⚠️
Este dominio ha sido señalado como malicioso
Detected by 2 security vendors. Exercise extreme caution — do not enter credentials or personal information. Create a complaint draft from this stored evidence, review it, and submit it yourself to the appropriate authority.
REGISTRAR NEGLIGENCE · EGREGIOUS Namecheap Inc was notified 4 months ago — the threat is still operational.
Why this matters — ICANN RAA §3.18 obligation

On PhishDestroy delivered an evidence-backed abuse report to abuse@namecheap.com with VirusTotal detections, urlscan capture, legal violations, and full screenshot evidence. More than 4 months later, the phishing infrastructure remains reachable .

Under ICANN RAA §3.18 accredited registrars are contractually obliged to “take reasonable and prompt steps to investigate and respond appropriately to any reports of abuse.” Silence beyond 24 hours after a documented notification with verifiable evidence is not a timing issue — it is a policy decision to let the operation continue. PhishDestroy\'s position: where a registrar fails to act on clear evidence, the registrar has aligned itself with the operator of the scheme and bears co-responsibility for downstream harm caused to victims from the moment of notification onward.

Elapsed since first report
4 months
Reports sent
1
Latest case ID
PD-20260328-ED8D47
Current status
Serving traffic (alive)
Domain security & threat intelligence

zenledger[.]dev

Análisis de phishing y seguridad de zenledger.dev

“Best Crypto Tax Software | Simplify Crypto Taxes with ZenLedger”

Threat verdict Critical 71/100 stored risk score
Availability Last known active Latest stored reachability observation
Risk signals
VirusTotal: 2/91 detections Brand impersonation: Ledger Last known active
2/91 VT Mar 28, 2026 Ledger Brand Impersonation US US + more
Resumen del informe

zenledger.dev: VirusTotal registra 2 detecciones de 91. Consulta DNS, SSL, registrador, listas de bloqueo y datos sobre amenazas.

El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.

Evidence Summary
CRITICAL
Ref
ECC3D64E
Score
71/100
Mode
Evidence v1

PhishDestroy first recorded zenledger.dev on Mar 28, 2026. This English evidence brief is rebuilt from the current structured observations stored for the report. The current stored risk score is 71/100.

The latest stored availability state is “Last known active” (HTTP 301) on Aug 2, 2026 at 00:56 UTC. This is a reachability snapshot, not proof of the cause of any outage, restriction, or status change.

VirusTotal returned 2 detections from 91 scanners in the stored check on Jul 26, 2026 at 04:21 UTC. The independent blocklist snapshot recorded 0 matches across 10 configured external sources on Aug 2, 2026 at 00:20 UTC. PhishDestroy's own listing is excluded from that count. A zero-match snapshot is not a safety verdict.

Other stored evidence. Google Safe Browsing stored no positive flag on Mar 28, 2026 at 09:14 UTC. This time-bound result is not evidence of safety. AlienVault OTX stored 0 pulse references on Mar 28, 2026 at 09:14 UTC. OTX pulses are community-intelligence references, not vendor verdicts. The Spamhaus DBL snapshot stored no positive result on Jul 14, 2026 at 00:34 UTC. That result is not evidence of safety. A URLScan capture is stored, but no capture timestamp is available.

Stored context lists registrar Namecheap Inc., IP address 192.0.78.205, registration date Mar 28, 2026, apparent target Ledger. Except for the registration date, these fields do not share a source timestamp in this report and may change.

Treat these as stored, time-bound observations rather than a live safety guarantee. Source verdicts and reachability can change, and zero or missing vendor matches never prove that a domain is safe. Avoid interacting with the domain while uncertainty remains, and use the appeal process if this report is inaccurate.

VirusTotal
VirusTotal
2 det.
DNS Security
1/12
URLScan
URLScan
Gridinsoft
0/100
TLS certificate
Let's Encrypt
Edad
4 mo
Observed status
Last known active 301
PhishDestroy
DestroyList
Listed
Cobertura de los datos VirusTotal 2 / 91 URLQuery checked — no match OTX no pulses CF Radar clean URLScan capture stored report URLScan verdict checked — no malicious verdict Bloqueos de DNS 1/12 TLS valid certificate, 68d WHOIS 4 mo old Screenshot external capture Cadena de redireccionamientos not probed Gridinsoft 0/100
Inteligencia de seguridad de red
DNS Provider Blocks 1 / 12
Brand Ledger

