this post was submitted on 26 Nov 2025
20 points (95.5% liked)

Voyager

7542 readers
46 users here now

The official lemmy community for Voyager, an open source, mobile-first client for lemmy.

Download on App Store

Download on Play Store

Use as a Web App

Download on F-Droid

Rules

  1. Be nice.
  2. lemmy.world instance policy

Sponsor development! πŸ‘‡

Number of sponsors badge

πŸ’™

founded 2 years ago
MODERATORS
 

I got a warning from my firewall my phone was accessing by a malware site. Odd, I’m just relaxing and scrolling through Lemmy on voyager.

Seems it’s been calling out to qu.ax which has a rather terrible reputation.

Does voyager keep a log of where it’s been calling out to?

top 8 comments
sorted by: hot top controversial new old
[–] _cryptagion@anarchist.nexus 10 points 1 day ago (1 children)

are you sure it's voyager? it could be any app in the background.

[–] Eldritch@piefed.world 10 points 1 day ago

Frankly it could be anything. Someone could be adding tracking pixels or similar to their posts. Then recording the IP that access it and mining for data.

[–] Xylight@feddit.online 8 points 23 hours ago* (last edited 23 hours ago)

Most Lemmy instances do not proxy images. This means every little profile picture, every thumbnail, etc, are all downloaded from different servers. There's very few privacy protections in clients either. It's most likely you just scrolled past a page with a post that had that as a link.

For example,

collapsed inline media
<- this isn't actually a real image, but your client will try and download it. And you've just sent your IP address and browser information to it.

[–] marighost@piefed.social 6 points 1 day ago* (last edited 1 day ago) (1 children)

I think someone posted a video from that domain? I just checked my phone and realized I had downloaded the video, and sure enough, it appears to be from that domain... Hopefully no one trying to spread malware?

Edit: looks like it came from the post about the Brazilian reporter commenting about Bolsonaro getting sentenced. Can't find it to link now.

[–] muusemuuse@sh.itjust.works 3 points 1 day ago (1 children)

Hey I did see that one! Weird it was hosted by something so seedy.

[–] CaptDust@sh.itjust.works 5 points 1 day ago

This domain looks like basic public file hosting that is likely being abused enough to earn the warning. I think not everything it hosts is seedy.

[–] JohnnyCanuck@lemmy.ca 3 points 1 day ago (1 children)

Have you tried tracking the web traffic directly on your phone to know for sure what app is accessing that site?

App tracking was disabled when this happened. I turned it on. I had some stuff in the background but nothing that’s really reach out to anything new. The phone app, the photos app, my bank app, etc. it had to be something voyager was told to do.