bafkreih3eptu6xwmgwzjfhzqnxnn6rwbry2bghrzycrf763i3zfuzf7zya[.]ipfs[.]dweb[.]link

PhishDestroy has flagged a phishing page hosted on the InterPlanetary File System gateway dweb.link. This particular page is designed to mimic a legitimate login portal and trick visitors into entering their credentials or downloading malware. The attackers exploit the distributed nature of IPFS to host the phishing content on a decentralized network, making it harder to take down quickly. Anyone who visits this link may be redirected to a fake page that harvests sensitive information or installs malicious software on their device. This domain was flagged after security researchers noted it appeared on one established blocklist and was already blocked by OpenPhish, a well-known phishing intelligence feed. Further analysis revealed the site resolves to IP address 209.94.90.3 and uses a valid Let’s Encrypt SSL certificate to appear legitimate. The domain itself was registered on February 24, 2017, through CSC Corporate Domains, Inc. VirusTotal scans currently show zero detections out of 95 participating antivirus engines, meaning most consumer antivirus tools do not yet recognize this threat. This highlights the importance of using layered security tools and verifying links before clicking. If you or someone you know has visited this link, take immediate action. Do not enter any personal or login information on the page. Disconnect from the internet if you suspect malware was downloaded. Run a full antivirus scan using a trusted security product. If you used the same password on this site as elsewhere, change it immediately and enable two-factor authentication where available. Report the incident to your IT team or use the PhishDestroy reporting tool to help block this threat for others.