x-bitkeep-wallet-us[.]pages[.]dev

PhishDestroy identifies x-bitkeep-wallet-us.pages.dev as an active crypto drainer targeting cryptocurrency wallet users. This fraudulent site masquerades as a legitimate BitKeep wallet interface to trick victims into connecting their wallets and authorizing malicious transactions that silently drain funds to attacker-controlled addresses. The domain abuses Cloudflare’s Pages.dev service to host phishing pages under a false BitKeep branding, exploiting the platform’s trustworthiness to evade immediate detection. Users searching for official wallet downloads or recovery tools may land here through malvertising or typosquatting links. This domain was flagged with seed identifier 0c0695 and resolves to IP address 172.66.44.232. It utilizes a Google Trust Services SSL certificate to appear legitimate and is registered through Cloudflare, Inc. According to VirusTotal analysis dated from seed 0c0695, the domain currently shows 0 detections out of 95 security engines, indicating it has not yet been widely blacklisted despite active malicious behavior. The recent registration and lack of detection suggest this threat is in early deployment, likely targeting users searching for BitKeep wallet solutions or recovery ports. If you visited x-bitkeep-wallet-us.pages.dev, disconnect your wallet immediately and revoke any unauthorized permissions through your wallet’s official interface or a reputable blockchain explorer. Do not interact further with the site and scan your device with updated antivirus software. Report the domain to PhishDestroy using the unique seed 0c0695 to help block it for others. Always verify wallet URLs through official channels and use bookmarked links to prevent similar attacks.