Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@godaddy.com.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
m[.]nowriskledger[.]com
Verifica phishing e sicurezza per m.nowriskledger.com
“Third Party Risk Management Solutions | Risk Ledger”
m.nowriskledger.com — Ultimo attivo conosciuto (HTTP 301). Simulazione del marchio: Ledger; Tipo di truffa: Crypto Scam. Riepilogo delle prove: VirusTotal 1/93 (SOCRadar); PhishDestroy score 68/100. Registrar: GoDaddy.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Analysis of m.nowriskledger.com shows a high‑risk brand‑impersonation operation targeting Ledger users. The domain was registered on February 21, 2026 through GoDaddy.com, LLC and resolves to the IP address 65.8.180.117, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. The site issues an HTTP 301 redirect and presents the page title "Third Party Risk Management Solutions | Risk Ledger," deliberately echoing the legitimate Ledger brand. Infrastructure inspection reveals the use of Amazon Web Services for hosting, with DNS served by GoDaddy’s default name servers ns23.domaincontrol.com and ns24.domaincontrol.com. The TLS certificate is issued by Go Daddy Secure Certificate Authority – G2, confirming the involvement of the registrar’s certificate authority.
A Gridinsoft trust score of 0 / 100 further indicates a malicious reputation. The page loads third‑party scripts from jsDelivr, HubSpot, Hotjar and enforces HSTS, suggesting attempts to improve perceived legitimacy while tracking visitors. Advertising references to Reddit Ads and LinkedIn Ads indicate that the operators are buying traffic on mainstream platforms. Malware or credential‑stealing components have not been observed, but the classification as a "Crypto Scam" aligns with the brand‑impersonation intent.
VirusTotal reports that one of ninety‑three scanning engines flagged the domain, and the site appears on a single security blocklist, currently listed by PhishDestroy. While the exact phishing landing page content has not been captured, the combination of brand‑spoofing page title, low trust score, Amazon hosting, and a flagged TLS certificate provides sufficient technical indicators for detection. Defenders should block the domain and its resolved IP at perimeter firewalls, update URL filtering feeds with the domain and associated name servers, and monitor for outbound traffic to 65.8.180.117.
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Registration: nowriskledger.com
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain nowriskledger.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Riscontro delle informazioni sulle minacce · source references
Tecnologie · 15 identified
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.
aws.amazon.com Confidenza al 100%Reddit Ads is an online advertising offering from Reddit.
advertising.reddithelp.com Confidenza al 100%Linkedin Ads is a paid marketing tool that offers access to Linkedin social networks through various sponsored posts and other methods.
business.linkedin.com Confidenza al 100%JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.
www.jsdelivr.com Confidenza al 100%HubSpot is a marketing and sales software that helps companies attract visitors, convert leads, and close customers.
www.hubspot.com Confidenza al 100%Hotjar is a suite of analytic tools to assist in the gathering of qualitative data, providing feedback through tools such as heatmaps, session recordings, and surveys.
www.hotjar.com Confidenza al 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Confidenza al 100%Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.
www.google.com Confidenza al 100%Google Analytics is a free web analytics service that tracks and reports website traffic.
google.com Confidenza al 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confidenza al 100%Amazon Simple Email Service (SES) is an email service that enables developers to send mail from within any application.
aws.amazon.com Confidenza al 100%Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.
aws.amazon.com Confidenza al 100%Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.
aws.amazon.com Confidenza al 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Confidenza al 100%Analisi di VirusTotal
Prove archiviate
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of m.nowriskledger.com · checked Mar 2, 2026
Dati e relazioni esterne
PD-20260203-4B75FE Recipient: abuse@godaddy.com Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo