finwiseledger[.]com

The domain finwiseledger.com is a confirmed phishing site engaged in brand impersonation targeting Ledger, a cryptocurrency hardware wallet provider. It was designed to deceive users into believing they were interacting with an official Ledger service, posing an elevated risk of cryptocurrency theft through fraudulent login or transaction requests. No drainer kit was identified, but the site operated as a cryptocurrency scam. As of the latest verification, finwiseledger.com has been taken offline.

Technical indicators confirm the malicious nature of finwiseledger.com. The domain was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned a trust score of 0/100. It appeared on 1 security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. Registered through HOSTINGER operations, UAB on July 25, 2025, the domain resolved to IP address 82.25.107.188, hosted by AS47583 Hostinger International Limited in India. No SSL certificate was present, and the observed page title was 'FinWise Ledger'. Nameservers were ns1.dns-parking.com and ns2.dns-parking.com.

Users who interacted with finwiseledger.com should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new, secure wallet. If login credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the phishing domain to Ledger’s official security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in takedown efforts.