bafkreicsvwtgwhy5bpcajytwbwkrd23yquvf75un33gdfuq4gkq67uau6u[.]ipfs[.]dweb[.]link

This domain, bafkreicsvwtgwhy5bpcajytwbwkrd23yquvf75un33gdfuq4gkq67uau6u.ipfs.dweb.link, posed a generic phishing threat by hosting a fake login page titled 'EmailLogin'. Such sites often aim to unlawfully acquire user credentials by impersonating legitimate email service login pages. The domain was flagged for an elevated risk level due to its intent to deceive users into providing sensitive information, potentially leading to unauthorized access to personal accounts and data breaches.

Analysis reveals that this domain was created on May 06, 2026, and was subsequently identified by security systems as malicious. The domain was detected by 17 out of 95 security vendors on VirusTotal, indicating significant consensus about its phishing nature. Registered through CSC Corporate Domains, Inc., it resolved to an IP address located in the US, associated with Protocol Labs. The domain's risk was further confirmed as it appeared on at least one security blocklist and was actively blocked by PhishDestroy. It employed a Let's Encrypt SSL certificate, which, while legitimate, is commonly utilized by threat actors to lend credibility to malicious sites.

If you have visited this domain or entered your login credentials on its page, it is critical to take immediate action to secure your accounts. Start by changing passwords for the affected email account and any other accounts using the same credentials. Enable multi-factor authentication (MFA) to add an additional layer of security. Monitor your accounts for any suspicious activities and unauthorized access. Additionally, consider running a full security scan on your devices to detect any malware that might have been inadvertently installed. Remaining vigilant and proactive is crucial in mitigating the risks associated with exposure to a phishing domain.