bafkreid62mwynkxod6z572khttbzs62aljvp6qiac35nllmpzqamslp27u[.]ipfs[.]dweb[.]link

This domain, bafkreid62mwynkxod6z572khttbzs62aljvp6qiac35nllmpzqamslp27u.ipfs.dweb.link, poses an elevated risk of brand impersonation, specifically targeting users of generic email services. The site mimics legitimate webmail sign-in pages to trick users into entering their login credentials, potentially leading to unauthorized access and data theft. If accessed, this domain can compromise sensitive information, including email addresses, passwords, and personal data.

Analysis indicates that the domain bafkreid62mwynkxod6z572khttbzs62aljvp6qiac35nllmpzqamslp27u.ipfs.dweb.link was created on February 23, 2026, and is registered through CSC Corporate Domains, Inc. The domain is currently offline and has been flagged by 20 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion. Additionally, the domain appears on one security blocklist, further confirming its malicious nature. The IP address 209.94.90.3, located in the United States under the AS40680 Protocol Labs, is associated with this domain, providing another technical indicator of the phishing infrastructure.

If an individual has visited this domain, they should immediately change their passwords for the affected email service and any other accounts where the same password was used. Users should also monitor their email accounts for any unusual activity and consider enabling two-factor authentication (2FA) for added security. Reporting the incident to the email service provider and reviewing recent login history can help identify any unauthorized access and take necessary actions to secure the account.