Yes, I had exactly this malicious website in mind. I still have a loaded paperwallet from the good'ol times when the domain address and website was owned and operated by Canton Becker. His paperwallet generator code was fine and still available on Github.

But this once reputed website domain was sold by Canton Becker (IIRC somewhere in 2018) and ended up in a scumbag scammer's hands. I checked the malicious website code and was able to prove that it uses obfuscated predetermined entropy which is know to the scammer. You will lose your funds even when you use the code offline because the scammer has given you rigged and predetermined entropy for the paperwallets you create. You don't get random keys, you get scammer-knows-all keys.

Only trust a paperwallet generator with open-source code that you've checked and verified to be clean. No exception!


I hope so, too. Otherwise they will learn it the hard way.

What puzzles me the most: why is this scammer still operating his scam meanwhile for years. There are numerous victims whose paperwallets have been drained. Still, the site is online and operating their dirty deeds 'til today. This is shocking.