bafybeifx3y45tjgiyvmh2nsw2gphpsslw5to6ms3buxp4uhjniykjkqohe[.]ipfs[.]dweb[.]link

This domain, bafybeifx3y45tjgiyvmh2nsw2gphpsslw5to6ms3buxp4uhjniykjkqohe.ipfs.dweb.link, is associated with a generic phishing campaign. The domain does not appear to target any specific brand and does not contain a drainer kit. However, the page title '네이버 : 로그인' suggests the use of non-English characters to obfuscate the content and deceive users.

Infrastructure analysis reveals that the domain is registered through CSC Corporate Domains, Inc. and was created on May 06, 2026. The domain resolves to the IP address 209.94.90.2, which is located in the United States and is associated with Protocol Labs. The SSL certificate is issued by Let's Encrypt, and the domain appears on one security blocklist. According to VirusTotal, 18 out of 95 security vendors flag this domain as malicious.

The domain is currently offline, indicating that it may have been taken down by security measures or abandoned by the threat actors. Despite this, the elevated risk level suggests that the domain could be reactivated at any time. Security teams are advised to monitor the domain for any signs of reactivation and to ensure that it remains blocked on security gateways. Users should avoid clicking any links or entering personal information if the domain becomes active again, as it poses a significant threat to security.