bafkreic5uw3oab5jinlvplbkmngjvh7r3crjwznotl7jjgt7tkyzyvm75a[.]ipfs[.]dweb[.]link

This domain poses an elevated risk as a credential theft phishing site, specifically targeting users by imitating an email login page. The threat is categorized as generic phishing, but the page title 'EmailLogin' strongly suggests an attempt to steal login credentials. The domain was taken offline after being flagged, but its presence on IPFS (a decentralized file system) makes it resilient to takedowns.

Key indicators include a VirusTotal detection rate of 20 out of 95 security vendors, meaning over 20% of scanners flagged it as malicious. The domain was registered through CSC Corporate Domains, Inc. and resolves to IP address 209.94.90.3. It was created on April 26, 2026, and uses a Let's Encrypt SSL certificate (E8). It appears on one security blocklist and has a low trust score. The domain's IPFS nature also complicates analysis and removal.

To mitigate this threat, users should avoid entering any credentials on pages resembling this domain, especially those that prompt for email login. Enable multi-factor authentication on all email accounts and monitor for unauthorized access. Since the site is now offline, the immediate risk is reduced, but users who may have interacted with it should change their passwords immediately and scan their devices for malware. PhishDestroy recommends reporting any similar domains to security teams and blocking the IP 209.94.90.3 at the network level.