# bafybeihms75acvcjt3g7klkxbpa4v2j2umkuhibbfnqtcc4vz4oauh7h3y.ipfs.dweb.link — SUSPICIOUS

> Warning: bafybeihms75acvcjt3g7klkxbpa4v2j2umkuhibbfnqtcc4vz4oauh7h3y.ipfs.dweb.link may be a generic phishing site. Verify safety on PhishDestroy.

## Summary
PhishDestroy is currently investigating bafybeihms75acvcjt3g7klkxbpa4v2j2umkuhibbfnqtcc4vz4oauh7h3y.ipfs.dweb.link, which is suspected of being involved in generic phishing activities. The domain is currently marked as active and under investigation, requiring cautious assessment before interaction. The absence of specific brand impersonation suggests a broad, non-targeted phishing campaign.  

Technical analysis reveals that the domain was registered through CSC Corporate Domains, Inc. and utilizes an SSL certificate issued by Let's Encrypt. It resolves to the IP address 209.94.90.3. The domain was created on February 24, 2017. Notably, at the time of analysis, VirusTotal reports 0 out of 95 vendors flagging the domain as malicious. This could indicate either a newly established threat or sophisticated obfuscation techniques designed to evade detection.  

Given the 'under_investigation' risk level and lack of conclusive negative reports from VirusTotal, caution is advised. Users are strongly recommended to avoid entering any personal information or credentials on this website. PhishDestroy continues to monitor this domain. Further updates will be provided as the investigation progresses. Users are encouraged to report any suspicious activity encountered while interacting with this domain to assist in the investigation.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2017-02-24 01:05:27
- Registrar: CSC Corporate Domains, Inc.
- IP: 209.94.90.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/bafybeihms75acvcjt3g7klkxbpa4v2j2umkuhibbfnqtcc4vz4oauh7h3y.ipfs.dweb.link
- PhishDestroy: https://phishdestroy.io/domain/bafybeihms75acvcjt3g7klkxbpa4v2j2umkuhibbfnqtcc4vz4oauh7h3y.ipfs.dweb.link/
- LLM endpoint: https://phishdestroy.io/domain/bafybeihms75acvcjt3g7klkxbpa4v2j2umkuhibbfnqtcc4vz4oauh7h3y.ipfs.dweb.link/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/bafybeihms75acvcjt3g7klkxbpa4v2j2umkuhibbfnqtcc4vz4oauh7h3y.ipfs.dweb.link/
Last updated: 2026-04-04