bafkreiawblh55d2ysjbxdlnzqghjytova7e4jgx3c2fslfnl5jadsxscna[.]ipfs[.]dweb[.]link

PhishDestroy identifies the domain bafkreiawblh55d2ysjbxdlnzqghjytova7e4jgx3c2fslfnl5jadsxscna.ipfs.dweb.link as an active generic phishing threat posing ongoing credential harvesting risks to end users. This domain was flagged by 10 of 95 VirusTotal security vendors, registered through CSC Corporate Domains, Inc., and resolves to IP address 209.94.90.2. The domain originated on February 24, 2017, appears on 1 known security blocklist, and maintains a trust score supported by a Let's Encrypt SSL certificate. Blocked by OpenPhish since initial detection, the infrastructure shows consistent malicious activity patterns. Current status remains active with elevated risk levels requiring immediate defensive action. All network defenses should block this domain at DNS and firewall levels using the exact domain string and associated IP 209.94.90.2. Users must avoid any interaction including credential submission or file downloads. Security teams should audit logs for any past connections to this infrastructure and implement strict access controls. The seed identifier 1995cc confirms consistent malicious behavior patterns across monitoring systems.