bafkreihd74c5jt6n5zuezfytxtol5llpbcbfbb4lknlwrzksrnyz36u3dq[.]ipfs[.]dweb[.]link

The domain bafkreihd74c5jt6n5zuezfytxtol5llpbcbfbb4lknlwrzksrnyz36u3dq.ipfs.dweb.link was identified as a brand impersonation threat specifically targeting Generic Email credentials. This site is currently offline, having been taken down after security researchers flagged its malicious activity. The domain impersonated a webmail login page to trick users into surrendering their email credentials.

This domain has a notable security footprint. VirusTotal data shows that 18 out of 95 security vendors flagged it as malicious, indicating broad recognition of the threat. The domain was registered through CSC Corporate Domains, Inc. and its creation date is February 24, 2017. It resolves to IP address 209.94.90.3 and uses an SSL certificate issued by Let's Encrypt (E7). Additionally, it appears on 2 security blocklists, further confirming its malicious nature.

Given that this domain is now offline, the immediate risk is mitigated. However, users should remain cautious of similar IPFS-based phishing attempts. PhishDestroy recommends avoiding clicking on unsolicited links, especially those hosted on IPFS gateways, and always verifying the URL before entering credentials. If you have already entered information on this site, change your email password immediately and enable two-factor authentication.