Checking for Stolen Photos on Site

Site URL: https://www.getwine55.com/

Hi, we just got an online form submission from someone who says they're an illustrator and we're using their images illegally and if we don't remove them in the next couple of day, they're going to sue. They included a link to a google folder that supposedly had the images but the link didn't work. I checked that it was an actual google link before clicking it, but I supposed it could still be some kind of a phishing scam. I tried sending an email to the address provided but that came back as undeliverable. I tried googling the illustrators name and found nothing.

To my knowledge, all our images are from stock sites or unsplash. We did use a designer on some flyers, the images for which made its way on to the site so I suppose we could be using the wrong license for posting on the web or the designer may not have licensed them properly, though I doubt it.

Does anyone know of a way to sweep our site for any stolen imagery? Is that even possible? I don't even know the right way to ask that question. 🙂  Or do you think that form submission was some kind of scam?

I took a look at your site. Scam. No question about it. Form submissions, unfortunately, invite scammers and spammers. Surprised you have not had a lot of SEO "professionals" contacting you thru that portal as well. 

This has been reported in several places as a phishing scam. Here's one report but there are many others: https://www.sangfroidwebdesign.com/hack-prevention/phishing-alert-fake-email-claiming-copyright-infringement/

We got a message ourselves today through a Squarespace contact form. We've also seen it through our old Wordpress site.

My guess is your message says something like this: "This is Meleena and I am a qualified photographer. I was discouraged, putting it lightly, when I saw my images at your website. If you use a copyrighted image without an owner's permission, you must be aware that you could be sued by the copyright holder..."

This is indeed likely a spam submission. To discourage this type of submission, which is usually made by the scammer using bots, we highly recommend implementing Google reCAPTCHA on all your Form and Newsletter Blocks:

https://support.squarespace.com/hc/en-us/articles/115013193528

I just received basically the exact same email, and clicked the link. After research I found your post, and wanted to see if anything came of your experience. Was your site compromised? Was your email compromised? thanks in advance. 

@SwehAs long as you didn't submit any credit card information, or log in anywhere after clicking links in the submission, you should be alright. In any case, if you're worried about your site or email address being compromised, I would recommend changing your Squarespace account password:
https://support.squarespace.com/hc/en-us/articles/206537317-Resetting-your-Squarespace-password

You can also add two-factor authentication for heightened security of your account:
https://support.squarespace.com/hc/en-us/articles/360000044827

Reach out to your email provider to learn how to change your password there on their end.

I’m so relieved to hear this is a scam! I’m a makeup artist and every client photo posted on my portfolio website has been approved and sent by clients I’ve worked directly with. I was so concerned that maybe I had missed citing a photographer on a photo and immediately responded to resolve the issue only to have the email address return invalid. Did a little more digging and couldn’t find any photographs with that name. So frustrating!! I’m going to change passwords and look into reCAPTCHA right now!