Security Scan Report: eng-keplr.com

Redirected to:
https://app.keplr.to/en.html?click_id=92d48a85-166f-4c55-95d1-7b579433...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 3 domains to perform 14 HTTP transactions. The main domain is eng-keplr.com and was registered 2 months ago.

Submitted URL: http://eng-keplr.com

Effective URL:
https://app.keplr.to/en.html?click_id=92d48a85-166f-4c55-95d1-7b579433...
Redirected

AI Security Verdict

High Risk

Confidence: 86%

8
Risk Score

A Keplr Wallet-branded download page served from keplr.to/app.keplr.to, not Keplr's official domain, reached via a redirect from eng-keplr.com — both hosts carried phishing threat-intel matches. No forms seen, but brand impersonation plus phishing indicators make it high risk.

Risk Factors (5)
Content-malware (phishing) threat-intel indicator on the primary domain served (app.keplr.to) and on keplr.to
Multi-source corroborated phishing report on the entry domain eng-keplr.com
Brand impersonation: Keplr Wallet branding and download claims presented on a domain that is not Keplr's official site
Cross-domain redirect from a lookalike entry hostname (eng-keplr.com) to the impersonating host
HIGH-severity IDS alert for .to TLD traffic in the capture
Domain age information unavailable

Details

Page Title

Get Keplr Wallet | Extension and Mobile App

Scan Type

public

Domain Name Analysis

Domain 'eng-keplr.com' uses the commercial generic top-level domain (.com). Its registrable label 'eng-keplr' stretches across 9 characters split between 2 vowels and six consonants; bonus characters include 1 hyphen. Segmentation suggests four words: eng, k, ep, lr. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://eng-keplr.com

Page Load Overview

2.30s
Total Load Time
566 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:29%
Script:Latin
Direction:ltr

Detection Details

Text Length:887 chars
Detector Agreement:60%

Website Classification

Primary Category

technology software87% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
87%
documentation technical
69%
cryptocurrency blockchain
69%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
531.59.120.58Paris, Île-de-France, France
AS56971Cgi Global Limited
3188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.161.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
144--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11A3376A480F10151A093C7895B317F2A7FD7D4E3AE099619F2AD1F54AF86ECECD43A48

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:lDcLRkLXKEmm3lAlBesxScftbV0MR34BWU3TBy/RWDKBZKl++kg+:FcG6ftv4BWP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:51692:XhEoRCSFQlgBUIZ1KAcCgCUBIrikbBGEgKkFrSALMMowwQEgGCFgRMRQKgQAAYBwgBCeIGAIW/wAUImYCwSyA4DuqwAOAQQK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:02103c3c00302c0c
Perceptual Hash:9acc326433cf9a3c
Difference Hash:9431716916e4c869
Wavelet Hash:5e183c3c187c3e3e
Color Hash:#2d5f86

Scan History

Scan history not available

Unable to load historical scan data