Private YARA rules Hunting_JS_WebAssembly
Verdictaudit
Severityaudit
WEBSITE ANALYSIS REPORT
https://salesloft.bynder.com/t/6185/sc/602a3e69-f7dc-4491-a545-a5a9a6e1d565/NB2HI4DTHIXS653XO4XGS3TTORQWO4TBNUXGG33NF5RHS3TEMVZGY33WMUXT64K7NVQWS3DJNZTV6N2UK5UHUTSDJNWTEWSBPFGTQRRTNZ4W4ZKDKQ3W6M3CMNHGSZ3UKZTFSZBSHVJHAVTKGRVXGMLCNFZUC2ZVPBKWSVKXGJIVM23GMZ5DE3KDNBEE4WJXGRUUIMSONFYFSUCTKVSXU3LNGZMFK2TJIVVXQ===/GEYDCNZTGA3DIZRRMQ3TKMRYGVSDQY3FMQ3TMN3FMVSWKYJYGM3DEYJTGYYDKM3E/www-instagram-com-bynderlove
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://salesloft.bynder.com/t/6185/sc/602a3e69-f7dc-4491-a545-a5a9a6e1d565/NB2HI4DTHIXS653XO4XGS3TTORQWO4TBNUXGG33NF5RHS3TEMVZGY33WMUXT64K7NVQWS3DJNZTV6N2UK5UHUTSDJNWTEWSBPFGTQRRTNZ4W4ZKDKQ3W6M3CMNHGSZ3UKZTFSZBSHVJHAVTKGRVXGMLCNFZUC2ZVPBKWSVKXGJIVM23GMZ5DE3KDNBEE4WJXGRUUIMSONFYFSUCTKVSXU3LNGZMFK2TJIVVXQ===/GEYDCNZTGA3DIZRRMQ3TKMRYGVSDQY3FMQ3TMN3FMVSWKYJYGM3DEYJTGYYDKM3E/www-instagram-com-bynderlove
- Submitted IP / ASN
3.221.74.113 AS14618 · AMAZON-AES
- Final URL
- https://www.instagram.com/bynderlove/?q_mailing_7TWhzNCKm2ZAyM8F3nyneCT7o3bcNigtVfYd2=RpVj4ks1bisAk5xUiUW2QVkffz2mChHNY74iD2NipYPSUezmm6XUjiEkx
- Final IP / ASN
31.13.72.174 AS32934 · FACEBOOK
Final page
- Page title
- Bynder (@bynderlove) • Instagram photos and videos
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 1.29 MB (1354462 bytes)
Detections
Activity
- HTTP requests
- 167
- Observed hosts
- 6
- Script records
- 60
Estimated HTTP data
- Sent
- ~210.4 KB
- Received
- ~20.02 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| www.facebook.com | 357 | 1997-03-29 | 2012-05-21 | 2026-05-18 | 445 B | 4.6 KB | 31.13.72.36 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| salesloft.bynder.com | N/A | 2002-08-28 | 2019-04-17 | 2026-05-21 | 850 B | 901.0 KB | 44.219.196.147 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| app.salesloft.com | 81621 | 2005-11-21 | 2018-05-28 | 2026-05-18 | 873 B | 901.2 KB |  34.159.69.191 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| scontent-arn2-1.cdninstagram.com | 391850 | 2014-05-01 | 2015-12-21 | 2026-05-19 | 77.7 KB | 1.07 MB | 31.13.72.53 | |
| www.instagram.com | 1133 | 2004-06-04 | 2012-07-24 | 2026-05-18 | 42.9 KB | 1.56 MB | 31.13.72.174 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| static.cdninstagram.com 3 alerts | 21477 | 2014-05-01 | 2017-02-22 | 2026-05-21 | 13.5 KB | 15.63 MB | 31.13.72.53 |