Phishing site on ipfs.io

[anderscollstrup]

Are ipfs aware of the phishing site its hosting?

https://ipfs.io/ipfs/QmQLL5CwvUfkJTodMFie4QYhQC8n4cvg7ChJLR2KThz8xX/#ruc@ruc.dk

It would be nice if the abuse@ipfs.io mail was working or if there was some contact info on the website.

I hope it will removed soon

Regards Anders

[Galactus]

Refer the following thread for the same complaint. Pretty explained.

How to block perticular cid

I just got phishing attack report on my public gateway. The concern cid is bafkreicimxxtvbx7l5isvw6vwn5mmkb6tjvspml72dd4vla67x3wbzvlhi How can I block particular cids to comply with takedown reports? Is there any centralized crowd maintained list of verified cids to autoblock them ipfs-wide? What is ipfs doing to reduce such phishing attacks from ipfs network? The attack reporter might have submitted the web url to various antivirus programs. Because of this, some of them are now rep…

@anderscollstrup

It would be nice if the abuse@ipfs.io mail was working

That will only be useful for ipfs.io admins to block the cid on their gateway only. The page still be accessible from other gateways.

[anderscollstrup]

Thanks, I was not aware that ipfs is peer network (I did not hear about it before my phishing case), that makes it hard to find out who actually host the phishing site :-/

I guess the best I can then is to block the entire ipfx.io network in the firewall :-/
But that will only protect onprem users.

/Anders

[Galactus]

Rather, I would suggest to block the path rather than whole service.
IPFS is good service. But just because of some nasty users, we should not expel the whole IPFS network.

[ozzyjr]

Bu on the other hand ipfs needs to figure some workaround to this problem, cuz links are changing on each phishing mail which is pretty annoying and forcing security people to block whole domain even if they don’t really want.