Why is voyager accessing qu.ax? (sh.itjust.works)

submitted 9 months ago by muusemuuse@sh.itjust.works to c/voyagerapp@lemmy.world

8 comments fedilink hide all child comments

I got a warning from my firewall my phone was accessing by a malware site. Odd, I’m just relaxing and scrolling through Lemmy on voyager.

Seems it’s been calling out to qu.ax which has a rather terrible reputation.

Does voyager keep a log of where it’s been calling out to?

all 9 comments

sorted by: hot top new old

[-] Xylight@feddit.online 13 points 9 months ago* (last edited 9 months ago)

Most Lemmy instances do not proxy images. This means every little profile picture, every thumbnail, etc, are all downloaded from different servers. There's very few privacy protections in clients either. It's most likely you just scrolled past a page with a post that had that as a link.

For example, <- this isn't actually a real image, but your client will try and download it. And you've just sent your IP address and browser information to it.

[-] marighost@piefed.social 8 points 9 months ago* (last edited 9 months ago)

I think someone posted a video from that domain? I just checked my phone and realized I had downloaded the video, and sure enough, it appears to be from that domain... Hopefully no one trying to spread malware?

Edit: looks like it came from the post about the Brazilian reporter commenting about Bolsonaro getting sentenced. Can't find it to link now.

[-] muusemuuse@sh.itjust.works 3 points 9 months ago

Hey I did see that one! Weird it was hosted by something so seedy.

[-] CaptDust@sh.itjust.works 6 points 9 months ago

This domain looks like basic public file hosting that is likely being abused enough to earn the warning. I think not everything it hosts is seedy.

[-] JohnnyCanuck@lemmy.ca 3 points 9 months ago

Have you tried tracking the web traffic directly on your phone to know for sure what app is accessing that site?

[-] muusemuuse@sh.itjust.works 2 points 9 months ago

App tracking was disabled when this happened. I turned it on. I had some stuff in the background but nothing that’s really reach out to anything new. The phone app, the photos app, my bank app, etc. it had to be something voyager was told to do.