Is log4j.properties safe?
http://log4j.properties/
Checked on
How we checked
Coverage: partial · 0 of 5 applicable core capabilities
- Antivirus (61 of 92 engines answered): completed
- Google Safe Browsing: completed
- page reading: completed
- page capture · not available: did not fully complete
- domain records: completed
- web research · not run: did not fully complete
Domain named after a Java config file with minimal placeholder text and a single malware detection from Fortinet.
The address log4j.properties mimics the name of a common Java configuration file and shows almost no real website content. One security engine flagged it as malware while browser blocklists stayed clean and no scam reports exist. Treat it as untrustworthy and do not click or enter information.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 25/100
High Risk covers scores 21–44. 1 finding pulled the score down.
What pulled the score down
- ReasonSaved antivirus evidence is adverse but no longer fresh
What pushed the score up
No supporting finding was saved with this report.
This report saved its reasons without a severity for each one, so they are listed as saved. Community reviews never change the Safety Score.
Lost money or shared details on log4j.properties? Do this now
Act quickly: the first hours matter most for a chargeback.
- Call your bank or card issuer now
Ask them to dispute the charge or open a chargeback; the sooner you act, the better your odds. Card payments can often be reversed. Bank transfers and gift cards are harder, but report them to your bank too. Crypto payments usually cannot be reversed: report the wallet address and transaction ID to the exchange you sent from.
- Change any password you entered
If you entered a password on log4j.properties, change it there and anywhere you reused it, and turn on two-factor authentication. Keep screenshots, order confirmations and messages as evidence.
- Report the site
Reports help get scam sites taken down faster and warn other people.
- Report the domain to its registrar
GoDaddy.com, LLC registered this domain. ICANN's lookup shows the registrar's abuse contact.
- Ignore anyone offering to recover your money
"Recovery" services or agents who contact you, or ask for a fee up front, are almost always a second scam aimed at victims. Your bank's dispute process and the official reporting services never charge a fee in advance.
Full answers about refunds and reporting are in the Safety FAQ below.
01 · Investigation Brief
Investigation Brief
The page loads a bare title and a single line of text inviting the visitor to click, with zero contact details, business information, or functional content. Fortinet flagged the page as malware while alphaMountain.ai marked it suspicious, even though the rest of our antivirus network and browser blocklists returned clean. The domain itself is over ten years old yet shows no traffic ranking, no search presence, and no evidence of ever operating as a legitimate site. Our research found zero scam reports or complaints, which is consistent with a low-traffic or unused domain rather than proof of safety. The combination of an odd filename-style domain, lack of any real business footprint, and the malware detection is enough to classify the site as suspicious.
Page Content
The page contains only the title "log4j.properties" and the phrase "Click here to enter." No emails, phone numbers, addresses, login forms, or business details are present.
Infrastructure
Hosted on IP 103.224.182.246 with a valid Let's Encrypt certificate. The IP carries zero abuse reports. One engine (Fortinet) detected malware and another flagged it suspicious.
Domain History
Registered 3871 days ago through GoDaddy with no privacy protection. Despite the age, the domain has never appeared in search results as an active website or business.
Web Reputation
No scam reports, reviews, or business registrations were located. The name matches a standard Apache Log4j configuration file rather than any known company or service.
Why the score is 25
Saved antivirus evidence is adverse but no longer fresh. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
2/ 92
detectionsSaved analysis from May 27, 2026
2 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 1
- Suspicious
- 1
- Total
- 92
| Engine | Finding |
|---|---|
| FortinetMalicious | malware |
| alphaMountain.aiSuspicious | suspicious |
All 92 engine results
- Fortinet - malware - Malicious
- alphaMountain.ai - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- Cluster25 - Unrated
- CRDF - Clean
- Criminal IP - Clean
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Clean
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safebrowsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Gridinsoft - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- PhishFort - Unrated
- Phishing Database - Clean
- PhishLabs - Unrated
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
How security vendors categorise this site
- alphaMountain.aiSuspicious
- BitDefenderbusiness
- Forcepoint ThreatSeekeradvertisements
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What the page says about itself
What the site says about itself, quoted from the pages we read. The site wrote these words; they are not our findings.
- Page title
log4j.properties
Pages we read
- Main page/Read
03 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainlog4j.properties
- Redirects tolog4j.properties
- Hosted byTrellian Pty. Limited
Domain Timeline
- Oct 24, 2015Domain registered
First appeared in WHOIS records — 10 years old when this review was saved.
- May 30, 2026Saved security review — Rated High Risk
The completed checks from this saved scan are detailed above.
log4j.properties is an established domain now carrying threat signals. An older domain that starts tripping security checks is a classic pattern for an asset that was sold, repurposed, or compromised — the age alone is not reassurance.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No contact email found anywhere on the page.
- No phone number listed on the page.
- No postal address visible on the page.
Domain & Encryption
Certificate issued for whiteprice.it.
A shared content-delivery network address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Payment providers the page loads
None seen among the outside domains we saved.
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Server Reputation
04 · Evidence Ledger
Evidence ledger
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 2 of 92 engines flagged | Completed | Adverse | saved result · analysed May 27, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · May 30, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · May 30, 2026 |
| Visual evidence | No usable visual evidence was saved | Unavailable | No saved finding | Not available |
| Independent research | Independent research was not available for this report | Unavailable | No saved finding | Not available |
- Antivirus
- Result2 of 92 engines flagged
- CompletionCompletedFindingAdverse
- Freshnesssaved result · analysed May 27, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · May 30, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · May 30, 2026
- Visual evidence
- ResultNo usable visual evidence was saved
- CompletionUnavailableFindingNo saved finding
- FreshnessNot available
- Independent research
- ResultIndependent research was not available for this report
- CompletionUnavailableFindingNo saved finding
- FreshnessNot available
06 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is log4j.properties a scam or a legit website?
Is log4j.properties safe to use?
I already paid or entered my details on log4j.properties — what should I do?
Can I get my money back from log4j.properties?
Is my device at risk after visiting log4j.properties?
How do I report log4j.properties?
log4j.properties looks professional — how can it still be a scam?
Has log4j.properties been flagged by antivirus engines?
Is log4j.properties on any phishing or malware blacklists?
How old is the log4j.properties domain?
Does log4j.properties have a valid SSL certificate?
How often is the log4j.properties report updated?
07 · Final Verdict
Final verdict
Domain named after a Java config file with minimal placeholder text and a single malware detection from Fortinet.
The written conclusion remains part of the saved report.
The address log4j.properties mimics the name of a common Java configuration file and shows almost no real website content. One security engine flagged it as malware while browser blocklists stayed clean and no scam reports exist. Treat it as untrustworthy and do not click or enter information.
08 · Community
Community
Are you the owner of log4j.properties?Verify and reply