DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
https://href.li/?https://httpbun.com/base64/PCFkb2N0eXBlIGh0bWw%2BPG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT50eWJnLWNhY2hlLTE3OTEyNjU5MTQ5OTA8L3RpdGxlPjxib2R5PmxvYWRpbmc8c2NyaXB0PgooYXN5bmMoKT0%2Bewpjb25zdCB0YXJnZXQ9J2h0dHBzOi8vci5qaW5hLmFpL2h0dHBzOi8vYW1hcC1wYy1zc3IuYW1hcC5jb20vc3NyL3BsYWNlL0IwRkZIMUNGSUInOwp0cnl7CiBjb25zdCByPWF3YWl0IGZldGNoKHRhcmdldCx7aGVhZGVyczp7J1gtQ2FjaGUtVG9sZXJhbmNlJzonMjU5MjAwMCcsJ0FjY2VwdCc6J3RleHQvcGxhaW4nfX0pOwogbGV0IGhzPScnOyByLmhlYWRlcnMuZm9yRWFjaCgodixrKT0%2BaHMrPWsrJzonK3YrJ3wnKTsKIGNvbnN0IHQ9YXdhaXQgci50ZXh0KCk7CiBjb25zdCBsaW5lcz10LnNwbGl0KC9cbi8pLmZpbHRlcih4PT4vJeWIsOi%2Bvi8udGVzdCh4KSkuam9pbignIHx8ICcpOwogY29uc3QgbWV0YT1bJ3RhZz10eWJnLWNhY2hlLTE3OTEyNjU5MTQ5OTAnLCdzdGF0dXM9JytyLnN0YXR1cywndXJsPScrci51cmwsJ2hlYWRlcnM9JytocywnbGVuZ3RoPScrdC5sZW5ndGgsJ2xpbmVzPScrbGluZXNdLmpvaW4oJyB%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%3D
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://href.li/?https://httpbun.com/base64/PCFkb2N0eXBlIGh0bWw%2BPG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT50eWJnLWNhY2hlLTE3OTEyNjU5MTQ5OTA8L3RpdGxlPjxib2R5PmxvYWRpbmc8c2NyaXB0PgooYXN5bmMoKT0%2Bewpjb25zdCB0YXJnZXQ9J2h0dHBzOi8vci5qaW5hLmFpL2h0dHBzOi8vYW1hcC1wYy1zc3IuYW1hcC5jb20vc3NyL3BsYWNlL0IwRkZIMUNGSUInOwp0cnl7CiBjb25zdCByPWF3YWl0IGZldGNoKHRhcmdldCx7aGVhZGVyczp7J1gtQ2FjaGUtVG9sZXJhbmNlJzonMjU5MjAwMCcsJ0FjY2VwdCc6J3RleHQvcGxhaW4nfX0pOwogbGV0IGhzPScnOyByLmhlYWRlcnMuZm9yRWFjaCgodixrKT0%2BaHMrPWsrJzonK3YrJ3wnKTsKIGNvbnN0IHQ9YXdhaXQgci50ZXh0KCk7CiBjb25zdCBsaW5lcz10LnNwbGl0KC9cbi8pLmZpbHRlcih4PT4vJeWIsOi%2Bvi8udGVzdCh4KSkuam9pbignIHx8ICcpOwogY29uc3QgbWV0YT1bJ3RhZz10eWJnLWNhY2hlLTE3OTEyNjU5MTQ5OTAnLCdzdGF0dXM9JytyLnN0YXR1cywndXJsPScrci51cmwsJ2hlYWRlcnM9JytocywnbGVuZ3RoPScrdC5sZW5ndGgsJ2xpbmVzPScrbGluZXNdLmpvaW4oJyB%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%3D
- Submitted IP / ASN
192.0.78.27 AS2635 · Automattic, Inc
- Final URL
- https://httpbun.com/base64/PCFkb2N0eXBlIGh0bWw%2BPG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT50eWJnLWNhY2hlLTE3OTEyNjU5MTQ5OTA8L3RpdGxlPjxib2R5PmxvYWRpbmc8c2NyaXB0PgooYXN5bmMoKT0%2Bewpjb25zdCB0YXJnZXQ9J2h0dHBzOi8vci5qaW5hLmFpL2h0dHBzOi8vYW1hcC1wYy1zc3IuYW1hcC5jb20vc3NyL3BsYWNlL0IwRkZIMUNGSUInOwp0cnl7CiBjb25zdCByPWF3YWl0IGZldGNoKHRhcmdldCx7aGVhZGVyczp7J1gtQ2FjaGUtVG9sZXJhbmNlJzonMjU5MjAwMCcsJ0FjY2VwdCc6J3RleHQvcGxhaW4nfX0pOwogbGV0IGhzPScnOyByLmhlYWRlcnMuZm9yRWFjaCgodixrKT0%2BaHMrPWsrJzonK3YrJ3wnKTsKIGNvbnN0IHQ9YXdhaXQgci50ZXh0KCk7CiBjb25zdCBsaW5lcz10LnNwbGl0KC9cbi8pLmZpbHRlcih4PT4vJeWIsOi%2Bvi8udGVzdCh4KSkuam9pbignIHx8ICcpOwogY29uc3QgbWV0YT1bJ3RhZz10eWJnLWNhY2hlLTE3OTEyNjU5MTQ5OTAnLCdzdGF0dXM9JytyLnN0YXR1cywndXJsPScrci51cmwsJ2hlYWRlcnM9JytocywnbGVuZ3RoPScrdC5sZW5ndGgsJ2xpbmVzPScrbGluZXNdLmpvaW4oJyB%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%3D
- Final IP / ASN
- 64.23.183.159 AS14061 · DIGITALOCEAN-ASN
Final page
- Page title
- TYBGRESULT tag=tybg-cache-1791265914990 ~~ status=200 ~~ url=https://r.jina.ai/https://amap-pc-ssr.amap.com/ssr/place/B0FFH1CFIB ~~ headers=cache-control:no-transform|content-length:3004|content-type:text/plain; charset=utf-8| ~~ length=4408 ~~ lines=1号停车场 41%到达 || 东门 27%到达 || 2号停车场 13%到达 || 南门 9%到达 || 4号停车场 6%到达 || 3号停车场 4%到达
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 1.3 KB (1342 bytes)
Detections
Activity
- HTTP requests
- 6
- Observed hosts
- 3
- Script records
- 2
Estimated HTTP data
- Sent
- ~8.8 KB
- Received
- ~13.6 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| r.jina.ai | 5899431 | 2020-01-20 | 2024-04-11 | 2026-10-04 | 1.1 KB | 8.5 KB |  172.67.70.54 | Google Cloud IaaS Google Cloud is a suite of cloud computing services. Google Cloud Trace Performance Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Google Cloud CDN CDN Cloud CDN uses Google's global edge network to serve content closer to users. |
| httpbun.com | 1789894 | 2021-04-26 | 2021-05-08 | 2026-10-04 | 6.0 KB | 4.9 KB | 64.23.183.159 | bun Programming languages Bun is a fast JavaScript runtime compatible with Node.js and Deno. |
| href.li 1 alerts | 30988 | N/A | 2012-05-22 | 2026-10-05 | 1.8 KB | 325 B | 192.0.78.26 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |