Domain > a.ripco.de

More information on this domain is in AlienVault OTX

Is this malicious?

Whois

Property	Value
Email	daniel.aharonoff@corp.enotifyme.com
NameServer	parkct2.secureserver.net
Changed	2015-12-18 20:01:37

DNS Resolutions

Date	IP Address
2016-06-20	23.235.40.129 (ClassC)
2016-06-21	23.235.46.129 (ClassC)
2016-06-23	23.235.46.192 (ClassC)
2018-03-15	23.111.9.64 (ClassC)
2025-04-21	104.21.16.1 (ClassC)
2025-05-27	104.21.32.1 (ClassC)
2025-07-11	104.21.80.1 (ClassC)
2025-08-04	104.21.48.1 (ClassC)
2025-08-09	104.21.96.1 (ClassC)
2025-08-20	104.21.112.1 (ClassC)
2025-10-12	172.66.42.231 (ClassC)
2026-01-20	172.66.41.25 (ClassC)

Port 80

HTTP/1.1 200 OKDate: Sun, 17 Dec 2023 18:13:54 GMTContent-Type: text/javascript; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveAccess-Control-Allow-Credentials: trueAccess-Control-Allow-

(function(window) {    function getParameterByName(name) {        name  name.replace(//, \).replace(//, \);        var regex  new RegExp(\?& + name + (^&#*)),            results  regex.exec(location.search);        return results  null ?  : decodeURIComponent(results1.replace(/+/g,  ));    }    if (typeof window._rcCurIdx  undefined) {        window._rcCurIdx  ;    }    var callRC  function(dataId, host) {        var request  new XMLHttpRequest();        request.open(POST, host + v?hash + dataId + &isAST + window._isAST, true);        request.onreadystatechange  function() {            if (this.readyState  4) {                if (this.status  200) {                    var s  document.createElement(script)                    s.async  true                    s.src  host + ripcode-app.js?v + this.responseText;                    document.body.appendChild(s)                }            }        };        request.send({ hash: dataId });        request  null;    }    var loadRC  function(scriptTag) {        var breakIframe  scriptTag.getAttribute(data-break-iframe);        if (breakIframe   && scriptTag.getAttribute(data-bf).length > 0) {            breakIframe  scriptTag.getAttribute(data-bf)        }        var dataId  scriptTag.getAttribute(data-id)        var l  document.createElement(a);        l.href  scriptTag.getAttribute(src)        var host  // + l.host + /;        if (breakIframe  true) {            if (top ! self) {                var rcScript  document.createElement(script);                rcScript.id  ripcode-boot                rcScript.src  // + l.host + /ripcode.js                rcScript.setAttribute(data-id, dataId);                top.document.body.appendChild(rcScript);                return;            }        }        var isAST  sessionStorage.getItem(_isAST);        if (scriptTag.getAttribute(data-ast)  false) {            sessionStorage.setItem(_isAST, isAST)            isAST  false;        }        if (typeof isAST  boolean) {            window._isAST  isAST            callRC(dataId, host);

Port 443

HTTP/1.1 200 OKDate: Sun, 17 Dec 2023 18:13:54 GMTContent-Type: text/javascript; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveAccess-Control-Allow-Credentials: trueAccess-Control-Allow-

(function(window) {    function getParameterByName(name) {        name  name.replace(//, \).replace(//, \);        var regex  new RegExp(\?& + name + (^&#*)),            results  regex.exec(location.search);        return results  null ?  : decodeURIComponent(results1.replace(/+/g,  ));    }    if (typeof window._rcCurIdx  undefined) {        window._rcCurIdx  ;    }    var callRC  function(dataId, host) {        var request  new XMLHttpRequest();        request.open(POST, host + v?hash + dataId + &isAST + window._isAST, true);        request.onreadystatechange  function() {            if (this.readyState  4) {                if (this.status  200) {                    var s  document.createElement(script)                    s.async  true                    s.src  host + ripcode-app.js?v + this.responseText;                    document.body.appendChild(s)                }            }        };        request.send({ hash: dataId });        request  null;    }    var loadRC  function(scriptTag) {        var breakIframe  scriptTag.getAttribute(data-break-iframe);        if (breakIframe   && scriptTag.getAttribute(data-bf).length > 0) {            breakIframe  scriptTag.getAttribute(data-bf)        }        var dataId  scriptTag.getAttribute(data-id)        var l  document.createElement(a);        l.href  scriptTag.getAttribute(src)        var host  // + l.host + /;        if (breakIframe  true) {            if (top ! self) {                var rcScript  document.createElement(script);                rcScript.id  ripcode-boot                rcScript.src  // + l.host + /ripcode.js                rcScript.setAttribute(data-id, dataId);                top.document.body.appendChild(rcScript);                return;            }        }        var isAST  sessionStorage.getItem(_isAST);        if (scriptTag.getAttribute(data-ast)  false) {            sessionStorage.setItem(_isAST, isAST)            isAST  false;        }        if (typeof isAST  boolean) {            window._isAST  isAST            callRC(dataId, host);

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]