bafkreiga6px3lueaki24tsx4oi7kdavctjkxpiobmcqllnr2duqahghtoa.ipfs.dweb.link
Kategoria: Phishing
Aby korzystać z produktu z pełną funkcjonalnością, musisz kupić licencję na Combo Cleaner. Dostępny jest ograniczony siedmiodniowy bezpłatny okres próbny. Combo Cleaner należy do RCS LT i jest obsługiwany przez tę firmę, spółkę macierzystą PCRisk.com.
Opis bafkreiga6px3lueaki24tsx4oi7kdavctjkxpiobmcqllnr2duqahghtoa.ipfs.dweb.link
This URL appears to be a content-addressed page served through an IPFS gateway on the dweb.link domain, rather than a conventional branded website with its own standalone domain identity. The page shown in the screenshot presents a generic "EmailLogin" form asking for an email address and mailbox password, with minimal branding and no clear indication of a legitimate organization, service provider, or operator.
Based on the visible content, the page appears to be designed to collect email credentials. The use of an IPFS-hosted resource can make attribution more difficult because the content is distributed through decentralized storage while being accessed via a public gateway. No clear business, publisher, or service ownership information is visible from the page content provided.
Ocena bezpieczeństwa bafkreiga6px3lueaki24tsx4oi7kdavctjkxpiobmcqllnr2duqahghtoa.ipfs.dweb.link
Multiple security signals indicate elevated risk at the time of this scan. The URL was flagged by 10 out of 92 security engines, with several classifying it as phishing or malicious. The screenshot also shows a generic email-password collection form with no recognizable provider branding, which is a common pattern associated with credential-harvesting pages.
At the same time, some other checks were less conclusive: the malware scan reported no flagged files, and the checked blacklist databases were largely clean at the time of review. That mixed result can occur when a page is focused on social engineering rather than malware delivery, or when decentralized hosting causes uneven detection coverage across scanners.
Considering the multi-engine phishing detections, the very low trust score, the lack of transparent site identity, and the credential-entry prompt shown in the screenshot, this website may pose potential risks to visitors at the time of this scan.
Opis techniczny
The page is served over HTTPS with a valid Let's Encrypt certificate, and the host resolves to infrastructure associated with Protocol Labs using an IPFS gateway server identified as @helia/service-worker-gateway/3.3.1. The domain uses Cloudflare nameservers, and DNSSEC appears to be unsigned. The underlying dweb.link domain is several years old, but that age reflects the gateway domain rather than necessarily the specific hosted content.
From a security perspective, the main concern is not the TLS setup but the nature of the hosted content. IPFS gateway URLs can be used to publish pages that are harder to attribute or remove quickly, and the screenshot suggests a credential collection interface with limited provenance. No malicious files were flagged in the provided file scan, but phishing pages often rely on deceptive forms rather than downloadable malware.
Podziel się swoimi doświadczeniami z tą witryną. Czy była bezpieczna? Czy wystąpiły jakieś problemy?