IOC Report
https://client.joistapp.com/estimates/4aeb29dce60ac9fd7b3c3ff3

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 100
JSON data
downloaded
Chrome Cache Entry: 101
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 102
JSON data
downloaded
Chrome Cache Entry: 103
HTML document, ASCII text, with very long lines (930), with no line terminators
downloaded
Chrome Cache Entry: 104
JSON data
dropped
Chrome Cache Entry: 105
JSON data
downloaded
Chrome Cache Entry: 106
JSON data
dropped
Chrome Cache Entry: 107
Unicode text, UTF-8 text, with very long lines (14820)
downloaded
Chrome Cache Entry: 108
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 109
JSON data
dropped
Chrome Cache Entry: 110
Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
dropped
Chrome Cache Entry: 111
ASCII text, with very long lines (3991)
dropped
Chrome Cache Entry: 112
JSON data
downloaded
Chrome Cache Entry: 113
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 114
Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
downloaded
Chrome Cache Entry: 115
JSON data
dropped
Chrome Cache Entry: 116
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x518, components 3
downloaded
Chrome Cache Entry: 117
ASCII text, with very long lines (8175)
downloaded
Chrome Cache Entry: 118
JSON data
dropped
Chrome Cache Entry: 119
JSON data
dropped
Chrome Cache Entry: 66
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
downloaded
Chrome Cache Entry: 67
JSON data
downloaded
Chrome Cache Entry: 68
JSON data
dropped
Chrome Cache Entry: 69
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
dropped
Chrome Cache Entry: 70
JSON data
downloaded
Chrome Cache Entry: 71
JSON data
downloaded
Chrome Cache Entry: 72
ASCII text, with very long lines (526), with no line terminators
dropped
Chrome Cache Entry: 73
ASCII text, with very long lines (65371)
downloaded
Chrome Cache Entry: 74
ASCII text, with very long lines (9198)
downloaded
Chrome Cache Entry: 75
JSON data
dropped
Chrome Cache Entry: 76
ASCII text, with very long lines (65465)
downloaded
Chrome Cache Entry: 77
ASCII text, with very long lines (28228)
downloaded
Chrome Cache Entry: 78
ASCII text, with very long lines (3991)
downloaded
Chrome Cache Entry: 79
JSON data
dropped
Chrome Cache Entry: 80
ASCII text, with very long lines (1490)
downloaded
Chrome Cache Entry: 81
ASCII text, with very long lines (526), with no line terminators
downloaded
Chrome Cache Entry: 82
ASCII text, with very long lines (1490)
dropped
Chrome Cache Entry: 83
HTML document, ASCII text, with very long lines (7783)
dropped
Chrome Cache Entry: 84
JSON data
downloaded
Chrome Cache Entry: 85
ASCII text, with very long lines (28228)
dropped
Chrome Cache Entry: 86
Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
downloaded
Chrome Cache Entry: 87
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 88
Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
dropped
Chrome Cache Entry: 89
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x518, components 3
dropped
Chrome Cache Entry: 90
HTML document, ASCII text, with very long lines (1344)
downloaded
Chrome Cache Entry: 91
JSON data
dropped
Chrome Cache Entry: 92
ASCII text, with very long lines (65465)
dropped
Chrome Cache Entry: 93
Unicode text, UTF-8 text, with very long lines (14820)
dropped
Chrome Cache Entry: 94
JSON data
dropped
Chrome Cache Entry: 95
ASCII text, with very long lines (28900)
downloaded
Chrome Cache Entry: 96
JSON data
dropped
Chrome Cache Entry: 97
JSON data
dropped
Chrome Cache Entry: 98
ASCII text, with very long lines (9198)
dropped
Chrome Cache Entry: 99
HTML document, ASCII text, with no line terminators
downloaded
There are 45 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2668 --field-trial-handle=2252,i,6186872056478440240,3594297843729525088,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://client.joistapp.com/estimates/4aeb29dce60ac9fd7b3c3ff3"

