Product Documentation.

Everything you need to know to investigate a wallet, understand its risk score and issue certified reports with XiMoor.io.

Overview

XiMoor.io lets you investigate the activity of any public crypto wallet address. In a few clicks you can:

  • See a wallet's balance and a summary of everything it has sent and received.
  • Browse the wallet's full transaction history, transaction by transaction.
  • Run an automated risk assessment against known fraud, money-laundering and sanctions patterns, with a simple Low / Medium / High / Critical rating.
  • Generate a permanent, tamper-proof audit report, encrypted for privacy and issued to you as a digital certificate (an NFT) that only you can unlock.

You do not need to own the wallet you are investigating. Connecting your own wallet is only required for actions that prove ownership, such as claiming an encrypted report.

Getting started

Signing in

When you first open the application you complete a short "prove you're human" check. Then you can either:

  • Sign in with an account (username or email and password), which unlocks every feature, including encrypted reports and your report history; or
  • Continue as a guest, with no account needed. Guests can look up wallets, view transaction histories and run risk scores, but cannot use encrypted reports.

Connecting a wallet vs. looking up an address

Type in any address to look at anyone's wallet. It requires nothing from you except the address itself.

Connect your own wallet only when you need to prove ownership: to receive an encrypted report as a certificate, or to unlock a report you already own.

Connecting a wallet never gives the application access to your funds. You are simply asked to sign a message: a free, one-click confirmation that does not move any money.

Choosing a network

A wallet address can have completely different activity on each blockchain network, so choose one before running an analysis.

NetworkPurpose
EthereumMain, real-value network
PolygonMain, real-value network
Ethereum (test network)Practice and testing, no real money involved
Polygon (test network)Default starting network, for practice and testing

On the two test networks, dollar-value estimates and risk scoring are turned off, since test money has no real-world value.

Analyzing a wallet

  1. Pick a wallet. Connect your own, or type in the address you want to investigate.
  2. Pick a network from the network selector.
  3. Choose what to do: Generate Wallet Audit Report, View Transaction History, or On-Chain Risk Score.
  4. Set your filters: all transactions, the most recent 10 / 20 / 50 / 100, or a date range, and whether network fees are included in totals.
  5. Wait for the results. A progress indicator shows status and a time estimate. Small wallets usually finish in under a minute; very busy wallets can take a few minutes. You can cancel at any time.
  6. Review your results in the summary, the transaction list or the risk report.

Results are remembered for a while so that repeating the same request is instant. To force a fresh look, for example after new transactions, use Reset in the filter screen.

The audit report & transaction history

The Wallet Audit Report shows the wallet address, network, current balance (with an approximate dollar value), total transactions found, total value received and sent, the activity date range, and the exact time the snapshot was taken.

The Transaction History is the detailed ledger behind it. For each transaction you see the date and time, direction, counterparty address, amount (with dollar value and exchange rate), network fee, whether it was a simple transfer or a smart-contract interaction, and a unique reference you can verify on a public block explorer.

Both views are for on-screen review. For a permanent, downloadable, certified copy, use encrypted reports.

The risk score

The On-Chain Risk Score is an automated compliance check. It flags patterns that deserve a closer look. A high score is not proof of wrongdoing, and a low score is not a guarantee of innocence. Think of it as a smoke detector, not a verdict.

Two scan options

  • Quick Scan (about 15–30 seconds) analyzes the wallet's own history with eight checks.
  • Deep Scan (about 1–4 minutes) adds counterparty tracing to find indirect exposure to risky addresses, and enables the most advanced layering detection.

The checks

Sanctions & blacklist exposure · mixer patterns · unusual activity bursts · bot-like behavior · dormancy followed by reactivation · wash trading · structured round-number transfers · peel-chain layering · indirect sanctions exposure (Deep Scan only). Each is described on the Services page.

How the score is calculated

Every check that triggers adds points. The points are summed into one score out of 100 (capped at 100), so a couple of strongly triggered, high-weight checks can push a wallet into the most serious category on their own.

ScoreLevelWhat it meansSuggested action
0–25LowNo significant red flags. Activity looks ordinary.Proceed normally.
26–50MediumAt least one moderate concern was identified.Standard extra verification.
51–75HighMultiple or serious concerns were identified.Enhanced verification of source of funds and control.
76–100CriticalActivity strongly matches known illicit patterns.Extreme caution; typically warrants formal reporting.

Reading a risk report

  • An overall score and color-coded rating (green, yellow, orange, red).
  • A plain-language summary of the concerns found.
  • A checklist of every check: whether it triggered, the points it contributed and the supporting evidence.
  • For Deep Scan, how many counterparties were examined and the indirect exposure found.
  • A technical appendix with the underlying numbers.
  • A disclaimer: this is an automated, informational assessment, not a legal or professional compliance opinion.

Encrypted reports & certificates

An encrypted report is a permanent, certified copy of a wallet audit. It is saved permanently (unless you choose one-time download), locked with a secret key, and issued to you as a digital certificate (an NFT) that you own.

How to generate one

  1. Connect your wallet. The certificate is issued directly to it.
  2. Choose the wallet address to audit and set your filters.
  3. Choose Permanent Storage or One-Time Download.
  4. Sign a free confirmation message with your wallet to authorize the request.
  5. Wait one to two minutes (longer for very large wallets) while the report is generated, locked, stored and issued.
  6. Receive a certificate number: your proof of ownership and your reference for retrieving the report.

The unlock key

When you download a report you own, the application verifies you by signature and retrieves the key for you. You can also choose View Decryption Key to hold it yourself.

Treat the decryption key like a password. Anyone who has it can unlock and read your report.

Your report history

Your Report NFTs is a personal gallery of every certificate tied to your connected wallet, showing when each was created and how many times it has been downloaded. Access always follows the certificate: connecting a different wallet shows that wallet's reports.

Account types

FeatureGuestRegistered
Look up any wallet by addressYesYes
Wallet summaries and transaction historyYesYes
On-Chain Risk ScoreYesYes
Encrypted reports and certificatesNoYes
Personal report historyNoYes

Glossary

Wallet
A crypto account, identified by its address, that can send and receive funds.
Network
One of several separate blockchain systems a wallet can exist on. The same address can have entirely different activity on each.
Counterparty
The other wallet involved in a transaction.
Signing a message
A free, one-click action in your wallet app that proves you control the wallet, without spending money or moving funds.
Report certificate (NFT)
A unique, personally owned digital token that represents ownership of a report and controls who can unlock it.
Encryption / unlock key
The secret code required to open a locked report.
Layering / peel chain
Passing funds rapidly through a chain of wallets, almost in full each time, to obscure their origin or destination.
Structuring
Deliberately splitting or shaping transactions, often into round numbers, to avoid attention or reporting thresholds.
Wash trading
Sending funds out and receiving a similar amount back shortly after, to fake activity or disguise the source of funds.