# airdropledger.com.cornixbots.com — SUSPICIOUS

> Explore the low-risk crypto drainer domain airdropledger.com.cornixbots.com and its current offline status. Learn more here.

## Summary
PhishDestroy identifies airdropledger.com.cornixbots.com as a low-risk crypto drainer domain linked to illicit cryptocurrency theft activities. It was registered on February 21, 2026, and categorized based on its threat behavior related to crypto asset depletion.

The domain resolved to IP address 54.38.153.190 and was registered through Ultahost, Inc. It appeared on a single security blocklist and was flagged by one security vendor on VirusTotal. The page title indicated a loading problem, suggesting limited active content or disruption.

Currently, the domain is offline and no longer accessible. Its removal reduces associated risks, but PhishDestroy recommends continued monitoring of related infrastructure for potential resurgence or similar threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Scam type: Airdrop Scam
- Target brand: Ledger
- Page title: Problem loading page

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Expires: 2026-04-30 00:00:00
- Registrar: Ultahost, Inc.
- Country: SL
- IP: 54.38.153.190
- IP Country: DE
- IP City: Frankfurt am Main
- IP Org: AS16276 OVH SAS
- Nameservers: ns1.gocheapweb.com ns2.gocheapweb.com ns3.ultahost.com ns4.ultahost.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019c245d-c8a1-772f-85a3-c3e1f3d25e4e.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/bd0e9003-8239-49af-b7e3-b3c07bf8840e
- PhishDestroy: https://phishdestroy.io/domain/airdropledger.com.cornixbots.com/
- LLM endpoint: https://phishdestroy.io/domain/airdropledger.com.cornixbots.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/airdropledger.com.cornixbots.com/
Last updated: 2026-03-19