Report - start-l-edger-help--sso.webflow.io/

Report Overview

Visitedpublic

2025-07-28 05:42:34

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.prod.website-files.com	unknown	2019-01-23	2023-11-01	2025-07-24	2.0 kB	357 kB	104.18.160.117
start-l-edger-help--sso.webflow.io	unknown	2013-05-08	2025-04-02	2025-04-02	512 B	6.3 kB	104.18.36.248
d3e54v103j8qbb.cloudfront.net	unknown	2008-04-25	2016-03-11	2025-07-24	558 B	90 kB	54.230.245.223

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=668ce67cb93226b6ad87da50	ScriptElement	90 kB	2023-03-07	2025-08-06
URL d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=668ce67cb93226b6ad87da50 IP / ASN 54.230.245.223 #16509 AMAZON-02 Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-06 Times Seen 128564 Size 90 kB (89476 bytes) MD5 dc5e7f18c8d36ac1d3d4753a87c98d0a SHA1 c8e1c8b386dc5b7a9184c763c88d19a346eb3342 SHA256 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Format Code Loading...

	cdn.prod.website-files.com/668ce67cb93226b6ad87da50/js/webflow.4e8135d87.js	ScriptElement	37 kB	2024-02-23	2025-08-06
URL cdn.prod.website-files.com/668ce67cb93226b6ad87da50/js/webflow.4e8135d87.js IP / ASN 104.18.160.117 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded false Resource Info First Seen 2024-02-23 Last Seen 2025-08-06 Times Seen 6570 Size 37 kB (37354 bytes) MD5 4e8135d87e56ebf7d55500945d58c45a SHA1 c6ee3344d1a7d669e00e275878cdad970df4eb60 SHA256 18a0ed9cf15cb5ad3cb33184b71da4589141d9361580881ab2a1a4c16390240d Format Code Loading...

	start-l-edger-help--sso.webflow.io/	ScriptElement	181 B	2023-03-07	2025-08-06
URL start-l-edger-help--sso.webflow.io/ IP / ASN 104.18.36.248 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded true Resource Info First Seen 2023-03-07 Last Seen 2025-08-06 Times Seen 22021 Size 181 B (181 bytes) MD5 0e9e3ad57abeefde87342864450cc232 SHA1 4dc8676bf3417d597053d5f253fce034007f63da SHA256 9a37601d1f5a5f2fba3b000694d4bf5e035c606d5485dd94e2997cbe2efe5c26 Format Code Loading...

HTTP Transactions (6)

URL IP Response Size

GET cdn.prod.website-files.com/668ce67cb93226b6ad87da50/668ce6b1e70909279dac8fb5_leger%20full%20image.jpg

104.18.160.117

200 OK

275 kB

URL GET HTTPS

cdn.prod.website-files.com/668ce67cb93226b6ad87da50/668ce6b1e70909279dac8fb5_leger%20full%20image.jpg

IP / ASN

104.18.160.117

#13335 CLOUDFLARENET

Requested byhttps://start-l-edger-help--sso.webflow.io/

Resource Info

File typeJPEG image data, baseline, precision 8, 1600x3636, components 3

First Seen2024-04-07

Last Seen2025-08-06

Times Seen1201

Size275 kB (274976 bytes)

MD59d7ba52216a093879805daab5bceefef

SHA1d5ff65f0a2450c905be06b6f0718ec382273f02f

SHA25681231aa1d17a63473ee8b0a2d5c7c207af8048788265dcba03e4d199b5b21ebe

Certificate Info

IssuerGoogle Trust Services

Subjectprod.website-files.com

Fingerprint79:7F:BF:28:0B:E4:0E:85:78:AA:FC:38:8C:A2:54:E0:4C:6F:03:97

ValiditySat, 14 Jun 2025 14:31:51 GMT - Fri, 12 Sep 2025 15:31:45 GMT

Technology Fingerprints

HTTP/3 (Miscellaneous)

Amazon Web Services (PaaS)

