openledgerchecks[.]xyz

Analysis as of July 24, 2026 shows that openledgerchecks.xyz was registered on February 21, 2026 and is currently offline. The domain resolves to IP 104.21.48.1, which belongs to AS13335 Cloudflare, Inc. in the United States. The TLS certificate presented is identified as WE1, indicating a possibly low‑reputation certificate. The site’s HTML title is “Nur einen Moment…”, and the listed scam type is a crypto scam that impersonates the Ledger brand.

Reputation services reflect extreme distrust: Gridinsoft assigns a score of 0/100, Scamadviser a score of 1/100, and one security blocklist (PhishDestroy) has listed the domain, which has already taken it offline. VirusTotal scans show that one of ninety‑three security vendors flagged the domain, confirming at least a minimal detection. No additional evidence such as Safe Browsing or OTX entries is available, and registrar details are not disclosed in the provided data.

The limited visibility means that the full payload, phishing kit, or victim interaction details remain unknown. Defenders should proactively block traffic to 104.21.48.1 at the network perimeter, add openledgerchecks.xyz to internal URL filtering and threat‑intel feeds, and monitor for newly created domains that share the “ledgerchecks” substring or use the same Cloudflare IP range. Continuous re‑scanning of the domain through multi‑engine services is advised to capture any later changes should the site be re‑hosted.