Private YARA rules Hunting_JS_WebAssembly
Verdictaudit
Severityaudit
WEBSITE ANALYSIS REPORT
https://ebay.us/m/7F68uu
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://ebay.us/m/7F68uu
- Submitted IP / ASN
23.215.7.31 AS20940 · Akamai International B.V.
- Final URL
- https://www.ebay.com/itm/306877457708?mkcid=16&mkevt=1&mkrid=711-127632-2357-0&ssspo=8Rre63HzS9e&sssrc=2051273&ssuid=8Rre63HzS9e&stype=1&var=&widget_ver=artemis&media=COPY
- Final IP / ASN
- Not recorded
Final page
- Page title
- 1000pcs Disposable Plastic Forks – Heavy Duty White Cutlery, 7” Standard Size | eBay
- Final DOM MIME
- text/plain; charset=utf-8
- Final DOM size
- 0 B (0 bytes)
Detections
Activity
- HTTP requests
- 161
- Observed hosts
- 13
- Script records
- 97
Estimated HTTP data
- Sent
- ~107.7 KB
- Received
- ~20.97 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| itm.ebaydesc.com | 88407 | 2004-05-25 | 2023-09-27 | 2026-04-26 | 699 B | 9.9 KB |  23.36.77.201 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| backstory.ebay.com | 65944 | 1995-08-04 | 2020-11-20 | 2026-04-25 | 3.0 KB | 624 B | 23.36.79.161 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| pages.ebay.com | 73485 | 1995-08-04 | 2012-05-25 | 2026-04-26 | 1.5 KB | 5.8 KB | 23.36.77.176 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| i.ebayimg.com | 10524 | 2003-05-23 | 2012-05-25 | 2026-04-25 | 16.6 KB | 1.79 MB |  151.101.129.91 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| 127.0.0.1 | N/A | N/A | N/A | N/A | 8.6 KB | 0 B |  0.0.0.0 | |
| ir.ebaystatic.com | 51292 | 2003-08-22 | 2012-05-25 | 2026-04-26 | 33.1 KB | 16.03 MB | 23.36.77.129 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. eBay Store Affiliate programs eBay is a platform that either redirects users to eBay or displays a link to an eBay store. Akamai CDN Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions. |
| rover.ebay.com | 59462 | 1995-08-04 | 2012-05-21 | 2026-04-22 | 1.4 KB | 1.3 KB | 23.36.77.248 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| devicebind.ebay.com | 70680 | 1995-08-04 | 2022-02-14 | 2026-04-26 | 3.2 KB | 30.2 KB | 66.211.165.91 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| svcs.ebay.com | 89169 | 1995-08-04 | 2014-01-30 | 2026-04-26 | 682 B | 0 B | 0.0.0.0 | |
| src.ebay-us.com | 73015 | 2000-01-27 | 2014-03-25 | 2026-04-26 | 12.8 KB | 660.2 KB | 91.235.133.182 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Apache HTTP Server Web servers Apache is a free and open-source cross-platform web server software. |
| ebay.us | 58052 | 2002-04-19 | 2017-02-02 | 2026-04-22 | 484 B | 623.6 KB |  80.239.150.57 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| www.ebay.com | 1773 | 1995-08-04 | 2013-01-25 | 2026-04-25 | 22.7 KB | 1.84 MB | 23.36.79.154 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. Node.js Programming languages Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser. Express Web frameworks, Web servers Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs. |
| sherlock-events-sampler.ebay.com | 60603 | 1995-08-04 | 2025-04-19 | 2026-04-25 | 1.1 KB | 916 B | 66.211.165.54 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |