# airdrop-openledger.com — SUSPICIOUS

> airdrop-openledger.com mimics Ledger to deceive users. Currently offline, stay alert and avoid engagement with this low-risk impostor domain.

## Summary
PhishDestroy identifies airdrop-openledger.com as a brand impersonation targeting Ledger. Classified as low risk, the domain was created to mimic Ledger's brand and lure unsuspecting users.

This domain resolved to IP 104.21.9.109 and was registered via OwnRegistrar, Inc. It appeared on four security blocklists and was flagged by 2 out of 95 VirusTotal vendors, indicating limited but notable suspicion.

airdrop-openledger.com has been taken offline, mitigating immediate threats. Users are advised to remain cautious and avoid interaction with similar suspicious domains emulating Ledger. PhishDestroy continues monitoring for potential reactivation.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Scam type: Airdrop Scam
- Target brand: Ledger

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: OwnRegistrar, Inc.
- Country: US
- IP: 104.21.9.109
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["alice.ns.cloudflare.com", "leonard.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["CRDF", "Gridinsoft"]
- Google Safe Browsing: clean
- Blocklists: 4 hits
  Lists: ["PhishDestroy", "MetaMask", "ScamSniffer", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/01996a96-affd-705b-87ed-97f919ca5c1b.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/6aa51950-991c-42f6-b3a2-f32a7ffeb6d9
- PhishDestroy: https://phishdestroy.io/domain/airdrop-openledger.com/
- LLM endpoint: https://phishdestroy.io/domain/airdrop-openledger.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/airdrop-openledger.com/
Last updated: 2026-03-19