URLs

Name
IP
Malicious
https://client.joistapp.com/estimates/4aeb29dce60ac9fd7b3c3ff3
https://api.leanplum.com/api?appId=app_LtTSxKgkE8pyNKAgqgGmakjhDK2TXxGgGBvMXv4o2so&client=js&clientKey=prod_mc0NHLJvr0Plr0ya9eaDCKd6UWHzONhFrlgYARUdh3s&sdkVersion=1.11.3&action=multi&time=1729781476.074
34.102.193.164
https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js
151.101.192.176
https://stripe.com/spc/licenses
unknown
https://twitter.com/stripe
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAutocomplete-dc62d89d9e2121e48baf.css
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/Frontdoor-4513faa7ba2dd8949ee2.css
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavItem-fd5a8f8fac232f661b3
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/StripeSet-423109ad4bf57a2a011c.css
unknown
https://docs.stripe.com
unknown
https://client.joistapp.com/static/js/main.076dfd2d.js
34.236.202.31
https://b.stripecdn.com/mkt-statics-srv/assets/CheckoutFormGraphic-b2509d821651cbc82709.css
unknown
https://stripe.com/de-ch
unknown
https://stripe.com/en-li
unknown
https://press.stripe.com/
unknown
https://stripe.com/en-lu
unknown
https://stripe.com/en-lt
unknown
https://gateway.prd.joistapp.com/api/v8/public/4aeb29dce60ac9fd7b3c3ff3/company_info
34.236.202.31
https://stripe.com/en-lv
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/AnimatedIcon-0b7478e1f9234aae8838.css
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/BackgroundGlobe-64953aedea5f231d07b7.css
unknown
https://gateway.prd.joistapp.com/api/v8/public/4aeb29dce60ac9fd7b3c3ff3/preview
34.236.202.31
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorStatusBar-24c7c84123b2b6e4f091.css
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStickyAnimation-4ea4d6a5e9b414987337.css
unknown
https://stripe.com/en-my
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/Field-ea906aa31d4012757deb.css
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/ProductFeatureCard-4476eb8c383446c052aa.css
unknown
https://stripe.com/ie
unknown
http://getbootstrap.com)
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAsciiLoader-c1a350cb85f7a989f599.css
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/Icon-646136cd9e336d8c18d7.css
unknown
https://docs.stripe.com/upgrades#api-changelog
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/DevelopersCodeEditor-eadbd8bbcdedd8edbbe3.css
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldInput-3d704dfad5ff81d0e80b.css
unknown
https://m.stripe.network
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavTrack-1380f9c2e275695c5e
unknown
https://docs.stripe.com/stripe-apps
unknown
https://stripe.com/en-mx
unknown
https://youtube.com/
unknown
https://cdn.segment.com/v1/projects/K88QpdmsKhRzrofQjSapSzTurnYQhGeJ/settings
99.86.8.175
https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldList-5317148749a9268ec04d.css
unknown
https://stripe.com/en-mt
unknown
https://stripe.com/pricing
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/EnterpriseCarouselAside-b05102a0b81de0c11406.css
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCardBackground-853f685776c80eaa0089
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/Stripe-b3679504f08482f96a0d.css
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectAnimation-f4ce77b995975fa55335.css
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/Global-f1eeffae1de3242fcca9.css
unknown
https://stripe.com/en-no
unknown
https://docs.stripe.com/development
unknown
https://docs.stripe.com/no-code/payment-links
unknown
https://stripe.com/in
unknown
https://schema.org
unknown
https://stripe.com/en-nl
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/f965fdf4.woff2
unknown
https://docs.stripe.com/no-code
unknown
https://docs.stripe.com/
unknown
https://stripe.com/it
unknown
https://cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js
99.86.8.175
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectGraphicCell-18f4786ec794a3671860.css
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphic-ab42746a2bb65d850037.css
unknown
https://stripe.com/guides
unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)
unknown
https://stripe.com/#organization
unknown
https://images.stripeassets.com/fzn2n1nzq965/5F0uhf7cRg9vhR6NmgWzzI/664e14ddebb91375f89f8dcc75242dc0
unknown
https://stripe.com/jp
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphicTier-c39e78ce45a9380bf169.css
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CardField-739e285edeecea986ed0.css
