bafkreia3w4sh7ezvfj62xpvuk7c4vunuf2nm2zc3r33wzcru7qlto76cdm[.]ipfs[.]dweb[.]link

PhishDestroy identifies this domain as a high-risk generic phishing threat actively harvesting email credentials under the disguise of an EmailLogin interface. The page mimics legitimate login portals to deceive users into entering sensitive information, which is then exfiltrated to threat actors for further exploitation. This domain was flagged by 6 out of 95 security vendors on VirusTotal, indicating a significant but not universal detection rate. Registered through CSC Corporate Domains, Inc., it resolves to IP address 209.94.90.2 and operates with a Let's Encrypt SSL certificate to appear legitimate. Created on February 24, 2017, the domain has evaded widespread blocklisting, demonstrating persistent activity despite its age. The presence of a generic phishing page titled 'EmailLogin' further confirms its malicious intent, targeting unsuspecting users. To mitigate risk, users must avoid interacting with this domain or any associated links. Organizations should implement email filtering rules to block messages referencing this domain or its IP. Additionally, users should enable multi-factor authentication (MFA) on all email accounts and verify login URLs before entering credentials. Report any suspicious activity to your security team or through trusted threat intelligence platforms.