YARAhub by abuse.ch Detects SocGholish obfuscated variant first observed in July 2022
Verdictmalware
Severitymedium
WEBSITE ANALYSIS REPORT
http://bidwater.org
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://bidwater.org
- Submitted IP / ASN
162.241.216.29 AS31898 · Oracle Corporation
- Final URL
- https://www.bidwater.org/bidblog/
- Final IP / ASN
- 162.241.216.29 AS46606 · UNIFIEDLAYER-AS-1
Final page
- Page title
- bidwater.org/bidblog/
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 70.9 KB (72612 bytes)
Detections
Activity
- HTTP requests
- 50
- Observed hosts
- 4
- Script records
- 18
Estimated HTTP data
- Sent
- ~29.4 KB
- Received
- ~625.6 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| www.bidwater.org 1 alerts | N/A | 2008-06-17 | 2026-10-08 | 2026-10-08 | 27.9 KB | 620.9 KB | 162.241.216.29 | Bluehost Hosting Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices. Apache HTTP Server Web servers Apache is a free and open-source cross-platform web server software. Underscore.js:1.13.8 JavaScript libraries Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes. MySQL Databases MySQL is an open-source relational database management system. jQuery Migrate:3.4.1 JavaScript libraries Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9. WordPress:7.1.3 CMS, Blogs WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system. PHP Programming languages PHP is a general-purpose scripting language used for web development. jQuery JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. The Events Calendar WordPress plugins The Events Calendar is a free event management plugin for WordPress. WordPress Block Editor Page builders Sites using the WordPress Block Editor, also known as Gutenberg. |
| pixel.wp.com | 22824 | 1997-03-28 | 2017-01-30 | 2026-10-05 | 618 B | 269 B | 192.0.76.3 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| stats.wordpress.com | 1645002 | 2000-03-03 | 2012-05-21 | 2026-09-30 | 462 B | 4.2 KB | 192.0.78.27 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| bidwater.org | N/A | 2008-06-17 | 2026-10-08 | 2026-10-08 | 481 B | 198 B | 162.241.216.29 | Apache HTTP Server Web servers Apache is a free and open-source cross-platform web server software. |