bafybeicaewgymopbegfhghz7q4fn2fiv7w23w3m5z4vwrxcilbbhcyxgue[.]ipfs[.]dweb[.]link

This domain, bafybeicaewgymopbegfhghz7q4fn2fiv7w23w3m5z4vwrxcilbbhcyxgue.ipfs.dweb.link, is identified as a high-risk generic phishing threat targeting users through deceptive content hosted on IPFS infrastructure. Analysis indicates the domain is designed to mimic legitimate services or prompts, tricking users into divulging sensitive credentials, financial details, or personal information. The use of decentralized web protocols like IPFS complicates takedown efforts, increasing the persistence of this threat. Evidence supporting this classification includes detection by 20 out of 95 security vendors on VirusTotal, with the domain appearing on one security blocklist as of the latest assessment. Infrastructure analysis reveals the domain was registered on June 08, 2026, through CSC Corporate Domains, Inc., and currently resolves to the IP address 209.94.90.3. The SSL certificate, issued by Let's Encrypt (serial number E8), does not mitigate the malicious intent, as phishing domains frequently leverage valid certificates to appear legitimate. Users who have visited this domain or interacted with its content should immediately revoke any credentials entered, particularly if they were prompted for login details, payment information, or other sensitive data. Network administrators are advised to block the domain and its resolving IP address (209.94.90.3) at the perimeter level. Additionally, affected systems should be scanned for malware or unauthorized access, and any suspicious browser extensions or downloaded files associated with this domain should be removed. Monitoring for unusual account activity is recommended, especially for financial or identity-related services.