bafybeic2ctv7vwt47e6rhckifdcdc2wzxyddiqrge5yfp43c2nk2co6d2u[.]ipfs[.]dweb[.]link

This domain, bafybeic2ctv7vwt47e6rhckifdcdc2wzxyddiqrge5yfp43c2nk2co6d2u.ipfs.dweb.link, is flagged as a generic phishing threat targeting users of the Bedrock liquid restaking protocol. Analysis indicates the site impersonates the legitimate Bedrock platform, presenting itself as the 'World's first multi-asset liquid restaking protocol' to deceive victims into interacting with malicious smart contracts or draining mechanisms. No specific drainer kit signatures were identified, but the domain exhibits characteristics consistent with cryptocurrency phishing infrastructure.

Technical indicators reveal the domain was created on February 24, 2017, and is registered through CSC Corporate Domains, Inc. It resolves to the IP address 209.94.90.2 and is protected by a Let's Encrypt SSL certificate. VirusTotal reports 11 out of 95 security vendors flagging the domain as malicious. The domain appears on two security blocklists and is not currently listed in Google Safe Browsing. Detected technologies include Cloudflare and HTTP/3, suggesting the use of modern web infrastructure to evade detection.

As of the latest assessment, the domain has been taken offline, reducing immediate risk to users. Response actions by security vendors such as PhishDestroy and ScamSniffer have contributed to its removal. However, remaining risk persists due to the domain's historical activity and potential for re-emergence under similar infrastructure. Users are advised to verify the authenticity of liquid restaking platforms through official channels and monitor wallet interactions for unauthorized transactions.