bafkreib5mrjwebbo6zkl2aobv4ttc77b2uhi3m4p7lammiu6eszfbw7hgi[.]ipfs[.]dweb[.]link

The domain bafkreib5mrjwebbo6zkl2aobv4ttc77b2uhi3m4p7lammiu6eszfbw7hgi.ipfs.dweb.link has been identified as an elevated-risk generic phishing threat, specifically designed for credential theft. The page title "EmailLogin" suggests it mimics a legitimate email login portal to harvest user credentials. Although currently offline, this domain was active and posed a significant risk to unsuspecting visitors.

Detailed analysis reveals that the domain resolves to IP address 209.94.90.2 and was created on May 21, 2026, through CSC Corporate Domains, Inc. It uses a Let's Encrypt SSL certificate (E8) to appear legitimate. VirusTotal data shows that 22 out of 95 security vendors flag this domain as malicious, and it appears on one security blocklist. These indicators confirm the domain's involvement in phishing campaigns targeting login credentials.

As the domain is now offline, the immediate threat is mitigated, but users should remain vigilant. PhishDestroy recommends avoiding any interaction with such domains, never entering credentials on suspicious login pages, and enabling two-factor authentication on all accounts. Regularly monitor accounts for unauthorized access and report phishing attempts to relevant authorities. Always verify URLs before entering sensitive information.