bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24[.]ipfs[.]dweb[.]link

PhishDestroy identifies bafybeigda747gyefd67biccgqnhu6hd37ygyne323c2gvxz4uaioa4oz24.ipfs.dweb.link as an active generic phishing domain posing as a cryptocurrency wallet service to steal funds via a crypto drainer. The threat level is classified as elevated, indicating a high likelihood of successful fraudulent activity targeting unsuspecting users. This domain is currently operational and should be treated as a critical security risk.

This domain was flagged by 7 out of 95 VirusTotal security vendors, indicating significant malicious activity. It resolves to IP address 209.94.90.2 and is registered through CSC Corporate Domains, Inc. The domain was created on February 24, 2017, which may indicate long-standing malicious infrastructure repurposed for phishing campaigns. With a low trust score and high blocklist presence, this domain exhibits multiple red flags consistent with crypto drainer operations designed to deceive users into connecting malicious wallets.

Users are strongly advised to avoid interacting with this domain under any circumstances. If exposure has occurred, immediately revoke any connected wallet permissions and transfer remaining funds to a secure, non-compromised wallet. Verify the safety of this domain and similar URLs using PhishDestroy’s real-time threat intelligence platform to prevent financial loss. Network administrators should block this domain and IP address at the firewall level to mitigate further risk to users.