bafybeibow6l2xxhkxkrjou6wfgqnfc65rmw4fcrcz6rjl4kbpv2txxml6i[.]ipfs[.]dweb[.]link

The domain bafybeibow6l2xxhkxkrjou6wfgqnfc65rmw4fcrcz6rjl4kbpv2txxml6i.ipfs.dweb.link was identified for brand impersonation targeting Lido, specifically through the use of fraudulent 'Lido Liquid Staking' content. Analysis confirms that the domain is currently offline, but historical intelligence associates it with elevated risk due to attempts at brand impersonation.

Technical indicators reveal the domain was flagged by 6 out of 95 security vendors on VirusTotal and appears on 2 independent blocklists, namely those maintained by PhishDestroy and ScamSniffer. The domain resolves to IP address 209.94.90.3 and uses an SSL certificate issued by Let's Encrypt. Technologies detected include hosting on IPFS with Cloudflare and HTTP/3 support. Registration records show the domain was created on February 24, 2017, via CSC Corporate Domains, Inc. Trust scores are notably low, with Scamadviser assigning 20/100 and Gridinsoft assigning 0/100, reflecting a strong consensus of malicious intent.

Given the domain's offline status, immediate exposure risk is reduced. However, the impersonation of a known brand and multiple security flags indicate significant threat potential if reactivated or cloned. It is recommended that users avoid any interaction with similar domains or titles referencing 'Lido Liquid Staking' outside official channels. Organizations should monitor for related domains, enforce blocklists, and educate users on recognizing brand impersonation tactics. Security teams are advised to retain this domain in monitoring feeds for rapid response should it return online.