bitkeep-wallet-faq[.]pages[.]dev

PhishDestroy identifies the domain bitkeep-wallet-faq.pages.dev as an active crypto drainer impersonating the legitimate Bitkeep Wallet service. The fraudulent page promotes itself as “Bitkeep Wallet | Your Digital Asset Gateway” to deceive users into connecting crypto wallets and initiating unauthorized transfers. Current telemetry confirms the infrastructure remains operational, presenting an immediate risk to cryptocurrency holders seeking support or wallet access. This domain was flagged by only 1 of 95 VirusTotal security vendors, indicating limited but critical detection. It resolves to IP address 188.114.96.3 and utilizes an SSL certificate issued by Google Trust Services, both of which increase its credibility to unsuspecting victims. The domain is registered through Cloudflare, Inc., leveraging the provider’s proxy services to obscure hosting details. As of latest checks, no significant blocklist presence has been recorded, and the certificate maintains high trust scores due to its issuance by a reputable Certificate Authority. PhishDestroy assesses this campaign as HIGH RISK given its ongoing activity and use of brand impersonation in the cryptocurrency sector. Security teams are advised to block the domain bitkeep-wallet-faq.pages.dev and the associated IP 188.114.96.3 at network and DNS levels. Users should be warned not to interact with any Bitkeep-related pages outside the official bitkeep.com domain and to verify support channels through authenticated channels only. Consider isolating affected endpoints and analyzing wallet connection logs for signs of unauthorized transactions.