bafkreihujo3bmunbephpn7m6jfuctzqs4s4o55rhftb3gg3gojv2csr6ue[.]ipfs[.]dweb[.]link

This domain, bafkreihujo3bmunbephpn7m6jfuctzqs4s4o55rhftb3gg3gojv2csr6ue.ipfs.dweb.link, displays a "410 Gone" page title, indicating the requested resource is permanently unavailable. This suggests the site hosted content that has been removed or is inaccessible, potentially as part of a threat infrastructure where files are hosted on IPFS (InterPlanetary File System) and accessed via a gateway. The threat posed includes hosting malware, phishing pages, or other malicious content that is now taken down but could have been used to distribute threats.

Technical evidence from VirusTotal shows 18 out of 95 security vendors flagged this domain as malicious, with detections from ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, and CyRadar. The domain is associated with IP address 209.94.90.2 located in the United States, hosted by AS40680 Protocol Labs. It was registered on 2026-02-26 through registrar CSC Corporate Domains, Inc., and uses an SSL certificate issued by Let's Encrypt (serial E7). The nameservers are clarissa.ns.cloudflare.com and tate.ns.cloudflare.com, and the site is currently offline.

The current status is DOWN/OFFLINE. Based on the VirusTotal detection rate (18/95) and inclusion in one blocklist, the risk level is moderate. The domain's association with IPFS and its removal suggests it was likely used for transient malicious hosting, but due to its offline status, it poses no immediate active threat.