MALICIOUS — CRITICAL
bitkey-io[.]pages[.]dev
2 of 91 security engines flagged the domain; the latest stored check returned HTTP 200.
- VirusTotal
- 2/91
- Blocklists
- No stored match
- Доступність
- Останній відомий активний · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
bitkey-io.pages.dev — Останній відомий активний (HTTP 200). Уособлення бренду: Bitcoin; Тип шахрайства: Brand Impersonation. Зведення доказів: VirusTotal 2/91 (alphaMountain.ai, Fortinet); PhishDestroy score 71/100. Реєстратор: Cloudflare.
Докладний аналіз PhishDestroy AI нижче залишено англійською, щоб зберегти оригінальний криміналістичний запис.
Evidence Digest
bitkey-io.pages.dev is classified critical with an evidence score of 71/100. 2 of 91 security engines flagged the domain. Registered 30 Apr 2026 via Cloudflare, Inc., hosted on 188.114.96.3 (Cloudflare, Inc., CA). The latest stored check on 9 Aug 2026 returned HTTP 200 and includes a capture.
Stored generated summary (templated)mistral · 25.06.2026
Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.
This domain is an active impersonation scam targeting Bitcoin users under the guise of a legitimate wallet service. The site presents itself as 'Bitkey Wallet: Redefining Bitcoin Freedom with Secure Self-Custody,' a false claim designed to trick users into entering sensitive credentials or downloading malicious software. The threat specifically exploits trust in Bitcoin-related services, which often handle significant financial assets, making it particularly dangerous for cryptocurrency holders. Analysis indicates the domain was registered on April 30, 2026, through Cloudflare, Inc., and currently resolves to the IP address 188.114.96.3, hosted under Cloudflare’s infrastructure in Canada. Despite its active status, the domain has zero detections on VirusTotal (0/95), suggesting it has evaded widespread detection thus far. The SSL certificate is issued by Google Trust Services (WE1), a common tactic to appear legitimate. Infrastructure review shows it is currently flagged on one security blocklist, though its low detection rate may indicate a targeted or recently launched campaign. Users who have visited this domain should immediately cease all interaction and assume any credentials or financial details entered are compromised. If a wallet or application was downloaded, disconnect the device from the internet and perform a full malware scan using updated security tools. Monitor all associated Bitcoin addresses for unauthorized transactions and consider migrating funds to a new, verified wallet. Report the domain to relevant security teams or cryptocurrency fraud reporting platforms to aid in takedown efforts. Given the domain’s active status and lack of widespread detection, heightened vigilance is advised for all Bitcoin-related activities.
Обсяг даних12 recorded checks
Розвіддані з мережевої безпеки
Процес реагування на загрози Pipeline
Статус у публічних блоклистах
Технології · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% впевненостіCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% впевненостіHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% впевненостіАналіз VirusTotal
Аналіз продуктивності сайту
Google PageSpeed Insights — mobile performance audit of bitkey-io.pages.dev · checked Apr 30, 2026
Докази та зовнішні звітиIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Якщо ви ввели облікові дані облікового запису, особисту чи платіжну інформацію або завантажили файл із цього домену, негайно вживіть заходів. Нижче наведено ресурси, які допоможуть вам повідомити про інцидент і захистити себе.
Зверніться до місцевих органів влади
Виберіть свою країну, щоб отримати офіційні контакти кіберзлочинців або створити проект скарги →.