public-bitkeep-us[.]pages[.]dev

Public-bitkeep-us.pages.dev has been identified as a crypto-currency wallet drainer impersonating the legitimate BitKeep brand. This fraudulent domain is designed to trick users into connecting their crypto wallets and subsequently drain digital assets. Victims may be lured via fake promotions or spoofed customer-support links, where typing a seed phrase or signing a malicious transaction could authorize irreversible transfers. Once assets are transferred out, recovery is extremely unlikely due to the decentralized and pseudo-anonymous nature of blockchain transactions. PhishDestroy’s investigation reveals this domain was registered on an unknown date through Cloudflare, Inc., and currently resolves to IP address 188.114.97.3. Uniquely, the domain currently hosts an SSL certificate issued by Google Trust Services, yet carries 0 detections out of 95 VirusTotal scans as of the latest update, placing it in a stealthy early phase of operation. This lack of detection underscores the need for real-time monitoring and user vigilance, as traditional security tools lag behind sophisticated deception tactics. If you visited public-bitkeep-us.pages.dev or entered wallet credentials, disconnect your device from the internet immediately and revoke any connected wallet permissions using tools like Revoke.cash or your wallet’s built-in revocation feature. Transfer any remaining assets to a newly created wallet with a secure seed phrase stored offline. Report the incident to your wallet provider and file a complaint with your local cybercrime unit. Monitor on-chain transactions closely using block explorers like Etherscan for any unauthorized activity.