airdrop-openledger[.]com

PhishDestroy identifies airdrop-openledger.com as a confirmed brand impersonation site, specifically targeting the Ledger brand, which is a well-known company in the cryptocurrency and blockchain space. This domain was flagged for its malicious intent to deceive users into divulging sensitive information. The brand impersonation threat type is particularly concerning as it preys on the trust users have in reputable brands like Ledger.

The domain airdrop-openledger.com has several notable technical indicators, including a VirusTotal score of 2/95, indicating that only a couple of security vendors have flagged it as malicious, while the rest remain unaware of its true nature. It was registered through OwnRegistrar, Inc. and resolves to the IP address 104.21.9.109. Furthermore, this domain was created on February 21, 2026, and has already appeared on 2 security blocklists, highlighting its rapid involvement in malicious activities. The SSL certificate issued by Google Trust Services / WE1 adds a layer of authenticity to the site, making it even more deceptive to unsuspecting visitors.

Currently, the status of airdrop-openledger.com is active, posing an elevated risk to users who may stumble upon it. Despite being flagged by some security vendors, the domain remains operational, and its ability to impersonate Ledger could lead to significant financial losses for victims. In response, users are advised to exercise extreme caution when interacting with websites that request sensitive information, especially those that claim to be affiliated with reputable brands like Ledger. The remaining risk associated with this domain necessitates constant vigilance and a thorough review of the full report to understand the nature of this threat and how to protect against it.