bafkreihmcb75y477syzduz3jp5bszmawjavaaarnqg3ctxt75c5ulfen5a[.]ipfs[.]dweb[.]link

The domain bafkreihmcb75y477syzduz3jp5bszmawjavaaarnqg3ctxt75c5ulfen5a.ipfs.dweb.link has been identified as a generic phishing threat with an elevated risk level. Currently offline, this domain was observed hosting a page titled "EmailLogin," which suggests it may have been used to harvest email credentials through a fake login interface. While no specific brand was impersonated, the generic nature of the phishing attempt makes it adaptable to target users of various email services.

PhishDestroy analysis reveals that this domain was flagged by 12 out of 95 security vendors on VirusTotal, indicating significant detection across the cybersecurity community. The domain is registered through CSC Corporate Domains, Inc. and was created on February 24, 2017, which is unusually old for a phishing domain, possibly indicating a compromised or repurposed legitimate site. It resolves to IP address 209.94.90.2 and uses an SSL certificate from Let's Encrypt (E8). The domain appears on one security blocklist, and its trust score is diminished by the high number of vendor flags.

Given its elevated risk level and current offline status, users should be cautious of any emails or links referencing this domain. PhishDestroy recommends verifying any unexpected login prompts or credential requests through official channels. If you encounter this domain, report it to your security team and avoid entering any personal information. Stay vigilant against generic phishing attempts that may use similar domains in the future.