xmrwalley[.]com

On July 25, 2026, xmrwalley.com is identified as a potential crypto scam domain with elevated risk. The domain was created on February 21, 2026, and is associated with the Seed Phrase Phishing kit, which is commonly used to steal cryptocurrency wallet seeds and private keys. Analysis indicates that the domain appears on one security blocklist, specifically PhishDestroy, which flags it as a phishing site. The page title found is 'Best XMR Wallet for Monero — Secure, Private, Anonymous | XMRWallet,' which suggests the domain is impersonating a legitimate Monero wallet service to lure users into providing sensitive information.

The domain is currently offline, and it resolves to the IP address 188.114.97.3, hosted by Cloudflare, Inc. (AS13335) in the United States. Despite being flagged by PhishDestroy, VirusTotal reports that only 2 out of 93 security vendors have identified the domain as malicious. The lack of an SSL certificate further reduces user trust and security.

Given the domain's association with a known phishing kit and its blocklist presence, defenders should consider this domain a high-risk vector for crypto scams. Users should exercise caution and avoid interacting with the site until it has been thoroughly vetted by security professionals. The exact content of the site has not been analyzed, but the title and kit association strongly suggest a phishing attempt targeting Monero users.