bafkreia5ut2wehdsd2ya7pjtixidtkrtn5eee3p6vdwkxzf2opo54kuutm[.]ipfs[.]dweb[.]link

This domain bafkreia5ut2wehdsd2ya7pjtixidtkrtn5eee3p6vdwkxzf2opo54kuutm.ipfs.dweb.link is identified as part of a generic phishing infrastructure leveraging IPFS gateway services. The observed page content indicates use of a service worker-based IPFS gateway interface, commonly abused to host transient phishing payloads. The infrastructure is designed to obscure hosting origin while enabling distributed content delivery for credential harvesting or malicious redirection.

Technical indicators confirm malicious classification across multiple sources. VirusTotal reports 18/95 security vendors flagging the domain as malicious. The domain is registered through CSC Corporate Domains, Inc., created on February 24, 2017, and resolves to 209.94.90.3. It appears on 1 security blocklist and uses Let's Encrypt SSL with technologies including IPFS, Cloudflare, and HTTP/3. Gridinsoft assigns a trust score of 0/100, reinforcing the high-risk assessment.

The domain is currently taken offline, indicating partial mitigation of active abuse. However, exposure risk remains for any prior visitors, particularly if credentials were entered or scripts executed via IPFS-hosted content. Users should treat any submitted data as compromised, reset affected credentials, and review network activity for anomalous connections. Given the 18/95 detection ratio and confirmed blocklist presence, continued monitoring of IPFS gateway abuse patterns is recommended.