I got a warning from my firewall my phone was accessing by a malware site. Odd, I’m just relaxing and scrolling through Lemmy on voyager.

Seems it’s been calling out to qu.ax which has a rather terrible reputation.

Does voyager keep a log of where it’s been calling out to?

    • Eldritch@piefed.world
      link
      fedilink
      English
      arrow-up
      11
      ·
      9 days ago

      Frankly it could be anything. Someone could be adding tracking pixels or similar to their posts. Then recording the IP that access it and mining for data.

  • Xylight@feddit.online
    link
    fedilink
    English
    arrow-up
    9
    ·
    edit-2
    8 days ago

    Most Lemmy instances do not proxy images. This means every little profile picture, every thumbnail, etc, are all downloaded from different servers. There’s very few privacy protections in clients either. It’s most likely you just scrolled past a page with a post that had that as a link.

    For example, <- this isn’t actually a real image, but your client will try and download it. And you’ve just sent your IP address and browser information to it.

  • marighost@piefed.social
    link
    fedilink
    English
    arrow-up
    7
    ·
    edit-2
    8 days ago

    I think someone posted a video from that domain? I just checked my phone and realized I had downloaded the video, and sure enough, it appears to be from that domain… Hopefully no one trying to spread malware?

    Edit: looks like it came from the post about the Brazilian reporter commenting about Bolsonaro getting sentenced. Can’t find it to link now.

      • CaptDust@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        5
        ·
        8 days ago

        This domain looks like basic public file hosting that is likely being abused enough to earn the warning. I think not everything it hosts is seedy.

  • JohnnyCanuck@lemmy.ca
    link
    fedilink
    English
    arrow-up
    3
    ·
    9 days ago

    Have you tried tracking the web traffic directly on your phone to know for sure what app is accessing that site?

    • muusemuuse@sh.itjust.worksOP
      link
      fedilink
      English
      arrow-up
      2
      ·
      8 days ago

      App tracking was disabled when this happened. I turned it on. I had some stuff in the background but nothing that’s really reach out to anything new. The phone app, the photos app, my bank app, etc. it had to be something voyager was told to do.