mastodon 4.7.3Social Web Information Sharing & Analysis Centre helps infrastructure owners and operators protect their operations, staff, and users from service abuse, security threats, and other hazards.
Scopes: csam, disinformation, ncii, service-abuse, spam, tvec (definitions @ https://connect.iftas.org/library/iftas-documentation/shared-vocabulary-labels/)
This account is not monitored for replies. Contact IFTAS at https://about.iftas.org/contact/
The following modified Mastodon servers are a collection of automated accounts that create ~15,000 posts per day with the intent to generate traffic to related ad-farm web sites, using scraped and republished content.
pubeurope[.]com
newsbeep[.]org
theater[.]im
If your service prohibits uncurated bots, #spam, and/or inauthentic activity, we recommend you review your federation policy for these domains.
Learn more: https://connect.iftas.org/library/iftas-documentation/spam-fediverse-services/
social[.]freysa[.]ai is now one of the highest content-producing sources of federated content. All 1,468 users are AI bots that have collectively posted over 3.7 million posts in the past 40 days.
If your service prohibits uncurated bots and/or inauthentic activity, we recommend you review your federation policy for domain freysa[.]ai
The Cloudflare CSAM Scanning Tool (https://developers.cloudflare.com/cache/reference/csam-scanning/) is now available worldwide to any Cloudflare user, and no longer requires NCMEC credentials. This is a free service available to any Cloudflare-protected web site.
See https://connect.iftas.org/library/legal-regulatory/ for more information.
Pixelfed versions 0.12.4 and earlier contain a critical privacy vulnerability that impacts any and all Fediverse service providers that support follower-only messaging from follower-approvals-required accounts.
Ref: https://fokus.cool/2025/03/25/pixelfed-vulnerability.html
A tracking spreadsheet of domains by version is available at https://docs.google.com/spreadsheets/d/1t9wlqXC89EJwccxFAT_VknRdVAw6K6h-dMqVtaRVB-I/
If you host accounts that expect their followers-only posts to be non-visible to unapproved followers on remote Pixelfed services, consider informing your members.
social.freysa[.]ai/directory is a Mastodon service running a collection of over a thousand genAI bots, and is federating rapid-fire bot content. If your service prohibits uncurated bots and/or inauthentic activity, review your federation policy for domain freysa[.]ai
Discussion is growing about LLM bots and other tools scraping public posts. This raises concerns about privacy, consent, and community safety. IFTAS has compiled community conversations, expert advice, and tools for identifying and blocking scrapers: https://connect.iftas.org/library/tools-resources/web-crawlers-and-scrapers/
This account will be merging with @iftas@mastodon.iftas.org and all future notifications will come from that account.
FediCheck will cease automatically updating connected service accounts effective immediately.
The CARIAD app will remain online in read-only mode until further notice.
We are working on releasing a community (open source) edition of FediCheck to allow self-hosting. If you have interest in acting as a maintainer for this codebase please reach out to @jaz@mastodon.iftas.org directly
FediCheck has been updated. Please see https://connect.iftas.org/news/connect/fedicheck-cariad-update/ for details about this update.
#FediCheck users, please see an important announcement about our upcoming update: https://connect.iftas.org/news/connect/fedicheck-cariad-update/
@diffrentcolours@tech.lgbt @kyva @pixelfed@mastodon.eus @mark it's a hefty update that requires other updates including PHP, but in the meantime folks with Pixelfed followers should understand (a) their followers-only messages may be leaking (b) they may still have unapproved followers after the remote server updates, and (c) there's no federated/remote blocking so you can't remove old posts from those unapproved followers. The sooner we get everyone updated (and FEP-8fcf implemented) the better.
SW-ISAC is aware of bulk inauthentic account creation on multiple ActivityPub service providers.
The following domains have been investigated and reviewed and are now available via FediCheck CARIAD and the IFTAS Do Not Interact list.
Domain | Label
mast-serv[.]site | Spam, Coordinated Inauthentic Activity
webmasto[.]online | Spam, Coordinated Inauthentic Activity
Reference: https://tkz.one/@trankten/114003238070351325
Please see some important announcements on our blog at https://connect.iftas.org/news/connect/fedicheck-cariad-updates-q1-2025/
We accidentally removed some domain blocks from some servers in November of 2024.
We are updating our observed servers list.
We are withholding threads.net from FediCheck temporarily.
The following domain(s) have been reviewed and are now available via FediCheck CARIAD and/or the IFTAS Do Not Interact list.
Domain | Label
pravda[.]me | Suspended by >=51%
DNI: https://connect.iftas.org/library/iftas-documentation/iftas-dni-list/
CARIAD: https://connect.iftas.org/library/iftas-documentation/iftas-cariad-audit-log/
https://groups.google.com/a/iftas.org/g/sw-isac-announce/c/qawgRXoGn3k
