Fresh Install PureOS 9 DNS Request to European Central Bank and IMF

Hello world,

What happen:

I downloaded an Gnome flavored PureOS 9.0 ISO from the official Purism site, sha256sum was good.

Full install in a KVM

Full update & upgrade

Only Install Safing Portmaster (I really recommend the app)

The Portmaster detected rogue DNS requests to the European Central Bank and International Monetary Foundation

I repeated all again with a completely new ISO in virtual machiner and did it with USB boot as well

Portmaster can block thies but please help with how we can stop this fully

Weird

1 Like

strings /usr/bin/gcalccmd |grep imf
https://www.imf.org/external/np/fin/data/rms_five.aspx?tsvflag=Y
offline_imf_currency_provider_real_download_file_sync
offline_imf_currency_provider_real_download_file_async_co
offline_imf_currency_provider_construct
imf_currency_provider_get_name_map
imf_currency_provider_construct

/usr/bin/gnome-calculator
same
it’s gnome calc currency converter
uninstall calculator

it’s part of financial mode of gnome-calculator to fetch currencies.

"When you are paranoid you have to learn programing, debugging and investigating things. :wink: "

10 Likes

Hello & thank you to all pureos developmenters for making pureos & yourself for this solving of problem.