bafkreibm6kp7ltcmpl3p2mdxx3wirdfwk2jyykygjzwp3hcjszl7z2fy3i[.]ipfs[.]dweb[.]link

The domain bafkreibm6kp7ltcmpl3p2mdxx3wirdfwk2jyykygjzwp3hcjszl7z2fy3i.ipfs.dweb.link is identified as a brand impersonation threat targeting Network Solutions. As of the latest assessment, this domain is currently offline.

Analysis indicates that the domain was created on February 24, 2026, and resolves to the IP address 209.94.90.2, which is located in the United States and is part of AS40680 Protocol Labs. The domain is registered through CSC Corporate Domains, Inc. The SSL certificate is issued by Let's Encrypt, with the serial number E7. The page title found is 'Sign in - Professional Email', which is consistent with the brand impersonation of Network Solutions. This domain has been flagged by 21 out of 95 VirusTotal security vendors, indicating a significant level of suspicion. It appears on one security blocklist, specifically PhishDestroy.

Given the current status of the domain being offline, the immediate risk is mitigated. However, organizations and individuals should remain vigilant as the domain could be reactivated. It is recommended to monitor for any signs of reactivation and to educate users on the importance of verifying URLs and SSL certificates. Additionally, network administrators should consider implementing DNS-based blocklists to prevent access to known malicious domains.