bitkey-io[.]pages[.]dev

This domain is an active impersonation scam targeting Bitcoin users under the guise of a legitimate wallet service. The site presents itself as 'Bitkey Wallet: Redefining Bitcoin Freedom with Secure Self-Custody,' a false claim designed to trick users into entering sensitive credentials or downloading malicious software. The threat specifically exploits trust in Bitcoin-related services, which often handle significant financial assets, making it particularly dangerous for cryptocurrency holders. Analysis indicates the domain was registered on April 30, 2026, through Cloudflare, Inc., and currently resolves to the IP address 188.114.96.3, hosted under Cloudflare’s infrastructure in Canada. Despite its active status, the domain has zero detections on VirusTotal (0/95), suggesting it has evaded widespread detection thus far. The SSL certificate is issued by Google Trust Services (WE1), a common tactic to appear legitimate. Infrastructure review shows it is currently flagged on one security blocklist, though its low detection rate may indicate a targeted or recently launched campaign. Users who have visited this domain should immediately cease all interaction and assume any credentials or financial details entered are compromised. If a wallet or application was downloaded, disconnect the device from the internet and perform a full malware scan using updated security tools. Monitor all associated Bitcoin addresses for unauthorized transactions and consider migrating funds to a new, verified wallet. Report the domain to relevant security teams or cryptocurrency fraud reporting platforms to aid in takedown efforts. Given the domain’s active status and lack of widespread detection, heightened vigilance is advised for all Bitcoin-related activities.