VirusTotal
5 / 92 engine detections
打开报告strategyvault.info:冒充 Ledger,PhishDestroy 于 2026-10-22 检测到。风险:关键(93/100)。注册商:NiceNIC。状态:最后已知的活跃状态。托管:CloudFLARENET-EU。PhishDestroy 已发送1 份滥用举报。VirusTotal:5/92 个引擎标记。请勿输入登录凭据,也不要连接钱包。
“STRAT-X Allocation Is Live | STRATEGY”
冒充 Ledger: strategyvault.info — 最后已知的活跃状态 (HTTP 200). 证据摘要: VirusTotal 5/92 (alphaMountain.ai, BitDefender, G-Data, Kaspersky, LevelBlue); URLScan capture; 1…
The evidence summary below uses retained observations. Each source keeps its own collection date.
5 / 92 engine detections
打开报告Suspicious
打开报告扫描报告
打开报告3 community references
打开报告无威胁标记
打开报告页面快照
打开报告结果反映各来源的采集时间。零检出不代表安全。OTX 引用为社区发布的内容。
已存档的页面、网络和扫描器观测结果,按来源和观测时间分组。
观察到: · Retrieved:
| Uuid | 01a163c8-4513-77ff-b945-f4e4927a0c50 |
|---|---|
| Final url | https://strategyvault.info/ |
| 状态 | 200 |
| 已重定向 | https-only |
| Redirects | [
{
"to": "https://strategyvault.info/",
"from": "http://strategyvault.info/",
"status": 307
}
] |
| Ip | 104.21.70.116 |
| Contacted domains | [
"xrpl-scaner.com",
"crossmark.io",
"play-lh.googleusercontent.com",
"pbs.twimg.com",
"static.cloudflareinsights.com",
"api.ipify.org"
] |
| Contacted IP addresses | [
"172.67.162.171",
"76.76.21.21",
"142.250.191.22",
"172.64.150.129",
"104.16.80.73",
"172.67.74.152",
"104.21.70.116"
] |
| Asns | [
"13335",
"16509",
"15169"
] |
| Countries | [
"US"
] |
| Linked domains | [
"lovable.dev"
] |
| Document hash | 5d76df2534885e121b7635fefa4c2ad740ebdc0684c11f4caa699cefb51d0de6 |
| Script hashes | [
"4a14c79651a155feae77af887b9c4a4613fc870c1301716f3c75c1e8391fdd52"
] |
| Globals | [
"_0x1cb2",
"_0x2627",
"_0x1a76aa",
"__ledgerLogsListen",
"XRPLWalletConnect",
"savepage_ShadowLoader",
"__cfBeacon",
"__xamanSeedP"
] |
| Tls | {
"san": [
"*.strategyvault.info",
"strategyvault.info"
],
"cipher": "AES_128_GCM",
"issuer": "YE1",
"subject": "strategyvault.info",
"protocol": "QUIC",
"valid_to": "2027-01-09T15:34:51Z",
"valid_from": "2026-10-11T15:34:52Z"
} |
| 域名年龄(天) | 10 |
| Apex age days | 10 |
| Tls age days | 10 |
| TLS 有效天数 | 89 |
| Requests | 17 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 97,
"malicious": true
},
"overall": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"genericcrypto"
],
"malicious": true,
"categories": [
"phishing"
]
},
"urlscan": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"Generic Crypto"
],
"malicious": true,
"categories": [
"phishing"
]
}
} |
| HTTP headers | {
"server": "cloudflare",
"content-type": "text/html",
"strict-transport-security": "max-age=63072000; includeSubDomains; preload",
"content-security-policy": "frame-ancestors http: https:",
"x-content-type-options": "nosniff"
} |
观察到: · Retrieved:
| Uuid | ed7710a2-51c0-4107-b30d-4d0ac65cf138 |
|---|---|
| Final url | https://strategyvault.info/ |
| 状态 | 200 |
| History | [
{
"url": "https://strategyvault.info/",
"status": 200
}
] |
| DOM structure hash | a378dca7a9897dbd8ac10b629bbbcf82a97ef97d4e3fe92b9e94d9321f665fa4 |
| Document hash | c20d0728d94c5b38bc933f826f6ef6d7bd16af82ae482db3c02b4294b1f5019d |
| 域名风险 | [
"Newly Seen Domains",
