bafybeifl2mbkqcf3f3qw5a5kub74oowhqni3kor55v7d7if3gtlc5hady4[.]ipfs[.]dweb[.]link

The domain bafybeifl2mbkqcf3f3qw5a5kub74oowhqni3kor55v7d7if3gtlc5hady4 is a brand impersonation threat targeting the cryptocurrency service revoke.cash. The domain was used to host a page that impersonates revoke.cash, likely to deceive users and potentially steal sensitive information or funds.

Infrastructure analysis reveals that the domain resolves to the IP address 209.94.90.2, which is located in the United States and is part of the AS40680 Protocol Labs network. The domain was registered through CSC Corporate Domains, Inc., and utilizes an SSL certificate from Let's Encrypt. It was created on February 24, 2017, and has been flagged by 9 out of 95 security vendors on VirusTotal. The domain appears on 2 security blocklists, including PhishDestroy and ScamSniffer, indicating a high level of suspicion.

The domain is currently offline, which suggests that it has been taken down or is no longer being actively used for malicious activities. However, the remaining risk is still elevated, and it is recommended to continue monitoring the domain for any signs of reactivation. Organizations and users should ensure that their security measures, such as firewalls and antivirus software, are up to date to prevent any potential future threats.