bafkreia4ul6dp4zesdh2swp3gfxfmyfjn24ayrpytqjg64ypt7rj74gczy[.]ipfs[.]dweb[.]link

The domain bafkreia4ul6dp4zesdh2swp3gfxfmyfjn24ayrpytqjg64ypt7rj74gczy.ipfs.dweb.link is identified as a generic phishing site with an elevated risk level. Currently, the domain is offline and does not actively host any content. The page title 'Sign in - Professional Email' suggests an attempt to impersonate a professional email service, likely to lure unsuspecting users into providing sensitive information such as login credentials.

Analysis of the domain reveals that it has been flagged by 17 out of 95 security vendors on VirusTotal, indicating a moderate level of detection. The domain is registered through CSC Corporate Domains, Inc., and has an SSL certificate issued by Let's Encrypt, which can lend a false sense of security to users. The domain resolves to the IP address 209.94.90.2, which is located in the United States and is associated with Protocol Labs. The domain was created on February 24, 2017, and has appeared on one security blocklist. These factors, combined with the presence of a seemingly legitimate page title, suggest a carefully crafted phishing campaign designed to evade detection and gain user trust.

Given the current offline status of the domain, the immediate threat is mitigated. However, continuous monitoring is recommended to ensure it does not come back online and pose a renewed risk. Organizations and individuals should be cautious when encountering similar domain names and verify the authenticity of email services by checking official URLs and security certificates. Security teams are advised to update their threat intelligence databases and block lists to include this domain to prevent potential future attacks.