bafkreihvdpmbcsltl3izdi6jutl4ghvhpkczrkt6jx45i5yol465qw35py[.]ipfs[.]dweb[.]link

PhishDestroy identifies active phishing infrastructure linked to the IPFS-hosted domain bafkreihvdpmbcsltl3izdi6jutl4ghvhpkczrkt6jx45i5yol465qw35py.ipfs.dweb.link, posing a generic phishing threat. Current status is under_investigation with active indicators of compromise. No confirmed brand impersonation has been verified at this stage of analysis.

This domain was flagged by 19 of 95 VirusTotal vendors, indicating undetected malicious content. The domain resolves to IP address 209.94.90.3, was registered via CSC Corporate Domains, Inc., and holds a Let’s Encrypt SSL certificate. Additionally, the domain was created on February 24, 2017, and remains unlisted on major threat blocklists as of the latest scan. Trust scores are neutral, with no historical detections in VirusTotal prior to this analysis.

This domain remains active and under investigation as of seed 694e01. Users and organizations are strongly advised to avoid accessing or interacting with this domain until further assessment is complete. Security teams should monitor traffic to 209.94.90.3 and block the associated IPFS link to prevent potential compromise. All indicators should be treated as high-fidelity threats pending additional threat intelligence integration. Report any observed activity to PhishDestroy for correlation and response coordination.