Is log4j.properties safe?
http://log4j.properties/
Coveragepartial0 of 5 applicable core capabilities
Domain named after a Java config file with minimal placeholder text and a single malware detection from Fortinet.
The address log4j.properties mimics the name of a common Java configuration file and shows almost no real website content. One security engine flagged it as malware while browser blocklists stayed clean and no scam reports exist. Treat it as untrustworthy and do not click or enter information.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
The page loads a bare title and a single line of text inviting the visitor to click, with zero contact details, business information, or functional content. Fortinet flagged the page as malware while alphaMountain.ai marked it suspicious, even though the rest of our antivirus network and browser blocklists returned clean. The domain itself is over ten years old yet shows no traffic ranking, no search presence, and no evidence of ever operating as a legitimate site. Our research found zero scam reports or complaints, which is consistent with a low-traffic or unused domain rather than proof of safety. The combination of an odd filename-style domain, lack of any real business footprint, and the malware detection is enough to classify the site as suspicious.
Page Content
The page contains only the title "log4j.properties" and the phrase "Click here to enter." No emails, phone numbers, addresses, login forms, or business details are present.
Infrastructure
Hosted on IP 103.224.182.246 with a valid Let's Encrypt certificate. The IP carries zero abuse reports. One engine (Fortinet) detected malware and another flagged it suspicious.
Domain History
Registered 3871 days ago through GoDaddy with no privacy protection. Despite the age, the domain has never appeared in search results as an active website or business.
Web Reputation
No scam reports, reviews, or business registrations were located. The name matches a standard Apache Log4j configuration file rather than any known company or service.
Why the score is 25
Saved antivirus evidence is adverse but no longer fresh. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
2/ 92
detectionsSaved result
2 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 1
- Suspicious
- 1
- Total
- 92
| Engine | Finding |
|---|---|
| FortinetMalicious | malware |
| alphaMountain.aiSuspicious | suspicious |
All 92 engine results
- Fortinet - malware - Malicious
- alphaMountain.ai - suspicious - Suspicious
- 0xSI_f33d - unrated - Clean
- Abusix - clean - Clean
- Acronis - clean - Clean
- ADMINUSLabs - clean - Clean
- AILabs (MONITORAPP) - clean - Clean
- AlienVault - clean - Clean
- AlphaSOC - unrated - Clean
- Antiy-AVL - clean - Clean
- ArcSight Threat Intelligence - unrated - Clean
- AutoShun - unrated - Clean
- Bfore.Ai PreCrime - unrated - Clean
- BitDefender - clean - Clean
- Bkav - unrated - Clean
- BlockList - clean - Clean
- Blueliv - clean - Clean
- Certego - clean - Clean
- ChainPatrol - unrated - Clean
- Chong Lua Dao - clean - Clean
- CINS Army - clean - Clean
- Cluster25 - unrated - Clean
- CRDF - clean - Clean
- Criminal IP - clean - Clean
- CSIS Security Group - unrated - Clean
- CTX AI - clean - Clean
- Cyan - unrated - Clean
- Cyble - clean - Clean
- CyRadar - clean - Clean
- desenmascara.me - clean - Clean
- DNS8 - clean - Clean
- Dr.Web - clean - Clean
- EmergingThreats - clean - Clean
- Emsisoft - clean - Clean
- Ermes - unrated - Clean
- ESET - clean - Clean
- ESTsecurity - clean - Clean
- Forcepoint ThreatSeeker - clean - Clean
- G-Data - clean - Clean
- GCP Abuse Intelligence - unrated - Clean
- Google Safebrowsing - clean - Clean
- GreenSnow - clean - Clean
- GreyNoise - unrated - Clean
- Gridinsoft - unrated - Clean
- Guardpot - unrated - Clean
- Heimdal Security - clean - Clean
- Hunt.io Intelligence - unrated - Clean
- IPsum - clean - Clean
- Juniper Networks - clean - Clean
- K7AntiVirus - unrated - Clean
- Kaspersky - clean - Clean
- LevelBlue - clean - Clean
- Lionic - clean - Clean
- Lumu - unrated - Clean
- Malwared - clean - Clean
- MalwarePatrol - clean - Clean
