bafkreihidbjzgt4de5atwlyoqjqhxmzcabatdqn4kksec6f44ayjphls2q[.]ipfs[.]dweb[.]link

Analysis of the domain bafkreihidbjzgt4de5atwlyoqjqhxmzcabatdqn4kksec6f44ayjphls2q.ipfs.dweb.link indicates it is actively associated with generic phishing schemes. This domain was created on February 24, 2017, and currently remains active, indicating persistent usage for malicious activities. The page title, 'EmailLogin,' suggests it is designed to impersonate legitimate login pages, potentially targeting user credentials through deceptive means. The domain has been flagged by 17 out of 95 security vendors on VirusTotal, demonstrating a significant consensus on its malicious nature among cybersecurity mechanisms. Additionally, it has been blocked by PhishDestroy, which further corroborates its classification as a threat.

The infrastructure of this domain employs IPFS technology, and it is routed through Cloudflare with HTTP/3 protocols, indicating an effort to utilize modern web technologies to evade detection. It resolves to the IP address 209.94.90.3, which may present further opportunities for analysis regarding its hosting environment. The domain is registered through CSC Corporate Domains, Inc., and it possesses an SSL certificate issued by Let's Encrypt, which might lend it a deceptive layer of legitimacy in phishing attempts. However, the Gridinsoft trust score of 0 out of 100 denotes a high-risk classification.

Given that this domain appears on one security blocklist, and with the information available, it is advisable for defenders to monitor for attempts to access this domain and to educate end-users on the risks associated with phishing scams. Continued vigilance is necessary, as the tactics employed by attackers are often evolving. Organizations should implement comprehensive email filtering solutions and security awareness training to mitigate risks associated with such phishing infrastructure.