keplrdestopwallet[.]com

PhishDestroy identifies keplrdestopwallet.com as an active crypto drainer under investigation. This domain poses a high risk to cryptocurrency users, particularly those interacting with wallet interfaces or seed phrases. Crypto drainers are malicious scripts designed to siphon digital assets by intercepting private keys, transaction approvals, or wallet connections. The domain exhibits multiple red flags, including recent creation, untrustworthy hosting, and suspicious SSL configuration, warranting immediate caution. This domain was flagged with a VirusTotal detection ratio of 3/95, indicating it remains unflagged by most antivirus engines as of June 2026. It was registered on April 24, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently exploited by threat actors for anonymity. The domain resolves to IP 216.150.1.1, a known hosting provider with poor reputation scores for malicious activity. Despite using a Let's Encrypt SSL certificate, which is common among scams to appear legitimate, the domain's recent creation and lack of detections suggest it is actively evading detection while preparing for campaigns. To mitigate risks, users must avoid interacting with keplrdestopwallet.com or any wallet-related prompts originating from this domain. Verify URLs through official sources, use hardware wallets for critical transactions, and install browser extensions that detect crypto drainer domains. Report this domain to your antivirus provider and cryptocurrency platforms to aid in blacklisting. If exposed, immediately revoke wallet connections, transfer funds to a new wallet, and scan devices for malware. Monitor transactions closely for unauthorized transfers.