bafkreid6mvfnlqssdkyrsautoxgvfl36omf2lwygnmpq6fwynxqjydxbau[.]ipfs[.]dweb[.]link

This domain, bafkreid6mvfnlqssdkyrsautoxgvfl36omf2lwygnmpq6fwynxqjydxbau.ipfs.dweb.link, is flagged for elevated-risk generic phishing. The page title 'EmailLogin' suggests that it was designed to deceive users into providing their email credentials, which could lead to unauthorized access to sensitive information and potential further compromise of accounts and systems.

Analysis indicates that this domain has been registered through CSC Corporate Domains, Inc. and was created on May 15, 2026. As of the latest assessment, it has been taken offline. VirusTotal reports that 15 out of 95 security vendors flag this domain, and it appears on 1 security blocklist. The domain resolves to the IP address 209.94.90.3, which is located in the United States and is associated with Protocol Labs. The SSL certificate for the domain is issued by Let's Encrypt, which is a trusted certificate authority, but the presence of a valid SSL certificate does not negate the phishing threat.

Users who have visited this domain or interacted with it should immediately change their email passwords and enable two-factor authentication (2FA) if it is not already in place. They should also monitor their email accounts for any suspicious activity and report any unexpected changes to their service provider. If credentials were compromised, users should consider notifying their organization's IT department and running a full security scan on their devices to ensure no further malicious activity.