← All detection heuristics · HTML / Script
info
HTML_DECODED_NETWORK_IOC
What it means
A bounded Base64 or hex decode recovered an absolute URL.
Why it fires
Encoded script configuration is decoded within strict count and size bounds so hidden destinations reach IOC search without treating encoding alone as malicious.