Skip to content

Simple page with a password field = Phishing Content??? #15

Description

@SilvioGuedes

Simple page like this:

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
</head>
<body style="background:#161616">
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-gH2yIJqKdNHPEq0n4Mqa/HGKIhSkIHeL5AyhkYV8i59U5AR6csBvApHHNl/vI1Bx" crossorigin="anonymous">
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0/dist/js/bootstrap.bundle.min.js" integrity="sha384-A3rJD856KowSb7dwlZdYEkO39Gagi7vIsF0jrRAoQmDKKtQBHUuLZ9AsSv4jD4Xa" crossorigin="anonymous"></script>
<input class="password h-100" type="password" placeholder="Your Password" id="password">
</body>
</html> 

Uploaded to Pinata Gateway: https://gateway.pinata.cloud/ipfs/QmcPwXPe222TduXhTKcitNY3PrYxcYctLTQv4jfeTyW4Gp

If you only pass the mouse over the password field, the page is reloaded and it shows a page like this:
https://www.pinatapreventsphishing.com/

The same page, but using IPFS Gateway, is working as expected:
https://ipfs.io/ipfs/QmcPwXPe222TduXhTKcitNY3PrYxcYctLTQv4jfeTyW4Gp

Guys, what's the problem about a page asking a password in the web3? Is this always a phishing?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions