⚠️
Bu alan adı, zararlı olarak işaretlenmiştir
Detected by 2 security vendors. Exercise extreme caution — do not enter credentials or personal information. Create a complaint draft from this stored evidence, review it, and submit it yourself to the appropriate authority.
REGISTRAR NEGLIGENCE · EGREGIOUS Namecheap Inc was notified 4 months ago — the threat is still operational.
Why this matters — ICANN RAA §3.18 obligation

On PhishDestroy delivered an evidence-backed abuse report to abuse@namecheap.com with VirusTotal detections, urlscan capture, legal violations, and full screenshot evidence. More than 4 months later, the phishing infrastructure remains reachable .

Under ICANN RAA §3.18 accredited registrars are contractually obliged to “take reasonable and prompt steps to investigate and respond appropriately to any reports of abuse.” Silence beyond 24 hours after a documented notification with verifiable evidence is not a timing issue — it is a policy decision to let the operation continue. PhishDestroy\'s position: where a registrar fails to act on clear evidence, the registrar has aligned itself with the operator of the scheme and bears co-responsibility for downstream harm caused to victims from the moment of notification onward.

Elapsed since first report
4 months
Reports sent
1
Latest case ID
PD-20260328-ED8D47
Current status
Serving traffic (alive)
Domain security & threat intelligence

zenledger[.]dev

zenledger.dev için kimlik avı ve güvenlik kontrolü

“Best Crypto Tax Software | Simplify Crypto Taxes with ZenLedger”

Threat verdict Critical 71/100 stored risk score
Availability Last known active Latest stored reachability observation
Risk signals
VirusTotal: 2/91 detections Brand impersonation: Ledger Last known active
2/91 VT Mar 28, 2026 Ledger Brand Impersonation US US + more
Rapor özeti

zenledger.dev: 91 VirusTotal tarayıcısının 2 tanesi alan adını işaretledi. DNS, SSL, kayıt kuruluşu, engelleme listeleri ve tehdit verilerini inceleyin.

Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.

Evidence Summary
CRITICAL
Ref
ECC3D64E
Score
71/100
Mode
Evidence v1

PhishDestroy first recorded zenledger.dev on Mar 28, 2026. This English evidence brief is rebuilt from the current structured observations stored for the report. The current stored risk score is 71/100.

The latest stored availability state is “Last known active” (HTTP 301) on Aug 2, 2026 at 00:56 UTC. This is a reachability snapshot, not proof of the cause of any outage, restriction, or status change.

VirusTotal returned 2 detections from 91 scanners in the stored check on Jul 26, 2026 at 04:21 UTC. The independent blocklist snapshot recorded 0 matches across 10 configured external sources on Aug 2, 2026 at 00:20 UTC. PhishDestroy's own listing is excluded from that count. A zero-match snapshot is not a safety verdict.

Other stored evidence. Google Safe Browsing stored no positive flag on Mar 28, 2026 at 09:14 UTC. This time-bound result is not evidence of safety. AlienVault OTX stored 0 pulse references on Mar 28, 2026 at 09:14 UTC. OTX pulses are community-intelligence references, not vendor verdicts. The Spamhaus DBL snapshot stored no positive result on Jul 14, 2026 at 00:34 UTC. That result is not evidence of safety. A URLScan capture is stored, but no capture timestamp is available.

Stored context lists registrar Namecheap Inc., IP address 192.0.78.205, registration date Mar 28, 2026, apparent target Ledger. Except for the registration date, these fields do not share a source timestamp in this report and may change.

Treat these as stored, time-bound observations rather than a live safety guarantee. Source verdicts and reachability can change, and zero or missing vendor matches never prove that a domain is safe. Avoid interacting with the domain while uncertainty remains, and use the appeal process if this report is inaccurate.

