bafkreictdh63ubrxnz74lqwqyrezirefxifz7lyniadi53dfhgzpa6iium[.]ipfs[.]dweb[.]link

PhishDestroy identifies bafkreictdh63ubrxnz74lqwqyrezirefxifz7lyniadi53dfhgzpa6iium.ipfs.dweb.link as an active generic phishing domain propagating via decentralized IPFS infrastructure. This domain remains in active circulation and poses a significant risk to unsuspecting users engaging with IPFS-hosted content. This domain was flagged by 20 of 95 VirusTotal security vendors and is currently blocked by three major threat intelligence platforms: OpenPhish, CERT-PL, and OISD. The domain resolves to IP address 209.94.90.3 and was registered through CSC Corporate Domains, Inc. on February 24, 2017. Despite its age, the domain maintains a concerning presence in the threat landscape with consistent malicious activity indicators. Network defenders should implement immediate blocking measures for this domain and its associated IP address (209.94.90.3) across all security controls. Organizations are advised to review DNS logs for any recent resolutions to this domain or IP, and inspect endpoint telemetry for signs of user interaction. Given the domain's presence on multiple blocklists and high VirusTotal detection rate, this threat requires urgent attention to prevent potential credential theft or malware delivery campaigns targeting users accessing IPFS-hosted content.