openledgerfoundation[.]com

The domain openledgerfoundation.com was registered on June 14, 2025 through GoDaddy.com, LLC and currently resolves to the IP address 3.161.213.63, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in Canada. Infrastructure analysis shows the site is hosted on Amazon Web Services, fronted by Cloudflare and Amazon CloudFront, with HTTP/3 enabled and Google Analytics traffic monitoring. The SSL certificate is issued by Google Trust Services under the WE1 designation, indicating a valid TLS handshake. The page title returned by the HTTP 301 redirect is "Openledger | The AI Blockchain," and the domain is explicitly flagged as impersonating the Ledger brand, classifying it as a crypto‑related scam. The domain appears on one security blocklist and has been blocked by PhishDestroy. No detections were reported by the 95 VirusTotal scanners that have examined the site, but the absence of detections does not confirm safety. Evidence of the brand‑impersonation claim is limited to the known intelligence; the actual page content has not been inspected, so the presence of credential‑harvesting forms or malicious payloads remains uncertain. Defenders should add the domain and its associated IP to web filtering and DNS blocklists, monitor for any related C2 traffic, and consider issuing alerts to users of Ledger products about the impersonation attempt. Continuous observation is advised until the investigation determines whether the site is actively used for credential theft or financial fraud.