bafybeidqgc2vg5ms7x4xtpfwxdf6gci5rke2ol2smg52qixs6r4jvggbye[.]ipfs[.]dweb[.]link

The domain bafybeidqgc2vg5ms7x4xtpfwxdf6gci5rke2ol2smg52qixs6r4jvggbye.ipfs.dweb.link was created on February 24, 2017 and is currently listed as offline with an HTTP 410 Gone response. DNS resolution points to the IP address 209.94.90.2, which belongs to AS40680 (Protocol Labs) and is hosted in the United States. The domain is fronted by Cloudflare, using HTTP/3, and presents a TLS certificate issued by Let’s Encrypt (certificate identifier E7). Nameserver records are clarissa.ns.cloudflare.com and tate.ns.cloudflare.com, confirming Cloudflare as the authoritative DNS provider.

The page title returned from the site is "Tabi Faucet," but no further content analysis is available. Reputation services show a Scamadviser trust score of 1 out of 100, indicating an extremely low level of trust. The registrar listed is CSC Corporate Domains, Inc. The domain appears on two security blocklists, specifically PhishDestroy and ScamSniffer, and is flagged as a generic phishing threat in threat‑intel feeds. VirusTotal scanned the site with 95 antivirus/URL engines and reported no detections, though the absence of detections does not guarantee safety.

Uncertainty remains regarding the current activity of the infrastructure because the HTTP 410 response suggests the site has been taken down, yet the domain may be re‑used or the underlying IP could host other malicious services. defenders should continue to monitor the IP address 209.94.90.2 for any resurgence of malicious activity, enforce blocklist entries for the domain and its IP, and consider adding the domain to internal deny lists. Additional reconnaissance, such as passive DNS and certificate transparency monitoring, is recommended to detect any future re‑registration or reuse of the domain or associated infrastructure.