bafkreibeyykwgcztu75t7jipqbjliizpkwlkpdaqarxgmph35coirknoxu[.]ipfs[.]dweb[.]link

This domain, bafkreibeyykwgcztu75t7jipqbjliizpkwlkpdaqarxgmph35coirknoxu.ipfs.dweb.link, is flagged for credential theft, posing a significant risk to users who may inadvertently access it. The domain was designed to impersonate a legitimate IPFS gateway service, potentially tricking users into entering sensitive information such as usernames and passwords.

Analysis indicates that the domain has been flagged by 19 out of 95 security vendors on VirusTotal, suggesting a moderate level of consensus regarding its malicious nature. The domain was registered through CSC Corporate Domains, Inc. on February 24, 2017, and resolves to the IP address 209.94.90.2. It currently appears on one security blocklist, further corroborating its involvement in malicious activities. The SSL certificate is issued by Let's Encrypt, which is commonly used by both legitimate and malicious sites, making it less of a distinguishing factor.

If users have visited this domain, they are advised to immediately change any passwords or credentials that may have been entered on the site. Additionally, users should run a comprehensive security scan on their devices to detect and remove any potential malware. It is recommended to avoid accessing this domain and to report any suspicious activity to their respective IT departments or security teams.