WEBSITE ANALYSIS REPORT

https://href.li/?https://httpbun.com/base64/PCFkb2N0eXBlIGh0bWw%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%2BLy50ZXN0KHgpKS5qb2luKCcvJyk7cmV0dXJuIHYrJzonK3Iuc3RhdHVzKyc6JytNYXRoLnJvdW5kKHBlcmZvcm1hbmNlLm5vdygpLXQwKSsnbXM6Jyt0Lmxlbmd0aCsnOicrbGluZXN9Y2F0Y2goZSl7cmV0dXJuIHYrJzpFUlI6JytTdHJpbmcoZSl9fWNvbnN0IGE9YXdhaXQgUHJvbWlzZS5hbGwodmFscy5tYXAob25lKSk7Y29uc3QgbWV0YT0ndGFnPXR5YmctYWdlLTE3OTEyNjcxNTQ1Mjkgfn4gJythLmpvaW4oJyB8fCAnKTtkb2N1bWVudC50aXRsZT0oJ1RZQkdBR0UgJyttZXRhKS5zbGljZSgwLDUwMDApOyhuZXcgSW1hZ2UoKSkuc3JjPSdodHRwczovL2h0dHBidW4uY29tL2FueXRoaW5nL3R5YmdhZ2U%2FZD0nK2VuY29kZVVSSUNvbXBvbmVudChtZXRhLnNsaWNlKDAsMTIwMDApKSsnJno9JytEYXRlLm5vdygpO30pKCk7PC9zY3JpcHQ%2B

06 Oct 2026 · 06:13:14.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

06:12:42.235 GET 200 document 0 B 0 ms 1 alerts

Transaction #17

Request / response

URL

GET HTTPS

https://href.li/?https://httpbun.com/base64/PCFkb2N0eXBlIGh0bWw%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%2BLy50ZXN0KHgpKS5qb2luKCcvJyk7cmV0dXJuIHYrJzonK3Iuc3RhdHVzKyc6JytNYXRoLnJvdW5kKHBlcmZvcm1hbmNlLm5vdygpLXQwKSsnbXM6Jyt0Lmxlbmd0aCsnOicrbGluZXN9Y2F0Y2goZSl7cmV0dXJuIHYrJzpFUlI6JytTdHJpbmcoZSl9fWNvbnN0IGE9YXdhaXQgUHJvbWlzZS5hbGwodmFscy5tYXAob25lKSk7Y29uc3QgbWV0YT0ndGFnPXR5YmctYWdlLTE3OTEyNjcxNTQ1Mjkgfn4gJythLmpvaW4oJyB8fCAnKTtkb2N1bWVudC50aXRsZT0oJ1RZQkdBR0UgJyttZXRhKS5zbGljZSgwLDUwMDApOyhuZXcgSW1hZ2UoKSkuc3JjPSdodHRwczovL2h0dHBidW4uY29tL2FueXRoaW5nL3R5YmdhZ2U%2FZD0nK2VuY29kZVVSSUNvbXBvbmVudChtZXRhLnNsaWNlKDAsMTIwMDApKSsnJno9JytEYXRlLm5vdygpO30pKCk7PC9zY3JpcHQ%2B

IP / ASN

192.0.78.26

AS2635 · AUTOMATTIC

Requested by: Not recorded

Resource information

File type: Not recorded
MIME type: Not recorded
First seen (UTC): Not recorded
Last seen (UTC): 24 Oct 2026 · 01:29:37.487 UTC
Times seen: 19320520

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Certificate and TLS information not recorded.

