bafkreic4i6dcf3l7fjwy3ehkxfjsunhd6j3kh4ycikdney3pzg5jrjbrxy[.]ipfs[.]dweb[.]link

The domain bafkreic4i6dcf3l7fjwy3ehkxfjsunhd6j3kh4ycikdney3pzg5jrjbrxy.ipfs.dweb.link has been identified as a generic phishing threat, specifically a crypto drainer designed to steal cryptocurrency assets. This IPFS-hosted domain is currently offline, but its history and technical indicators suggest it posed a significant risk to users. It was registered through CSC Corporate Domains, Inc. on February 24, 2017, and resolves to IP address 209.94.90.2. The SSL certificate was issued by Let's Encrypt with identifier E8.

Security analysis reveals that the domain appears on one security blocklist and is flagged by 18 out of 95 VirusTotal vendors, indicating widespread recognition as malicious. The page title displayed a '400 Bad Request' error, which is consistent with phishing pages that may have been taken down or are malfunctioning. The combination of an IPFS gateway, generic phishing tactics, and a moderate blocklist presence elevates the risk level to elevated.

Given that this domain is now offline, users are no longer at immediate risk, but caution is advised. PhishDestroy recommends that users who may have interacted with this site check their wallets and accounts for unauthorized transactions. Additionally, users should avoid clicking on similar IPFS links from untrusted sources and ensure their browser security settings block known phishing domains. Regular monitoring of crypto assets and use of anti-phishing browser extensions can further reduce risk.