TLD Threat Intelligence

Flagged .link Domains

31 domains using the .link extension have been flagged by threat-intelligence feeds. The .link extension shows moderately elevated abuse rates in published security data.

31
Flagged Domains
34
Avg Risk Score
May 25
Last Flagged

Flagged .link Domains

31 shown
DomainLast Seen
bafkreia7cfmuefjovgweh4n3on7ph62hkx7nrv43wvpmloim7zgeiwajae.ipfs.dweb.link May 25 bafkreibfgs3ja2tfyrozjrdkoqaktezyutqo7dr5hqq44ygase4t5y57eu.ipfs.dweb.link May 25 bafkreid4xdvobhgxfqpzn6fkes5hpweukdmvzpyjh4hsvf5ag4evgllnfa.ipfs.dweb.link May 25 bafkreic7hqc22mco6gn26j7b4ooabvtrn2sqdiu7ods67t5ixlokl5vmye.ipfs.dweb.link May 17 bafkreib5a2pevnxcwy6nv2q4ysjyppjehbxjpoms6fwaoqtdetxrdccswa.ipfs.dweb.link May 17 bafkreia3ffx2xkkosm7rbc2filrfccoi3dvopt23tdwt5nayf6nh4xjjlq.ipfs.dweb.link May 17 bafkreih6awhr76k33ihkeywxvtmbtdxyyd2v2efr3i4xhyemg3njimwj7e.ipfs.dweb.link May 17 dpd.lqvzn-ie.link May 16 bafkreia7tn2zkgorgvqihnjxfmqpvrekdrhs5mh5ppffpuyp43opdkrar4.ipfs.dweb.link May 16 bafkreihnxifzmjyq7ateafxv5tk2ref4yuo6d4k3jguxwgjpgrauz23mcq.ipfs.dweb.link May 16 bafkreifdr7lz6qv44cqosz75kwam7x6gta3izhq5vqxyyeharddpacresi.ipfs.dweb.link May 16 bafkreifjwfze2ce74zbj6xilrzf3wixlub5w7ixt2iofzkd72vtndj7c2a.ipfs.dweb.link May 16 bafkreiekxbe276h45arvmn4phimwdoqhmapypu56rkjcbhibrwfmhm3lxe.ipfs.dweb.link May 16 bafkreigshati7dqqrv7pcc2i3a57areswxppbtjq5c4df3527scof46bhy.ipfs.dweb.link May 16 bafkreigdm2txbgx2janmzdmdnezvdfa7i5kiajzltxpx7tj5nvjxikqvhq.ipfs.dweb.link May 16 dpd.yhnujm-ie.link May 13 teach.link May 10 bafkreihlqg7ney64hr6afams2d3aqwt7q7xh4l2tv6orjnzkaqa5bgbwb4.ipfs.dweb.link May 10 bafybeicn6mzxxz6l3zwgc2grdzbgery6drslhpte7eo26byfnm64bcclty.ipfs.dweb.link May 10 bafkreigpysgznoiy6tpehtfblhvkmg2vb3ihz2t3odeeqkrffv5tyalpwi.ipfs.dweb.link May 9 bafybeihczcpxvywbbj5ntggfaa4tlv25atott5rwtsx2rybahshk3hr4b4.ipfs.dweb.link May 6 bafybeifx3y45tjgiyvmh2nsw2gphpsslw5to6ms3buxp4uhjniykjkqohe.ipfs.dweb.link May 6 bafkreigcbo4qk7n5c43tredr5mjar3qmpgxokuiepxy3rc634xxk267jre.ipfs.dweb.link May 3 bafybeigys74llssoyzme5yywtjsjhlqew3sksohbzsne6ouewercf7vu6a.ipfs.dweb.link May 2 bafkreihbey5pmomcuv4rlptqhi6ikjgkrksr62fxsmt2svmfvhqi4sygvy.ipfs.dweb.link May 2 bafkreih6rtx33dvuxotumflrzosbu3erm5wumpwrihthjxyf3tntjqnya4.ipfs.dweb.link Apr 28 bafybeif2v4tzjfkmfxuxylhezpqrwrptfkfu3tshsyvk2te4rle62kjjwu.ipfs.dweb.link Apr 27 bafybeidp7zdy2lu6yxvbgoev4b6xokuaa6jljr34vkflxzel2ya2gc3plm.ipfs.dweb.link Feb 28 bafybeihmvo5nbtacxb7bx6bzla7adpg7ldm2ud3fqbom6724ajlki42urq.ipfs.dweb.link Feb 28 api.files.link Feb 27 bafkreiamrnq7ksq62eeqix4zhkowtijcmi6wo6yw4awvuiffm3gyd5nzdi.ipfs.dweb.link Feb 26

Frequently Asked Questions

Are all .link websites scams?

No. The .link extension shows moderately elevated abuse rates in published security data. Many legitimate sites use .link. This page lists only the specific .link domains flagged by threat-intelligence feeds — not the extension as a whole.

Why do scammers use .link domains?

Scammers favour cheap, fast-to-register extensions with slower abuse enforcement, because they expect the domain to be taken down within days. Registration cost and enforcement speed — not the extension's purpose — drive the choice.

How do I check if a specific .link site is safe?

Look it up here or on Google Safe Browsing and VirusTotal, and check its registration date with a WHOIS lookup. Very new domains imitating an established brand are a strong warning sign.

🔐Security Partner

Stop the next phishing attack before you click.

NordPass autofill only triggers on real domains. Fake login pages cannot trick it into entering your credentials.

Try NordPass →