# xmrwallet.biz — Escape Domain #2 — SUSPENDED

| | |
|---|---|
| **Status** | SUSPENDED |
| **Registered** | 2026-02-09 |
| **Expires** | 2031-02-09 (5 years prepaid) |
| **Registrar** | Web Commerce Communications Limited dba WebNic.cc |
| **Domain locks** | clientTransferProhibited, clientDeleteProhibited, clientUpdateProhibited, serverTransferProhibited |
| **IP** | 190.115.31.40 |
| **ASN** | AS59692 — IQWeb FZ-LLC (Belize) |
| **NS** | ns1/ns2.ddos-guard.net |
| **MX** | mx1/mx2.privateemail.com |
| **WOT** | `8a5554c915e3c17278a7` |

## Key Facts

- Suspended by WebNic.cc following abuse reports (February 2026)
- `serverTransferProhibited` — registry-level lock, requires TLD registry to remove
- MX identical to xmrwallet.com — same operator
- WOT token matches xmrwallet.cc — single WOT account
- Same ASN (AS59692) as xmrwallet.com
- IP later reused by xmrwallet.net
- 23 file hashes indexed on VirusTotal

## DNS Map

See [DNSDumpster map](../../docs/img/dnsmap-xmrwallet-biz.png)

## Report

- abuse@webnic.cc
- abuse@ddos-guard.net
- https://www.virustotal.com/gui/domain/xmrwallet.biz
- https://safebrowsing.google.com/safebrowsing/report_phish/
- https://phish.report/