DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
https://href.li/?https://httpbun.com/base64/PCFkb2N0eXBlIGh0bWw%2BPGh0bWw%2BPG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT50YXJnZXQtamluYS1wcm9iZTwvdGl0bGU%2BPGJvZHk%2BbG9hZGluZzxzY3JpcHQ%2BCihhc3luYygpPT57dHJ5ewpjb25zdCB0YXJnZXQ9J2h0dHBzOi8vci5qaW5hLmFpL2h0dHBzOi8vYW1hcC1wYy1zc3IuYW1hcC5jb20vc3NyL3BsYWNlL0IwMDFDOFJHQzAnOwpjb25zdCByPWF3YWl0IGZldGNoKHRhcmdldCx7aGVhZGVyczp7J1gtQ2FjaGUtVG9sZXJhbmNlJzonMjU5MjAwMDAnLCdBY2NlcHQnOid0ZXh0L3BsYWluJ319KTsKY29uc3QgdD1hd2FpdCByLnRleHQoKTsKY29uc3QgbGluZXM9dC5zcGxpdCgvXG4vKS5maWx0ZXIoeD0%2BL%2BWIsOi%2BvnzlgZzovaZ8VGl0bGU6fFVSTCBTb3VyY2U6fOaKseatiS8udGVzdCh4KSkuam9pbignIHx8ICcpOwpkb2N1bWVudC50aXRsZT0oJ1RBUkdFVFJFU1VMVCBzdGF0dXM9JytyLnN0YXR1cysnIGxlbj0nK3QubGVuZ3RoKycgbGluZXM9JytsaW5lcykuc2xpY2UoMCw2MDAwKTsKfWNhdGNoKGUpe2RvY3VtZW50LnRpdGxlPSdUQVJHRVRFUlJPUiAnK1N0cmluZyhlKX19KSgpOwo8L3NjcmlwdD48L2JvZHk%2BPC9odG1sPg%3D%3D
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://href.li/?https://httpbun.com/base64/PCFkb2N0eXBlIGh0bWw%2BPGh0bWw%2BPG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT50YXJnZXQtamluYS1wcm9iZTwvdGl0bGU%2BPGJvZHk%2BbG9hZGluZzxzY3JpcHQ%2BCihhc3luYygpPT57dHJ5ewpjb25zdCB0YXJnZXQ9J2h0dHBzOi8vci5qaW5hLmFpL2h0dHBzOi8vYW1hcC1wYy1zc3IuYW1hcC5jb20vc3NyL3BsYWNlL0IwMDFDOFJHQzAnOwpjb25zdCByPWF3YWl0IGZldGNoKHRhcmdldCx7aGVhZGVyczp7J1gtQ2FjaGUtVG9sZXJhbmNlJzonMjU5MjAwMDAnLCdBY2NlcHQnOid0ZXh0L3BsYWluJ319KTsKY29uc3QgdD1hd2FpdCByLnRleHQoKTsKY29uc3QgbGluZXM9dC5zcGxpdCgvXG4vKS5maWx0ZXIoeD0%2BL%2BWIsOi%2BvnzlgZzovaZ8VGl0bGU6fFVSTCBTb3VyY2U6fOaKseatiS8udGVzdCh4KSkuam9pbignIHx8ICcpOwpkb2N1bWVudC50aXRsZT0oJ1RBUkdFVFJFU1VMVCBzdGF0dXM9JytyLnN0YXR1cysnIGxlbj0nK3QubGVuZ3RoKycgbGluZXM9JytsaW5lcykuc2xpY2UoMCw2MDAwKTsKfWNhdGNoKGUpe2RvY3VtZW50LnRpdGxlPSdUQVJHRVRFUlJPUiAnK1N0cmluZyhlKX19KSgpOwo8L3NjcmlwdD48L2JvZHk%2BPC9odG1sPg%3D%3D
- Submitted IP / ASN
192.0.78.27 AS2635 · Automattic, Inc
- Final URL
- https://httpbun.com/base64/PCFkb2N0eXBlIGh0bWw%2BPGh0bWw%2BPG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT50YXJnZXQtamluYS1wcm9iZTwvdGl0bGU%2BPGJvZHk%2BbG9hZGluZzxzY3JpcHQ%2BCihhc3luYygpPT57dHJ5ewpjb25zdCB0YXJnZXQ9J2h0dHBzOi8vci5qaW5hLmFpL2h0dHBzOi8vYW1hcC1wYy1zc3IuYW1hcC5jb20vc3NyL3BsYWNlL0IwMDFDOFJHQzAnOwpjb25zdCByPWF3YWl0IGZldGNoKHRhcmdldCx7aGVhZGVyczp7J1gtQ2FjaGUtVG9sZXJhbmNlJzonMjU5MjAwMDAnLCdBY2NlcHQnOid0ZXh0L3BsYWluJ319KTsKY29uc3QgdD1hd2FpdCByLnRleHQoKTsKY29uc3QgbGluZXM9dC5zcGxpdCgvXG4vKS5maWx0ZXIoeD0%2BL%2BWIsOi%2BvnzlgZzovaZ8VGl0bGU6fFVSTCBTb3VyY2U6fOaKseatiS8udGVzdCh4KSkuam9pbignIHx8ICcpOwpkb2N1bWVudC50aXRsZT0oJ1RBUkdFVFJFU1VMVCBzdGF0dXM9JytyLnN0YXR1cysnIGxlbj0nK3QubGVuZ3RoKycgbGluZXM9JytsaW5lcykuc2xpY2UoMCw2MDAwKTsKfWNhdGNoKGUpe2RvY3VtZW50LnRpdGxlPSdUQVJHRVRFUlJPUiAnK1N0cmluZyhlKX19KSgpOwo8L3NjcmlwdD48L2JvZHk%2BPC9odG1sPg%3D%3D
- Final IP / ASN
- 64.23.183.159 AS14061 · DIGITALOCEAN-ASN
Final page
- Page title
- TARGETRESULT status=200 len=3718 lines=Title: 高德地图 - 精准专业的手机地图 || URL Source: https://amap-pc-ssr.amap.com/ssr/place/B001C8RGC0 || 抱歉！未能获取到该地点信息
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 769 B (769 bytes)
Detections
Activity
- HTTP requests
- 5
- Observed hosts
- 3
- Script records
- 1
Estimated HTTP data
- Sent
- ~4.9 KB
- Received
- ~7.8 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| href.li 1 alerts | 30988 | N/A | 2012-05-22 | 2026-09-28 | 1.3 KB | 325 B | 192.0.78.26 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| httpbun.com | 1789894 | 2021-04-26 | 2021-05-08 | 2026-10-04 | 2.6 KB | 1.1 KB | 64.23.183.159 | bun Programming languages Bun is a fast JavaScript runtime compatible with Node.js and Deno. |
| r.jina.ai | 5899431 | 2020-01-20 | 2024-04-11 | 2026-10-04 | 1.1 KB | 6.4 KB |  104.26.10.242 | Google Cloud CDN CDN Cloud CDN uses Google's global edge network to serve content closer to users. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Google Cloud Trace Performance Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console. Google Cloud IaaS Google Cloud is a suite of cloud computing services. |