# xmrwallet.net — Escape Domain #3 — Active

| | |
|---|---|
| **Status** | ACTIVE — replacement for suspended .biz |
| **Registered** | 2026-02-26 |
| **Expires** | 2036-02-26 (10 years prepaid) |
| **Registrar** | NICENIC INTERNATIONAL GROUP CO., LIMITED |
| **Domain locks** | clientDeleteProhibited, clientTransferProhibited |
| **IP** | 190.115.31.40 — **same IP as suspended xmrwallet.biz** |
| **ASN** | AS59692 — IQWeb FZ-LLC (Belize) |
| **NS** | ns1/ns2.ddos-guard.net |
| **MX** | mx1/mx2.privateemail.com |
| **CDN** | DDoS-Guard |

## Key Facts

- IP `190.115.31.40` recycled from suspended xmrwallet.biz
- Registered same day as xmrwallet.me (2026-02-26), 3 days after .cc/.biz suspended
- MX identical to xmrwallet.com — same operator
- 10-year prepaid — maximum takedown resistance

## Report

- abuse@nicenic.net
- abuse@ddos-guard.net
- https://safebrowsing.google.com/safebrowsing/report_phish/
- https://phish.report/
- https://www.virustotal.com/gui/domain/xmrwallet.net
