keplr[.]me

This domain, keplr.me, is identified as a crypto wallet drainer specifically designed to compromise digital asset wallets by impersonating the legitimate Keplr wallet interface. Analysis indicates the infrastructure was engineered to execute unauthorized transactions, draining funds from victims' cryptocurrency wallets upon interaction. The domain exhibits no legitimate association with the official Keplr wallet service, which operates under the authentic domain keplr.wallet or app.keplr.app. Infrastructure analysis reveals the following technical indicators: the domain is flagged by 17 out of 95 security vendors on VirusTotal, indicating widespread detection as malicious. It was registered through Key-Systems GmbH on February 21, 2026, an unusually future date suggesting potential domain spoofing or registry manipulation. The SSL certificate is classified as R11, a non-standard designation often associated with low-assurance or automated certificate issuance. The domain appears on seven security blocklists, including those maintained by blockchain security entities, and is explicitly blocked by multiple wallet protection systems. No associated IP address or Google Safe Browsing (GSB) status was recorded in available telemetry. Current status indicates the domain has been taken offline, likely in response to detection and reporting by security researchers and affected platforms. However, residual risk persists due to the potential for re-registration or migration of the phishing kit to alternative domains. Users who interacted with keplr.me are advised to immediately revoke any connected wallet permissions, transfer remaining assets to a new wallet, and monitor transaction histories for unauthorized activity. The future-dated registration suggests possible premeditated abuse, warranting continued vigilance for similarly structured domains.