- MalwareURL - unrated - Clean
- Mimecast - unrated - Clean
- Netcraft - unrated - Clean
- OpenPhish - clean - Clean
- PhishFort - unrated - Clean
- Phishing Database - clean - Clean
- PhishLabs - unrated - Clean
- Phishtank - clean - Clean
- PREBYTES - clean - Clean
- PrecisionSec - unrated - Clean
- Quick Heal - clean - Clean
- Quttera - clean - Clean
- Rising - clean - Clean
- SafeToOpen - unrated - Clean
- Sangfor - clean - Clean
- Sansec eComscan - unrated - Clean
- Scantitan - clean - Clean
- SCUMWARE.org - clean - Clean
- Seclookup - clean - Clean
- Snort IP sample list - unrated - Clean
- SOCRadar - unrated - Clean
- Sophos - clean - Clean
- StopForumSpam - clean - Clean
- Sucuri SiteCheck - clean - Clean
- ThreatHive - clean - Clean
- URLhaus - clean - Clean
- URLQuery - unrated - Clean
- Viettel Threat Intelligence - clean - Clean
- VIPRE - unrated - Clean
- ViriBack - clean - Clean
- VX Vault - clean - Clean
- Webroot - clean - Clean
- Xcitium Verdict Cloud - clean - Clean
- Yandex Safebrowsing - clean - Clean
- ZeroCERT - clean - Clean
- ZeroFox - unrated - Clean
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
03 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainlog4j.properties
- Redirects tolog4j.properties
- Hosted byTrellian Pty. Limited
Domain Timeline
- Oct 24, 2015Domain registered
First appeared in WHOIS records — 11 years old today.
- May 30, 2026Saved security review — Flagged as suspicious
The completed checks from this saved scan are detailed above.
log4j.properties is an established domain now carrying threat signals. An older domain that starts tripping security checks is a classic pattern for an asset that was sold, repurposed, or compromised — the age alone is not reassurance.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No contact email found anywhere on the page.
- No phone number listed on the page.
- No postal address visible on the page.
Domain & Encryption
Server Reputation
04 · Evidence Ledger
Evidence ledger
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding |
|---|---|---|---|
| Antivirus | 2 of 92 engines flagged | Completed | Adverse |
| Browser protection | No browser threat-list match | Completed | No adverse finding |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding |
| Visual evidence | No usable visual evidence was saved | Unavailable | No saved finding |
| Independent research | Independent research was not available for this report | Unavailable | No saved finding |
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- FreshnessNot available
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompleted
- FindingNo adverse finding
- FreshnessNot available
- Visual evidence
- ResultNo usable visual evidence was saved
- CompletionUnavailable
- FindingNo saved finding
- FreshnessNot available
- Independent research
- ResultIndependent research was not available for this report
- CompletionUnavailable
- FindingNo saved finding
- FreshnessNot available
06 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is log4j.properties a scam or a legit website?
Is log4j.properties safe to use?
I already paid or entered my details on log4j.properties — what should I do?
Can I get my money back from log4j.properties?
Is my device at risk after visiting log4j.properties?
How do I report log4j.properties?
log4j.properties looks professional — how can it still be a scam?
Has log4j.properties been flagged by antivirus engines?
Is log4j.properties on any phishing or malware blacklists?
How old is the log4j.properties domain?
Does log4j.properties have a valid SSL certificate?
How often is the log4j.properties report updated?
07 · Final Verdict
Final verdict
Domain named after a Java config file with minimal placeholder text and a single malware detection from Fortinet.
The written conclusion remains part of the saved report.
The address log4j.properties mimics the name of a common Java configuration file and shows almost no real website content. One security engine flagged it as malware while browser blocklists stayed clean and no scam reports exist. Treat it as untrustworthy and do not click or enter information.
08 · Community