Private YARA rules Hunting_JS_WebAssembly
Verdictaudit
Severityaudit
WEBSITE ANALYSIS REPORT
http://draufklick.de/logos/www.mes-acces.crediit-agri-cole.fr-banqiues-portail-particulier/casm-cc/1623bc493d9e378c5f1510e25ed6983f
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://draufklick.de/logos/www.mes-acces.crediit-agri-cole.fr-banqiues-portail-particulier/casm-cc/1623bc493d9e378c5f1510e25ed6983f
- Submitted IP / ASN
159.89.214.161 AS14061 · DIGITALOCEAN-ASN
- Final URL
- https://www.ebay.de/itm/306558992952
- Final IP / ASN
23.36.77.217 AS20940 · Akamai International B.V.
Final page
- Page title
- Domain ++ draufklick.de ++ zu verkaufen! | eBay.de
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 99.5 KB (101850 bytes)
Detections
Activity
- HTTP requests
- 127
- Observed hosts
- 13
- Script records
- 72
Estimated HTTP data
- Sent
- ~87.3 KB
- Received
- ~20.77 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| ir.ebaystatic.com | 51292 | 2003-08-22 | 2012-05-25 | 2026-01-22 | 30.7 KB | 16.73 MB | 23.36.77.129 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. eBay Store Affiliate programs eBay is a platform that either redirects users to eBay or displays a link to an eBay store. Akamai CDN Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions. |
| svcs.ebay.com | 89169 | 1995-08-04 | 2014-01-30 | 2026-01-22 | 1.0 KB | 2.4 KB | 23.36.77.226 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| devicebind.ebay.de | 656128 | N/A | 2022-03-08 | 2026-01-23 | 3.7 KB | 31.0 KB |  0.0.0.0 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| pages.ebay.com | 73485 | 1995-08-04 | 2012-05-25 | 2026-01-22 | 649 B | 6.1 KB | 23.36.77.217 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| i.ebayimg.com | 10524 | 2003-05-23 | 2012-05-25 | 2026-01-22 | 4.5 KB | 210.5 KB |  151.101.193.91 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| www.ebay.de | 2321 | N/A | 2014-01-25 | 2026-01-23 | 15.5 KB | 3.18 MB | 23.36.77.217 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. jQuery:3.5.1 JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. |
| 127.0.0.1 | N/A | N/A | N/A | N/A | 8.6 KB | 0 B | 0.0.0.0 | |
| sherlock-events-sampler.ebay.com | 60603 | 1995-08-04 | 2025-04-19 | 2026-01-22 | 993 B | 916 B | 66.211.165.86 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| backstory.ebay.de | 663477 | N/A | 2020-11-20 | 2026-01-23 | 3.0 KB | 635 B | 95.101.10.88 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| srv.de.ebayrtm.com | 736478 | 2004-11-05 | 2012-10-02 | 2026-01-23 | 1.0 KB | 717 B | 209.140.129.69 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| itm.ebaydesc.com | 88407 | 2004-05-25 | 2023-09-27 | 2026-01-22 | 693 B | 7.7 KB | 23.36.77.201 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| rover.ebay.com | 59462 | 1995-08-04 | 2012-05-21 | 2026-01-22 | 491 B | 1.5 KB | 95.101.10.171 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| src.ebay-us.com | 73015 | 2000-01-27 | 2014-03-25 | 2026-01-22 | 14.5 KB | 616.4 KB | 91.235.133.182 | Apache HTTP Server Web servers Apache is a free and open-source cross-platform web server software. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |