bafybeib7n643wknypa2l2l3hbqyz4ez57kcm5ivrhlt2i3zfvdwwgl3qbq[.]ipfs[.]dweb[.]link

Analysis indicates the domain bafybeib7n643wknypa2l2l3hbqyz4ez57kcm5ivrhlt2i3zfvdwwgl3qbq.ipfs.dweb.link was flagged as a generic phishing threat targeting users associated with the 'Morse | The Sidekick for Mitosians' platform. The domain, created on February 24, 2017, resolved to the IP address 209.94.90.3, hosted under AS40680 (Protocol Labs) in the United States. As of July 24, 2026, the domain is offline, returning an HTTP 410 status code, which suggests deliberate removal or decommissioning. It was blocked by two security vendors, PhishDestroy and ScamSniffer, and appeared on two security blocklists.

The Scamadviser trust score for this domain was 1 out of 100, indicating a high-risk classification. Infrastructure analysis reveals the use of Cloudflare nameservers (clarissa.ns.cloudflare.com and tate.ns.cloudflare.com) and an SSL certificate issued by Let's Encrypt (serial number E7). HTTP/3 was detected as the active protocol.

Only one of 95 security vendors on VirusTotal flagged the domain at the time of scanning, though this does not preclude malicious activity given its presence on other blocklists and low trust scores. The exact content and phishing mechanics of the site remain unanalyzed, but the page title suggests an attempt to impersonate or exploit the 'Morse' tool ecosystem. Defenders should treat this domain as compromised and maintain blocklist entries to prevent potential re-emergence or similar campaigns leveraging the same infrastructure.