keplaget[.]web[.]app

keplaget.web.app is an active brand_impersonation threat domain. Analysis indicates that the domain impersonates across and presents a page titled "The crypto wallet for Defi, Web3 Dapps and NFTs | Keplaget", suggesting an attempt to mimic a legitimate service or identity to deceive users. The domain remains accessible and is classified as high risk due to its impersonation behavior and potential use in credential theft or unauthorized access attempts.

Infrastructure analysis reveals that keplaget.web.app was registered through Google LLC and resolves to IP address 199.36.158.100. The domain is associated with a Google Trust Services / WR4 SSL certificate. It has been flagged by 3 of 95 VirusTotal vendors, appears on 1 security blocklist, and is blocked by PhishDestroy. No creation date or trust score values were provided in the available intelligence data. The hosting infrastructure is associated with US-based AS54113 Fastly, Inc., indicating a distributed delivery environment that may complicate attribution and mitigation.

The domain is currently active and should be treated as a high-risk indicator. Users should avoid entering wallet credentials, authentication data, or sensitive information on this domain. Security teams should monitor related infrastructure, block access where appropriate, review network logs for connections to the domain or IP address, and apply threat intelligence updates to detect potential future impersonation campaigns using similar infrastructure.