urlquery.net
Investigate/Report/4e4ccbf8-0ea3-4bc1-8aa2-b5a0a470b4d6
WEBSITE ANALYSIS REPORT

http://email.mail.instatrac.com/c/eJxczLFOxDAMANCvSRZ0VWo7bTNkuKUSAx_hOA4N9FrUREjw9QxsNz_p5Rjc7OcwWY3jPPsFEcJot8iKzKVIyCFN6sskwjouDpGpCJCtkcn5VCSNKVNJs1-CkhImX3JCr4sh9-DW6tFq1ms4tNs9br1_NYN3A6uB9ckNrHz1KrsaWNEhoTOwyl7l017x42xa6sGDnEevhtzvz_vWBzkftsc3bu31fzJ4fwEH083RbXT2O8JfAAAA__8s8kbx

public
Report tags
Submit tags
Request review

JavaScript

Recorded scripts and browser console observations

153 scripts
Observed scripts. Expand a row for metadata, detections, and available captured source.
#URL / sourceIntroduced bySizeFirst seen
1scriptElement151.6 KB
2scriptElement1.7 KB
3eval199 B
4eval136 B
5scriptElement104.4 KB
6Function131 B
7scriptElement2.7 KB
8scriptElement1.9 KB
9Function534 B
10Function176 B
11scriptElement2.4 KB
12Function149 B
13Function139 B
14eval269 B
15Function26 B
16Function175 B
17Function127 B
18scriptElement6.3 KB
19Function344 B
20Function222 B
21Function141 B
22Function173 B
23scriptElement4.1 KB
24scriptElement47.9 KB
25scriptElement290.1 KB
26Function127 B
27Function61 B
28Function212 B
29scriptElement267.7 KB
30scriptElement1000 B
31Function159 B
32scriptElement2.1 KB
33scriptElement128 B
34scriptElement219.1 KB
35Function445 B
36eval31 B
37Function129 B
38scriptElement27 B
39scriptElement1.0 KB
40scriptElement1.2 KB
41scriptElement528.8 KB
42eval31 B
43scriptElement2.8 KB
44Function147 B
45Function179 B
46Function129 B
47Function129 B
48Function145 B
49scriptElement877 B
50scriptElement808 B
51Function131 B
52scriptElement1.7 KB
53scriptElement52.8 KB
54scriptElement825 B
55Function139 B
56Function123 B
57scriptElement403.9 KB
58Function161 B
59scriptElement665 B
60eval323 B
61scriptElement1.5 KB
62Not recorded136 B
63scriptElement418 B
64scriptElement4.1 KB
65scriptElement3.2 KB
66scriptElement2.0 KB
67eval25 B
68eval31 B
69scriptElement379.8 KB
70Function179 B
71Function153 B
72Function209 B
73Function129 B
74Function151 B
75scriptElement1.9 KB
76scriptElement36.9 KB
77scriptElement2.3 KB
78Function177 B
79scriptElement22.8 KB
80Function145 B
81eval20 B
82Function209 B
83Function800 B
84scriptElement276.3 KB

Script #84

Recorded metadata

URL

https
https://b.bostonglobemedia.com/plugin/plugin/0af4fe506e8786d81af9b76a2aff75f0

IP / ASN

United States 35.168.117.116

AS14618 · AMAZON-AES

Resource information

Introduced by
scriptElement
Inline
false
First seen (UTC)
06 Apr 2026 · 23:03:26.152 UTC
Last seen (UTC)
13 Apr 2026 · 01:33:44.277 UTC
Times seen
2
Size
276.3 KB (282940 bytes)
MD5
0af4fe506e8786d81af9b76a2aff75f0
SHA1
6f0f2157e25c9990e889b1ed411ec49784d3c91c
SHA256
c369969b8d35c104f731bd892a35901fdd91b6efcaea6f1c33bbe1dec1c57896

Detections

Detections attached to this script.
DetectionSeverityVerdict
Nextron YARA rules Generic JSP webshell with base64 encoded payloadmediummalware

Source

Loading captured source…

85Function147 B
86Function173 B
87scriptElement16.9 KB
88Function141 B
89Function353 B
90eval187 B
91Function165 B
92scriptElement3.0 KB
93scriptElement205 B
94Function180 B
95Function151 B
96scriptElement974 B
97eval25 B
98Function179 B
99Function177 B
100scriptElement74.4 KB
101Function161 B
102Function145 B
103scriptElement2.7 KB
104scriptElement75 B
105scriptElement3.5 KB
106eval3 B
107eval25 B
108Function172 B
109Function165 B
110Function121 B
111Function149 B
112eval31 B
113Function145 B
114Function180 B
115Function176 B
116scriptElement853 B
117Not recorded148 B
118scriptElement182 B
119Function182 B
120scriptElement19.9 KB
121scriptElement3.7 KB
122Function49 B
123eval261 B
124scriptElement57 B
125scriptElement57 B
126scriptElement64.4 KB
127scriptElement26.0 KB
128scriptElement451.8 KB
129scriptElement3.00 MB
130eval190 B
131scriptElement150.2 KB
132scriptElement9.8 KB
133Function141 B
134Function145 B
135eval142 B
136eval142 B
137Function179 B
138scriptElement94.9 KB
139Function172 B
140Function129 B
141Function149 B
142scriptElement1.7 KB
143scriptElement85.5 KB
144scriptElement4.5 KB
145Function131 B
146Function139 B
147scriptElement5.3 KB
148Function203 B
149eval180 B
150scriptElement10.9 KB
151Function137 B
152Function174 B
153scriptElement12.8 KB

Console observations

Browser messages in recorded order

0 messages
No console observations in this report.
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot