Copies of a BIP-39 converter that send the recovery phrase you enter to the site's server
Look-alike copies of a well-known open-source BIP-39 converter, the tool that turns a wallet's recovery phrase into its keys and addresses. They work like the real tool, but send whatever phrase the visitor types or pastes to the site's own server. One copy, a rebuilt single-page app, sends the phrase with the optional passphrase, the derived seed and the BIP32 root private key to /api/notify as soon as the phrase is valid, and later the generated addresses as well. Another, a copied page, adds a function that posts anything longer than 50 characters to ./submit.php. Whoever runs the site can then empty the wallet. A recovery phrase should only ever be entered into a converter running offline. Sighted at bip39codeconverter[.]com and pathselector[.]app in 2026.
Anchors
domain:bip39codeconverter.com OR domain:pathselector.appProvenance
Sightings (4)Atom feed
| Host | Scan | Script | Match | Scanned |
|---|---|---|---|---|
| bip39codeconverter.com | a18744a8… | https://bip39codeconverter.com/_next/static/chunks/0vodol0taiz97.js | rule | 2026-11-03 13:42 |
| bip39codeconverter.com | a18744a8… | — | query | 2026-11-03 13:42 |
| pathselector.app | a2b0887a… | https://pathselector.app/#html | rule | 2026-10-24 21:39 |
| pathselector.app | a2b0887a… | — | query | 2026-10-24 21:39 |