Cloudflare (CDN)

HTTP Headers

GET /668ce67cb93226b6ad87da50/668ce6b1e70909279dac8fb5_leger%20full%20image.jpg HTTP/1.1
Host: cdn.prod.website-files.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://start-l-edger-help--sso.webflow.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 28 Jul 2025 05:41:59 GMT
content-type: image/jpeg
content-length: 274976
cache-control: max-age=31536000, must-revalidate
cf-bgj: h2pri
etag: "9d7ba52216a093879805daab5bceefef"
last-modified: Tue, 09 Jul 2024 07:28:51 GMT
x-amz-id-2: Rx66oExfvUeLN6S1KYVafx8339DLvXFw8XBPyCRoOT60IkzCTPqdo6TCKNOTOsiuCL05pkBp8MeoujnoKfMCEqSzjh0xkazLjx0yREAoZR0=
x-amz-request-id: PT5C2P6ZCCPB7N9F
x-amz-server-side-encryption: AES256
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-version-id: mBgfK7P25qSOQjbcVwBPYM8tar3lU_lt
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 96620cf3ceb15697-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET cdn.prod.website-files.com/img/webclip.png

104.18.160.117

200 OK

4.8 kB

URL GET HTTPS

cdn.prod.website-files.com/img/webclip.png

IP / ASN

104.18.160.117

#13335 CLOUDFLARENET

Requested byhttps://start-l-edger-help--sso.webflow.io/

Resource Info

File typePNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced

First Seen2023-10-07

Last Seen2025-08-06

Times Seen19081

Size4.8 kB (4807 bytes)

MD54ff20fa6aa65e68a21f28fefb0a2c3e9

SHA18f20cc5b884b7c2642558d11d7cf79e416ea4a7f

SHA256c305e6b8ea9916705eec8eb8c281561d907fdaa0c84f3dbe7b65dac9e2ddf993

Certificate Info

IssuerGoogle Trust Services

Subjectprod.website-files.com

Fingerprint79:7F:BF:28:0B:E4:0E:85:78:AA:FC:38:8C:A2:54:E0:4C:6F:03:97

ValiditySat, 14 Jun 2025 14:31:51 GMT - Fri, 12 Sep 2025 15:31:45 GMT

Technology Fingerprints

Cloudflare (CDN)

HTTP/3 (Miscellaneous)

Amazon Web Services (PaaS)

HTTP Headers

GET /img/webclip.png HTTP/1.1
Host: cdn.prod.website-files.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://start-l-edger-help--sso.webflow.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 28 Jul 2025 05:41:59 GMT
content-type: image/png
content-length: 4807
x-amz-id-2: NRV2zTnf+IAfsUZPxv3+HfKEHTtfQid0jpKILy8gvQkviHsb8HNg6C9vUolVTx69ZL5ignPUw8M=
x-amz-request-id: F57E7RA1SRTDFH4A
last-modified: Thu, 05 Oct 2023 18:14:58 GMT
etag: "4ff20fa6aa65e68a21f28fefb0a2c3e9"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
x-amz-version-id: rSDmpQNuQqoVbh9JRDEaL4vADBvuwdCz
cf-cache-status: HIT
age: 49538
accept-ranges: bytes
priority: u=6,i=?0
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 96620cf48f505697-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET start-l-edger-help--sso.webflow.io/

104.18.36.248

200 OK

5.5 kB

URL User Request GET HTTPS

start-l-edger-help--sso.webflow.io/

IP / ASN

104.18.36.248

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, Unicode text, UTF-8 text, with very long lines (5500), with no line terminators

First Seen2025-07-28

Last Seen2025-07-28

Times Seen1

Size5.5 kB (5508 bytes)

