bafkreiegbqbcfv3bye424hhdqirq2wqiftdkjywtxlivtmx4zyhzkotcta.ipfs.dweb.link favicon

bafkreiegbqbcfv3bye424hhdqirq2wqiftdkjywtxlivtmx4zyhzkotcta.ipfs.dweb.link

Category: Phishing

Scanned: Jun 2, 2026, 09:26 PM UTC · First seen: Jun 2, 2026 · Threat Engines: 16 / 91 · Times Scanned: 1
5 / 100 Trust Score Based on scan findings at the time of analysis
Potentially Dangerous
0 - High Risk50 - Moderate100 - No Threats
Not scanned has not been scanned yet. Hit Scan Now to check it.

Scans can take up to 5 minutes to complete. Please keep this tab open - we'll redirect you to the report when it's ready.

Failed
Scan unavailable
Scan failed
Protect yourself from potentially harmful websites
Combo Cleaner's real-time web protection module actively blocks access to scam, phishing & malware-infected websites.
★★★★★ 4.8 / 5 Recommended by PCrisk.com editors Windows · Mac · Android · iOS
Download Combo Cleaner Free scan · no signup

To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.

Screenshot of bafkreiegbqbcfv3bye424hhdqirq2wqiftdkjywtxlivtmx4zyhzkotcta.ipfs.dweb.link Captured Jun 2, 2026
https://bafkreiegbqbcfv3bye424hhdqirq2wqiftdkjywtxlivtmx4zyhzkotcta.ipfs.dweb.link
Screenshot of bafkreiegbqbcfv3bye424hhdqirq2wqiftdkjywtxlivtmx4zyhzkotcta.ipfs.dweb.link
This website has been flagged as potentially harmful
Screenshot blurred for safety. Multiple security engines flagged potential threats at the time of scanning.
9 years (dweb.link)
Not Ranked - This website does not appear in the Tranco top list
Flagged by 16 of 91 engines
✓ Valid (TLS)
Protocol Labs
San Francisco, United States
@helia/service-worker-gateway/3.4.6#HEAD@9d7a781
Unknown
209.94.90.2
Domain & WHOIS Information
Registrar CSC Corporate Domains, Inc.
Registered February 24, 2017 (dweb.link)
Expires February 24, 2027
Name Servers tate.ns.cloudflare.com
DNSSEC Unsigned
Hosting Protocol Labs
This is a subdomain of dweb.link. The WHOIS data above belongs to the parent domain, not to bafkreiegbqbcfv3bye424hhdqirq2wqiftdkjywtxlivtmx4zyhzkotcta.ipfs.dweb.link. The actual creation date of this subdomain is unknown and could be much more recent than the parent.
Reputation & Threat Check 91 security engines checked
16
16 of 91 engines flagged this website Flagged by 16 security vendors at the time of scanning
Not flagged Flagged
Flagged by 16 of 91 engines
Direct Threat Database Sources
View detailed engine results on VirusTotal
File Scan Summary Powered by Quttera Engine
2 files scanned
No threats
2
Low Risk
0
Medium Risk
0
High Risk
0
No threats Low Risk Medium Risk High Risk
bafkreiegbqbcfv3bye424hhdqirq2wqiftdkjywtxlivtmx4zyhzkotcta.ipfs.dweb.link/# 48.0 KB No threats
bafkreiegbqbcfv3bye424hhdqirq2wqiftdkjywtxlivtmx4zyhzkotcta.ipfs.dweb.link/cdn-cgi/content?id=eTnAvnPwIX.yW.MkzTsTRO8GcvBdg1FjqiGH.kuRLIg-1780435532.8014596-1.0.1.1-X.7gSKXxeS7ZdlkmzZdrfpznItwkaAfd8etVeucIwQc 3.3 KB No threats
External Links & Domains
5
External Links
All Clean
0
Iframes
Clean
5
Referenced Domains
All Clean
0
Flagged Resources
None Detected
http://bafkreiegbqbcfv3bye424hhdqirq2wqiftdkjywtxlivtmx4zyhzkotcta.ipfs.dweb.link/data:image/svg+xml%3Bbase64,PHN2ZyB3aWR0aD0iNDAiIGhlaWdodD0iNDAiIHZpZXdCb3g9IjAgMCA0MCA0MCIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHJlY3Qgd2lkdGg9IjQwpNot flagged
https://bafkreiegbqbcfv3bye424hhdqirq2wqiftdkjywtxlivtmx4zyhzkotcta.ipfs.dweb.link/cdn-cgi/content?id%3DeTnAvnPwIX.yW.MkzTsTRO8GcvBdg1FjqiGH.kuRLIg-1780435532.8014596-1.0.1.1-X.7gSKXxeS7ZdlkmzZdrfpznItwkaAfd8etVeucIwQcNot flagged
https://cdn.jsdelivr.net/npm/bootstrap-icons@1.11.0/icons/shield-check.svgNot flagged
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.cssNot flagged
https://fonts.googleapis.com/css2?family%3DLexend:wght@100..900&display%3DswapNot flagged
1.0.1.1Not flagged
bafkreiegbqbcfv3bye424hhdqirq2wqiftdkjywtxlivtmx4zyhzkotcta.ipfs.dweb.linkNot flagged
cdn.jsdelivr.netNot flagged
cdnjs.cloudflare.comNot flagged
fonts.googleapis.comNot flagged
bafkreiegbqbcfv3bye424hhdqirq2wqiftdkjywtxlivtmx4zyhzkotcta.ipfs.dweb.link Overview

