Hey! Just caught a spam mail of the usual scam of “Your mail quota exceeded, login here to fix it, bla, bla, bla” What was not usual is that it apparently pointed it to an IPFS resource (after some Google Translate unwinding)… hXXps://2mqkxtmdchltk7iv5iq6hdtaw4rk4l4yynb5dgwrhq-ipfs-infura--ipfs-io…

[image] URGENT! Phishing attempt using ipfs to host a masqueraded web site Help hello, please send the details to abuse@protocol.ai so they can take action about it.

Looks like they may also be using Infura, might be worth notifying them too.

Thanks for the hint, contacted them both. I’ll keep you posted on findings. Edit: After all GTranslate black magic, the final URL is: hXXps://bafybeibvzbuwl6bw2mqkxtmdchltk7iv5iq6hdtaw4rk4l4yynb5dgwrhq.ipfs.infura-ipfs.io/ It is valid and presents a generic login form to steal credentials.

Warning! There seems to be false webmail logon screen hosted on IPFS to phish credentials!

Jorropo July 18, 2022, 8:42pm 2

Topic		Replies	Views
URGENT! Phishing attempt using ipfs to host a masqueraded web site Help	2	512	July 15, 2022
Phishing attacs with your service! Help security	1	290	August 15, 2022
Active Phishing Content Hosted on IPFS – Impersonating myGov Australia Help files	1	54	January 7, 2026
ABUSE: Phishing hosted on IPFS domain	1	128	April 8, 2025
Does IPFS have an abuse team? Help	18	708	March 14, 2023

Warning! There seems to be false webmail logon screen hosted on IPFS to phish credentials!

Related topics