MD5044b6ef5322ce90b22c027ac3caae524

SHA1f17bbcdbfc8d98727842fc4115afb88c7a664dd7

SHA2567b0444355c71fb081951d17209c9385bf02f170a37a6b155c2199fd29c35f71e

Certificate Info

IssuerGoogle Trust Services

Subjectwebflow.io

FingerprintC7:C4:42:3C:3F:0E:EA:71:D7:EE:EB:5C:36:A3:07:27:22:62:E2:3F

ValidityFri, 06 Jun 2025 23:45:24 GMT - Fri, 05 Sep 2025 00:45:17 GMT

Technology Fingerprints

HTTP/3 (Miscellaneous)

Webflow (Page builders, CMS)

jQuery:3.5.1 (JavaScript libraries)

Cloudflare (CDN)

HTTP/2 (Miscellaneous)

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet
PhishTank	phishing	Other

HTTP Headers

GET / HTTP/1.1
Host: start-l-edger-help--sso.webflow.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 28 Jul 2025 05:41:58 GMT
content-type: text/html
cf-ray: 96620cef589056ae-OSL
cf-cache-status: HIT
content-encoding: gzip
last-modified: Mon, 14 Jul 2025 11:50:50 GMT
content-security-policy: frame-ancestors 'self' https://*.webflow.com http://*.webflow.com http://*.webflow.io http://webflow.com https://webflow.com
surrogate-control: max-age=2147483647
surrogate-key: start-l-edger-help--sso.webflow.io 668ce67cb93226b6ad87da50 pageId:668ce67cb93226b6ad87da57
x-lambda-id: b164da57-abfd-47c1-b981-143ed54ebe9c
vary: Accept-Encoding
set-cookie: _cfuvid=J4UJzo9QVYg5TVm6o.EiI9TfN2PREaqAsHJSndKuorM-1753681318439-0.0.1.1-604800000; path=/; domain=.webflow.io; HttpOnly; Secure; SameSite=None
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET cdn.prod.website-files.com/668ce67cb93226b6ad87da50/css/start-l-edger-help--sso.webflow.643ab4644.css

104.18.160.117

200 OK

37 kB

URL GET HTTPS

cdn.prod.website-files.com/668ce67cb93226b6ad87da50/css/start-l-edger-help--sso.webflow.643ab4644.css

IP / ASN

104.18.160.117

#13335 CLOUDFLARENET

Requested byhttps://start-l-edger-help--sso.webflow.io/

Resource Info

File typeUnicode text, UTF-8 text, with very long lines (2587)

First Seen2024-05-11

Last Seen2025-08-06

Times Seen2132

Size37 kB (37224 bytes)

MD5643ab4644f9601373bdf5006ad6343db

SHA120f163e7097ec69353a8a43e9d573d0d5e63e036

SHA256ec4cebc0b1bbee1c95157b4fdfea6eb1adf724840e37d6da6c0c6b692a000072

Certificate Info

IssuerGoogle Trust Services

Subjectprod.website-files.com

Fingerprint79:7F:BF:28:0B:E4:0E:85:78:AA:FC:38:8C:A2:54:E0:4C:6F:03:97

ValiditySat, 14 Jun 2025 14:31:51 GMT - Fri, 12 Sep 2025 15:31:45 GMT

Technology Fingerprints

Cloudflare (CDN)

HTTP/2 (Miscellaneous)

HTTP/3 (Miscellaneous)

Amazon Web Services (PaaS)

HTTP Headers

GET /668ce67cb93226b6ad87da50/css/start-l-edger-help--sso.webflow.643ab4644.css HTTP/1.1
Host: cdn.prod.website-files.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://start-l-edger-help--sso.webflow.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 28 Jul 2025 05:41:58 GMT
content-type: text/css
content-length: 8372
x-amz-id-2: 0uKYMDm6jIwHmkr8MwRjnxhJAPxdr67GFug+VY9diz27yv9hHo9U9OkVcoOqwsICrGNG22QJkzkxlMI4DODbsA==
x-amz-request-id: 8F4PB73R0HCZ8CGQ
last-modified: Tue, 09 Jul 2024 07:29:25 GMT
etag: "28f1f15b510eca17a937061e9d0807bb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
x-amz-version-id: ekC9ZyPGe8GxuzqM0Wfc0EN1OsMZRtzp
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 96620cf21f4f569a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET cdn.prod.website-files.com/668ce67cb93226b6ad87da50/js/webflow.4e8135d87.js

