klyrix-ledger[.]net

The domain klyrix-ledger.net is currently active and was registered on May 13, 2026 through GoDaddy.com, LLC. DNS resolution points to the IP address 188.114.96.3, which is hosted by Cloudflare, Inc. in Canada. The site presents an HTTP 301 response and serves a Let's Encrypt certificate (identifier E7). The page title returned by the server is "Klyrix Ledger — Compliance-first accounting for the GCC · Klyrix Ledger", which aligns with a brand impersonation campaign targeting Ledger. The domain appears on three security blocklists and has been blocked by PhishDestroy, MetaMask, and SEAL. An MX record is configured to route mail to inbound-smtp.us-east-1.amazonaws.com, indicating use of Amazon's email service. VirusTotal analysis shows one of ninety-two security vendors flagged the domain. No additional technical artifacts such as malicious payloads or credential‑stealing forms have been disclosed. Defenders should treat the domain as high‑risk, add it to network and email deny lists, monitor for related DNS queries, and investigate any traffic to the associated IP. Continuous tracking of blocklist updates and threat‑intel feeds is recommended to capture any emerging indicators.