edwinfinance[.]net

The domain edwinfinance.net was a phishing site engaged in brand impersonation targeting users of the 'across' platform. It posed an elevated risk by attempting to deceive victims into connecting wallets through fraudulent wallet-connect prompts, a tactic classified as 'wallet_connect_phish'. No crypto drainer kit was identified. The site is currently taken offline, reducing immediate exposure but leaving past visitors at risk.

Technical indicators confirm edwinfinance.net as malicious. Only 1 of 95 VirusTotal security vendors flagged the domain, while Google Safe Browsing did not detect it. The domain appeared on 2 security blocklists, PhishDestroy and ScamSniffer. Registered through Web Commerce Communications Limited dba WebNic.cc on February 21, 2026, it resolved to IP address 172.67.201.190, hosted by Cloudflare in the US. The SSL certificate was issued by WE1, and the observed page title was 'Edwin Finance'. Gridinsoft assigned a trust score of 0/100, reinforcing its fraudulent nature.

Victims of edwinfinance.net should immediately revoke any token approvals granted to the site and transfer funds to a new wallet. Monitor transaction history for unauthorized activity and enable transaction simulation tools to detect hidden malicious requests. Report the domain to platforms like ScamSniffer, PhishDestroy, or local cybercrime units to aid in takedown efforts and protect others from similar phishing attempts.