Private YARA rules Hunting_JS_WebAssembly
Verdictaudit
Severityaudit
WEBSITE ANALYSIS REPORT
http://678vip.uk.com/
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://678vip.uk.com/
- Submitted IP / ASN
172.67.150.22 AS13335 · CLOUDFLARENET
- Final URL
- https://678vip.uk.com/
- Final IP / ASN
- 172.67.150.22 AS13335 · CLOUDFLARENET
Final page
- Page title
- 678vip.uk.com
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 11.3 KB (11581 bytes)
Detections
Activity
- HTTP requests
- 54
- Observed hosts
- 5
- Script records
- 24
Estimated HTTP data
- Sent
- ~25.3 KB
- Received
- ~2.62 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| maps.googleapis.com 1 alerts | 3442 | 2005-01-25 | 2012-05-22 | 2025-12-14 | 5.6 KB | 886.4 KB |  142.250.74.10 | |
| s.w.org | 27695 | 1993-12-01 | 2017-01-30 | 2025-12-15 | 906 B | 2.9 KB | 192.0.77.48 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| 678vip.uk.com | N/A | 2025-08-24 | 2025-12-21 | 2025-12-21 | 17.7 KB | 1.53 MB | 172.67.150.22 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. WordPress:6.9 CMS, Blogs WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system. PHP Programming languages PHP is a general-purpose scripting language used for web development. MySQL Databases MySQL is an open-source relational database management system. jQuery Migrate:3.4.1 JavaScript libraries Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9. jQuery JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. |
| www.google.com | 22 | 1997-09-15 | 2015-05-10 | 2025-12-14 | 763 B | 4.5 KB | 216.58.207.196 | Google Maps Maps Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation. |
| maps.gstatic.com | N/A | 2008-02-11 | 2012-05-22 | 2025-12-15 | 456 B | 228.0 KB | 142.251.142.227 |