bafybeihczcpxvywbbj5ntggfaa4tlv25atott5rwtsx2rybahshk3hr4b4[.]ipfs[.]dweb[.]link

Analysis of the domain identified by the IPFS content hash segment 'bafybeihczcpxvywb' indicates a high-risk brand impersonation threat targeting generic email services. The domain, registered on February 24, 2017, through CSC Corporate Domains, Inc., remains active as of July 12, 2026. It resolves to the IP address 209.94.90.3 and is flagged by Google Safe Browsing for social engineering. The page title 'Webmail' aligns with the reported brand target, suggesting an attempt to mimic email login portals. Infrastructure analysis reveals the use of IPFS for hosting, alongside Python and Django frameworks, with Cloudflare and HTTP/3 technologies detected. The domain holds a trust score of 0/100 from Gridinsoft and 1/100 from Scamadviser, further corroborating its malicious classification. SSL certification is provided by Let's Encrypt. The domain appears on three security blocklists and is blocked by PhishDestroy, PhishingDB, and BLP-Malware. Nineteen of 95 security vendors on VirusTotal have flagged this domain as malicious. Defenders are advised to treat this domain as a confirmed threat vector for email credential harvesting. No evidence of a specific phishing kit or additional scam categorization is present in available intelligence. Immediate blocking at the DNS and network perimeter is recommended.