monero-wallet[.]io
“Monero Wallet – Secure, Private, and Decentralized Crypto Storage”
monero-wallet.io — No verificado. Tipo de estafa: Crypto Scam. Resumen de las pruebas: VirusTotal 3/91 (alphaMountain.ai, Gridinsoft, SOCRadar); PhishDestroy score 65/100. Registrador: Web Commerce Communica….
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Analysis of the domain monero-wallet.io indicates it operated as a crypto drainer scam targeting users seeking Monero (XMR) wallet services. The domain was registered on August 2, 2025, through Web Commerce Communications Limited and resolved to IP 172.67.141.51, hosted on Cloudflare's infrastructure (AS13335, US). The page title, 'Monero Wallet – Secure, Private, and Decentralized Crypto Storage,' directly aligns with the scam type identified in threat intelligence, suggesting an attempt to deceive users into interacting with malicious wallet software or phishing forms. Infrastructure checks reveal the domain lacked an SSL certificate, a common red flag for fraudulent sites.
It was flagged by one security vendor on VirusTotal and appeared on a single blocklist (PhishDestroy). Gridinsoft assigned a trust score of 0/100, further corroborating its malicious classification. The domain's nameservers (keenan.ns.cloudflare.com, keira.ns.cloudflare.com) and hosting provider (Cloudflare) are consistent with patterns observed in other crypto-related scams, though Cloudflare's role as a CDN does not inherently confirm malicious intent. As of July 25, 2026, monero-wallet.io is offline, but defenders should treat its indicators as active threats.
The IP (172.67.141.51) and associated infrastructure may still be leveraged for similar campaigns. Network security teams are advised to block the domain and IP at perimeter defenses, monitor for connections to the IP or nameservers, and alert users to the scam's historical targeting of Monero wallet users. No evidence links this domain to legitimate Monero projects or services.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Análisis de VirusTotal
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.