ScanMalware.com

Security Scan Report: href.li

Redirected to:
https://www.videolan.org/
Submitted: Apr 29, 2026, 4:51:29 AMCompleted: Apr 29, 2026, 4:52:58 AMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 2 countries across 6 domains to perform 45 HTTP transactions. The main domain is videolan.org and was registered NaN years ago.

Submitted URL: https://href.li/?https://www.videolan.org/

Effective URL: https://www.videolan.org/Redirected

The Cisco Umbrella rank of the primary domain is #129,868 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 95%

5
Risk Score

The href.li redirect page impersonates VideoLAN, hosts password‑only forms, triggers a high‑severity phishing IDS alert, and lacks age data – confirmed credential phishing.

Risk Factors
Brand impersonation
Credential harvesting forms
Low Umbrella ranking (#129,868)
Unknown domain age
High‑severity IDS phishing alert
Safety Factors
Final URL resolves to legitimate site videolan.org
No malicious JavaScript or Indicators of Compromise detected
No external credential exfiltration observed
Established domain (9582 days old) with no strong malicious indicators — risk clamped from 10 to 5
Domain age information unavailable

Details

Page Title

VLC: Official site - Free multimedia solutions for all OS! - VideoLAN

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(56%)

Domain Information

Domain 'href.li' uses the .li country-code top-level domain and has no subdomain. The second-level label 'href' is 4 characters long containing 1 vowel alongside 3 consonants. Word splitting yields 1 word: href. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://href.li/?https://www.videolan.org/

Page Load Overview

1.48s
Total Load Time
45
HTTP Requests
6
Domains
695 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:7,673 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software56% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
56%
entertainment media
39%
documentation technical
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9213.36.253.2France
AS12322Free SAS
9216.239.32.36United States
AS15169Google LLC
9142.251.110.138United States
AS15169Google LLC
9142.251.13.97United States
AS15169Google LLC
9192.0.78.27San Francisco, California, United States
AS2635Automattic, Inc
455--

Detected Technologies7

X-UA-Compatible
100%
Google-Tag-Manager
100%
Google-AnalyticsvUniversal
100%
Google Analytics
55%
HTTP/3
40%
HSTS
40%
jQuery
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EB63941284E08D1F036345C5EC956B38BEA35203C64A1C843BAC1BAFDFD6F565A3B5AD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:aQJVymqsvr+f5PnpdOPPpe1E4UGQajzzuiI+IGpR5ZNypiYA2GpL8BB3H5t0mAPS:aQJVyQ6f5v+nbG1jzCuI8GT2LyRr0mAa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:69993:E9MkoQSeM30UQiIlYaeFIBGYRgKS2GJQuoEZhnxQi0BhDkGgUQRFkiEAMBQGmSKgrlAAA9SCSYSG4RIZtEKw+MQUYvBOCkAC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f98f8787ffa7ffff
Perceptual Hash:b838c7c7c3633938
Difference Hash:4b343e1c2b2e2e0a
Wavelet Hash:808687878f83a3ff
Color Hash:#87c5a2

Other Hashes

Crop Resistant:4b343e1c2b2e2e0a,6e0c9ccde2c0b082

Scan History

Scan history not available

Unable to load historical scan data