bafybeidumscxkbzdpevccsy2ccgdgfc3gj4ejh42kqhn5yis4hacugjfuy[.]ipfs[.]dweb[.]link

Analysis of the domain bafybeidumscxkbzdpevccsy2ccgdgfc3gj4ejh42kqhn5yis4hacugjfuy.ipfs.dweb.link indicates it was flagged as a generic phishing threat targeting cryptocurrency users. The domain, registered on February 24, 2017, is currently offline with an HTTP 410 status, suggesting intentional takedown or resource removal. Infrastructure analysis reveals it was hosted on Cloudflare nameservers (clarissa.ns.cloudflare.com, tate.ns.cloudflare.com) and resolved to IP 209.94.90.3 under AS40680 (Protocol Labs, US). The SSL certificate was issued by Let's Encrypt (serial E7), and HTTP/3 was detected as an active protocol.

The page title 'AIgentX — Crafting Clarity in the Web3 World' suggests a focus on Web3 or cryptocurrency-related services, aligning with the 'Crypto Scam' classification noted in available intelligence. The domain appears on two security blocklists and was blocked by PhishDestroy and ScamSniffer, though no detections were recorded in VirusTotal scans at the time of analysis. The absence of detections does not confirm safety, as the domain may employ evasion techniques or have been inactive during scans. Defenders should treat this domain as a potential threat vector for cryptocurrency-related fraud.

Monitoring for re-emergence or related infrastructure (e.g., subdomains, linked IPs) is recommended. Given the HTTP 410 status, further investigation into historical content or redirects may be necessary to assess the full scope of the threat. No conclusive evidence of active exploitation is currently available, but the domain's classification as a crypto scam warrants continued scrutiny.