bafybeibpiht7izgwflj7ruju4tcwrl7b45xmoifhhch7hi47n5ip5du4c4[.]ipfs[.]dweb[.]link

The domain bafybeibpiht7izgwflj7ruju4tcwrl7b45xmoifhhch7hi47n5ip5du4c4.ipfs.dweb.link is currently classified as a generic phishing threat with a high risk rating. The site returns HTTP 200 and presents the page title "SharkCat". No additional content analysis is available, but the observed title indicates the page has been indexed.

Infrastructure analysis reveals the domain is hosted on the IPFS network and served through Cloudflare’s edge platform, employing HTTP/3. DNS resolution points to the address 209.94.90.3, which belongs to AS40680 (Protocol Labs) and is geolocated in the United States. The TLS certificate is issued by Let’s Encrypt, identified as "E7", confirming the use of a publicly‑trusted certificate. Nameservers are clarissa.ns.cloudflare.com and tate.ns.cloudflare.com, both Cloudflare‑managed.

Reputation data is uniformly negative. Gridinsoft assigns a trust score of 0 out of 100, and Scamadviser reports a score of 1 out of 100. VirusTotal records a single detection out of 95 scanned security vendors, indicating at least one engine flagged the domain. The domain appears on two public blocklists and is actively blocked by PhishDestroy and ScamSniffer, reinforcing the phishing classification.

Defenders should treat the domain as hostile. Immediate actions include adding the address 209.94.90.3 and the full subdomain to network‑level blocklists, configuring DNS sinks or proxy filters to deny connections, and monitoring for any outbound traffic to the IPFS gateway. Continuous re‑assessment is advised, as further content analysis could reveal additional payloads or credential‑harvesting mechanisms.