bafybeietwuxjz6bdpyiuv52eesrug4x6gocpsj32wdcvv4l4z6rzgjgf5a[.]ipfs[.]dweb[.]link

This domain, bafybeietwuxjz6bdpyiuv52eesrug4x6gocpsj32wdcvv4l4z6rzgjgf5a.ipfs.dweb.link, is flagged for brand impersonation targeting Synthetix. The domain has been identified on two security blocklists and is currently blocked by PhishDestroy and ScamSniffer. Infrastructure analysis reveals the use of Cloudflare for DNS management with nameservers clarissa.ns.cloudflare.com and tate.ns.cloudflare.com. The domain resolves to an IP address located in the United States (AS40680 Protocol Labs). The page title is 'Synthetix', and the domain uses an SSL certificate from Let's Encrypt. The HTTP status code is 301, indicating a permanent redirect. Registered through CSC Corporate Domains, Inc., the domain was created on February 24, 2017. Despite the domain's age, it remains active and is currently operational. VirusTotal reports that 12 of 95 security vendors flag this domain as malicious. Defenders should be cautious and monitor for any attempts to impersonate Synthetix, ensuring users are directed to official and verified Synthetix resources. The exact content and purpose of the page have not been fully analyzed, but the high risk level and active status warrant immediate attention.