xmrwallet.com/.org: badware

[HardenedSteel]

Prerequisites

• This is NOT a YouTube, Facebook, Twitch or a shortener/hosting site report. These sites MUST be reported by clicking their respective links.
• I read and understand the policy about what is a valid filter issue.
• I verified that this issue is not a duplicate. (Search here to find out.)
• I did not remove any of the default filter lists, or I have verified that the issue was not caused by removing any of the default lists.
• I did not enable additional filter lists, or I have verified that the issue still occurs without enabling additional filter lists.
• I do not have custom filters/rules, or I have verified that the issue still occurs without custom filters/rules.
• I am not using uBlock Origin along with other content blockers.
• I have verified that the web browser's built-in content blocker/tracking protection, network wide/DNS blocking, or my VPN is not causing the issue.
• I have verified that other extensions are not causing the issue.
• If this is about a breakage or detection, I have verified that it is caused by uBlock Origin and isn't a site issue.
• I did not answer truthfully to ALL the above checkboxes.

URL(s) where the issue occurs.

https://xmrwallet.com/
https://xmrwallet.org/

Description

Claims to be open source but its not, github repos are empty, known to deleting github issues/comments.

https://web.archive.org/web/20201123203247/https://github.com/XMRWallet/Website/issues/11
https://web.archive.org/web/20201123203247/https://github.com/XMRWallet/Website/issues/12
https://web.archive.org/web/20201123203246/https://github.com/XMRWallet/Website/issues/13
https://web.archive.org/web/20201123203204/https://github.com/XMRWallet/Website/issues/15

users also report its scam on Reddit: https://www.reddit.com/r/Monero/search/?q=xmrwallet.com&type=link

Other extensions used

n/a

Screenshot(s)

n/a

Configuration

n/a

[stephenhawk8054]

We don't actually address scam category in badware list: #24317 (reply in thread)

[HardenedSteel]

does backdoor fall under scam or badware?

[stephenhawk8054]

It depends. But in any case, we need credible sources of reports / analysis before adding to the list.

[HardenedSteel]

private keys generated server-side and source code isn't available while it says open source.

[stephenhawk8054]

I'll convert to discussion