Quote from: LoyceV on Today at 12:04:36 PM

Can you share how you did this? I'd like to reproduce this. I have a crazy idea, but that's for another topic.

Go through (or skip) seed generation process on that page. This will generate first wallet. After that paste this into your browser developer console. Increase 100 to larger sample if needed. You can also go offline and change console logging level to only INFO, this will make the process faster. Increase 10*i to 100*i or larger, if you see in console many duplicate keys in row. You may need to change element ids, if is your intention to audit different website.

Code:

for (i = 0; i < 100; i++) {
window.setTimeout(
function () {
document.getElementById("papergenerate1").click();
console.log(document.getElementById("btcaddressprivkey").textContent)
}, 10*i) // 10 is OK for offline mode, for online mode better use 100, to give a time for loading of images. If you se many duplicates in row, increase value depending on your network connection.
}

Then get console output (right click, save As in Chrome) and import all to wallet, I have used Electrum (New wallet -> Import private keys -> paste all keys).

I cannot reproduce this ATM, so website owner took the phishing version down, or is targetting only specific IP addresses, or found a less stupid way of stealing bitcoins :-)