airdrop-ducat[.]live

This domain, airdrop-ducat.live, impersonates the legitimate cryptocurrency platform across, misleading users into participating in a fake airdrop event. The threat posed by this domain is brand impersonation, designed to deceive users into sharing sensitive information, potentially leading to financial loss.

Analysis indicates that airdrop-ducat.live has been flagged for brand impersonation and is associated with the IP address 172.67.163.177. The domain appears on one security blocklist and has a Gridinsoft trust score of 0/100, indicating a high level of suspicion. Despite having a SSL certificate from Google Trust Services, the site has been detected by only 0 out of 95 engines on VirusTotal, suggesting that it may be a relatively new threat. The domain is registered through Web Commerce Communications Limited and has now been taken offline, likely as part of a security response to prevent further harm.

If a user has visited airdrop-ducat.live, it is crucial to take immediate action to secure their accounts. This includes changing passwords for the across platform and any other services where the same password may have been used. Additionally, users should monitor their financial accounts for any unauthorized transactions. Reporting the incident to the across support team and to local cybersecurity authorities is also recommended to help mitigate potential damage and to assist in further investigations.