bafybeigskpiydswbmhso7ab47cpnnee7rlc4q7a2ykpoxz4fo3ducinra4[.]ipfs[.]dweb[.]link

This domain, bafybeigskpiydswbmhso7ab47cpnnee7rlc4.ipfs.dweb.link, operates as a generic phishing site designed to deceive users into entering sensitive credentials. The page displays a fraudulent "Secure Document Access" interface, a common tactic to trick individuals into submitting login details under the guise of accessing restricted files or documents. Once credentials are entered, attackers harvest them for unauthorized access to accounts, financial fraud, or further phishing campaigns targeting contacts or organizations. Analysis indicates the domain was created on November 29, 2021, and is registered through CSC Corporate Domains, Inc. It resolves to the IP address 209.94.90.3, hosted on AS40680 (Protocol Labs) infrastructure in the United States. Security vendors on VirusTotal flagged this domain as malicious, with 23 out of 95 engines detecting it as a phishing threat. The domain also appears on at least one security blocklist, and its SSL certificate, issued by Let's Encrypt (serial number E7), does not mitigate the risk, as phishing sites frequently use valid certificates to appear legitimate. If you visited this domain or entered any information, take immediate action to secure your accounts. First, change passwords for any accounts accessed or credentials entered on the site, prioritizing email, financial, and work-related logins. Enable multi-factor authentication (MFA) where available to add an extra layer of security. Monitor accounts for unauthorized activity, such as unfamiliar transactions, password reset emails, or login attempts from unknown locations. If financial or corporate credentials were exposed, notify the relevant institution or IT security team. Finally, scan your device for malware using updated security software, as phishing sites may attempt to deliver additional payloads.