104.18.160.117

200 OK

37 kB

URL GET HTTPS

cdn.prod.website-files.com/668ce67cb93226b6ad87da50/js/webflow.4e8135d87.js

IP / ASN

104.18.160.117

#13335 CLOUDFLARENET

Requested byhttps://start-l-edger-help--sso.webflow.io/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (21513)

First Seen2024-02-23

Last Seen2025-08-06

Times Seen6570

Size37 kB (37354 bytes)

MD54e8135d87e56ebf7d55500945d58c45a

SHA1c6ee3344d1a7d669e00e275878cdad970df4eb60

SHA25618a0ed9cf15cb5ad3cb33184b71da4589141d9361580881ab2a1a4c16390240d

Certificate Info

IssuerGoogle Trust Services

Subjectprod.website-files.com

Fingerprint79:7F:BF:28:0B:E4:0E:85:78:AA:FC:38:8C:A2:54:E0:4C:6F:03:97

ValiditySat, 14 Jun 2025 14:31:51 GMT - Fri, 12 Sep 2025 15:31:45 GMT

Technology Fingerprints

Cloudflare (CDN)

HTTP/2 (Miscellaneous)

HTTP/3 (Miscellaneous)

Amazon Web Services (PaaS)

HTTP Headers

GET /668ce67cb93226b6ad87da50/js/webflow.4e8135d87.js HTTP/1.1
Host: cdn.prod.website-files.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://start-l-edger-help--sso.webflow.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 28 Jul 2025 05:41:58 GMT
content-type: text/javascript
content-length: 13715
x-amz-id-2: UvFH81eTGV5NuN4IyHBO+tuxjWs9BpZK9rxUWjEkQxxR+Bueol5t50kfR0X2oKa1SNQPIFXWFXM=
x-amz-request-id: KKBKD4PYVMN91BKN
last-modified: Tue, 09 Jul 2024 07:29:25 GMT
etag: "48bd2b847a93ac70ad46484a35db1786"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
x-amz-version-id: jSel7pBpS9C2YknehkU9I8YxWBnEm3jJ
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 96620cf21f51569a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=668ce67cb93226b6ad87da50

54.230.245.223

200 OK

90 kB

URL GET HTTPS

d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=668ce67cb93226b6ad87da50

IP / ASN

54.230.245.223

#16509 AMAZON-02

Requested byhttps://start-l-edger-help--sso.webflow.io/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (65451)

First Seen2023-03-07

Last Seen2025-08-06

Times Seen128564

Size90 kB (89476 bytes)

MD5dc5e7f18c8d36ac1d3d4753a87c98d0a

SHA1c8e1c8b386dc5b7a9184c763c88d19a346eb3342

SHA256f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

Certificate Info

IssuerAmazon

Subject*.cloudfront.net

Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72

ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT

Technology Fingerprints

HTTP/2 (Miscellaneous)

Amazon S3 (CDN)

Amazon Web Services (PaaS)

Amazon CloudFront (CDN)

HTTP Headers

GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=668ce67cb93226b6ad87da50 HTTP/1.1
Host: d3e54v103j8qbb.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://start-l-edger-help--sso.webflow.io
DNT: 1
Connection: keep-alive
Referer: https://start-l-edger-help--sso.webflow.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 20 Jul 2020 17:53:02 GMT
server: AmazonS3
content-encoding: gzip
date: Mon, 28 Jul 2025 04:28:05 GMT
cache-control: max-age=84600, must-revalidate
etag: W/"dc5e7f18c8d36ac1d3d4753a87c98d0a"
vary: accept-encoding
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
age: 33327
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aiPKWQwJ69XR3rqqhLxnm5IEKi_xk-8kZRw-19JqOD_c2bTmhTAB9g==
X-Firefox-Spdy: h2