bafkreiftx3ioy3hebqsyco4cp6r35k47joehzs4mv52ty7awn7qfq27e4y[.]ipfs[.]dweb[.]link

The domain bafkreiftx3ioy3hebqsyco4cp6r35k47joehzs4mv52ty7awn7qfq27e4y.ipfs.dweb.link, titled 'EmailLogin', is identified as a generic phishing threat. This domain is designed to mimic legitimate email login pages to steal user credentials and sensitive information. The domain employs deceptive techniques to trick users into believing they are accessing a trusted service.

Analysis indicates that the domain was created on June 12, 2026, and is registered through CSC Corporate Domains, Inc. The site has been flagged by 18 out of 95 security vendors on VirusTotal, highlighting the elevated risk associated with this domain. Additionally, it appears on one security blocklist and is currently blocked by the PhishDestroy service. The domain resolves to the IP address 209.94.90.2, which may be part of a larger phishing infrastructure.

Users who may have visited this domain are advised to change their email passwords immediately and enable multi-factor authentication (MFA) if available. It is also recommended to monitor account activity for any unauthorized access or suspicious transactions. Reporting the incident to the email service provider and reviewing security settings can further mitigate potential risks. Organizations should update their security policies and conduct awareness training to prevent similar attacks.