Proceso de respuesta ante amenazas Pipeline

Discovery
Checks
Reports
Availability
12/13
Detección e ingesta preventivas
Amenaza detectada
1/1 ✓
Amenaza detectada
zenledger.dev detectados y puestos en cola para su análisis completo
Mar 28, 2026
Threat Intelligence Checks
URLScan.io Capture · URLScan Verdict · Cloudflare Radar · VirusTotal · Google Safe Browsing · DNS Security Blocks · Brand Impersonation · Forensic Evidence Collected · Technical Analysis Recorded
9/9 ✓
URLScan.io Capture
Stored URLScan report with capture artifacts
URLScan Verdict
URLScan returned no malicious verdict; this provider result is not a safe-domain determination · score 0
Jul 29, 2026
Cloudflare Radar
Scanned via Cloudflare Radar — DNS, certificates & network data
VirusTotal
2 / 91 vendors flagged on VirusTotal
Jul 26, 2026
Google Safe Browsing
Mar 28, 2026
DNS Security Blocks
Blocked by 1 of 12 checked DNS providers: Brand ledger
Brand Impersonation
Impersonation of Ledger
Forensic Evidence Collected
Stored evidence from URLScan.io, URLQuery, stored screenshot
Technical Analysis Recorded
The report contains stored technology or forensic-analysis results
Aug 02, 2026
Notification Records
Sent Report Recorded
1/1 ✓
Sent Report Recorded
Stored sent-report record for registrar Namecheap Inc., hosting provider, 2 abuse contacts
abuse@automattic.comabuse@namecheap.com
Mar 28, 2026
Publicación y disponibilidad
DestroyList Published · Monitoring Continues
1/2
Lista de destrucción publicada
Mar 28, 2026
Monitoring Continues
The domain remains reachable or access-restricted; future checks may update this observation

Estado de la lista de bloqueados pública

Recopilación de evidencias

Stored Capture
2026-03-28 09:13 UTC
Malicious · 2/91 engines
Forensic screenshot of zenledger.dev showing the phishing page layout
IP: 192.0.78.205
Namecheap Inc.
126d old
Let's Encrypt
Page Title
Best Crypto Tax Software | Simplify Crypto Taxes with ZenLedger
TLS Certificate
Valid transport encryption · Issued by Let's Encrypt · valid for 68 days

Inteligencia de dominios

Domainzenledger.dev
URLScan Verdict No malicious verdict recorded score 0 report ↗
Server / ASN nginx · AS2635 Automattic, Inc
IP Reputation abuse score 0/100 0 reports checked Jul 14, 2026
Registrar Namecheap SE(SE)
IP Address 192.0.78.205 US
GeoUS San Francisco, US
NetworkAS2635 · Automattic, Inc
RegistrationCreado Mar 28, 2026 (126d) Expires Sep 15, 2026
Estado HTTP301 Moved Permanently
Elapsed Since First Report 26 days
What we count Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Last known active.
What each report contains Stored outgoing report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
Primera detecciónMar 28, 2026
Nameservers["guss.ns.cloudflare.com","mimi.ns.cloudflare.com"]
MX Records1 aspmx.l.google.com 5 alt2.aspmx.l.google.com 5 alt1.aspmx.l.google.com 10 alt3.aspmx.l.google.com 10 alt4.aspmx.l.google.com
TLS Fingerprintc9d8e3aa3ef1a622b135609b3d4b2968577f75dc…
TLS SAN Domainsassoalumnissas.comcancanjin.comgoldsboronewbornphotographer.comisabellagao.comlassevanstrien.nllevelupr.commariavanderaalsvoort.commarileeford.commichellemosier.comnaerocproductionsllc.compeyton-hayes.comsixfeetdeeper.comsunpetalgeckos.comtls.automattic.comweeklightsavingstime.com+29
Case IDPD-20260328-ED8D47
SUPERVISIÓN DE ICANN · TASA COBRADA

ICANN cobró. La rendición de cuentas no llegó.

Para este gTLD, el registrador indicado arriba opera bajo un contrato con ICANN. ICANN cobra tasas anuales, variables y basadas en transacciones vinculadas a registros, renovaciones y transferencias.

Acreditación: monetizada. Rendición de cuentas: vuelva a comprobarlo más tarde.

Entonces empieza la magia: ICANN redacta el RAA §3.18, el registrador investiga los abusos dentro de su propia base de clientes y las víctimas aportan las pruebas gratis, mientras cada nivel espera que actúe otro. Si eso hace que las víctimas se sientan más seguras, excelente: la factura funcionó.

