I used whois to look up the domain name gxxxxxxt.sxxxxxs, I then saw the Name Server entries in whois. From there I used the actual name of the company: axxxxn.
I did notice that the answer to the third question (using VirusTotal) has changed. I have added the correct answer to the Challenge.