bafybeiekvbkc27u3kvrewpwebvllbhpsys5a4lzks4pkgsio3xlw5pcngq[.]ipfs[.]dweb[.]link

This domain is flagged as a high-risk generic phishing threat using the IPFS gateway dweb.link. It resolves to IP 209.94.90.2, which is hosted by Protocol Labs in the United States. The SSL certificate is issued by Let's Encrypt (E8), indicating a basic HTTPS setup. The domain was registered on April 11, 2026, through CSC Corporate Domains, Inc., and uses Cloudflare nameservers and HTTP/3 technology. The page title is 'Defender smart screen error', suggesting an attempt to mimic a Microsoft security warning to deceive users. VirusTotal reports 21 out of 94 security vendors flagging this domain as malicious, and Google Safe Browsing labels it for SOCIAL_ENGINEERING. It is blocked by PhishDestroy, appears on one security blocklist, and has a Gridinsoft trust score of 0/100. The HTTP status is 301, indicating a redirect. The exact scam type is classified as Fake Exchange, though no specific brand or kit has been identified. Defenders should block this domain at the network level, monitor for related IPFS gateway domains, and educate users about fake security error pages. The domain remains active as of the report date, and no further details about the hosted content are available.