"Security Risks",
"New Domains"
] |
| Radar rank | {
"bucket": ">200000"
} |
| DNS 记录 | [
{
"name": "strategyvault.info",
"type": "A",
"value": "188.114.96.0"
},
{
"name": "strategyvault.info",
"type": "A",
"value": "188.114.97.0"
},
{
"name": "strategyvault.info",
"type": "AAAA",
"value": "2a06:98c1:3120::"
},
{
"name": "strategyvault.info",
"type": "AAAA",
"value": "2a06:98c1:3121::"
}
] |
| DNSSEC 有效 | false |
| Ip | 188.114.96.0 |
观察到: · Retrieved:
| Vendor result counts | {
"timeout": 0,
"harmless": 52,
"malicious": 4,
"suspicious": 1,
"undetected": 35
} |
|---|---|
| Vendor labels | {
"G-Data": "phishing",
"Kaspersky": "phishing",
"LevelBlue": "phishing",
"BitDefender": "phishing",
"alphaMountain.ai": "suspicious"
} |
| Reputation | 0 |
| Categories | {
"alphaMountain.ai": "Unrated (alphaMountain.ai)"
} |
| 首次发现 | 2026-10-11T17:28:50Z |
| DNS 记录 | [
{
"ttl": 300,
"type": "A",
"value": "104.21.70.116"
},
{
"ttl": 1800,
"type": "SOA",
"rname": "dns.cloudflare.com",
"value": "courtney.ns.cloudflare.com"
},
{
"ttl": 300,
"type": "AAAA",
"value": "2606:4700:3035::6815:4674"
},
{
"ttl": 300,
"type": "A",
"value": "172.67.223.96"
},
{
"ttl": 300,
"type": "AAAA",
"value": "2606:4700:3031::ac43:df60"
},
{
"ttl": 21600,
"type": "NS",
"value": "dimitris.ns.cloudflare.com"
},
{
"ttl": 21600,
"type": "NS",
"value": "courtney.ns.cloudflare.com"
}
] |
| Dns at | 2026-10-16T22:04:16Z |
| Jarm | 27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c |
| Certificate | {
"san": [
"*.strategyvault.info",
"strategyvault.info"
],
"issuer": "Let's Encrypt / YE1",
"serial": "6adb16312f08ade75d13d6e1d48d0d6d8ef",
"sha256": "6b7f3018e3dcfcd51e56a717d56c161bc1ef39da8701ec7bd0dc3a97853bbb0d",
"subject": "strategyvault.info",
"valid_to": "2027-01-09T15:34:51Z",
"valid_from": "2026-10-11T15:34:52Z"
} |
| Registry data | {
"status": [
"client delete prohibited",
"client transfer prohibited"
],
"events": {
"expiration": "2027-10-11T16:00:00Z",
"registration": "2026-10-11T16:00:00Z",
"registrar expiration": "2027-10-11T16:00:00Z",
"last update of RDAP database": "2026-10-11T16:00:00Z"
},
"registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
"registrar_iana_id": "3765"
} |
| Mail configuration | {
"spf_lookups": 0
} |
|---|---|
| CAA 记录 | {
"domain": "strategyvault.info"
} |
| Protective DNS results | {
"resolvers": 12,
"blocked_count": 0
} |
| Web archive observations | {
"last": "2026-10-22T13:09:21Z",
"first": "2013-03-29T18:10:01Z",
"changes": 4,
"days_archived": 5,
"scans_per_day": 0,
"avg_page_bytes": 122573
} |
| 页面标题与元数据 | {
"title": "STRAT-X Allocation Is Live | STRATEGY",
"ogType": "website",
"ogImage": "https://pub-bb2e103a32db4e198524a2e9ed8f35b4.r2.dev/lovp_4pcahydebm8cg88qes5rj1d3cd/899179c1cba40f3772cf6f4abf5d85d8_1791735707684.png",
"ogTitle": "STRAT-X Allocation Is Live",
"description": "STRATEGY (STRAT-X) allocation is officially live. Enter your XRP address and claim your allocation.",
"twitterCard": "summary_large_image",
"ogDescription": "Claim your STRATEGY (STRAT-X) allocation on the XRP Ledger."
