quantumfsadvancedledger[.]com

Analysis of quantumfsadvancedledger.com shows a newly registered site (June 10 2026) that presents itself as a cryptocurrency marketplace, as indicated by its page title. The domain explicitly targets the Ledger brand, classifying it as a brand‑impersonation campaign. Technical fingerprints reveal a PHP‑based web server running on LiteSpeed with Alpine.js and Smartsupp scripts, serving content over HTTP/3 and protected by a Let's Encrypt certificate. The site resolves to IP 198.251.89.30, an address owned by AS53667 (FranTech Solutions) located in the United States. Nameserver delegation points to ns23.my‑control‑panel.com and ns24.my‑control‑panel.com, typical of the registrar Hosting Concepts B.V. d/b/a Registrar.eu. Mail exchange is configured to the domain itself (priority 0), a pattern frequently observed in phishing infrastructures. Reputation services flag the domain heavily: Gridinsoft assigns a trust score of 0 / 100, and five of ninety‑one VirusTotal scanners have raised alerts. The domain appears on one security blocklist and has already been blocked by PhishDestroy, yet it remains reachable (HTTP 200). While the exact content of the landing page has not been inspected, the combination of brand targeting, recent creation, low reputation scores, and active hosting indicates a high‑risk impersonation operation. Defenders should add the domain and its resolving IP to outbound and inbound block lists, monitor the associated nameservers for further registrations, and consider updating email filtering rules for the MX record. Continuous re‑evaluation is advised, as the infrastructure may evolve or expand to additional hosts.