bafkreihmdhypsmoquydwxxl6takzwne63rldqiphkgcmtztfvpx3yzmfpq[.]ipfs[.]dweb[.]link

This domain, bafkreihmdhypsmoquydwxxl6takzwne63rldqiphkgcmtztfvpx3yzmfpq.ipfs.dweb.link, is flagged as a high-risk generic phishing threat. The domain was registered through CSC Corporate Domains, Inc. and has been active since its creation on February 24, 2017. The HTTP status code of 200 indicates that the domain is currently operational and accessible. The domain resolves to the IP address 209.94.90.3, which is located in the United States and is associated with Protocol Labs. The SSL certificate is issued by Let's Encrypt, which is a common certificate authority used by both legitimate and malicious sites. The domain appears on one security blocklist and is blocked by PhishDestroy. Additionally, 18 out of 95 security vendors on VirusTotal have flagged this domain as malicious, suggesting a significant level of suspicion and potential risk. The page title, 'IPFS Service Worker Gateway | HEAD@572bc4a', may be used to mask the true nature of the content, which is likely to be a phishing site. Infrastructure analysis reveals that the domain utilizes IPFS, Cloudflare, and HTTP/3 technologies, which can make it more resilient and harder to block. Defenders should be cautious when encountering this domain and should implement additional layers of security, such as endpoint protection and user awareness training, to mitigate the risk of phishing attacks. Network monitoring and traffic analysis should also be conducted to detect any suspicious activity related to this domain. It is recommended that organizations add this domain to their blocklists and monitor for any attempts to access it from within their networks. Regularly updating security policies and educating users about the signs of phishing can further reduce the likelihood of successful attacks.