bafkreifki2x2ookbrn2vujr5dnx5tjeg77legdonbtfy2vhul2dt64yely[.]ipfs[.]dweb[.]link

This domain, identified by the CID prefix bafkreifki2x2, is an active generic phishing threat hosted on IPFS and accessed via the dweb.link gateway. Analysis indicates it resolves to 209.94.90.3 and is served over HTTP/3 with Cloudflare infrastructure. The domain was registered on February 24, 2017, through CSC Corporate Domains, Inc., and currently holds a Let's Encrypt SSL certificate. Security vendors on VirusTotal flagged this domain in 19 of 95 scans, and it appears on one security blocklist. The page title returned is '400 Bad Request,' which may indicate either a misconfiguration or deliberate evasion of automated analysis. Infrastructure review shows the domain leverages decentralized hosting (IPFS), complicating takedown efforts. While the exact phishing target or lure remains unconfirmed, the combination of IPFS, Cloudflare, and a high detection rate among security vendors suggests malicious intent. Defenders should treat this domain as high-risk and consider blocking resolution to 209.94.90.3 at the network level. Further analysis of related CIDs or gateway traffic may reveal additional compromised endpoints. No brand impersonation or specific scam type has been verified at this time.