Security Report: jul-lhbedal7-joshkemi21-netizen.ipfs.4everland.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c16feeaf-77e4-4584-b2fa-099cba190c5e Domain and IP registration (RDAP)/api/v1/rdap/c16feeaf-77e4-4584-b2fa-099cba190c5eHow often this domain was scanned/api/v1/domain/stats/jul-lhbedal7-joshkemi21-netizen.ipfs.4everland.app Scan history for this domain/api/v1/domain/history/jul-lhbedal7-joshkemi21-netizen.ipfs.4everland.app?limit=15

This website contacted 7 IPs in 2 countries across 4 domains to perform 7 HTTP transactions. The main domain is 4everland.app and was registered 5 years ago.

Submitted URL: https://jul-lhbedal7-joshkemi21-netizen.ipfs.4everland.app/[email protected]

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Fake Roundcube Webmail login hosted on IPFS that captures the entered username and password and posts them to an unrelated external domain (mybestjobs.co.ke). Clear credential phishing.

Risk Factors (5)

Brand impersonation of Roundcube Webmail on an unrelated IPFS host

Credential-harvesting login form (username + password) with pre-filled victim email address

Cross-origin POST of form data to mybestjobs.co.ke/gth/next.php — credential exfiltration

Decentralised IPFS hosting used to host a phishing kit

Unranked, unmoderated host with no legitimate relationship to the impersonated webmail service

Domain age information unavailable

Details

Page Title

Roundcube Webmail :: Welcome to Roundcube Webmail

Scan Type

public

Favicon Hash

MMH3: -1754690812

MD5: 924a68d347c80d0e502157e83812bb23

Domain Name Analysis

Domain 'jul-lhbedal7-joshkemi21-netizen.ipfs.4everland.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'jul-lhbedal7-joshkemi21-netizen.ipfs'. The second-level label '4everland' is 9 characters long holding 3 vowels versus five consonants, along with 1 digit. Word splitting yields 3 words: 4, ever, land. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.96s

Total Load Time

160 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:73 chars

Detector Agreement:100%

Website Classification

Primary Category

news media journalism55% confidence

Type: webapp

Method: ml+structural

All Detected Categories

news media journalism

55%

cryptocurrency blockchain

44%

technology software

33%

government public service

29%

healthcare medical

29%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	94.136.171.57	United Kingdom	AS42831UK Dedicated Servers Limited
1	104.16.80.73Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.16.79.73Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	7	-	-