bafkreif5sojs2sp3b7rccp4yoy4kf6ubfix3v3nlxkv2nzxmrz35hpww4u[.]ipfs[.]dweb[.]link

The domain bafkreif5sojs2sp3b7rccp4yoy4kf6ubfix3v3nlxkv2nzxmrz35hpww4u.ipfs.dweb.link is a generic phishing threat that poses as a professional email sign-in page. This malicious domain is currently offline, but while active it attempted to steal user credentials by mimicking a legitimate login interface. No specific brand is impersonated, but the page title "Sign in - Professional Email" indicates a broad credential harvesting campaign.

According to available intelligence, this domain was flagged by 21 out of 95 security vendors on VirusTotal, indicating a high level of detection. It appeared on two security blocklists and was registered through CSC Corporate Domains, Inc. on February 23, 2026. The domain resolves to IP address 209.94.90.2 and uses a Let's Encrypt SSL certificate (E7). Despite these indicators, the site has been taken offline.

Users who may have encountered this domain should avoid entering any credentials and change passwords for any accounts used on similar-looking pages. Monitoring for unauthorized access and enabling multi-factor authentication is strongly recommended. The domain is currently inactive, but similar threats may emerge, so vigilance is advised when encountering IPFS-based URLs or unsolicited login prompts.