trumpqfsledger[.]xyz

This domain, trumpqfsledger.xyz, was registered on February 21, 2026, and is assessed as an elevated-risk crypto scam targeting users of the Ledger brand. Infrastructure analysis reveals the domain resolved to the IP address 192.3.141.252, hosted by HostPapa in the United States. At the time of assessment, the domain appears on one security blocklist and has been flagged by six of 95 security vendors on VirusTotal, indicating detection by multiple engines.

The domain is also blocked by PhishDestroy, further supporting its classification as malicious. The scam type is explicitly identified as a crypto scam, aligning with the impersonation of Ledger, a well-known cryptocurrency hardware wallet provider. While the domain is currently offline, its infrastructure and detection history suggest it was actively used for fraudulent purposes prior to takedown.

Defenders should treat this domain as compromised and maintain blocklist entries to prevent potential re-emergence. No additional details regarding SSL certificates, HTTP status, or specific page content are available, limiting further technical analysis. The registration age and hosting provider do not exhibit anomalies beyond typical fraudulent domain characteristics, but the combination of brand impersonation, detection by security vendors, and confirmed scam classification warrants continued monitoring for related activity.