} |
| Trackers | {
"requests": 7,
"trackers": [
{
"name": "Google User Content",
"company": "Google",
"country": "US",
"category": "Hosting",
"requests": 1
},
{
"name": "ipify",
"company": "ipify",
"category": "Misc",
"requests": 1
},
{
"name": "X Corp.",
"company": "X Corp.",
"country": "US",
"category": "Social Media",
"requests": 1
}
]
} |
| 表单与混合内容 | {
"third_party_scripts": 0
} |
| 状态 | {
"up": true,
"code": 200,
"timings": {
"dns": 5,
"tls": 70,
"wait": 1942,
"connect": 6,
"download": 1076
},
"response_ms": 3099
} |
| TLS connection | {
"alpn": "h2",
"cipher": "TLS_AES_256_GCM_SHA384",
"protocol": "TLSv1.3",
"versions": [
"TLSv1",
"TLSv1.1",
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
} |
| Ports | {
"open": [
80,
443,
8080
]
} |
| Carbon | {
"bytes": 685312,
"co2_grams": 0.0251,
"cleaner_than": 1
} |
| Dns server | {
"ns": [
{
"ip": "108.162.194.130",
"host": "courtney.ns.cloudflare.com"
},
{
"ip": "162.159.44.6",
"host": "dimitris.ns.cloudflare.com"
}
],
"zone": "strategyvault.info"
} |
| Location | {
"ip": "2a06:98c1:3120::9",
"asn": "13335",
"org": "CloudFLARENET-EU",
"city": "London",
"country": "GB"
} |
| Ssl | {
"issuer": "Let's Encrypt / YE1",
"subject": "strategyvault.info"
} |
| DNS 记录 | {
"A": [
"188.114.97.9",
"188.114.96.9"
],
"NS": [
"courtney.ns.cloudflare.com",
"dimitris.ns.cloudflare.com"
],
"SOA": "{\"nsname\": \"courtney.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417241831, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
"AAAA": [
"2a06:98c1:3121::9",
"2a06:98c1:3120::9"
]
} |
| Dnssec | {
"ds": false,
"rrsig": false,
"dnskey": false
} |
| Hsts | {
"header": "max-age=63072000; includeSubDomains; preload",
"message": "Site is compatible with the HSTS preload list!",
"compatible": true
} |
| HTTP security policies | {
"xFrameOptions": false,
"referrerPolicy": false,
"xXSSProtection": "1; mode=block",
"permissionsPolicy": false,
"xContentTypeOptions": "nosniff",
"contentSecurityPolicy": "frame-ancestors http: https:",
"strictTransportPolicy": "max-age=63072000; includeSubDomains; preload",
"crossOriginOpenerPolicy": false,
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": false
} |
| Firewall | {
"waf": "Cloudflare",
"has_waf": true
} |
| Get ip | {
"ip": "2a06:98c1:3120::9",
"family": 6
} |
| Redirects | {
"chain": [
"https://strategyvault.info"
]
} |
| Tech stack | {
"technologies": [
"Radix UI",
"Tailwind CSS",
"shadcn/ui",
"HSTS",
"Cloudflare",
"Open Graph",
