WEBSITE ANALYSIS REPORT

https://vippsno.com/no/?MxPLD=bOccYLWW

20 Oct 2026 · 16:19:27.000 UTCpublic

Report tags
Submit tags: soteria

Request review

JavaScript

Recorded scripts and browser console observations

URL / source

Introduced by

Size

First seen

eval

4 B

07 Mar 202301:03 UTC

eval

15 B

23 Apr 202617:24 UTC

eval

71 B

23 Apr 202617:24 UTC

Not recorded

291 B

14 Oct 202621:21 UTC

Not recorded

291 B

14 Oct 202621:21 UTC

scriptElement

251.0 KB

20 Oct 202616:19 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

scriptElement

176.5 KB

13 Apr 202510:30 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

scriptElement

84.7 KB

14 Oct 202621:21 UTC

eval

137 B

14 Oct 202621:21 UTC

scriptElement

843.9 KB

29 Apr 202515:40 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

eval

4 B

07 Mar 202301:03 UTC

eval

195 B

14 Oct 202621:21 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

scriptElement

44 B

20 Oct 202614:49 UTC

scriptElement

921 B

20 Oct 202616:19 UTC

scriptElement

217 B

20 Oct 202616:19 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

scriptElement

12.0 KB

19 Aug 202416:51 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

eval

1.3 KB

20 Oct 202616:19 UTC

scriptElement

1.9 KB

13 Apr 202510:30 UTC

Script #30

Recorded metadata

URL

https

https://vippsno.com/app/app.js?v=1792492566606

IP / ASN

188.114.96.1

AS13335 · CLOUDFLARENET

Resource information

Introduced by: scriptElement
Inline: false
First seen (UTC): 13 Apr 2025 · 10:30:43.490 UTC
Last seen (UTC): 20 Oct 2026 · 16:24:50.384 UTC
Times seen: 155

Size: 1.9 KB (1983 bytes)
MD5: 09d40a7eb35c401ee8a127da9992f19d
SHA1: abf4b89ceb38c69de10d13ff29c6c90025917f35
SHA256: 85cb71c0f9ecc27e209359961b9f006feb9a0758174b25fe5bfd06bbc793cee5

Detections

Detections attached to this script.
Detection	Severity	Verdict
Nextron YARA rules Unique code from Jetriz, Swid & Jeniva of the Tetris framework	medium	malware

Source

Loading captured source…

Not recorded

291 B

14 Oct 202621:21 UTC

eval

3.1 KB

20 Oct 202616:19 UTC

scriptElement

249.3 KB

20 Oct 202616:19 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

eval

13 B

23 Apr 202617:24 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

eval

50 B

23 Apr 202617:24 UTC

eval

13 B

23 Apr 202617:24 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

eval

137 B

14 Oct 202621:21 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

scriptElement

670 B

26 Sep 202513:57 UTC

eval

530 B

20 Oct 202616:19 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

eval

1.28 MB

20 Oct 202616:19 UTC

scriptElement

22.2 KB

20 Oct 202616:19 UTC

Console observations

Browser messages in recorded order

18 messages


Not recorded
map[actor:server1.conn0.watcher17.process8//obj210 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]
map[actor:server1.conn0.watcher17.process8//obj212 class:Function displayName:VJ</< extensible:true frozen:false isError:false ownPropertyLength:4 sealed:false type:object]
map[actor:server1.conn0.watcher17.process8//obj214 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385539e+10 id:0.9698834654194495] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]
0
0
0
0
0
map[actor:server1.conn0.watcher17.process8//obj208 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]
map[actor:server1.conn0.watcher17.process8//obj211 class:Function displayName:VJ</< extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:64469 line:1 url:https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/0z213/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto] ownPropertyLength:4 parameterNames:[] sealed:false type:object]
map[actor:server1.conn0.watcher17.process8//obj213 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385539e+10 id:0.9698834654194495] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]
0
0
0
0
0
Not recorded

Browser console observations in recorded order.
#	Level	Message	Recorded source
1	DEBUG	`Not recorded`	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/0z213/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto Line 1 · Column 276418
2	LOG	`map[actor:server1.conn0.watcher17.process8//obj210 class:RegExp displayString:/..=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]`	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/0z213/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto Line 1 · Column 276418
3	LOG	`map[actor:server1.conn0.watcher17.process8//obj212 class:Function displayName:VJ</< extensible:true frozen:false isError:false ownPropertyLength:4 sealed:false type:object]`	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/0z213/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto Line 1 · Column 276418
4	LOG	`map[actor:server1.conn0.watcher17.process8//obj214 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385539e+10 id:0.9698834654194495] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]`	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/0z213/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto Line 1 · Column 276418
5	DEBUG	`0`	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/0z213/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto Line 1 · Column 276418
6	ERROR	`0`	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/0z213/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto Line 1 · Column 276418
7	INFO	`0`	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/0z213/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto Line 1 · Column 276418
8	LOG	`0`	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/0z213/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto Line 1 · Column 276418
9	WARN	`0`	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/0z213/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto Line 1 · Column 276418
10	LOG	`map[actor:server1.conn0.watcher17.process8//obj208 class:RegExp displayString:/..=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]`	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/0z213/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto Line 1 · Column 276418
11	LOG	`map[actor:server1.conn0.watcher17.process8//obj211 class:Function displayName:VJ</< extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:64469 line:1 url:https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/0z213/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto] ownPropertyLength:4 parameterNames:[] sealed:false type:object]`	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/0z213/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto Line 1 · Column 276418
12	LOG	`map[actor:server1.conn0.watcher17.process8//obj213 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385539e+10 id:0.9698834654194495] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]`	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/0z213/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto Line 1 · Column 276418
13	DEBUG	`0`	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/0z213/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto Line 1 · Column 276418
14	ERROR	`0`	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/0z213/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto Line 1 · Column 276418
15	INFO	`0`	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/0z213/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto Line 1 · Column 276418
16	LOG	`0`	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/0z213/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto Line 1 · Column 276418
17	WARN	`0`	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/0z213/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto Line 1 · Column 276418
18	DEBUG	`Not recorded`	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/0z213/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto Line 1 · Column 276418

https://vippsno.com/no/?MxPLD=bOccYLWW

JavaScript

Script #30

URL

IP / ASN

Resource information

Detections

Source

Console observations

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://vippsno.com/no/?MxPLD=bOccYLWW

[JavaScript]

Script #30

URL

IP / ASN

Resource information

Detections

Source

Console observations

https://vippsno.com/no/?MxPLD=bOccYLWW

JavaScript