ChainPatrol
Web-Check 
SOCRadar 
LeakIX 
域安全和威胁情报
ledger-wallet[.]us[.]cc
“share-svr.com | 502: Bad gateway”
威胁判定
关键
89/100 证据评分
可用性
未验证
当前可达性未经验证
风险信号
病毒检测总数：13/91
Spamhaus DBL: DBL_PHISH
品牌冒充：Ledger
报告概览
ledger-wallet.us.cc — 未验证. 品牌冒充：Ledger; 诈骗类型：Crypto Scam. 证据摘要: VirusTotal 13/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar, ESET); Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 89/100. 注册商: Gname.
为保留原始取证记录，下方的 PhishDestroy AI 详细分析仍使用英文。
证据摘要
重要
The domain ledger-wallet.us.cc is a cryptocurrency scam site impersonating the Ledger brand. The page title displays "share-svr.com | 502: Bad gateway", indicating the site is currently returning a server error. The threat posed is credential theft and cryptocurrency wallet compromise, as the site likely attempts to trick users into entering sensitive wallet information under the guise of a legitimate Ledger service.
Technical evidence shows the domain was created on 2026-02-21 and registered through Gname.com Pte. Ltd. It resolves to IP 104.26.12.42, hosted in the US by AS13335 Cloudflare, Inc. The SSL certificate is issued by Let's Encrypt (E7). VirusTotal reports 18 detections out of 95 vendors, with flags from ADMINUSLabs, alphaMountain.ai, BitDefender, Certego, and CRDF. The domain is listed on 3 blocklists and uses nameservers a.rsp-dns.com and b.rsp-dns.com.
The site is currently offline with a DOM risk score of 80, indicating a high threat level. Despite being down, the domain remains a significant risk due to its association with cryptocurrency scams and impersonation of a trusted brand. Users should avoid any interaction with this domain.
数据覆盖范围
VirusTotal
13 / 91
URLQuery
未检查
PhishStats
checked — no match recorded
OTX
no community references
CF雷达
provider verdict: malicious
URLScan capture
存储的报告
URLScan verdict
无可用判定
DNS 阻断
未检查
TLS
已过期或未验证
WHOIS
6 mo old
屏幕截图
2 captures · 2 sources
重定向链
未探查
网络安全情报
威胁响应 Pipeline
发现
Checks
Reports
可用性
12/14
公共封禁名单状态
已保存的截图
域名情报
域名
服务器 / ASN
cloudflare · AS13335 CLOUDFLARENET - Cloudflare, Inc., US
IP Context
Cloudflare shared edge
origin IP hidden
Edge-IP 声誉不属于此域。
Registrar (base domain)
Gname
(SG)
(SG)
IP 地址
104.26.12.42
CDN
地理位置
San Francisco, US
San Francisco, US网络AS13335 · Cloudflare, Inc.
源 IP 隐藏在 CDN 代理后面。边缘地址的反向 IP 结果包含不相关的租户；查找源头需要被动 DNS 或证书透明数据。
Registration (base domain)us.cc · 创建 2026年2月21日 (174d)
技术细节DNS、SSL SAN、时间戳
首次发现2026年2月26日
DOM Analysisanalyzed 2026年7月9日score 80/100
IoC Extractionscanned 2026年7月29日0 wallet · 0 Telegram IoCs
域名服务器b.rsp-dns.com
TLS Observationscanned 2026年3月15日
所用技术 · 1 identified
Cloudflare
CDN
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 置信度 100%
Detected via Cloudflare Radar · Wappalyzer engine
举报此域名
提交证据，帮助保护他人
VirusTotal 分析
13 / 91 安全供应商标记了该域
View on VT
Last analyzed Previous stored snapshot: 18 detections
alphaMountain.ai
BitDefender
Chong Lua Dao
CyRadar
ESET
Fortinet
G-Data
Gridinsoft
卡巴斯基
Lionic
Sophos
VIPRE
Webroot
证据与外部报告
证券分析
OSINT与情报分析
DNS 与网络
SEO 与域名
您是否受到本网站的影响？
If credentials were compromised, report immediately. Do not engage with recovery scammers.
如果您输入了帐户凭据、个人或付款信息，或者从此域下载了文件，请立即采取措施。以下资源可帮助您报告事件并保护自己。
PhishDestroy listing review 不是执法报告
域名申诉
如果您拥有该域名并认为该列表不正确，请请求审核
警惕“数据恢复”诈骗！ 犯罪分子可能会冒充调查员、律师或追债员再次联系受害者。 请勿支付预付费用或共享凭证。 了解有关康复欺诈的更多信息 →
相关基础设施与报告
同一注册商: Gname 6
boostcasino.cc 
ourshopee7.mom 
tassmahal.xinruiweixin.com Ledger impersonation 8
These domains also target Ledger users. View all Ledger threats →
最近的威胁报告 6
最近添加了来自 PhishDestroy 数据库的报告。这些发现链接并不意味着共享基础设施或所有权。
pesta-shopee459.blogspot.com 