[Warning]: Fake Ian Coleman BIP 39

[Dave1]

Just a stern warning to everyone, not to used Google to search for Ian Coleman Bip 39 generator.



We need everyone to report this site to Google so that it will be taken down here,

https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

Fake Site:



whois info:

Dates    8 days old
Created on 2022-11-25
Expires on 2023-11-25
Updated on 2022-11-25    

Original Site: https://iancoleman.io/bip39/

Or you can download it here and verify: https://github.com/iancoleman/bip39/releases



This criminals really mimic the real website generating mnemonic phrase, so it's really dangerous if a newbie fall for this trap.

[dkbit98]

We need everyone to report this site to Google so that it will be taken down

I don't know why scammers are starting to target this website, and this is not the first time because recently someone posted another similar link in forum with .ch domain name.
This is no guarantee that google will take down any website even if lot of people report it, but why stop with IanColeman fake website when we can also report fake ChipMixer website with xyz domain.
Ultimate solution would be for google to stop accepting money from scammers for advertisement, but they surely won't do that   

[NeuroticFish]

I don't know why scammers are starting to target this website

Most probably because they expect some people try to generate wallets for themselves with this software, directly online. And by adding a few lines of code, the clone will also save into the scammers' database all the seeds this page generates. It probably won't be an overly big list and they can be watching those wallets for a while, maybe they can steal easily some money.

This is no guarantee that google will take down any website even if lot of people report it, but why stop with IanColeman fake website when we can also report fake ChipMixer website with xyz domain.
Ultimate solution would be for google to stop accepting money from scammers for advertisement, but they surely won't do that   

Exactly. We cannot trust Google's search results, we cannot trust Google's play store. Nothing new in this.

[bitbollo]

...
Ultimate solution would be for google to stop accepting money from scammers for advertisement, but they surely won't do that   

they do not verify the real origin of the sites because it is too expensive and could create issues on their earnings... and we have seen it several times also in their play store where we have seen thousands of applications with scams such as trojan malware and so on.

the trick to defend yourself against these kind of scams is simple.
do not use a search engine to verify a site. if it is possible (likewise for a cold wallet) check other ways for keys generation...

[Saint-loup]

It's really sad to see that Google in 2022 is still not able to filter such obvious scams, and/or to quickly remove them. I start to wonder if they really care about crypto users safety. The Iancoleman page is one of the more useful and powerful oneline tool in the crypto universe and they are not able to protect it against such gross phishing attack. It's really concerning.

[Sarah Azhari]

A month ago I found the same as you find: https://bitcointalk.org/index.php?topic=5419052.msg61220398#msg61220398
this looks the same way as and trick to get a victim by recovering a mnemonic seed using the fake tool. After the scammer received a notification if anyone uses it, then they do fast to move all crypto from the scammer's wallet.

I still found it when typing iancoleman in the google search box.

Seem google facilitates them by (ads)

scammers have the capital to deceive people

[Baofeng]

Ok, I thought that this scammers are done with faking and cloning Ian Coleman Bip 39 but I was completely wrong.

It was a exact replicate of the original site, when I try to do the search right now, it seems that Google has taken it down.

Nevertheless, this criminals might get another similar name to lure specially newbies again and again.

[o_e_l_e_o]

Lost track of how many times I've repeated this:

Stop using Google to find the website of exchanges, services, or wallets.

Stop following random links without checking the URL.

Start using uBlock Origin.

Never type your seed in anywhere.

How many times does this need repeated?

First of all, Google hosts scams. So many scams. On their search engine, on their app store, on their ad platforms, everywhere. As long as the scammers pay them, Google do not give a single fuck about hosting scams and regular people losing their money. Google is a truly terrible choice for literally anything. Stop using them.

You'll also notice that the scam links are promoted as ads. Use uBlock Origin. It is the only ad blocker you will ever need, and will filter out all these scam ads. (Note: uBlock is a different piece of software to uBlock Origin, and one you should avoid. It's uBlock Origin that you want.)

And stop clicking on random links and stop typing in your seed phrase. This is basic crypto security 101.

[Charles-Tim]

Most probably because they expect some people try to generate wallets for themselves with this software, directly online. And by adding a few lines of code, the clone will also save into the scammers' database all the seeds this page generates. It probably won't be an overly big list and they can be watching those wallets for a while, maybe they can steal easily some money.

I could remember when I knew little of the little I still know now, Coinomi (my first bitcoin wallet, but close source and I moved to Electrum) had a guide that direct people to iancoleman to input their seed phrase for one reason or the other, but I have forgotten the reason, maybe to know their private keys and be used to recover coins. If such people use a clone (fake) of iancoleman, it could be online and their seed phrase might easily also be seen by the bad people and be used to steal their coins.

[NeuroticFish]

I could remember when I knew little of the little I still know now, Coinomi (my first bitcoin wallet, but close source and I moved to Electrum) had a guide that direct people to iancoleman to input their seed phrase for one reason or the other, but I have forgotten the reason, maybe to know their private keys and be used to recover coins. If such people use a clone (fake) of iancoleman, it could be online and their seed phrase might easily also be seen by the bad people and be used to steal their coins.

Wow 
From what I know Coinomi has nowadays its own clone of IanColeman's page, also extended to some more altcoins/paths.
I don't know though if it records info or not, but (obviously) such pages must be ran offline anyway, which most people don't understand nor do.

Somehow people must learn to handle their money security and, sadly, some will do it on the hard (and expensive) way.

[dkbit98]

It's really sad to see that Google in 2022 is still not able to filter such obvious scams, and/or to quickly remove them. I start to wonder if they really care about crypto users safety. The Iancoleman page is one of the more useful and powerful oneline tool in the crypto universe and they are not able to protect it against such gross phishing attack. It's really concerning.

They are filtering anything they get paid for, like if they don't want people to find out truth about something they hide results from search, they have smart algorithms that can detect specific words and ban people, but they can't detect clear scams... please give me a break  
I would suggest everyone to use ad blockers for everyday use, something like uBlock Origin will hide most of the scam ads, but some phishing websites will remain.
After years of using uBlock origin I can't stand a minute of using ''normal'' internet that most people use today.

Stop using google search is also a good idea, maybe searX, mojeek or brave search are currently ok-ish.
I recently heard that Midori browser is working on their new independent Open Source search engine called AstianGo, but it's still early and experimental:
https://astiango.com/