Security Report: bafybeia3m7nb22watkfrdim7bmek3er2dfwgic5hqru2rbvdikkuliijpy.ipfs.inbrowser.link - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/750636af-5383-4cda-8412-f69afd3ef78c Domain and IP registration (RDAP)/api/v1/rdap/750636af-5383-4cda-8412-f69afd3ef78c Certificate Transparency/api/v1/ct/bafybeia3m7nb22watkfrdim7bmek3er2dfwgic5hqru2rbvdikkuliijpy.ipfs.inbrowser.link How often this domain was scanned/api/v1/domain/stats/bafybeia3m7nb22watkfrdim7bmek3er2dfwgic5hqru2rbvdikkuliijpy.ipfs.inbrowser.link Scan history for this domain/api/v1/domain/history/bafybeia3m7nb22watkfrdim7bmek3er2dfwgic5hqru2rbvdikkuliijpy.ipfs.inbrowser.link?limit=15

This website contacted 12 IPs in 2 countries across 10 domains to perform 34 HTTP transactions. The main domain is bafybeia3m7nb22watkfrdim7bmek3er2dfwgic5hqru2rbvdikkuliijpy.ipfs.inbrowser.link and was registered 13 years ago.

Submitted URL: https://bafybeia3m7nb22watkfrdim7bmek3er2dfwgic5hqru2rbvdikkuliijpy.ipfs.inbrowser.link

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Fake myGov sign-in on an IPFS gateway. It impersonates the Australian Government's myGov, collects email, password, SMS code, security questions and licence details, and JavaScript forwards the credentials to an external server.

Risk Factors (5)

Impersonation of a different entity's brand (myGov / Australian Government) on a non-official domain

Credential-harvesting form: password, email, SMS one-time code, security questions, driver's licence and date of birth

JavaScript exfiltration of the entered email and password to an external server

Phishing page hosted on decentralised IPFS storage with no accountable operator

External IP-lookup calls used to fingerprint and log victims

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: -862903406

MD5: 5710683f193422a2633fbfeb7739727e

Domain Name Analysis

Within the .link top-level domain, 'bafybeia3m7nb22watkfrdim7bmek3er2dfwgic5hqru2rbvdikkuliijpy.ipfs.inbrowser.link' is registered with subdomain 'bafybeia3m7nb22watkfrdim7bmek3er2dfwgic5hqru2rbvdikkuliijpy.ipfs'. The second-level label 'inbrowser' is 9 characters long split between 3 vowels and 6 consonants. Word splitting yields 2 words: in, browser. Expect 4.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.26s

Total Load Time

226 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:3,648 chars

Detector Agreement:75%

Website Classification

Primary Category

adult content88% confidence

Type: webapp

Method: ml+structural

All Detected Categories

adult content

88%

education learning

71%

entertainment media

57%

government public service

52%

documentation technical

41%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	209.94.90.3	United States	AS40680Protocol Labs
2	151.101.193.155Fastly · CDN	United States	AS54113Fastly, Inc.
2	198.59.144.172	United States	AS17378TierPoint, LLC
2	142.251.20.95Google · CDN	United States	AS15169Google LLC
2	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.14.94Google · CDN	United States	AS15169Google LLC
2	172.67.69.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	209.94.90.2	United States	AS40680Protocol Labs
2	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
34	12	-	-