wlfiledger[.]com

This domain, wlfiledger.com, was created on 22 September 2025 and is registered through Tucows Domains Inc. The authoritative nameservers ns1‑ns4.flokinet.net resolve the domain to the IPv4 address 185.247.224.183, which is allocated to AS200651 FlokiNET ehf in Romania. No TLS certificate is presented, indicating the site does not use HTTPS. The page title returned during the brief offline scan was “World Liberty Financial,” and the site advertises a crypto‑related scam targeting Ledger users, as indicated by the “Impersonates: Ledger” and “Scam type: Crypto Scam” markings. Gridinsoft assigned a trust score of 0 / 100, reflecting extreme suspicion.

On VirusTotal the domain received detections from two of ninety‑five security vendors, and it is listed on a single external blocklist. The PhishDestroy service has also taken the domain offline. Current HTTP status is offline, so content cannot be retrieved for deeper analysis. Evidence suggests the infrastructure is intentionally minimal, relying on a single hosting provider and generic registrar services.

Uncertainty remains regarding the full payload, phishing kit, or any command‑and‑control infrastructure, as no additional payload hashes or URLs have been published. Defenders should immediately block wlfiledger.com at DNS and proxy layers, add 185.247.224.183 to network‑level deny lists, and monitor for any related sub‑domains hosted on the same nameserver set. Continuous re‑evaluation is recommended in case the site becomes active again or new detections appear.