Nota satírica sobre rendición de cuentas No se envía nada automáticamente.
Tecnologías · 20 identified
WordPress
CMS

Open-source CMS powering over 40% of websites worldwide.

A
Apple iCloud Mail
MySQL
Databases

Open-source relational database management system.

PHP
Programming languages

Server-side scripting language designed for web development.

W
WordPress.com

Open-source CMS powering ~40% of the web — also a common phishing clone target.

Stripe

Payment processor — credit card and alt-payment acceptance.

stripe.com
Nginx
Web servers Reverse proxies

High-performance HTTP server and reverse proxy, known for stability and low resource usage.

Sendgrid
MailChimp
Linkedin Insight Tag

Conversion-tracking pixel by LinkedIn — B2B ad audience measurement.

J
jsDelivr
CDN

Free public CDN for open-source projects, serving files from npm and GitHub.

jQuery Migrate
JavaScript libraries

Plugin to detect and restore deprecated jQuery features.

jQuery
JavaScript libraries

Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.

H
HubSpot Analytics
HubSpot
HSTS
Security

HTTP Strict Transport Security — forces browsers to use HTTPS connections only.

Google Tag Manager
Tag managers

Tag management system for deploying marketing and analytics tags.

tagmanager.google.com
Google Analytics
Analytics

Web analytics service tracking website traffic and user behavior.

marketingplatform.google.com
Font Awesome

Icon font library.

HTTP/3
Miscellaneous

Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.

Detected via Cloudflare Radar · Wappalyzer engine
Denunciar este dominio Envía pruebas y ayuda a proteger a los demás

Análisis de VirusTotal

2 / 91 security vendors flagged this domain
View on VT
CRDF
Gridinsoft
Análisis del rendimiento del sitio

Google PageSpeed Insights — mobile performance audit of zenledger.dev · checked Mar 28, 2026

69
Needs Work
Performance
FCP
2.58s
First Contentful Paint
LCP
4.49s
Largest Contentful Paint
CLS
0.026
Cumulative Layout Shift
TBT
272ms
Total Blocking Time
SI
6.46s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Datos y informes externos Open external tools

¿Te ha afectado esta página web?

No estás solo y no hay nada de qué avergonzarse. Los estafadores son delincuentes sofisticados que se aprovechan de la confianza ajena. Denunciar tu experiencia es el arma más eficaz contra el fraude: tu denuncia puede evitar que otras personas se conviertan en víctimas y ayudar a las fuerzas del orden a tomar medidas. El silencio es la mayor ventaja del estafador. Rómpelo.

If you entered account credentials, personal or payment information, or downloaded a file from this domain, take immediate action. Below are resources to help you report the incident and protect yourself.

¡Cuidado con los estafadores que se hacen pasar por empresas de recuperación de datos! Criminals may contact victims again while pretending to be investigators, lawyers, or recovery agents. Do not pay upfront fees or share credentials. Más información sobre el fraude en las ayudas de recuperación →

Informa a las autoridades locales

Selecciona tu país para obtener contactos oficiales en materia de ciberdelincuencia, or create a complaint draft →

Selecciona tu país...
Más de 180 países
Zero-PII: tus datos nunca salen del navegador Review and submit it yourself

About This Report: zenledger.dev

This report presents the latest stored evidence available to PhishDestroy. Source timestamps are shown where available; availability and vendor verdicts can change after collection.

The site displays a page titled “Best Crypto Tax Software | Simplify Crypto Taxes with ZenLedger”, which may be designed to impersonate Ledger.

zenledger.dev has been flagged by 2 security vendors as of August 1, 2026.

Si crees que esta información es incorrecta, puedes presentar un recurso. Para obtener más información sobre nuestra metodología, visita nuestra Página de preguntas frecuentes.

Comprobar cualquier dominio

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

Escanear ahora

Denunciar un intento de phishing

Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad

Report

Flujo de amenazas en tiempo real

Recent phishing reports and observed availability changes

Monitor

Mantente informado, mantente a salvo

Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.

Flujo de amenazas en tiempo real Reclamar este anuncio
HTML · IFRAME

Incrustar este informe

Comparte esta información sobre amenazas en tu página web o blog

embed.html
<iframe
  src="https://phishdestroy.io/es/embed/domain/zenledger.dev"
  title="PhishDestroy threat report for zenledger.dev"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

Una carta de agradecimiento muy sincera

Generador de borradores satíricos

Destinatario
Contexto de las tarifas

Borrador satírico. Las cifras de las tarifas son estimaciones; no se afirma que correspondan exactamente a este dominio.