web3-airdrop[.]su

The site web3-airdrop.su presented a page titled "Ledger Live Crypto Wallet App | Ledger," explicitly impersonating the Ledger brand as part of a cryptocurrency scam. The threat posed is credential theft or wallet compromise, as such sites trick users into entering sensitive data under the guise of a legitimate service.

Technical evidence shows the site was detected by 14 out of 95 VirusTotal vendors and flagged by security solutions including ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, and ESET. It was listed on 4 blocklists. The IP address 213.111.149.213 is registered in Ukraine (UA) under AS6698 Virtual Systems LLC. The domain uses nameservers ns01.serverspace.io and ns02.serverspace.io. No SSL certificate was detected. The site is currently offline and has a GridinSoft trust rating of 0 out of 100.

The current status is down or offline, indicating the threat is no longer directly accessible. The risk level is high due to the combination of brand impersonation, multiple security vendor detections, and lack of SSL, which strongly suggests malicious intent. Users should avoid any interaction with this domain and ensure their Ledger credentials are not compromised.