ScanMalware.com

Security Scan Report: ipfs.io

Submitted: Oct 16, 2025, 3:10:00 AMCompleted: Oct 16, 2025, 3:13:00 AMpubliccompleted
Loading additional data...

Summary

This website contacted 37 IPs in 2 countries across 11 domains to perform 15 HTTP transactions. The main domain is ipfs.io and was registered NaN years ago.

Submitted URL: https://ipfs.io/ipfs/bafkreiedyix64yjq3kbupem3i3ko2afia4tzpthk4ukkn4227cb2nydhn4?filename=delivery_for-now.html

AI Security Verdict

High Risk

Confidence: 92%

7
Risk Score

High‑risk phishing page; do not enter credentials.

Risk Factors
Credential harvesting form on IPFS-hosted content
IPFS gateway domain is not typical for authentication services
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Language

🇺🇸

English

(53% confidence)

Category

adult content

(28%)

Domain Information

The domain 'ipfs.io' uses the British Indian Ocean Territory country-code top-level domain (.io). The registrable portion 'ipfs' spans 4 characters with 1 vowel and 3 consonants. Word splitting yields 2 words: i, pfs. Median word length comes out to 2 characters. Most frequently, 'i' shows up in English. Usage also turns up in Chinese (Pinyin) and Bosnian contexts.

Screenshot

Security scan screenshot of https://ipfs.io/ipfs/bafkreiedyix64yjq3kbupem3i3ko2afia4tzpthk4ukkn4227cb2nydhn4?filename=delivery_for-now.html

Page Load Overview

1.51s
Total Load Time
15
HTTP Requests
11
Domains
278 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:53%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:53%
Script Type:Latin
HTML Lang Attribute:已下架
Text Length:219 chars
Detector Agreement:100%
Language mismatch: Declared as 已下架 but detected as en

Website Classification

Primary Category

adult content28% confidence
Type: webapp
Method: ml+structural

All Detected Categories

adult content
28%
finance banking
28%
news media journalism
28%
government public service
27%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3151.101.130.137San Francisco, California, United States
AS54113FASTLY
2142.250.184.202United States
AS15169GOOGLE
2104.17.24.14United States
AS13335CLOUDFLARENET
1142.250.186.74United States
AS15169GOOGLE
152.70.241.141Ashburn, Virginia, United States
AS14618AMAZON-AES
1104.18.11.207United States
AS13335CLOUDFLARENET
1142.250.185.100United States
AS15169GOOGLE
1172.64.147.188United States
AS13335CLOUDFLARENET
1104.18.10.207United States
AS13335CLOUDFLARENET
1209.94.90.1United States
AS40680PROTOCOL
1537--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1614484B0E20C20DA7336C44FBF81B6A962B5F369D5514DA6F21F6C5C4EC268611E2F39

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:LIlMIpu80PxXE4YXJgndFTfy9lQOw/71gIuiHlqqm68lDbNBmbhqNyH6b2Ic7c1W:Ji8Px04YXGdFTyHQ/Z6whHMG00FX

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:260810:EMQJQFABIYowSWA3oUGUPgAAiIMADaGVkRJkBwKoDEQMREB0JNE4DohE6iR4eSAQAFhOCQEYiiDsE4AjQkIWYbPA7quHPWlQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181818000000
Perceptual Hash:88cc3333337733cc
Difference Hash:4db3b3b3b34d3101
Wavelet Hash:2f1b1b1b19050d0d
Color Hash:#931f5d

Other Hashes

Crop Resistant:b3b3b3b3b3b3b3b3,8a88b2a280333382,4cb2b2b2b24c3000

Scan History

Scan history not available

Unable to load historical scan data