Private YARA rules Hunting_JS_WebAssembly
Verdictaudit
Severityaudit
WEBSITE ANALYSIS REPORT
http://www.wlanpassword.de/
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://www.wlanpassword.de/
- Submitted IP / ASN
159.89.214.161 AS14061 · DIGITALOCEAN-ASN
- Final URL
- https://www.ebay.de/itm/305508154104
- Final IP / ASN
23.36.77.176 AS20940 · Akamai International B.V.
Final page
- Page title
- Domain ++ wlanpassword.de ++ zu verkaufen! | eBay.de
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 100.3 KB (102729 bytes)
Detections
Activity
- HTTP requests
- 135
- Observed hosts
- 13
- Script records
- 92
Estimated HTTP data
- Sent
- ~98.2 KB
- Received
- ~18.69 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| rover.ebay.com | 59462 | 1995-08-04 | 2012-05-21 | 2026-04-04 | 491 B | 1.5 KB | 23.36.77.248 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| devicebind.ebay.de | 656128 | N/A | 2022-03-08 | 2026-03-31 | 3.7 KB | 30.9 KB |  66.211.165.91 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| src.ebay-us.com | 73015 | 2000-01-27 | 2014-03-25 | 2026-04-06 | 13.0 KB | 635.6 KB | 91.235.133.182 | Apache HTTP Server Web servers Apache is a free and open-source cross-platform web server software. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| itm.ebaydesc.com | 88407 | 2004-05-25 | 2023-09-27 | 2026-04-05 | 693 B | 7.6 KB | 23.36.77.201 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| svcs.ebay.com | 89169 | 1995-08-04 | 2014-01-30 | 2026-04-07 | 1.0 KB | 2.3 KB | 23.36.79.153 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| www.wlanpassword.de | N/A | N/A | N/A | N/A | 488 B | 685.1 KB | 159.89.214.161 | |
| sherlock-events-sampler.ebay.com | 60603 | 1995-08-04 | 2025-04-19 | 2026-04-04 | 993 B | 916 B | 66.211.165.149 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| www.ebay.de | 2321 | N/A | 2014-01-25 | 2026-03-31 | 17.7 KB | 2.50 MB | 23.36.77.176 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Express Web frameworks, Web servers Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs. Node.js Programming languages Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. jQuery:3.5.1 JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. |
| pages.ebay.com | 73485 | 1995-08-04 | 2012-05-25 | 2026-04-05 | 649 B | 6.1 KB | 23.36.77.176 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| backstory.ebay.de | 663477 | N/A | 2020-11-20 | 2026-03-11 | 3.0 KB | 630 B | 23.36.79.161 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| ir.ebaystatic.com | 51292 | 2003-08-22 | 2012-05-25 | 2026-04-04 | 33.9 KB | 14.60 MB | 151.101.66.206 | eBay Store Affiliate programs eBay is a platform that either redirects users to eBay or displays a link to an eBay store. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Varnish Caching Varnish is a reverse caching proxy. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| 127.0.0.1 | N/A | N/A | N/A | N/A | 8.6 KB | 0 B |  0.0.0.0 | |
| i.ebayimg.com | 10524 | 2003-05-23 | 2012-05-25 | 2026-04-07 | 4.5 KB | 266.1 KB | 23.36.76.201 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |