bafybeibicxl3alo2gn7hu5okzlr4epxibeuulakus3u37xr5vpba4pig5y[.]ipfs[.]dweb[.]link

The domain bafybeibicxl3alo2gn7hu5okzlr4epxibeuulakus3u37xr5vpba4pig5y.ipfs.dweb.link is assessed as an elevated risk for generic phishing. The infrastructure and intelligence gathered indicate a high likelihood of the domain being used to deceive users and steal sensitive information.

Analysis indicates that the domain is currently offline, with a page title of '410 Gone'. The domain was created on February 21, 2026, and is registered through CSC Corporate Domains, Inc. It resolves to the IP address 209.94.90.2, located in the United States and operated by AS40680 Protocol Labs. The SSL certificate for this domain is issued by Let's Encrypt, which could provide a false sense of security to unsuspecting users. According to VirusTotal, 17 out of 95 security vendors flag this domain as malicious, and it appears on one security blocklist, PhishDestroy. The domain's offline status and the presence of a '410 Gone' page suggest that it may have been taken down or abandoned, but the historical data and blocklists indicate a significant risk.

To mitigate the risks associated with this domain, organizations and individuals should ensure that their security policies and tools are updated to block access to this domain. Network administrators should consider adding the IP address 209.94.90.2 to their firewall blocklists and monitoring for any attempts to access the domain. Users should be educated on the signs of phishing, including suspicious URLs, unexpected requests for personal information, and the importance of verifying SSL certificates. Regular security audits and user training can further reduce the likelihood of falling victim to similar threats.