monero-project / monero-site

https://getmonero.org
BSD 3-Clause "New" or "Revised" License
275 stars 385 forks source link

DNS Cache Poisoning - Downloads Page #1310

Closed 3ach1T3ach1 closed 3 years ago

3ach1T3ach1 commented 3 years ago

Please excuse if posting issue to the wrong location, forum or group.

I had a suspected dns spoofing event today multiple times while navigating to the downloads from the monero.org site.

I was repeatedly being taken to a non https site that obviously looked different to the authentic site. I am able to navigate to what appears to be the https authentic site from my ip however notification of suspicious, malicious, grubby pleb actors targeting the monero.org site and it's clients is needed.

erciccione commented 3 years ago

Hi @3ach1T3ach1. The Monero website is https://getmonero.org.

monero[.]org is owned by a domain squatter and should be avoided and considered malicious.

3ach1T3ach1 commented 3 years ago

@erciccione Ah yes that is the plebs site. Thanks. I found it through a search while not paying enough attention. Any chance you have a protonmail I could contact you directly though? Privacy related issue concerning crypto. m461ck@protonmail.com

Thanks

erciccione commented 3 years ago

Any chance you have a protonmail I could contact you directly though?

erciccione[at]protonmail[dot]com