bafkreiew7w6k3ryybdumpzpuaxenhl7btkqqdb6ss7aza5plujnxjk7jmm[.]ipfs[.]dweb[.]link

This domain is flagged as a high-risk generic phishing threat targeting Rackspace Webmail users. The domain resolves to IP 209.94.90.3, hosted on AS40680 (Protocol Labs) in the United States, and is served via IPFS and Cloudflare infrastructure with HTTP/3 support. The page title is 'Rackspace Webmail: Hosted Email for Business', indicating a credential-harvesting page. The domain was created on February 24, 2017, and registered through CSC Corporate Domains, Inc. Its nameservers are clarissa.ns.cloudflare.com and tate.ns.cloudflare.com. The SSL certificate is issued by Let's Encrypt (serial E8). VirusTotal analysis shows 13 of 91 security vendors flagging the domain. Gridinsoft trust score is 0/100. The domain appears on one security blocklist and is currently blocked by PhishDestroy. Analysis confirms the domain is still active and responding with HTTP status 200. Defenders should block this domain at the network level, add it to email and web gateway blocklists, and monitor for any related subdomains or IPFS hashes. Users who may have visited the page should reset their Rackspace Webmail credentials immediately and enable multi-factor authentication.