Hey! Just caught a spam mail of the usual scam of “Your mail quota exceeded, login here to fix it, bla, bla, bla” What was not usual is that it apparently pointed it to an IPFS resource (after some Google Translate unwinding)… hXXps://2mqkxtmdchltk7iv5iq6hdtaw4rk4l4yynb5dgwrhq-ipfs-infura--ipfs-io…

[image] URGENT! Phishing attempt using ipfs to host a masqueraded web site Help hello, please send the details to abuse@protocol.ai so they can take action about it.

Looks like they may also be using Infura, might be worth notifying them too.

Thanks for the hint, contacted them both. I’ll keep you posted on findings. Edit: After all GTranslate black magic, the final URL is: hXXps://bafybeibvzbuwl6bw2mqkxtmdchltk7iv5iq6hdtaw4rk4l4yynb5dgwrhq.ipfs.infura-ipfs.io/ It is valid and presents a generic login form to steal credentials.

Warning! There seems to be false webmail logon screen hosted on IPFS to phish credentials!

Jorropo July 18, 2022, 8:42pm 2

Topic		Replies	Views
URGENT! Phishing attempt using ipfs to host a masqueraded web site Help	2	510	July 15, 2022
Phishing attacs with your service! Help security	3	284	March 18, 2025
Active Phishing Content Hosted on IPFS – Impersonating myGov Australia Help files	1	44	January 7, 2026
ABUSE: Phishing hosted on IPFS domain	1	121	April 8, 2025
Does IPFS have an abuse team? Help	18	686	March 14, 2023

Warning! There seems to be false webmail logon screen hosted on IPFS to phish credentials!

Related topics