qfssecurity-ledger[.]com

The domain qfssecurity-ledger.com was registered on June 12, 2026 through DYNADOT LLC and resolves to the IP address 216.24.57.1, which is hosted in the United States by Render. The authoritative nameservers are ns1.dyna-ns.net and ns2.dyna-ns.net. HTTP requests return a 200 status code and the site presents the page title “Ledger Wallet — Quantum Finance Suite”. TLS is provided by Google Trust Services under the WE1 certificate, and the front‑end is served behind Cloudflare with HTTP/3 enabled. VirusTotal reports that 23 of 91 security vendors have flagged the domain, and the domain appears on a single blocklist (PhishDestroy). Gridinsoft assigns a trust score of 0 / 100, and AlienVault OTX references the domain in four threat‑intel pulses. The observed indicators collectively point to a high‑risk brand‑impersonation campaign targeting Ledger users. At present, the site remains active and no additional mitigation data (such as sinkholing or takedown) has been recorded. Defenders should block the domain and its resolving IP at perimeter filters, monitor DNS queries for the domain and its nameservers, and enforce multi‑factor authentication for any Ledger‑related services. Continuous threat‑intel feeds should be consulted for any new sightings or payload updates associated with this infrastructure.