Description of bafkreiegbqbcfv3bye424hhdqirq2wqiftdkjywtxlivtmx4zyhzkotcta.ipfs.dweb.link

This URL appears to be an IPFS-hosted page delivered through the dweb.link gateway rather than a conventional branded website. The hostname is a long content-addressed identifier, which suggests the page is tied to a specific piece of decentralized content instead of a normal business or organizational domain. Based on the visible page content, it presents itself as a generic email login portal asking for an email address and mailbox password.

There is no clear branding, company identification, or legitimate service context visible on the page. The interface is minimal and uses generic wording such as "EmailLogin" and "Secure Mail Server," which may indicate an attempt to collect credentials without identifying a real operator. Based on the available categories and screenshot, this page appears to function as a credential-harvesting or phishing-style login form rather than a normal email service portal.

Safety Assessment for bafkreiegbqbcfv3bye424hhdqirq2wqiftdkjywtxlivtmx4zyhzkotcta.ipfs.dweb.link

Multiple independent signals indicate elevated risk at the time of this scan. The domain was flagged by 16 out of 91 security engines, and several web-classification providers categorized it as phishing or fraud-related. The screenshot also shows a generic email-password collection form with no recognizable provider branding, support information, or legitimate account context, which is a common pattern seen on credential theft pages.

Although one malware scan did not detect malicious files and some blacklist checks were clean, those findings do not outweigh the broader phishing indicators in this case. Phishing pages often contain very little code and may not distribute malware directly, so a clean file scan can occur alongside credential-harvesting behavior. The very low trust score, lack of ranking, and anonymous-looking IPFS gateway URL further add to the concern.

Based on these findings, this website may pose potential risks to visitors.

Technical Description

The site uses a valid Let's Encrypt SSL certificate, which means the connection appears encrypted in transit; however, HTTPS alone does not establish legitimacy. It is served from IP address 209.94.90.2 through infrastructure associated with Protocol Labs, with the web server identified as a Helia service-worker gateway. The content is delivered via an IPFS gateway, which can make takedown and attribution more difficult than with a standard hosted website.

DNSSEC appears to be unsigned, and the domain uses Cloudflare nameservers. No malicious files, flagged external links, or iframes were reported by the page-level malware scan at the time of analysis, but the main concern here appears to be phishing-style content rather than exploit delivery or malware hosting.

HTTP Redirect Chain
400 https://bafkreiegbqbcfv3bye424hhdqirq2wqiftdkjywtxlivtmx4zyhzkotcta.ipfs.inbrowser.link/
Website Insights
Not Ranked
Tranco Rank
Not in Top 1M
Visitors Unknown
Category: Phishing
Rank History (30 days)
No rank data available
No cookies data available
Dispute This Score For website owners
Believe this score is inaccurate?
If you are the website owner and believe the scan results contain errors or false positives, you can submit a dispute for manual review. Our team typically responds within 1-2 business days.
You will be asked to verify your email before the dispute can be processed.
By submitting this form, you confirm that the information provided is accurate. Disputes are reviewed manually and results may take up to 48 hours to update.
One more step..
To submit your dispute for bafkreiegbqbcfv3bye424hhdqirq2wqiftdkjywtxlivtmx4zyhzkotcta.ipfs.dweb.link, please click the verification link we just emailed you. Once verified, we'll review it within 1–2 business days.
This report was generated automatically and is provided for informational purposes only. Results are based on a point-in-time scan and may contain false positives or incomplete data. This does not constitute a security audit or certification. No vendor in the market can guarantee a 100% detection rate. If you believe this report is inaccurate, please submit a dispute.

Share your experience with this website. Was it safe? Did you encounter any issues?