# Phishing sites impersonating Keplr

PhishDestroy has recorded 10 phishing domains impersonating Keplr since 2024-03-19, 2 of them in the last 30 days. The most used registrars are Dominet (HK) and arin; the most common TLDs are .com and .xyz. The official Keplr domain is keplr.app: any other site asking for your login or wallet is not Keplr.

10Domains, all time

2Last 30 days

6Online at last check

2Confirmed takedowns

## New domains in the last 90 days

Keplr phishing domains detected per day: 3 from 2026-07-25 to 2026-10-22; peak 2.

## How to tell a fake Keplr site

Official domain: keplr.app.

Words most often added to the brand in reported domains: keplrwallet, oraidex, unionapp, cysicsfoundation, eng, desktopapp, keplrapp.
- Type the address yourself or use a bookmark; phishing links for Keplr arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- Keplr will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check).

## Latest Keplr phishing domains

The 10 most recently detected domains impersonating Keplr
Domain | First detected | Status at last check | Registrar | 
[keplrapp.xyz](https://phishdestroy.io/domain/keplrapp.xyz/) | 2026-10-13 | Online | NameSilo | 
[keplrwallet-desktopapp.live](https://phishdestroy.io/domain/keplrwallet-desktopapp.live/) | 2026-10-13 | Online | NICENIC | 
[eng-keplr.com](https://phishdestroy.io/domain/eng-keplr.com/) | 2026-09-19 | Online | Trustname.com | 
[keplrwallet.to](https://phishdestroy.io/domain/keplrwallet.to/) | 2026-03-11 | Online | Government of Kingdom of Tonga | 
[keplr.top](https://phishdestroy.io/domain/keplr.top/) | 2026-02-26 | Online | Gname.com | 
[cysicsfoundation.xyz](https://phishdestroy.io/domain/cysicsfoundation.xyz/) | 2025-12-20 | Offline | PublicDomainRegistry.com | 
[keplrwallet.app](https://phishdestroy.io/domain/keplrwallet.app/) | 2025-11-14 | Online | 1API | 
[unionapp.site](https://phishdestroy.io/domain/unionapp.site/) | 2025-11-10 | Taken down | Go Daddy | 
[keplr-01.com](https://phishdestroy.io/domain/keplr-01.com/) | 2025-09-10 | Taken down | Dominet (HK) | 
[oraidex.llc](https://phishdestroy.io/domain/oraidex.llc/) | 2024-03-19 | Offline | arin | 

[All 10 Keplr reports](https://phishdestroy.io/domain/?brand=Keplr)

## Where they are registered and hosted

### Registrars

- [Dominet (HK)](https://phishdestroy.io/registrar/dominet/)1
- arin1
- Go Daddy1
- [1API](https://phishdestroy.io/registrar/1api-gmbh/)1
- [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)1
- [Gname.com](https://phishdestroy.io/registrar/name-com/)1
- [Government of Kingdom of Tonga](https://phishdestroy.io/registrar/government-of-kingdom-of-tonga/)1
- [Trustname.com](https://phishdestroy.io/registrar/trustname/)1

### Top-level domains

- [.com](https://phishdestroy.io/tld/com/)2
- [.xyz](https://phishdestroy.io/tld/xyz/)2
- .llc1
- [.site](https://phishdestroy.io/tld/site/)1
- [.app](https://phishdestroy.io/tld/app/)1
- [.top](https://phishdestroy.io/tld/top/)1
- [.to](https://phishdestroy.io/tld/to/)1
- [.live](https://phishdestroy.io/tld/live/)1

### Hosting networks

- CLOUDFLARENET, US2
- CLOUDFLARENET - Cloudflare, Inc., US2
- ALIBABA-CN-NET Alibaba US Technology Co., Ltd., 1
- PONYNET, US1
- GIR-AS GLOBAL INTERNET SOLUTIONS LLC, RU1
- SWISSNET LLC1
- Cloudflare, Inc.1
- Amazon.com, Inc.1

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [Homoglyph](https://phishdestroy.io/glossary/homoglyph/)
- [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/)
- [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/)
- [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)
- [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action)
- [All impersonated brands](https://phishdestroy.io/brand/)

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Keplr; share of all PhishDestroy reports: 0.00%.

Canonical: https://phishdestroy.io/brand/keplr/