"HTTP/3"
]
} |
| Page links | {
"external": [
"https://lovable.dev/projects/lovp_4pcahydebm8cg88qes5rj1d3cd"
],
"external_count": 1
} |
| HTTP headers | {
"headers": {
"server": "cloudflare",
"content-type": "text/html",
"strict-transport-security": "max-age=63072000; includeSubDomains; preload",
"content-security-policy": "frame-ancestors http: https:",
"x-content-type-options": "nosniff"
}
} |
不是。PhishDestroy 将 strategyvault.info 归类为“冒充 Ledger”(风险:关键,93/100),首次检测于 2026-10-22。VirusTotal:5/92 个引擎标记。请将该网站视为不安全。
不安全。请勿在 strategyvault.info 连接钱包、签署消息或批准代币。钓鱼网站会请求授权(approve、setApprovalForAll、Permit2),让运营者转走你的资产,而已确认的交易无法撤销。
更改你在该网站输入过的所有密码,并开启双重验证。如果你连接过钱包或签署过任何内容,请撤销授权,并将剩余资金转到新钱包;切勿透露助记词。分步指南:紧急处理指南。
最近检查
Edge-IP 声誉不属于此域。
courtney.ns.cloudflare.comdimitris.ns.cloudflare.com位置信息描述的是 IP 网络。
6b7f3018e3dcfcd51e56a717d56c161bc1ef39da8701ec7bd0dc3a97853bbb0d*.strategyvault.infostrategyvault.info已保存的证书元数据。未带时区的证书日期按存档原样显示。传输加密并不能证明该网站值得信任。
由本地采集流程保留的带时间戳的响应元数据。以下各项数值均对应所显示的存档时间。
http://strategyvault.info/https://strategyvault.info/Content-Type: text/htmlServer: cloudflareCF-Cache-Status: DYNAMICContent-Encoding: gzipsummary_large_imageh3=":443"; ma=86400defaultDYNAMICa4e8ba3a78f13739-YYZkeep-alivegzipframe-ancestors http: https:text/htmlThu, 22 Oct 2026 13:07:52 GMTWed, 21 Oct 2026 17:04:20 GMT{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=vu6u%2FzQrc4ok7zWJw2mvRwa1HM2p%2BzSgmmWdsd4qdz%2FFRHucCriDhLY3aD2pYtqwVcyjKi1u9cK014sklxEJn54MYudxXUROVzn%2FtsndJSBO%2BMLCodmQC9cBRcXNVKnMg6AjzcloudflarecfCacheStatus;desc="DYNAMIC"max-age=63072000; includeSubDomains; preloadchunkedaccept-encodingnosniff1; mode=block由采集器保留的数值;较长的值可能在采集时被截短。
估算时间描述的是一个观测时间窗口。它并不能证明注册商采取了措施,也不代表网站变为不可访问的确切时刻。
已存储 151 个仿冒域名
显示 151 个中的 100 个
比较浏览器与爬虫各自收到的内容,并检查是否存在 Keitaro 流量分发。
strategyvault.info
PD-20261022-A85914 Recipient: abuse@identitydigital.com 如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
选择您所在的国家/地区以获取 官方网络犯罪联系人 或 创建投诉草稿 →。
Template-based draft · optional AI wording assistance requires separate consent
请根据您提供过的信息选择相应的步骤。请将本报告的副本与您自己的记录一并保存。
停止使用可疑网站。请通过官方应用或您已信任的网址访问真正的服务。
请将原始邮件、收据、消息和截图保存在安全的地方。基于事实的时间线有助于受理机构了解事件经过。 IC3 evidence guidance ↗
strategyvault.info)即使你并不了解所有细节—— 不管怎样都要提交报告. 即使信息不完整,对调查仍有帮助。
举报并不能保证追回损失或启动调查,但及时、准确的交易数据可以帮助执法机构和服务提供商追踪事件。
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
本报告汇总了已保存的页面快照、注册与网络记录、扫描器结果以及 PhishDestroy 举报历史。每个来源均保留各自的观测日期。打开来源报告即可查看原始结果。
快照记录的是当时显示的内容。扫描器结果记录的是该服务商在检查时的评估。有效证书或零检出结果都不能保证安全。