DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
https://href.li/?https://httpbun.com/base64/PCFkb2N0eXBlIGh0bWw-PG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT5KSU5BIFJBVyBMT0FESU5HPC90aXRsZT48cHJlIGlkPW8-bG9hZGluZzwvcHJlPjxzY3JpcHQ-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
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://href.li/?https://httpbun.com/base64/PCFkb2N0eXBlIGh0bWw-PG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT5KSU5BIFJBVyBMT0FESU5HPC90aXRsZT48cHJlIGlkPW8-bG9hZGluZzwvcHJlPjxzY3JpcHQ-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
- Submitted IP / ASN
192.0.78.27 AS2635 · Automattic, Inc
- Final URL
- https://httpbun.com/base64/PCFkb2N0eXBlIGh0bWw-PG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT5KSU5BIFJBVyBMT0FESU5HPC90aXRsZT48cHJlIGlkPW8-bG9hZGluZzwvcHJlPjxzY3JpcHQ-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
- Final IP / ASN
- Not recorded
Final page
- Page title
- httpbun.com/base64/PCFkb2N0eXBlIGh0bWw-PG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT5KSU5BIFJBVyBMT0FESU5HPC90aXRsZT48cHJlIGlkPW8-bG9hZGluZzwvcHJlPjxzY3JpcHQ-Cihhc3luYygpPT57dHJ5ewpsZXQgcj1hd2FpdCBmZXRjaCgnaHR0cHM6Ly9yLmppbmEuYWkvaHR0cDovL3d3dy5hbWFwLmNvbS9wbGFjZ
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 182 B (182 bytes)
Detections
Activity
- HTTP requests
- 3
- Observed hosts
- 2
- Script records
- 0
Estimated HTTP data
- Sent
- ~4.3 KB
- Received
- ~925 B
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| href.li 1 alerts | 30988 | N/A | 2012-05-22 | 2026-10-05 | 1.4 KB | 325 B | 192.0.78.27 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| httpbun.com | 1789894 | 2021-04-26 | 2021-05-08 | 2026-10-04 | 2.8 KB | 600 B | 64.23.183.159 | bun Programming languages Bun is a fast JavaScript runtime compatible with Node.js and Deno. |