DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
https://href.li/?https://httpbun.com/base64/PCFkb2N0eXBlIGh0bWw-PGh0bWw-PGhlYWQ-PG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT5OSkdMLVBFTkRJTkctMjAyNjEwMDVCPC90aXRsZT48L2hlYWQ-PGJvZHk-bG9hZGluZzxzY3JpcHQ-Cihhc3luYygpPT57dHJ5e2NvbnN0IHU9Imh0dHBzOi8vci5qaW5hLmFpL2h0dHBzOi8vYW1hcC1wYy1zc3IuYW1hcC5jb20vc3NyL3BsYWNlL0IwMDE5MEI0OFIiO2NvbnN0IHI9YXdhaXQgZmV0Y2godSx7aGVhZGVyczp7IlgtQ2FjaGUtVG9sZXJhbmNlIjoiMjU5MjAwMCIsIkFjY2VwdCI6InRleHQvcGxhaW4ifX0pO2NvbnN0IHQ9YXdhaXQgci50ZXh0KCk7Y29uc3QgbGluZXM9dC5zcGxpdCgvXG4vKS5maWx0ZXIoeD0-L-WIsOi-vnzljZfkuqzpvJPmpbzljLvpmaJ85YGc6L2m5Zy6fCg_Ol58XHMpW-S4nOWNl-ilv-WMl-S4gOS6jOS4ieWbm-S6lOWFreS4g-WFq-S5neWNgTAtOV0r5Y-3P-mXqC8udGVzdCh4KSk7Y29uc3Qgb3V0PWBzdGF0dXM9JHtyLnN0YXR1c30gbGVuPSR7dC5sZW5ndGh9IGxpbmVzPSR7bGluZXMuam9pbigiIHx8ICIpfWA7ZG9jdW1lbnQudGl0bGU9KCJOSkdMUkVTVUxUICIrb3V0KS5zbGljZSgwLDMwMDApOyhuZXcgSW1hZ2UoKSkuc3JjPSJodHRwczovL2h0dHBidW4uY29tL2FueXRoaW5nL05KR0xSRVNVTFQ_ZD0iK2VuY29kZVVSSUNvbXBvbmVudChvdXQuc2xpY2UoMCw2MDAwKSk7fWNhdGNoKGUpe2RvY3VtZW50LnRpdGxlPSJOSkdMRVJST1IgIitlOyhuZXcgSW1hZ2UoKSkuc3JjPSJodHRwczovL2h0dHBidW4uY29tL2FueXRoaW5nL05KR0xFUlJPUj9kPSIrZW5jb2RlVVJJQ29tcG9uZW50KFN0cmluZyhlKSk7fX0pKCk7Cjwvc2NyaXB0PjwvYm9keT48L2h0bWw-
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://href.li/?https://httpbun.com/base64/PCFkb2N0eXBlIGh0bWw-PGh0bWw-PGhlYWQ-PG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT5OSkdMLVBFTkRJTkctMjAyNjEwMDVCPC90aXRsZT48L2hlYWQ-PGJvZHk-bG9hZGluZzxzY3JpcHQ-Cihhc3luYygpPT57dHJ5e2NvbnN0IHU9Imh0dHBzOi8vci5qaW5hLmFpL2h0dHBzOi8vYW1hcC1wYy1zc3IuYW1hcC5jb20vc3NyL3BsYWNlL0IwMDE5MEI0OFIiO2NvbnN0IHI9YXdhaXQgZmV0Y2godSx7aGVhZGVyczp7IlgtQ2FjaGUtVG9sZXJhbmNlIjoiMjU5MjAwMCIsIkFjY2VwdCI6InRleHQvcGxhaW4ifX0pO2NvbnN0IHQ9YXdhaXQgci50ZXh0KCk7Y29uc3QgbGluZXM9dC5zcGxpdCgvXG4vKS5maWx0ZXIoeD0-L-WIsOi-vnzljZfkuqzpvJPmpbzljLvpmaJ85YGc6L2m5Zy6fCg_Ol58XHMpW-S4nOWNl-ilv-WMl-S4gOS6jOS4ieWbm-S6lOWFreS4g-WFq-S5neWNgTAtOV0r5Y-3P-mXqC8udGVzdCh4KSk7Y29uc3Qgb3V0PWBzdGF0dXM9JHtyLnN0YXR1c30gbGVuPSR7dC5sZW5ndGh9IGxpbmVzPSR7bGluZXMuam9pbigiIHx8ICIpfWA7ZG9jdW1lbnQudGl0bGU9KCJOSkdMUkVTVUxUICIrb3V0KS5zbGljZSgwLDMwMDApOyhuZXcgSW1hZ2UoKSkuc3JjPSJodHRwczovL2h0dHBidW4uY29tL2FueXRoaW5nL05KR0xSRVNVTFQ_ZD0iK2VuY29kZVVSSUNvbXBvbmVudChvdXQuc2xpY2UoMCw2MDAwKSk7fWNhdGNoKGUpe2RvY3VtZW50LnRpdGxlPSJOSkdMRVJST1IgIitlOyhuZXcgSW1hZ2UoKSkuc3JjPSJodHRwczovL2h0dHBidW4uY29tL2FueXRoaW5nL05KR0xFUlJPUj9kPSIrZW5jb2RlVVJJQ29tcG9uZW50KFN0cmluZyhlKSk7fX0pKCk7Cjwvc2NyaXB0PjwvYm9keT48L2h0bWw-
