ScanMalware.com

Security Scan Report: ipfs.io

Redirected to: https://ipfs.io/ipfs/bafkreiclv25ievw72g5bfg5ry5ew54vq3ofjsow3qzcv5kvqxz25ghrvsm?err=B8ArwedxMBc3YKsZPXP0UWyBNcNVYUiyu3wlab9Ya6tFhjozNPGt8XXYZr6gJuOWMB9WSXHGj5yzZrkPd9CI3rTOQdfoB9TFTVpMifPe4GMURfRqhsuz4EEU8oi&dispatch=3A0CC52B754C3cB069346a9134cc7c3a8&id=cAa58B3C4A901bc4bb78B91060b8a6

Submitted: Oct 24, 2025, 9:22:09 AMCompleted: Oct 24, 2025, 9:23:38 AMpubliccompleted
Loading additional data...

Summary

This website contacted 17 IPs in 1 country across 4 domains to perform 20 HTTP transactions. The main domain is ipfs.io.

Submitted URL: https://ipfs.io/ipfs/bafkreiclv25ievw72g5bfg5ry5ew54vq3ofjsow3qzcv5kvqxz25ghrvsm#[email protected]

Effective URL: https://ipfs.io/ipfs/bafkreiclv25ievw72g5bfg5ry5ew54vq3ofjsow3qzcv5kvqxz25ghrvsm?err=B8ArwedxMBc3YKsZPXP0UWyBNcNVYUiyu3wlab9Ya6tFhjozNPGt8XXYZr6gJuOWMB9WSXHGj5yzZrkPd9CI3rTOQdfoB9TFTVpMifPe4GMURfRqhsuz4EEU8oi&dispatch=3A0CC52B754C3cB069346a9134cc7c3a8&id=cAa58B3C4A901bc4bb78B91060b8a6Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Phishing page on IPFS impersonating SEKURE.NET; high‑risk credential harvest.

Risk Factors
URL manipulation (history.pushState/replaceState) spoofing the address bar
Credential harvesting form on IPFS gateway
Email address in URL fragment
Brand impersonation on unranked domain
IPFS hosting without moderation
Domain age information unavailable

Details

Page Title

SEKURE - Mail

Scan Type

public

Language

🇳🇴

Norwegian

(72% confidence)

Category

unknown

(0%)

Domain Information

The domain 'ipfs.io' uses the British Indian Ocean Territory country-code top-level domain (.io) with no subdomain. The registrable portion 'ipfs' spans 4 characters holding one vowel versus 3 consonants. Tokenizing the label suggests 2 words: i, pfs. Average segment length settles at two characters. The linguistic tilt is English for 'i'. Usage also turns up in Chinese (Pinyin) and Bosnian contexts.

Screenshot

Security scan screenshot of https://ipfs.io/ipfs/bafkreiclv25ievw72g5bfg5ry5ew54vq3ofjsow3qzcv5kvqxz25ghrvsm#u003cje@sekure.net

Page Load Overview

59.37s
Total Load Time
20
HTTP Requests
4
Domains
331 KB
Total Size

Language Analysis

Primary Language

🇳🇴Norwegian
Code: no
Confidence:72%
Script:Latin
Direction:ltr

Detection Details

Language Code:no
Detection Confidence:72%
Script Type:Latin
HTML Lang Attribute:en
Text Length:32 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as no

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4151.101.65.229San Francisco, California, United States
AS54113FASTLY
1104.17.24.14United States
AS13335CLOUDFLARENET
1151.101.193.229San Francisco, California, United States
AS54113FASTLY
1104.17.25.14United States
AS13335CLOUDFLARENET
113.32.27.129New York, New York, United States
AS16509AMAZON-02
1209.94.90.1United States
AS40680PROTOCOL
1151.101.129.229San Francisco, California, United States
AS54113FASTLY
113.32.27.44New York, New York, United States
AS16509AMAZON-02
12606:4700::6810:afe2United States
AS13335CLOUDFLARENET
12606:4700::6810:aee2United States
AS13335CLOUDFLARENET
2017--

Detected Technologies8

PasswordField
100%
JQueryv3.6.0
100%
IPFS
40%
HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%
jsDelivr
20%
cdnjs
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10304FEDB1EB311085E8BB0B5A7FE6660B278D443C19DDD927C8CA059CF856E08CDAB1D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:BUbKebThmaXok/umarb+nWdXXjJb3lsCP6TxeMs5Y:B98TIjf36ncDxpP6TUMs5Y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:174684:SnAOqoKIIAARRFuFAQAUUcmCQYQQCBADHAU7JagF4ABVBIYVgYCogEEl0xSFZEiMSkEJHJKGjKTqBEwMEEAAAIqCigEkLDD6

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7ffe7e7ffff
Perceptual Hash:b399cc2699996666
Difference Hash:000808100c0c0008
Wavelet Hash:3f2727270707070f
Color Hash:#403a78

Other Hashes

Crop Resistant:000808100c0c0008

Scan History

Scan history not available

Unable to load historical scan data