Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
upriskledger[.]com
“Third Party Risk Management Solutions | Risk Ledger”
Resumo das evidências
Analysis of upriskledger.com shows a high‑risk brand impersonation campaign targeting Ledger users. The domain was registered on February 21, 2026 through GoDaddy.com, LLC and resolves to the Amazon Web Services IP address 15.197.225.128 (AS16509). The site responds with an HTTP 301 redirect and serves a SSL certificate issued by Go Daddy Secure Certificate Authority - G2, confirming active TLS use. Page metadata reveals the title "Third Party Risk Management Solutions | Risk Ledger," which does not reference Ledger, indicating the site may be attempting to masquerade as a legitimate risk‑management service while leveraging the Ledger brand for credibility.
Infrastructure scans show the presence of Apple iCloud Mail, Reddit Ads, LinkedIn Ads, jsDelivr, HubSpot, Hotjar, and HSTS enforcement, suggesting a mixed marketing and analytics stack typical of phishing infrastructure. Gridinsoft assigns a trust score of 0/100, and the domain appears on one security blocklist (PhishDestroy), confirming that threat intelligence providers have flagged it as malicious. VirusTotal reports detections from two of ninety‑three scanners, providing additional independent confirmation of compromise. The domain is currently listed as active and is classified as a crypto scam, reinforcing the likelihood of attempts to solicit cryptocurrency or credential information from Ledger customers.
Defenders should block the domain and its associated IP at perimeter firewalls, add the nameservers ns55.domaincontrol.com and ns56.domaincontrol.com to DNS sinkhole lists, and monitor for outbound connections to the AWS host. Email security gateways should enforce strict sender verification for any messages claiming to originate from Ledger, and users should be educated to disregard unsolicited communications referencing risk‑management services that use the Ledger name. Continuous monitoring of threat feeds for additional detections related to this domain is recommended.
Instantâneo das evidências enviadas
- Enviado
- Registros do livro-razão
- 1
- ID do caso
PD-20260203-94CB69- Título da página capturada
- Third Party Risk Management Solutions | Risk Ledger
- Artefato PDF
- Evidência em PDF
Base jurídica
Texto completo da evidência
Acceptable Use Policy (AUP): The domain upriskledger.com is engaged in phishing activities, which are explicitly prohibited under your AUP. This constitutes a clear violation of the policy against illegal activities and deception.
Terms of Service (TOS): The ongoing fraudulent activities associated with upriskledger.com violate your TOS, which reserves the right to suspend or terminate services for any activities that constitute fraud or deception.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. federal law prohibits unauthorized access to computers and networks, including phishing schemes that aim to deceive users and gain sensitive information.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities using electronic communications, which encompasses phishing activities.
CAN-SPAM Act (15 U.S.C. § 7701): This act regulates commercial email and prohibits misleading or deceptive information in electronic communications, directly applicable to phishing domains.
Regulatory Note: Failure to take immediate action against upriskledger.com may expose your organization to liability under applicable laws and regulations. Non-compliance could result in regulatory scrutiny and potential legal consequences.
Data Coverage
Inteligência de segurança de rede
Pipeline de resposta a ameaças
Cobertura de listas de bloqueio
10 fontes externas monitoradas · instantâneo de 12/08/2026
10 fontes externas monitoradas Sem correspondência
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, nomes TLS e datas
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of upriskledger.com · checked Mar 6, 2026
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo