bafybeib7qftc7bgvhkdew2purmpqalnn2knkwefxjdgeuskqd5spht4jym[.]ipfs[.]dweb[.]link

The domain bafybeib7qftc7bgvhkdew2purmpqalnn2knkwefxjdgeuskqd5spht4jym.ipfs.dweb.link has been identified as an elevated-risk brand impersonation threat, specifically targeting Generic Email services with a fake Webmail login page titled "Webmail :: Welcome to Webmail." Currently, this domain has been taken offline, but its previous activity posed a significant risk to users who may have encountered it while seeking email access.

Technical analysis reveals that this domain resolves to IP address 209.94.90.3 and was created on February 24, 2017, through registrar CSC Corporate Domains, Inc. It uses a Let's Encrypt SSL certificate (E7), which is typical for phishing sites to appear legitimate. VirusTotal flagged the domain with 17 out of 95 security vendors marking it as malicious, and it appears on two security blocklists. These indicators confirm that the site was designed to steal credentials through a convincing email login interface.

Given its elevated risk status and impersonation of a widely-used service, users should avoid any interaction with this domain. Even though it is now offline, similar threats may reappear under different addresses. PhishDestroy recommends enabling multi-factor authentication on all email accounts, using a password manager to avoid entering credentials on suspicious pages, and reporting any unsolicited login prompts to your IT security team. Regular monitoring of domain blocklists and VirusTotal can help detect emerging threats.