Technology fingerprints

HSTS (Security)
Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /?https://httpbun.com/base64/PCFkb2N0eXBlIGh0bWw%2BPG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT50eWJnLWFnZS0xNzkxMjY3MTU0NTI5PC90aXRsZT48Ym9keT5sb2FkaW5nPHNjcmlwdD4KKGFzeW5jKCk9Pntjb25zdCB0YXJnZXQ9J2h0dHBzOi8vci5qaW5hLmFpL2h0dHBzOi8vYW1hcC1wYy1zc3IuYW1hcC5jb20vc3NyL3BsYWNlL0IwRkZIMUNGSUInO2NvbnN0IHZhbHM9WzYwNDgwMCwgNTk2MTYwLCA1ODc1MjAsIDU3ODg4MCwgNTcwMjQwLCA1Njc2NjAsIDU2NTkyMCwgNTYxNjAwLCA1NTI5NjAsIDUxODQwMCwgNDMyMDAwLCA4NjQwMF07YXN5bmMgZnVuY3Rpb24gb25lKHYpe2NvbnN0IHQwPXBlcmZvcm1hbmNlLm5vdygpO3RyeXtjb25zdCByPWF3YWl0IGZldGNoKHRhcmdldCx7aGVhZGVyczp7J1gtQ2FjaGUtVG9sZXJhbmNlJzpTdHJpbmcodiksJ0FjY2VwdCc6J3RleHQvcGxhaW4nLCdETlQnOicxJ319KTtjb25zdCB0PWF3YWl0IHIudGV4dCgpO2NvbnN0IGxpbmVzPXQuc3BsaXQoL1xuLykuZmlsdGVyKHg9Pi8l5Yiw6L6%2BLy50ZXN0KHgpKS5qb2luKCcvJyk7cmV0dXJuIHYrJzonK3Iuc3RhdHVzKyc6JytNYXRoLnJvdW5kKHBlcmZvcm1hbmNlLm5vdygpLXQwKSsnbXM6Jyt0Lmxlbmd0aCsnOicrbGluZXN9Y2F0Y2goZSl7cmV0dXJuIHYrJzpFUlI6JytTdHJpbmcoZSl9fWNvbnN0IGE9YXdhaXQgUHJvbWlzZS5hbGwodmFscy5tYXAob25lKSk7Y29uc3QgbWV0YT0ndGFnPXR5YmctYWdlLTE3OTEyNjcxNTQ1Mjkgfn4gJythLmpvaW4oJyB8fCAnKTtkb2N1bWVudC50aXRsZT0oJ1RZQkdBR0UgJyttZXRhKS5zbGljZSgwLDUwMDApOyhuZXcgSW1hZ2UoKSkuc3JjPSdodHRwczovL2h0dHBidW4uY29tL2FueXRoaW5nL3R5YmdhZ2U%2FZD0nK2VuY29kZVVSSUNvbXBvbmVudChtZXRhLnNsaWNlKDAsMTIwMDApKSsnJno9JytEYXRlLm5vdygpO30pKCk7PC9zY3JpcHQ%2B HTTP/1.1
Host: href.li
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
server: nginx
date: Tue, 06 Oct 2026 06:12:45 GMT
content-type: text/html; charset=utf-8
strict-transport-security: max-age=31536000
vary: Accept-Encoding
content-encoding: br
x-ac: 10.arn _dca BYPASS
alt-svc: clear
server-timing: a8c-cdn, dc;desc=arn, cache;desc=BYPASS;dur=113.0
X-Firefox-Spdy: h2

06:12:45.912 GET 200 document 939 B 703 ms —

06:12:47.000 GET 200 fetch 6.5 KB 1594 ms —

06:12:47.008 GET 200 fetch 6.5 KB 963 ms —

06:12:47.013 OPTIONS 200 fetch 3 B 212 ms —

06:12:47.014 GET 200 fetch 6.5 KB 659 ms —

06:12:47.016 GET 200 fetch 6.5 KB 1292 ms —

06:12:47.019 OPTIONS 200 fetch 3 B 385 ms —

06:12:47.020 GET 200 fetch 6.5 KB 843 ms —

06:12:47.022 GET 200 fetch 6.5 KB 990 ms —

06:12:47.023 GET 200 fetch 6.5 KB 1098 ms —

06:12:47.025 GET 200 fetch 6.5 KB 1051 ms —

06:12:47.026 GET 200 fetch 6.5 KB 1342 ms —

06:12:47.027 GET 200 fetch 6.5 KB 1198 ms —

06:12:47.029 GET 200 fetch 6.5 KB 669 ms —

06:12:47.030 GET 200 fetch 6.5 KB 770 ms —

06:12:47.032 OPTIONS 200 fetch 3 B 374 ms —

06:12:47.032 OPTIONS 200 fetch 3 B 365 ms —

06:12:47.033 OPTIONS 200 fetch 3 B 367 ms —

06:12:47.035 OPTIONS 200 fetch 3 B 201 ms —

06:12:47.036 OPTIONS 200 fetch 3 B 160 ms —

06:12:47.037 OPTIONS 200 fetch 3 B 489 ms —

06:12:47.038 OPTIONS 200 fetch 3 B 488 ms —

06:12:47.039 OPTIONS 200 fetch 3 B 150 ms —

06:12:47.040 OPTIONS 200 fetch 3 B 486 ms —

06:12:47.041 OPTIONS 200 fetch 3 B 149 ms —

06:12:48.879 GET 404 img 19 B 169 ms —

06:12:48.913 GET 200 img 4.0 KB 167 ms —

Domain graph

Hostnames

Connections

Network requests

Transaction #17

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #17

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Domain graph

Network requests