monerox.fun
Appeared in the .fun zone on Monday, September 21, 2026; by the end of that day the census found active website about crypto web3. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Freshly registered .fun domain on Vercel presenting a 'privacy-first Monero fork' that generates a wallet in your browser and promises later XMRL distributions chosen by an 'admin' — a classic fake-token/airdrop crypto lure with in-browser key generation, not a real chain (1-node QBFT, 'checking network'). It borrows Monero's name and orange-M mark while disclaiming affiliation, but the fraud is the investment/airdrop lure rather than credential phishing.
MoneroX is a self-branded cryptocurrency/DeFi launchpad project (a fork of Monero presented as its own network) offering in-browser wallet generation and coin launching on pump.fun. The MetaMask brand-impersonation signal reflects UI/UX patterns common to wallet interfaces, not impersonation of MetaMask itself. The domain and page present MoneroX as a legitimate independent project, but the combination of anonymous wallet generation, unvetted token launching via pump.fun integration, and opaque
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Monday, September 21, 2026
Same data as JSON: /api/zone/domain/monerox.fun. This page is not indexed by search engines and does not link to the site it describes.