iancoleman / bip39

A web tool for converting BIP39 mnemonic codes
https://iancoleman.io/bip39/
MIT License
3.42k stars 1.42k forks source link

WARNING: Fake website iancoleman.app is phishing users through Google Search Ads #556

Open hazae41 opened 2 years ago

hazae41 commented 2 years ago

While searching for bip39 on Google this website was suggested as an ad: https://iancoleman.app

It is the exact same website except it seems to sniff mnemonics and track users with their Google Ad profile

It would be great if the official website could show a banner with this information in order to prevent phishing

kenblaq commented 2 years ago

Too bad

wigy-opensource-developer commented 2 years ago

The Google ad does not show from Hungarian IP addresses. It is kind of worthless to show anything about the phishing site on the official one, because tricked people would not see it. But someone could DDoS the phishing site that POSTs cross-site requests to exarpi.apsonsoftware.com

chleeab commented 2 years ago

Another fake site located: https://www.xpubcalculators.com/ People who want to use this, better fork the repo and do it offline