bafkreiezmd4nzibsiqhijt2gwbek2z2vephne4pl43m2v36m7lg7enzyuy.ipfs.inbrowser.link
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of bafkreiezmd4nzibsiqhijt2gwbek2z2vephne4pl43m2v36m7lg7enzyuy.ipfs.inbrowser.link
This domain appears to be an IPFS gateway URL hosted under the inbrowser.link namespace, which is commonly used to expose content stored on the InterPlanetary File System through a standard web browser. Rather than representing a conventional branded website, the long hash-like subdomain suggests it points to a specific piece of decentralized content identified by a content hash.
Based on the screenshot, the page currently presents a very minimal sign-in form requesting an email address and password. There is little visible branding, navigation, or supporting business information, so the exact operator and purpose cannot be verified from the available page content alone.
Because this is an IPFS-linked page rather than a typical standalone domain, the content may be transient or replaced depending on how the underlying resource is served. That structure can be used for legitimate decentralized publishing, but it may also make attribution and accountability less clear than on a conventional website.
Safety Assessment for bafkreiezmd4nzibsiqhijt2gwbek2z2vephne4pl43m2v36m7lg7enzyuy.ipfs.inbrowser.link
The available scan data shows mixed signals at the time of this scan. One security engine flagged the page for phishing, and one threat database also listed it in connection with phishing-related activity. In addition, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal than direct malware or phishing detections but still worth noting. At the same time, the malware scan did not identify malicious files, and several major threat databases did not report active threats.
The page design shown in the screenshot adds some caution. It displays a generic login form with no clear branding, ownership details, or contextual information explaining what account is being accessed. Minimal credential-collection pages like this may be used for legitimate private access portals, but they are also commonly associated with phishing attempts when presented without recognizable identity cues.
Taken together, the combination of a phishing flag, a phishing-related blacklist entry, and an unbranded sign-in page suggests elevated risk, even though the broader scan results are not uniformly negative. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate, and DNSSEC appears to be enabled, which are positive infrastructure signals. It is served through Cloudflare-related web infrastructure and hosted in an environment associated with Protocol Labs, consistent with an IPFS gateway setup. The domain uses Cloudflare nameservers and has been registered for roughly two years.
From a technical perspective, the main concern is not the TLS setup but the nature of the hosted content and its reputation signals. The scan found no flagged files, no external links, and no iframes, which suggests a very simple page. However, simple credential-entry pages on decentralized or gateway-hosted infrastructure can be harder to attribute and may warrant extra caution when they request login details.
Share your experience with this website. Was it safe? Did you encounter any issues?