urlquery.net
Investigate/Report/9210d005-a268-42bd-9ec2-c74dea2a3a4b
WEBSITE ANALYSIS REPORT

http://jl696666.net/

public
Report tags
Submit tags
Request review

JavaScript

Recorded scripts and browser console observations

86 scripts
Observed scripts. Expand a row for metadata, detections, and available captured source.
#URL / sourceIntroduced bySizeFirst seen
1Function34 B
2scriptElement1.51 MB
3scriptElement12.8 KB
4Function34 B
5Function34 B
6scriptElement863 B
7scriptElement136.4 KB
8eval22 B
9Function34 B
10scriptElement1.64 MB
11Function34 B
12scriptElement51.8 KB
13scriptElement1.3 KB
14Function34 B
15Function34 B
16scriptElement69 B
17Function34 B
18scriptElement1.18 MB
19scriptElement639 B
20scriptElement1.16 MB
21scriptElement864.7 KB
22scriptElement12.7 KB
23eval22 B
24Function34 B
25Function34 B
26scriptElement1.9 KB
27scriptElement812.5 KB
28eval22.8 KB
29scriptElement655.3 KB
30scriptElement885.5 KB
31importedModule114.6 KB
32scriptElement69 B
33scriptElement219 B
34Function34 B
35Function34 B
36Function34 B
37scriptElement92 B
38scriptElement6.3 KB
39scriptElement875 B
40Function34 B
41scriptElement19.0 KB
42scriptElement812.5 KB
43Function34 B
44eval22 B
45scriptElement641.3 KB
46scriptElement812.5 KB
47Function34 B
48Function34 B
49scriptElement426.2 KB
50importedModule17.4 KB
51Function34 B
52eval64 B
53Function34 B
54scriptElement1.72 MB
55Function34 B
56Function34 B
57eval26.3 KB
58eval64 B
59scriptElement426 B
60scriptElement194.0 KB
61scriptElement70.7 KB

Script #61

Recorded metadata

URL

https
https://www.jl696666.net/js/encrypt.js?v=15083

IP / ASN

Country unknown 104.21.14.106

AS13335 · CLOUDFLARENET

Resource information

Introduced by
scriptElement
Inline
false
First seen (UTC)
09 Dec 2025 · 04:31:48.394 UTC
Last seen (UTC)
09 Dec 2025 · 04:31:48.394 UTC
Times seen
1
Size
70.7 KB (72439 bytes)
MD5
db934140fb72d34509cfb8d6692c222d
SHA1
ae6f9d73b9a5b64278a41c302445873e6b09c0aa
SHA256
22c54a1ba228c9c636e8da49d5f0056089a8ca039ad60f37faed72aaf2bcf751

Detections

Detections attached to this script.
DetectionSeverityVerdict
Nextron YARA rules Unique code from Jetriz, Swid & Jeniva of the Tetris frameworkmediummalware

Source

Loading captured source…

62scriptElement64 B
63scriptElement31.5 KB
64scriptElement70.6 KB
65eval19.2 KB
66Function34 B
67scriptElement99 B
68scriptElement18.8 KB
69importedModule89.5 KB
70Function34 B
71scriptElement574 B
72scriptElement1.0 KB
73Function34 B
74Function34 B
75scriptElement13.0 KB
76scriptElement85.4 KB
77scriptElement27.2 KB
78scriptElement61.2 KB
79scriptElement7.0 KB
80scriptElement1.14 MB
81Function34 B
82eval19.2 KB
83Function34 B
84scriptElement2.63 MB
85eval22 B
86Function34 B

Console observations

Browser messages in recorded order

0 messages
No console observations in this report.
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot