lost <400 XMR using xmrwallet.com web wallet

Well I wish I thought of checking on this forum before, It looks like this is now a confirmed scam. The fact that the transaction happened in real time as I sent it is still confusing. The post below is one I've been trying to post on reddit but it gets removed by the spam filters. If xmrwallet really is a scam now and the owner reads this and have any shred of dignity, please give the XMR back, you have probably scammed more than enough by now.

-

Does anybody know if this site truly became a selective scam site? It used to be fairly widely used in the early days of Monero and most of the reported scam reports were put down to phishing clones but maybe they were always selective scammers?

I'm mainly posting this to try get the xmrwallet developers attention if they're not scammers and to serve as a warning to others.

I want to preface this by saying I know web wallets are insecure and and easy way to lose money and to explain why I used it I'll have to give a small amount of background story with somewhat vague or slightly changed details.

I have a family member whose child needs some long-ish term medical treatment but because of some ridiculous court order based around a custody agreement, traveling to get this treatment wasn't possible. To cut a long story short, as I am already in the place they needed to be to get the treatment and I agreed to take in and take care of the child and the "guardian" would join us as soon as it was possible.

"Guardian" has been sending me XMR when it's possible (After getting their paycheck etc) to pay for these procedures when it's time. Before you start to hate, the other person involved in this custody order has never wanted anything to do with the child and only wants to hold power over "Guardian" and was very manipulative in the past. Because of "guardians" fear of the other person/courts etc finding out about this, and finding out where the child is, they have been exchanging cash for XMR at every opportunity and ensure I get it as fast as possible in case anyone tries to take it from them.

The first time they wanted to send XMR, (due to my own problems, new computer without the GUI installed yet or synced) I created a wallet on xmrwallet. I've actually used this site many times in the early days of monero and never had any problems and until recently i thought it was still trustworthy. I had no problems sending from xmrwallet to my GUI the XMR they sent. A couple months ago they sent <75 XMR and I did tell "guardian" that the next time they send a large amount to tell me and I would give them a different address because web wallets are not the most secure, I also had no problem sending this XMR from xmrwallet to my GUI.

The next couple of months there was no problems sending XMR amounts from a few hundred or few thousand dollars from xmrwallet to my GUI wallet. Until a few days ago when they told me they had sent <400 XMR. This was the remaining balance of the sale of their home, and the last step for "guardian" to come join us here.

I checked xmrwallet and the <400 was there just as they said and i transferred it to my GUI as I had many time only this time it didn't arrive. I have scanned and re-scanned the blockchain, restored more times than I remember, tried to add the transaction and even tried with the CLI and importing it into other secure wallets, the XMR is simply not there.

I can not decode the outputs of the transaction using the address and private viewkey. The transaction is definitely on the blockchain, I imported the xmrwallet seed into the GUI and the transaction shows the same transaction id and happened at the exact moment I made the transaction which seems strange to me, also all the XMR addresses are exactly the same on the website and in the GUI for those wondering. If xmrwallet has started scamming wouldn't they just be monitoring all the seeds/balances and sweeping them away as they came in? For it to happen this way they would have to be replacing the addresses entered on the web interface which seems unnecessary.

Another thing, I definitely could not have sent it to any other address by mistake, I only have 1 GUI wallet, I copied the address and checked twice that It was pasted correctly before sending and the confirmation showed my address. I do not have any clipper malware or anything like that, my machine is quite secure and after worrying so much the last few days I even sent a couple of test transactions to and from the same xmrwallet wallet and another wallet I created on that site, one I did $2000 just to check and it also arrived in my GUI just fine, so this one was definitely either an elaborate selective scam or something else, like dns?

Also I was not on the phishing clone that I read many stories about, I take security as serious as I can and I have the address in a text editor that I've had backed up for years. I still have the page open several days later, it is the correct page.

Because the transaction was made in xmrwallet on the web it does not show the Tx key or recipient address which would help me know what had happened and importing the seed did not help with this either.

I have tried to email the xmrwallet support but I haven't received a response yet. I'm posting this in hopes that they see this and can respond to me quickly or somebody from this community might know how to contact them.

I know the chances that the XMR is gone is almost certain, the transaction is on the blockchain and not in my GUI so it's clear it must have been sent somewhere, I'll keep some hope until I hear from the xmrwallet support (if it exists anymore) because the next conversation I have to have will be an unpleasant one.

If anyone here knows the developers or a way to reach them please reach out or be kind enough to ask them to reply to their emails.