keplr[.]mom

This domain is flagged as a generic phishing threat with an elevated risk level. It is currently offline. The domain keplr.mom was registered on February 21, 2026, through Gname.com Pte. Ltd., and resolves to IP address 172.67.163.16, hosted in the United States on Cloudflare infrastructure (AS13335). The page title retrieved was 'Keplr,' which is consistent with a cryptocurrency wallet brand, though the exact site content was not analyzed. No SSL certificate was detected, and the domain is blocked by the PhishDestroy blocklist, appearing on one security blocklist total.

VirusTotal shows 1 detection out of 95 security vendors, indicating limited but confirmed malicious flagging. The Gridinsoft trust score is 0 out of 100, reflecting high suspicion. Technologies identified include Vue.js, Cloudflare Browser Insights, Cloudflare, and HTTP/3. The nameservers are brad.ns.cloudflare.com and elisabeth.ns.cloudflare.com. The domain was taken offline as of the report date.

For defenders, this domain should be treated as a confirmed phishing target, likely impersonating the Keplr brand to harvest credentials or cryptocurrency wallet information. Since it is already offline, no immediate action is required, but indicators such as the domain name pattern, registration date, and hosting via Cloudflare should be added to watchlists for future similar domains. No additional evidence from Safe Browsing, OTX, or HTTP status was provided, so those checks remain unknown. The lack of an SSL certificate further supports the phishing classification.