- Submitted IP / ASN
192.0.78.26 AS2635 · Automattic, Inc
- Final URL
- https://httpbun.com/base64/PCFkb2N0eXBlIGh0bWw-PGh0bWw-PGhlYWQ-PG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT5OSkdMLVBFTkRJTkctMjAyNjEwMDVCPC90aXRsZT48L2hlYWQ-PGJvZHk-bG9hZGluZzxzY3JpcHQ-Cihhc3luYygpPT57dHJ5e2NvbnN0IHU9Imh0dHBzOi8vci5qaW5hLmFpL2h0dHBzOi8vYW1hcC1wYy1zc3IuYW1hcC5jb20vc3NyL3BsYWNlL0IwMDE5MEI0OFIiO2NvbnN0IHI9YXdhaXQgZmV0Y2godSx7aGVhZGVyczp7IlgtQ2FjaGUtVG9sZXJhbmNlIjoiMjU5MjAwMCIsIkFjY2VwdCI6InRleHQvcGxhaW4ifX0pO2NvbnN0IHQ9YXdhaXQgci50ZXh0KCk7Y29uc3QgbGluZXM9dC5zcGxpdCgvXG4vKS5maWx0ZXIoeD0-L-WIsOi-vnzljZfkuqzpvJPmpbzljLvpmaJ85YGc6L2m5Zy6fCg_Ol58XHMpW-S4nOWNl-ilv-WMl-S4gOS6jOS4ieWbm-S6lOWFreS4g-WFq-S5neWNgTAtOV0r5Y-3P-mXqC8udGVzdCh4KSk7Y29uc3Qgb3V0PWBzdGF0dXM9JHtyLnN0YXR1c30gbGVuPSR7dC5sZW5ndGh9IGxpbmVzPSR7bGluZXMuam9pbigiIHx8ICIpfWA7ZG9jdW1lbnQudGl0bGU9KCJOSkdMUkVTVUxUICIrb3V0KS5zbGljZSgwLDMwMDApOyhuZXcgSW1hZ2UoKSkuc3JjPSJodHRwczovL2h0dHBidW4uY29tL2FueXRoaW5nL05KR0xSRVNVTFQ_ZD0iK2VuY29kZVVSSUNvbXBvbmVudChvdXQuc2xpY2UoMCw2MDAwKSk7fWNhdGNoKGUpe2RvY3VtZW50LnRpdGxlPSJOSkdMRVJST1IgIitlOyhuZXcgSW1hZ2UoKSkuc3JjPSJodHRwczovL2h0dHBidW4uY29tL2FueXRoaW5nL05KR0xFUlJPUj9kPSIrZW5jb2RlVVJJQ29tcG9uZW50KFN0cmluZyhlKSk7fX0pKCk7Cjwvc2NyaXB0PjwvYm9keT48L2h0bWw-
- Final IP / ASN
- Not recorded
Final page
- Page title
- httpbun.com/base64/PCFkb2N0eXBlIGh0bWw-PGh0bWw-PGhlYWQ-PG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT5OSkdMLVBFTkRJTkctMjAyNjEwMDVCPC90aXRsZT48L2hlYWQ-PGJvZHk-bG9hZGluZzxzY3JpcHQ-Cihhc3luYygpPT57dHJ5e2NvbnN0IHU9Imh0dHBzOi8vci5qaW5hLmFpL2h0dHBzOi8vYW1hcC1wYy1zc3IuY
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 182 B (182 bytes)
Detections
Activity
- HTTP requests
- 3
- Observed hosts
- 2
- Script records
- 1
Estimated HTTP data
- Sent
- ~4.8 KB
- Received
- ~925 B
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| httpbun.com | 1789894 | 2021-04-26 | 2021-05-08 | 2026-10-04 | 3.2 KB | 600 B | 64.23.183.159 | bun Programming languages Bun is a fast JavaScript runtime compatible with Node.js and Deno. |
| href.li 1 alerts | 30988 | N/A | 2012-05-22 | 2026-10-05 | 1.6 KB | 325 B | 192.0.78.26 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |