bafkreie73naukae7z7dex2ermiyscnnfzmzp4afrtx2tv2kqzeitzvej7u[.]ipfs[.]dweb[.]link

This domain, bafkreie73naukae7z7dex2ermiyscnnfzmzp4afrtx2tv2kqzeitzvej7u.ipfs.dweb.link, is flagged for credential phishing and poses a high risk. It was registered through CSC Corporate Domains, Inc. on April 26, 2026, and is currently active. The domain resolves to the IP address 209.94.90.2, which is located in the United States and is associated with Protocol Labs. Infrastructure analysis reveals that the domain uses Cloudflare for DNS, with nameservers clarissa.ns.cloudflare.com and tate.ns.cloudflare.com. The site is served over HTTP/3 and is secured with a Let's Encrypt SSL certificate (E8). The page title is 'EmailLogin', suggesting that the site may be designed to mimic a legitimate email login portal to steal credentials. The domain appears on one security blocklist and is blocked by PhishDestroy. Out of 91 security vendors, 20 have flagged this domain as malicious. Defenders are advised to monitor traffic to this domain, block access if possible, and educate users about the risks of credential phishing. Further analysis of the site's content is recommended to confirm the exact nature of the threat and to identify any specific targets.