Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
It contains 13 outgoing records; the latest is dated . The recorded recipient is abuse@namesilo.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
xmrwallet[.]com
“Best Monero Wallet (XMR) - Send & Receive Monero Securely”
xmrwallet.com — Non vérifié. Type d'arnaque : Crypto Scam. Résumé des preuves: VirusTotal 6/91 (ADMINUSLabs, alphaMountain.ai, Chong Lua Dao, Fortinet, Gridinsoft); Spamhaus DBL_PHISH; 1 external blocklist match (CryptoFirewall); CF Radar malicious; PhishDestroy score 83/100. Bureau d’enregistrement: NameSilo.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
The site xmrwallet.com presents itself as a "Best Monero Wallet (XMR) - Send & Receive Monero Securely," indicating it is a cryptocurrency-themed scam targeting Monero users. The threat posed is credential theft or fund diversion, as fraudulent wallet sites typically harvest private keys or seed phrases from victims.
Technical analysis shows the domain was flagged by 9 out of 95 VirusTotal vendors, with detections from ADMINUSLabs, alphaMountain.ai, Chong Lua Dao, CyRadar, and Fortinet. It appears on 2 blocklists. The domain was registered on 2026-02-21 through NameSilo, LLC, and resolves to IP 186.2.165.49 (AE) under AS59692 IQWeb FZ-LLC. It uses SSL certificate R12 and nameservers ns1.ddos-guard.net and ns2.ddos-guard.net.
The site is currently DOWN/OFFLINE. GridinSoft trust rating is 1/100, indicating a high risk level. Given the recent creation date, low trust score, and multiple security vendor flags, this domain should be treated as a confirmed malicious threat despite its current inactive status.
Signaux de sécurité
Renseignements sur la sécurité réseau Registrar context
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Historique des signalements d’abus · 13 stored reports over 83 days · click to expand
-
Report #1 Feb 15, 2026 · 16:48 UTCPhishing Abuse Report: xmrwallet[.]comsupport@namesilo.com
-
Report #2 ICANN CC 67h still active Feb 18, 2026 · 12:11 UTCESCALATION #2 (67h active): Phishing - xmrwallet[.]comsupport@namesilo.com abuse@verisign-grs.com compliance@icann.org
-
Report #3 ICANN CC 91h still active Feb 19, 2026 · 11:58 UTCESCALATION #3 (91h active): Phishing - xmrwallet[.]comsupport@namesilo.com abuse@verisign-grs.com compliance@icann.org
-
Report #4 ICANN CC 164h still active Feb 22, 2026 · 13:45 UTCESCALATION #4 (164h active): Phishing - xmrwallet[.]comsupport@namesilo.com abuse@verisign-grs.com compliance@icann.org
-
Report #5 ICANN CC 196h still active Feb 23, 2026 · 21:45 UTCESCALATION #5 (196h active): Phishing - xmrwallet[.]comsupport@namesilo.com abuse@verisign-grs.com compliance@icann.org
-
Report #6 ICANN CC 213h still active Feb 24, 2026 · 14:05 UTCESCALATION #6 (213h active): Phishing - xmrwallet[.]comsupport@namesilo.com abuse@verisign-grs.com compliance@icann.org
-
Report #7 ICANN CC 420h still active Mar 5, 2026 · 05:15 UTCESCALATION #7 (420h active): Phishing - xmrwallet[.]comabuse@namesilo.com abuse@verisign-grs.com compliance@icann.org
-
Report #8 ICANN CC 500h still active Mar 8, 2026 · 13:04 UTCESCALATION #8 (500h active): Phishing - xmrwallet[.]comabuse@namesilo.com abuse@verisign-grs.com compliance@icann.org
-
Report #9 ICANN CC 597h still active Mar 12, 2026 · 14:16 UTCESCALATION #9 (597h active): Phishing - xmrwallet[.]comabuse@namesilo.com abuse@verisign-grs.com compliance@icann.org
-
Report #10 ICANN CC 644h still active Mar 14, 2026 · 12:51 UTCESCALATION #10 (644h active): Phishing - xmrwallet[.]comabuse@namesilo.com abuse@verisign-grs.com compliance@icann.org
-
Report #11 ICANN CC 691h still active Mar 16, 2026 · 12:37 UTCESCALATION #11 (691h active): Phishing - xmrwallet[.]comabuse@namesilo.com abuse@verisign-grs.com compliance@icann.org
-
Report #12 ICANN CC 1296h still active Apr 10, 2026 · 20:33 UTCESCALATION #12 (1296h active): Phishing - xmrwallet[.]comabuse@namesilo.com abuse@verisign-grs.com compliance@icann.org
-
Report #13 ICANN CC 1985h still active May 9, 2026 · 13:13 UTCESCALATION #13 (1985h active): Phishing - xmrwallet[.]comabuse@namesilo.com abuse@verisign-grs.com compliance@icann.org
Technologies · 4 identified
Server-side scripting language designed for web development.
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Analyse VirusTotal
Preuves archivées
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of xmrwallet.com · checked Mar 2, 2026
Données factuelles et rapports externes
PD-1771174106-xmrwallet.com Recipient: abuse@namesilo.com Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif