return!1;switch(l.textBaselinetop,l.font600 32px Arial,a){caseflag:return!(bd(55356,56826,55356,56819,55356,56826,8203,55356,56819))&&(bd(55356,57332,56128,56423,56128,56418,56128,56421,56128,56430,56128,56423,56128,56447,55356,57332,8203,56128,56423,8203,56128,56418,8203,56128,56421,8203,56128,56430,8203,56128,56423,8203,56128,56447),!b);caseemoji:return bd(55357,56424,55356,57342,8205,55358,56605,8205,55357,56424,55356,57340,55357,56424,55356,57342,8203,55358,5

Subdomains

Date	Domain	IP
vtiger.gisticinc.com	2014-04-07	181.224.136.166

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > gisticinc.com

Is this malicious?

Files that talk to gisticinc.com

Whois

DNS Resolutions

Port 443

Subdomains