Security Scan Report: keplrwallet.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 5 HTTP transactions. The main domain is keplrwallet.app and was registered 2 years 8 months ago.

Submitted URL: https://keplrwallet.app

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Lookalike of the Keplr crypto wallet on a non-official domain, flagged as malware/phishing by 2 independent feeds, offering a seed-phrase 'import wallet' flow typical of drainers. Do not connect a wallet or enter any recovery phrase.

Risk Factors (5)
Brand impersonation of Keplr Wallet on a non-official lookalike domain (keplrwallet.app)
Primary domain flagged as malware/phishing by 2 independent threat-intel feeds
Crypto wallet seed-phrase import lure ('Import an existing wallet') on an impersonating domain
No credential/payment form captured on this page, but the wallet-import flow is the harvesting step
Unranked domain with minimal legitimacy signals
Domain age information unavailable

Details

Page Title

Keplr Wallet | Your Interchain Gateway | Login

Scan Type

public

Domain Name Analysis

The domain 'keplrwallet.app' uses the application-focused generic top-level domain (.app) with no subdomain. The registrable portion 'keplrwallet' spans 11 characters split between 3 vowels and eight consonants. Segmentation suggests four words: k, ep, lr, wallet. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://keplrwallet.app

Page Load Overview

0.68s
Total Load Time
991 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:75%
Script:Latin
Direction:ltr

Detection Details

Text Length:116 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
52--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E432E63146603178C3BB921665E2379D1236E289EEAF034CD176DB7497CB9A60E372CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:mD37KoOMPMxC1jPHwwEYslnYCf6rF8iDhPRCLhttzTH08y:oK01sqqYC29nk10P

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11699:ViMipqcTCgrHwEwMCCIhACjVRWABsTUAn9JjFYDCcAgTMiQNoIBhmBBOCJBVGQTnUCEGQoFE4CxERlRNFRQUgpGJCYBBQgDK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181818181800
Perceptual Hash:cc66338966339b33
Difference Hash:0830323232b2320c
Wavelet Hash:00183c3c3c3c3c00
Color Hash:#2dd24e

Other Hashes

Crop Resistant:0830323232b2320c

Scan History

Scan history not available

Unable to load historical scan data