unknown
https://dashboard.stripe.com/
unknown
https://docs.stripe.com/no-code/tap-to-pay
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/GlobalizationPicker-cb59e0de1d5c3aeaa184.css
unknown
https://stripe.com/en-hu
unknown
https://stripe.com/th
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CaseStudyCard-bfd1dd9dc828a57a4622.css
unknown
https://payment-amount.acornfinance.com/v3/acorn-finance.min.js
143.204.98.22
https://b.stripecdn.com/mkt-statics-srv/assets/HorizontalOverflowContainer-0b85e8f46a0db21a6ef9.css
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/StripeProductUsed-448c2bc0913c408517f4.css
unknown
https://stripe.com/sv-fi
unknown
https://stripe.com/en-hk
unknown
https://support.stripe.com/?referrerLocale=en-us
unknown
https://images.stripeassets.com/fzn2n1nzq965/5hEVwGQfvUQhsMjfASiuA/db4e12749695dbf5735787879ae56e96/
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSuiteAnimation-683958a93f82ca151ea7.css
unknown
https://stripe.com/
52.49.17.168
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSubanimation-b9163916332f2a67d464.css
unknown
https://stripe.com/en-hr
unknown
https://cdn.segment.com/analytics.js/v1/K88QpdmsKhRzrofQjSapSzTurnYQhGeJ/analytics.min.js
99.86.8.175
https://stripe.com/it-hr
unknown
https://images.stripeassets.com/fzn2n1nzq965/5k7VeoAQQDK7032fIF6PEU/25f3670f5f4508103ee77afd92b7e074
unknown
https://gateway.prd.joistapp.com/api/v8/public/4aeb29dce60ac9fd7b3c3ff3/attachments
34.236.202.31
https://stripesessions.com/?utm_medium=owned-surfaces&utm_source=45e0&utm_campaign=US%2FCA_40cb&utm_
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorCursor-517911b19e66c94dafbb.css
unknown
https://docs.stripe.com/payments
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/ProductListing-3e17d7acee941b127dd1.css
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingAnimation-fa25c03988d3d1f36a35.css
unknown
https://stripe.com/us
unknown
https://stripe.com/de
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/List-f0dd86d0ff490fdd7e75.css
unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorPaymentsAnimation-71bdbfda51a40294b593.css
unknown
https://docs.stripe.com/terminal
unknown
https://stripe.com/en-it
unknown
https://docs.stripe.com/payments/checkout
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
maxcdn.bootstrapcdn.com
104.18.11.207
gateway.prd.joistapp.com
34.236.202.31
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com
217.20.57.26
webho.prd.joistapp.com
34.236.202.31
fp2e7a.wpc.phicdn.net
192.229.221.95
stripecdn.map.fastly.net
151.101.128.176
d83664z2gvdsb.cloudfront.net
143.204.98.22
api.leanplum.com
34.102.193.164
d296je7bbdd650.cloudfront.net
99.86.8.175
s3.amazonaws.com
52.217.74.38
m.stripe.com
54.148.147.183
dexeqbeb7giwr.cloudfront.net
18.66.122.97
stripe.com
52.49.17.168
www.google.com
142.250.185.196
api.segment.io
34.223.74.168
client.joistapp.com
unknown
m.stripe.network
unknown
payment-amount.acornfinance.com
unknown
cdn.segment.com
unknown
js.stripe.com
unknown
There are 10 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
52.202.189.210
unknown
United States
151.101.0.176
unknown
United States
192.168.2.4
unknown
unknown
192.168.2.6
unknown
unknown
34.236.202.31
gateway.prd.joistapp.com
United States
34.102.193.164
api.leanplum.com
United States
54.148.147.183
m.stripe.com
United States
143.204.98.124
unknown
United States
52.217.74.38
s3.amazonaws.com
United States
18.66.122.97
dexeqbeb7giwr.cloudfront.net
United States
52.49.17.168
stripe.com
United States
16.15.185.166
unknown
United States
151.101.128.176
stripecdn.map.fastly.net
United States
34.223.74.168
api.segment.io
United States
104.18.11.207
maxcdn.bootstrapcdn.com
United States
239.255.255.250
unknown
Reserved
142.250.185.196
www.google.com
United States
35.160.110.246
unknown
United States
99.86.8.175
d296je7bbdd650.cloudfront.net
United States
143.204.98.22
d83664z2gvdsb.cloudfront.net
United States
151.101.192.176
unknown
United States
There are 11 hidden IPs, click here to show them.

DOM / HTML

URL
Malicious
https://client.joistapp.com/estimates/4aeb29dce60ac9fd7b3c3ff3
https://client.joistapp.com/estimates/4aeb29dce60ac9fd7b3c3ff3
https://client.joistapp.com/estimates/4aeb29dce60ac9fd7b3c3ff3
https://client.joistapp.com/estimates/4aeb29dce60ac9fd7b3c3ff3
https://client.joistapp.com/estimates/4aeb29dce60ac9fd7b3c3ff3
https://client.joistapp.com/estimates/4aeb29dce60ac9fd7b3c3ff3