bafkreiempb2nrhxnjx3x5vd44rnyfjeuqs6occqahbpvb75ptywxfffeem[.]ipfs[.]dweb[.]link

This domain is flagged as a credential theft threat targeting users through a fraudulent email login interface. The page title 'EmailLogin' suggests an attempt to impersonate legitimate email service providers, tricking visitors into entering sensitive account details. Such attacks typically harvest credentials for unauthorized access to personal or corporate accounts, leading to data breaches or further malicious activity. Analysis indicates the domain was created on April 27, 2026, and is registered through CSC Corporate Domains, Inc. It resolves to the IP address 209.94.90.2, hosted in the United States under Protocol Labs. VirusTotal reports that 21 out of 95 security vendors have flagged this domain as malicious, and it appears on one security blocklist. The SSL certificate is issued by Let's Encrypt, a common tactic to lend false legitimacy to phishing sites. If you visited this domain, immediately cease all interaction and do not enter any credentials. Change passwords for any accounts accessed from the same device or network, prioritizing email and financial services. Enable multi-factor authentication where available. Scan the device for malware using updated security tools, as credential theft sites may deploy additional payloads. Monitor accounts for unauthorized activity and report the incident to your organization's security team or a trusted cybersecurity professional.