bafkreig7e4dljqmqpdycimbzyaqri4phwwen3wwtqnf4nkk7xhuf6fwe5q[.]ipfs[.]dweb[.]link

The domain bafkreig7e4dljqmqpdycimbzyaqri4phwwen3wwtqnf4nkk7xhuf6fwe5q.ipfs.dweb.link is currently active and classified as a high‑risk generic phishing infrastructure. Registration records show it was created on February 24, 2017 through CSC Corporate Domains, Inc., and it resolves to the IPv4 address 209.94.90.2. The authoritative name servers are clarissa.ns.cloudflare.com and tate.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. VirusTotal analysis reports that 7 of 91 security vendors have flagged the domain, providing modest but notable detection evidence. No public content analysis or phishing kit details are available, and the specific victim‑targeting vector remains unidentified. Defenders should prioritize blocking the domain at perimeter and DNS filtering layers, monitor outbound connections to the associated IP, and consider sinkholing the address to disrupt potential command‑and‑control traffic. Continuous threat‑intel feeds should be queried for any emerging indicators of compromise linked to this domain, and incident‑response teams should be alerted to the elevated risk profile despite the limited detection count.