open-ledgerlive[.]com

Analysis of open-ledgerlive.com indicates that the domain was actively used to host a crypto‑scam impersonating the cryptocurrency exchange BitGet. The domain was created on 5 November 2025 and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. Infrastructure examination shows that the domain resolves to IP address 104.21.62.65, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The SSL certificate presented is identified as “WE1”, and the page title returned by the server is “Dashboard”, matching the claim of a BitGet‑style interface. Reputation metrics are uniformly negative.

The Gridinsoft trust score is 0 out of 100, and the domain is listed on at least one public blocklist, where it is flagged by PhishDestroy. VirusTotal scans recorded nine positive detections out of ninety‑three security vendors, reinforcing the malicious classification. The overall risk level is marked as elevated, and the current operational status is offline, indicating that the site has been taken down or otherwise disabled. Observed evidence confirms the domain’s role in a brand‑impersonation campaign targeting BitGet users, fitting the “Crypto Scam” category.

No additional content or page behavior has been captured, so the precise phishing mechanisms, credential‑harvesting forms, or redirect chains remain unknown. Defenders should continue to block the domain at network perimeters, update URL filtering and endpoint protection lists with the observed IP and domain, and monitor for any re‑registration attempts. Additional intelligence gathering, such as retrieving archived page snapshots, may clarify the full scope of the fraudulent workflow. Organizations using BitGet should educate users about unsolicited login prompts and advise verification through official channels.