monero-web[.]com

PhishDestroy identifies www.monero-web.com as an active phishing domain posing as a legitimate Monero wallet service to deceive users into divulging private keys or connecting crypto wallets. The domain is currently under investigation and remains active as of the latest assessment. Users are strongly advised against interacting with the site due to high risks of fund theft and credential compromise.

This domain was flagged by 0 of 95 VirusTotal vendors, indicating its malicious nature has not yet been widely recognized by automated detection systems. The domain was registered through Porkbun LLC on April 07, 2026, and resolves to IP address 188.114.96.3. The SSL certificate is issued by Google Trust Services, which does not validate the legitimacy of the domain’s content or intent. The absence of detections on VirusTotal suggests a newly deployed or stealthily operated threat actor infrastructure.

The current status of www.monero-web.com is classified as an active phishing campaign under investigation. Despite zero detections on VirusTotal, the domain exhibits multiple red flags including recent creation, a mismatch between service impersonation and infrastructure, and the use of a legitimate-looking SSL certificate to build false trust. Users are advised to avoid accessing this domain and to verify any Monero-related services through official channels or trusted security platforms like PhishDestroy. Additionally, organizations should consider blocking the domain at the network level and reporting it to domain registrars and cybersecurity authorities to prevent further victimization.