bafkreigz4s6q76glb5tpljkrcnzjv66alftcujgh5mmnlshzfmholhbpt4[.]ipfs[.]dweb[.]link

The domain bafkreigz4s6q76glb5tpljkrcnzjv66alftcujgh5mmnlshzfmholhbpt4.ipfs.dweb.link is identified as a generic phishing threat with an elevated risk level. The domain is currently offline and does not impersonate a specific brand.

Analysis indicates that the domain has been flagged by 17 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion. The domain is registered through CSC Corporate Domains, Inc., and resolves to the IP address 209.94.90.2, which is located in the United States and managed by Protocol Labs. The domain was created on February 24, 2017. Additionally, the domain appears on one security blocklist, and it is blocked by PhishDestroy. The SSL certificate for the domain is issued by Let's Encrypt, which is a common certificate authority for both legitimate and malicious sites.

Given the current status of the domain being offline, the immediate threat is mitigated. However, the historical flags and blocklist presence indicate that the domain has been used for malicious purposes. Security researchers and network administrators are advised to monitor for any reactivation of this domain and to ensure that it remains blocked in network security configurations. End users should be educated to recognize and avoid suspicious login pages, especially those that do not match known, legitimate domain names.