bafkreiamshk3z7tdum4vus7rfss7am77apsb5ahyk2xej4z4slsf3emyne[.]ipfs[.]dweb[.]link

This domain presents an elevated risk due to its classification as a generic phishing threat. It was flagged by 20 out of 95 security vendors on VirusTotal, indicating a significant number of engines consider it malicious. The domain was registered through CSC Corporate Domains, Inc. and resolves to IP address 209.94.90.3. Its SSL certificate was issued by Let's Encrypt, a common certificate authority. The domain is currently offline, but the prior indicators suggest it was used for deceptive activities aimed at credential theft or malware distribution.

Technical indicators reveal a clear risk profile. VirusTotal flagged the domain with 20/95 detections, a concerning ratio that underscores its malicious nature. The domain was registered via CSC Corporate Domains, Inc., a legitimate registrar often abused by threat actors. The IP address 209.94.90.3 may host other malicious domains. The SSL certificate from Let's Encrypt provided a veneer of legitimacy. Blocklists and trust scores likely classified this domain as high-risk, leading to its offline status. The unique seed d85633 is used to differentiate this report.

Mitigation against generic phishing threats requires user vigilance and technical controls. Organizations should implement email filtering that blocks known malicious domains and IPs. Users should avoid clicking links from unknown sources and verify URLs before entering credentials. Multi-factor authentication can prevent account compromise even if credentials are stolen. Regular security awareness training helps users recognize phishing lures. Since the domain is offline, immediate action is not needed, but monitoring for similar domains is advised.