Private YARA rules Hunting_JS_WebAssembly
Verdictaudit
Severityaudit
WEBSITE ANALYSIS REPORT
http://schiffsparty.de/
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://schiffsparty.de/
- Submitted IP / ASN
159.89.214.161 AS14061 · DIGITALOCEAN-ASN
- Final URL
- https://www.ebay.de/itm/297784192336
- Final IP / ASN
23.36.77.217 AS20940 · Akamai International B.V.
Final page
- Page title
- Domain ++ schiffsparty.de ++ zu verkaufen! | eBay.de
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 99.5 KB (101850 bytes)
Detections
Activity
- HTTP requests
- 128
- Observed hosts
- 14
- Script records
- 87
Estimated HTTP data
- Sent
- ~87.8 KB
- Received
- ~20.99 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| pages.ebay.com | 73485 | 1995-08-04 | 2012-05-25 | 2026-01-22 | 649 B | 6.1 KB | 23.36.77.217 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| srv.de.ebayrtm.com | 736478 | 2004-11-05 | 2012-10-02 | 2026-01-23 | 1.0 KB | 723 B |  66.211.163.8 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| src.ebay-us.com | 73015 | 2000-01-27 | 2014-03-25 | 2026-01-22 | 14.4 KB | 616.4 KB | 91.235.133.182 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Apache HTTP Server Web servers Apache is a free and open-source cross-platform web server software. |
| 127.0.0.1 | N/A | N/A | N/A | N/A | 8.6 KB | 0 B |  0.0.0.0 | |
| backstory.ebay.de | 663477 | N/A | 2020-11-20 | 2026-01-23 | 3.0 KB | 639 B | 23.36.79.144 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| sherlock-events-sampler.ebay.com | 60603 | 1995-08-04 | 2025-04-19 | 2026-01-22 | 993 B | 916 B | 66.211.165.181 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| rover.ebay.com | 59462 | 1995-08-04 | 2012-05-21 | 2026-01-22 | 491 B | 1.5 KB | 23.36.77.248 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| itm.ebaydesc.com | 88407 | 2004-05-25 | 2023-09-27 | 2026-01-22 | 693 B | 7.7 KB | 23.36.77.243 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| ir.ebaystatic.com | 51292 | 2003-08-22 | 2012-05-25 | 2026-01-22 | 30.7 KB | 16.73 MB | 23.36.77.129 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. eBay Store Affiliate programs eBay is a platform that either redirects users to eBay or displays a link to an eBay store. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. Akamai CDN Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions. |
| svcs.ebay.com | 89169 | 1995-08-04 | 2014-01-30 | 2026-01-22 | 1.0 KB | 2.3 KB | 23.36.77.226 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| devicebind.ebay.de | 656128 | N/A | 2022-03-08 | 2026-01-23 | 3.7 KB | 30.9 KB | 66.211.165.91 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| www.ebay.de | 2321 | N/A | 2014-01-25 | 2026-01-23 | 15.5 KB | 3.17 MB | 23.36.77.217 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. jQuery:3.5.1 JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. |
| i.ebayimg.com | 10524 | 2003-05-23 | 2012-05-25 | 2026-01-22 | 4.5 KB | 442.7 KB | 151.101.65.91 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| schiffsparty.de | N/A | N/A | N/A | N/A | 484 B | 242 B | 159.89.214.161 |