{"success":true,"data":{"id":"href-obfuscated-ip-host","label":"Link points at an IP encoded in decimal / hex / octal to bypass filters","description":"A link href points at an IP address encoded in a non-standard form that browsers accept but rule-based filters miss. Modern browsers resolve all of these as equivalent to a normal dotted-quad IP: pure decimal 32-bit integer (`http://3627734734/`), pure hex (`http://0xC0A80001/`), dotted hex (`http://0xC0.0xA8.0x00.0x01/`), dotted octal (`http://0300.0250.0000.0001/`), and mixed bases. Phishing kits deliberately use these encodings to bypass dotted-quad-aware detection — no legitimate sender ever emits them. This is the encoded-IP sibling of `href-raw-ip-host`.","tier":"danger","category":"other","isThin":false}}