Die Phishing-Website und -Domäne iancolman.io

[root_s2yse8vt]

Up

0

Down

::

Hallo zusammen, vor kurzem habe ich meine Kryptos auf [iancolman.io](https://iancolman.io) verloren, die eine Phishing-Website ist. Ich habe eine E-Mail gesendet an [epag.de](https://epag.de), die Adresse der Registrierungsstelle, geschickt, aber noch keine Antwort erhalten.

Gibt es jemanden von [epag.de](https://epag.de) hier? Wie kann ich sie erreichen?

[User]

Up

0

Down

::

Based on the github link included, you can see that the legitimate looking website is https://iancoleman.io/bip39, while https://iancolman.io is just similar looking. Not that I’d trust entering or generating your seed words on any website. Although if you absolutely had to, ironically, taking the scammer’s advice and running a saved version of the website offline would have helped.

You can see the endpoint the mnemonic was sent to by looking at the network tab while running it, it isn’t even obfuscated: https://i.gyazo.com/fcb662ca3518477f71d927fcc2f05b3b.png

[User]

Up

0

Down

::

Pro tip: If you do something like this, you should open the page in incognito, then open developer tools of the browser and enable “offline” mode under network. This will effectively prevent the tab you have the developer tools in from contacting the internet. Once you’re done using it, close the incognito window without enabling network again (it’s possible that it could store locally until network is found if it’s malicious, that’s why we use incognito too).

This tool works without internet once you’ve loaded it. So even if it’s malicious, if you follow my steps, it cannot be used to steal your information as it won’t be able to send your information to anyone.

[User]

Up

0

Down

::

I’ve been using Ledger Nano S for 4 years , i’ve never heard of Ian Colman , why would you get involved on that website , i don’t understand ??

[User]

Up

0

Down

::

[deleted]

[Autor]

Beiträge