xa20r-gateway[.]com

xa20r-gateway.com masquerades as a legitimate crypto wallet login portal but is designed to steal credentials and digital assets from unsuspecting users. By mimicking a gateway interface for a popular wallet service, the domain lures victims into entering their private keys, passwords, or recovery phrases. Once submitted, attackers harvest this data to drain wallets or initiate unauthorized transactions. This domain functions as a classic credential-harvesting phishing site, targeting individuals who may mistake it for an official service. This domain was flagged with 0 detections on VirusTotal out of 95 scanning engines, indicating it remains under the radar despite its malicious nature. Registered through Name SRS AB on April 1, 2026, the site resolves to IP address 91.246.50.194 and is secured by a Let's Encrypt SSL certificate, which may further deceive visitors into believing it is legitimate. The recent creation date suggests this campaign is part of a short-lived, targeted operation designed to evade long-term detection. If you visited xa20r-gateway.com, assume your login credentials or wallet keys were compromised. Immediately transfer any remaining funds to a new wallet using a verified, offline device. Revoke permissions for any connected applications or services tied to the exposed credentials. Run a full antivirus scan on your system and consider changing passwords for all critical accounts, especially those related to cryptocurrency storage or transactions. Report the domain to your wallet provider or relevant authorities to help mitigate further abuse.