Domain > retool.sprig.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
NameServer	NS-1916.AWSDNS-47.CO.UK
Created	1996-01-27 00:00:00
Changed	2014-05-15 00:00:00
Expires	2016-01-28 00:00:00
Registrar	NAME.COM, INC.

DNS Resolutions

Date	IP Address
2025-07-04	184.72.105.205 (ClassC)
2025-08-14	52.86.181.185 (ClassC)
2025-08-25	34.198.52.31 (ClassC)
2025-11-10	54.235.101.7 (ClassC)
2025-11-20	3.228.185.195 (ClassC)
2026-01-06	50.19.89.137 (ClassC)

HTTP/1.1 200 OKx-powered-by: Expresscontent-type: text/html; charsetutf-8cache-control: no-cachecontent-length: 3370etag: W/d2a-WrN7IoVx0O7al26Ya18dFUoy5Ewvary: Accept-Encodingdate: Tue, 29 Aug 2023 2

!DOCTYPE html>html langen>head>title>Retool/title>meta charsetutf-8>meta namereferrer contentorigin>meta nametheme-color content#fff>meta nameviewport contentwidthdevice-width,initial-scale1,maximum-scale1>link idpwa-manifest-placeholder relmanifest href>script>// https://stackoverflow.com/a/24103596      function _getCookie(name) {        var nameEq  (name + )        var ca  document.cookie.split(;)        for (var i  0; i  ca.length; i++) {          var c  cai          while (c.charAt(0)   ) c  c.substring(1, c.length)          if (c.indexOf(nameEq)  0) return c.substring(nameEq.length, c.length)        }      }      // Here we do an eager fetch of user data as a performance optimization. By doing the      // fetch here, in an inline script, we can fire it asap while the initial webpack      // bundle loads and evals. This is strictly for performance optimization and non-essential,      // if this fails to run or has errors then the normal application flow will handle the      // fetch for user data.      if (        _getCookie(xsrfToken) && // presence of xsrf token means user is already authed        window.fetch ! undefined && // make sure fetch api is available        !new URL(location.origin).host.startsWith(login.) // avoid special login domain      ) {        window.RETOOL_USER_FETCH  fetch(/api/user, {          credentials: same-origin,          headers: {            Accept: application/json,            Content-Type: application/json,            Relax-Login-Subdomain-Restrictions: false,            X-Xsrf-Token: _getCookie(xsrfToken),          },        })      }/script>script>SANDBOX_DOMAIN        MAIN_DOMAIN        SAML_ENABLED  JSON.parse(false)      CLIENT_ID  1026560321390-kktkqgse1ehkfnfg7e0b5pnlm5n6aoar.apps.googleusercontent.com      RESTRICTED_DOMAIN        DISABLE_USER_PASS_LOGIN  JSON.parse(false)      INCLUDE_COOKIES_IN_API_CALLS        DISABLE_INTERCOM  JSON.parse(false)      OTEL_TRACING_ENABLED  JSON.parse(false)      VERSION_CONTROL_LOCKED  JSON.parse(false)      IS_ADMIN  JSON.parse(fal

Port 443

Subdomains

Date	Domain	IP
media3.sprig.com	2014-04-16	174.35.56.81
a.sprig.com	2023-10-19	204.246.191.57
staging.sprig.com	2024-09-12	18.161.6.27
a-staging.sprig.com	2022-01-26	54.192.73.120
api.sprig.com	2025-07-01	3.228.185.195
retool.sprig.com	2025-07-04	184.72.105.205
cdn.sprig.com	2024-06-10	99.84.66.128
app.sprig.com	2024-05-13	13.224.14.81
session-replayer.sprig.com	2025-02-22	34.198.52.31
surveys.sprig.com	2024-10-05	18.65.229.120
get.sprig.com	2025-05-24	54.164.128.151
www.sprig.com	2024-09-27	3.163.165.9
istio-gateway.sprig.com	2025-03-13	184.72.105.205
kirby.sprig.com	2025-04-15	54.235.101.7
links.try.sprig.com	2025-05-15	34.210.5.7

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > retool.sprig.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443

Subdomains