{
  "name": "IPFS Gateways",
  "observable_types": [
    "domain"
  ],
  "published": "2026-10-19T00:00:00",
  "modified": "2026-10-19T00:00:00",
  "authors": [
    "Erik Hjelmvik (Netresec)"
  ],
  "description": "The IPFS (InterPlanetary FileSystem) network is often used to host malware payloads and phishing kits.\n\nBlocking access to IPFS service and gateway domains neutralizes multiple phishing attacks and prevents malware delivery.\n",
  "references": [
    "https://blog.talosintelligence.com/ipfs-abuse/",
    "https://www.bleepingcomputer.com/news/security/phishing-attacks-distributed-through-cloudflares-ipfs-gateway/",
    "https://arxiv.org/abs/1905.11880"
  ],
  "techniques": [
    "T1608.001"
  ],
  "observables": [
    {
      "type": "domain",
      "value": "atomichub-ipfs.com",
      "description": "IPFS gateway"
    },
    {
      "type": "domain",
      "value": "cf-ipfs.com",
      "description": "IPFS gateway"
    },
    {
      "type": "domain",
      "value": "cloudflare-ipfs.com",
      "description": "IPFS gateway"
    },
    {
      "type": "domain",
      "value": "decentralized-content.com",
      "description": "IPFS gateway"
    },
    {
      "type": "domain",
      "value": "dweb.link",
      "description": "IPFS gateway"
    },
    {
      "type": "domain",
      "value": "filebase.io",
      "description": "IPFS gateway"
    },
    {
      "type": "domain",
      "value": "fleek.co",
      "description": "IPFS gateway"
    },
    {
      "type": "domain",
      "value": "gstop-content.com",
      "description": "IPFS gateway"
    },
    {
      "type": "domain",
      "value": "gw3.io",
      "description": "IPFS gateway"
    },
    {
      "type": "domain",
      "value": "infura-ipfs.io",
      "description": "IPFS gateway"
    },
    {
      "type": "domain",
      "value": "ipfs.eth.aragon.network",
      "description": "IPFS gateway"
    },
    {
      "type": "domain",
      "value": "ipfs.flk-ipfs.xyz",
      "description": "IPFS gateway"
    },
    {
      "type": "domain",
      "value": "ipfs.io",
      "description": "IPFS gateway"
    },
    {
      "type": "domain",
      "value": "ipfs.raribleuserdata.com",
      "description": "IPFS gateway"
    },
    {
      "type": "domain",
      "value": "ipfsgw.com",
      "description": "IPFS gateway"
    },
    {
      "type": "domain",
      "value": "myfilebase.com",
      "description": "IPFS gateway"
    },
    {
      "type": "domain",
      "value": "mypinata.cloud",
      "description": "IPFS gateway"
    },
    {
      "type": "domain",
      "value": "on-fleek.app",
      "description": "IPFS gateway"
    },
    {
      "type": "domain",
      "value": "pinata.cloud",
      "description": "IPFS gateway"
    },
    {
      "type": "domain",
      "value": "w3ipfs.aioz.network",
      "description": "IPFS gateway"
    },
    {
      "type": "domain",
      "value": "w3s.link",
      "description": "IPFS gateway"
    }
  ]
}