Security Scan Report: href.li

Redirected to:
https://www.wikipedia.org/
Site favicon
Submitted: Jun 30, 2026, 10:43:56 PMCompleted: Jun 30, 2026, 10:45:07 PMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 1 country across 3 domains to perform 9 HTTP transactions. The main domain is wikipedia.org and was registered NaN years ago.

Submitted URL: https://href.li/?https://elmonta.vu/uslogi/

Effective URL: https://www.wikipedia.org/Redirected

The Cisco Umbrella rank of the primary domain is #129,868 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Short URL href.li redirects to Wikipedia but shows brand impersonation and triggers a high‑severity phishing IDS alert; treat as high‑risk phishing redirect.

Risk Factors
Brand impersonation (Wikipedia meta tags on unrelated domain)
Low domain ranking for a high‑profile brand
High‑severity IDS phishing alert
Redirect service used to mask final destination
Domain age information unavailable

Details

Page Title

Wikipedia

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

adult content

(53%)

Domain Information

The domain name 'href.li' uses the .li country-code top-level domain and has no subdomain. The second-level label 'href' is 4 characters long with 1 vowel and three consonants. Tokenizing the label suggests 1 word: href. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://href.li/?https://elmonta.vu/uslogi/

Page Load Overview

1.07s
Total Load Time
9
HTTP Requests
3
Domains
89 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:6,224 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content53% confidence
Type: static
Method: ml+structural

All Detected Categories

adult content
53%
education learning
32%
news media journalism
30%
documentation technical
30%
corporate
25%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3172.67.223.4Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3192.0.78.27San Francisco, California, United States
AS2635Automattic, Inc
3185.15.59.224United States
AS14907Wikimedia Foundation Inc.
93--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T107C3D603B14191FF277717BE6D606A2C9123A0B7C6B76BD83712EA76E183DA6DC12007

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:ZDbjuv7dvzUzvZ2TiW9vEjBqW5/vvjrKiFLDafIfFFOYKF1rWvVKpZU7:ZE7dvzGsqd6NWdyZU7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:120970:tiSCsIADwCCLAIWGjJAGazKtwQEQ4iiwmQQYUJVgAgjFgZACNmwSipSsQdEx0ZAAZAAQGdiCAC1IBGkJF4AZHQErrZkpHBZg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:efe7e7f7e73f1505
Perceptual Hash:b7e01fc98cc83366
Difference Hash:080c0c0404555575
Wavelet Hash:e6e6e6e6e61c8405
Color Hash:#59d22d

Other Hashes

Crop Resistant:080c0c0404555575

Scan History

Scan history not available

Unable to load historical scan data