DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
https://href.li/?https://httpbun.com/base64/PCFkb2N0eXBlIGh0bWw%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%2BLyXliLDovr4vLnRlc3QoeCkpLmpvaW4oJyB8fCAnKTsKIGNvbnN0IG1ldGE9WydzdGF0dXM9JytyLnN0YXR1cywndXJsPScrci51cmwsJ2hlYWRlcnM9JytocywnbGVuZ3RoPScrdC5sZW5ndGgsJ2xpbmVzPScrbGluZXNdLmpvaW4oJyB%2BfiAnKTsKIGRvY3VtZW50LnRpdGxlPSgnR0NSRVNVTFQgJyttZXRhKS5zbGljZSgwLDMwMDApOwogKG5ldyBJbWFnZSgpKS5zcmM9J2h0dHBzOi8vaHR0cGJ1bi5jb20vYW55dGhpbmcvZ2NyZXN1bHQ%2FZD0nK2VuY29kZVVSSUNvbXBvbmVudChtZXRhLnNsaWNlKDAsNzAwMCkpKycmej0nK0RhdGUubm93KCk7Cn1jYXRjaChlKXtjb25zdCBtPSdFUlJPUiAnK1N0cmluZyhlKTtkb2N1bWVudC50aXRsZT1tOyhuZXcgSW1hZ2UoKSkuc3JjPSdodHRwczovL2h0dHBidW4uY29tL2FueXRoaW5nL2djZXJyb3I%2FZD0nK2VuY29kZVVSSUNvbXBvbmVudChtKSsnJno9JytEYXRlLm5vdygpO30KfSkoKTsKPC9zY3JpcHQ%2B
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://href.li/?https://httpbun.com/base64/PCFkb2N0eXBlIGh0bWw%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%2BLyXliLDovr4vLnRlc3QoeCkpLmpvaW4oJyB8fCAnKTsKIGNvbnN0IG1ldGE9WydzdGF0dXM9JytyLnN0YXR1cywndXJsPScrci51cmwsJ2hlYWRlcnM9JytocywnbGVuZ3RoPScrdC5sZW5ndGgsJ2xpbmVzPScrbGluZXNdLmpvaW4oJyB%2BfiAnKTsKIGRvY3VtZW50LnRpdGxlPSgnR0NSRVNVTFQgJyttZXRhKS5zbGljZSgwLDMwMDApOwogKG5ldyBJbWFnZSgpKS5zcmM9J2h0dHBzOi8vaHR0cGJ1bi5jb20vYW55dGhpbmcvZ2NyZXN1bHQ%2FZD0nK2VuY29kZVVSSUNvbXBvbmVudChtZXRhLnNsaWNlKDAsNzAwMCkpKycmej0nK0RhdGUubm93KCk7Cn1jYXRjaChlKXtjb25zdCBtPSdFUlJPUiAnK1N0cmluZyhlKTtkb2N1bWVudC50aXRsZT1tOyhuZXcgSW1hZ2UoKSkuc3JjPSdodHRwczovL2h0dHBidW4uY29tL2FueXRoaW5nL2djZXJyb3I%2FZD0nK2VuY29kZVVSSUNvbXBvbmVudChtKSsnJno9JytEYXRlLm5vdygpO30KfSkoKTsKPC9zY3JpcHQ%2B
- Submitted IP / ASN
192.0.78.26 AS2635 · Automattic, Inc
- Final URL
- https://httpbun.com/base64/PCFkb2N0eXBlIGh0bWw%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%2BLyXliLDovr4vLnRlc3QoeCkpLmpvaW4oJyB8fCAnKTsKIGNvbnN0IG1ldGE9WydzdGF0dXM9JytyLnN0YXR1cywndXJsPScrci51cmwsJ2hlYWRlcnM9JytocywnbGVuZ3RoPScrdC5sZW5ndGgsJ2xpbmVzPScrbGluZXNdLmpvaW4oJyB%2BfiAnKTsKIGRvY3VtZW50LnRpdGxlPSgnR0NSRVNVTFQgJyttZXRhKS5zbGljZSgwLDMwMDApOwogKG5ldyBJbWFnZSgpKS5zcmM9J2h0dHBzOi8vaHR0cGJ1bi5jb20vYW55dGhpbmcvZ2NyZXN1bHQ%2FZD0nK2VuY29kZVVSSUNvbXBvbmVudChtZXRhLnNsaWNlKDAsNzAwMCkpKycmej0nK0RhdGUubm93KCk7Cn1jYXRjaChlKXtjb25zdCBtPSdFUlJPUiAnK1N0cmluZyhlKTtkb2N1bWVudC50aXRsZT1tOyhuZXcgSW1hZ2UoKSkuc3JjPSdodHRwczovL2h0dHBidW4uY29tL2FueXRoaW5nL2djZXJyb3I%2FZD0nK2VuY29kZVVSSUNvbXBvbmVudChtKSsnJno9JytEYXRlLm5vdygpO30KfSkoKTsKPC9zY3JpcHQ%2B
- Final IP / ASN
- 64.23.183.159 AS14061 · DIGITALOCEAN-ASN
Final page
- Page title
- GCRESULT status=200 ~~ url=https://r.jina.ai/https://amap-pc-ssr.amap.com/ssr/place/B001C94YUZ ~~ headers=cache-control:no-transform|content-length:2542|content-type:text/plain; charset=utf-8| ~~ length=6148 ~~ lines=地面停车场 40%到达 || 正大门 26%到达 || 地下停车场 11%到达 || 出入口 10%到达 || 东门 6%到达 || 北6门 2%到达 || 西门 2%到达 || 东1门 1%到达 || E1号门 1%到达 || 南2门 1%到达
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 1.3 KB (1320 bytes)
Detections
Activity
- HTTP requests
- 6
- Observed hosts
- 3
- Script records
- 1
Estimated HTTP data
- Sent
- ~8.6 KB
- Received
- ~14.3 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| href.li 1 alerts | 30988 | N/A | 2012-05-22 | 2026-09-28 | 1.7 KB | 325 B | 192.0.78.27 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| httpbun.com | 1789894 | 2021-04-26 | 2021-05-08 | 2026-10-04 | 5.9 KB | 4.9 KB | 64.23.183.159 | bun Programming languages Bun is a fast JavaScript runtime compatible with Node.js and Deno. |
| r.jina.ai | 5899431 | 2020-01-20 | 2024-04-11 | 2026-10-04 | 1.1 KB | 9.1 KB |  104.26.10.242 | Google Cloud CDN CDN Cloud CDN uses Google's global edge network to serve content closer to users. Google Cloud IaaS Google Cloud is a suite of cloud computing services. Google Cloud Trace Performance Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |