DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
https://href.li/?https://fanyi.baidu.com/transpage?query=https%3A%2F%2Famap-pc-ssr.amap.com%2Fssr%2Fapi%2FgetPoiInfo%3Fid%3DB019B0XY35&from=auto&to=zh&source=url
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://href.li/?https://fanyi.baidu.com/transpage?query=https%3A%2F%2Famap-pc-ssr.amap.com%2Fssr%2Fapi%2FgetPoiInfo%3Fid%3DB019B0XY35&from=auto&to=zh&source=url
- Submitted IP / ASN
192.0.78.26 AS2635 · Automattic, Inc
- Final URL
- https://href.li/?https://fanyi.baidu.com/transpage?query=https%3A%2F%2Famap-pc-ssr.amap.com%2Fssr%2Fapi%2FgetPoiInfo%3Fid%3DB019B0XY35&from=auto&to=zh&source=url
- Final IP / ASN
- 192.0.78.27 AS2635 · AUTOMATTIC
Final page
- Page title
- href.li
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 565 B (565 bytes)
Detections
Activity
- HTTP requests
- 2
- Observed hosts
- 2
- Script records
- 1
Estimated HTTP data
- Sent
- ~1.2 KB
- Received
- ~325 B
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| fanyi.baidu.com | 94263 | 1999-10-11 | 2012-10-24 | 2026-10-04 | 610 B | 0 B | Not recorded | |
| href.li 1 alerts | 30988 | N/A | 2012-05-22 | 2026-09-28 | 621 B | 325 B | 192.0.78.27 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |