# keplr.zone — MALICIOUS

> keplr.zone is linked to high-risk phishing activities. Avoid interacting and verify before clicking any links from this domain.

## Summary
PhishDestroy identifies keplr.zone as a high-risk generic phishing domain actively targeting users. This classification reflects the domain's intent to deceive victims and steal sensitive information.

Evidence supporting this includes keplr.zone's registration through NICENIC INTERNATIONAL GROUP CO., LIMITED with a creation date of February 21, 2026. The domain remains active and has been flagged by 12 out of 95 security vendors on VirusTotal. Additionally, it appears on at least one security blocklist and is referenced in an AlienVault OTX threat intelligence pulse, confirming its malicious infrastructure.

Users are advised to avoid keplr.zone and exercise caution if they receive unsolicited communications referencing this domain. PhishDestroy recommends blocking access and monitoring for related phishing attempts, as the campaign is currently active and poses a significant risk to user data and security.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Page title: Keplr

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Country: FR
- Nameservers: ["crystal.ns.cloudflare.com", "milan.ns.cloudflare.com"]

## Detection Status
- VirusTotal: 12 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "Certego", "CRDF", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "Gridinsoft", "Kaspersky", "Lionic", "SOCRadar", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc610-d440-709e-8636-242ae2e96f51.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/01cdc3e9-9510-4b78-bb65-d904c68f303c
- PhishDestroy: https://phishdestroy.io/domain/keplr.zone/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/keplr.zone/
Last updated: 2026-03-14