worldquantumgloballedger[.]com

The domain worldquantumgloballedger.com is currently active and exhibits multiple indicators of a high‑risk brand‑impersonation campaign targeting Ledger users. The site resolves to IP 192.3.141.254, which is geolocated in the United States and belongs to AS36352 (HostPapa). Registration occurred on October 2, 2024 through Hosting Concepts B.V. d/b/a Registrar.eu, and the domain is served by the nameservers ns1.superfastserver.org and ns2.superfastserver.org. HTTP analysis shows a 302 redirect response, and the TLS certificate is issued by Let’s Encrypt (R13), confirming encrypted transport but offering no legitimacy. The page title "Worldquantumgloballedger - Home" aligns with the claimed brand, and the site leverages common web stacks such as Firebase, Bootstrap, LiteSpeed, Swiper, Smartsupp, Slick, jQuery, and HTTP/3, suggesting a generic hosting environment rather than a bespoke Ledger infrastructure. Threat intelligence flags the domain as a crypto scam, and it appears on four security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. VirusTotal reports 11 detections out of 95 scanners, reinforcing malicious intent. Gridinsoft assigns a trust score of 0/100, indicating a lack of reputable behavior. While the exact malicious payload or credential‑harvesting mechanism has not been publicly disclosed, the combination of brand impersonation, redirect behavior, and low trust metrics warrants immediate defensive action. Organizations should block the domain at network perimeter devices, add it to DNS sinkhole lists, and monitor for any outbound connections to 192.3.141.254. Incident responders should also correlate any Ledger‑related authentication attempts with this infrastructure and consider user awareness campaigns highlighting the fraudulent nature of the site.