VirusTotal
VirusTotal
2 det.
DNS Security
1/12
URLScan
URLScan
Gridinsoft
0/100
TLS certificate
Let's Encrypt
Yaş
4 mo
Observed status
Last known active 301
PhishDestroy
DestroyList
Listed
Veri kapsamı VirusTotal 2 / 91 URLQuery checked — no match OTX no pulses CF Radar clean URLScan capture stored report URLScan verdict checked — no malicious verdict DNS engellemeleri 1/12 TLS valid certificate, 68d WHOIS 4 mo old Screenshot external capture Yönlendirme zinciri not probed Gridinsoft 0/100
Ağ Güvenliği İstihbaratı
DNS Provider Blocks 1 / 12
Brand Ledger

Tehdit Müdahale Pipeline

Discovery
Checks
Reports
Availability
12/13
Önleyici Keşif ve Veri Alımı
Tehdit Alındı
1/1 ✓
Tehdit Alındı
zenledger.dev tespit edildi ve kapsamlı analiz için sıraya alındı
Mar 28, 2026
Threat Intelligence Checks
URLScan.io Capture · URLScan Verdict · Cloudflare Radar · VirusTotal · Google Safe Browsing · DNS Security Blocks · Brand Impersonation · Forensic Evidence Collected · Technical Analysis Recorded
9/9 ✓
URLScan.io Capture
Stored URLScan report with capture artifacts
URLScan Verdict
URLScan returned no malicious verdict; this provider result is not a safe-domain determination · score 0
Jul 29, 2026
Cloudflare Radar
Scanned via Cloudflare Radar — DNS, certificates & network data
VirusTotal
2 / 91 vendors flagged on VirusTotal
Jul 26, 2026
Google Safe Browsing
Mar 28, 2026
DNS Security Blocks
Blocked by 1 of 12 checked DNS providers: Brand ledger
Brand Impersonation
Impersonation of Ledger
Forensic Evidence Collected
Stored evidence from URLScan.io, URLQuery, stored screenshot
Technical Analysis Recorded
The report contains stored technology or forensic-analysis results
Aug 02, 2026
Notification Records
Sent Report Recorded
1/1 ✓
Sent Report Recorded
Stored sent-report record for registrar Namecheap Inc., hosting provider, 2 abuse contacts
abuse@automattic.comabuse@namecheap.com
Mar 28, 2026
Yayın ve Erişilebilirlik
DestroyList Published · Monitoring Continues
1/2
DestroyList Yayınlandı
Mar 28, 2026
Monitoring Continues
The domain remains reachable or access-restricted; future checks may update this observation

Genel Engelleme Listesi Durumu

Kanıt Toplama

Stored Capture
2026-03-28 09:13 UTC
Malicious · 2/91 engines
Forensic screenshot of zenledger.dev showing the phishing page layout
IP: 192.0.78.205
Namecheap Inc.
126d old
Let's Encrypt
Page Title
Best Crypto Tax Software | Simplify Crypto Taxes with ZenLedger
TLS Certificate
Valid transport encryption · Issued by Let's Encrypt · valid for 68 days

Etki Alanı Analizi

Domainzenledger.dev
URLScan Verdict No malicious verdict recorded score 0 report ↗
Server / ASN nginx · AS2635 Automattic, Inc
IP Reputation abuse score 0/100 0 reports checked Jul 14, 2026
IP Address 192.0.78.205 US
GeoUS San Francisco, US
NetworkAS2635 · Automattic, Inc
RegistrationOluşturuldu Mar 28, 2026 (126d) Expires Sep 15, 2026
HTTP Durumu301 Moved Permanently
Elapsed Since First Report 26 days
What we count Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Last known active.
What each report contains Stored outgoing report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
İlk Kez Tespit EdildiMar 28, 2026
Nameservers["guss.ns.cloudflare.com","mimi.ns.cloudflare.com"]
MX Records1 aspmx.l.google.com 5 alt2.aspmx.l.google.com 5 alt1.aspmx.l.google.com 10 alt3.aspmx.l.google.com 10 alt4.aspmx.l.google.com
TLS Fingerprintc9d8e3aa3ef1a622b135609b3d4b2968577f75dc…
TLS SAN Domainsassoalumnissas.comcancanjin.comgoldsboronewbornphotographer.comisabellagao.comlassevanstrien.nllevelupr.commariavanderaalsvoort.commarileeford.commichellemosier.comnaerocproductionsllc.compeyton-hayes.comsixfeetdeeper.comsunpetalgeckos.comtls.automattic.comweeklightsavingstime.com+29
Case IDPD-20260328-ED8D47
ICANN DENETİMİ · ÜCRET TAHSİL EDİLDİ

ICANN Parasını Aldı. Hesap Verebilirlik Gelmedi.

Bu gTLD için, yukarıdaki alan adı kayıt kuruluşu bir ICANN sözleşmesi kapsamında faaliyet gösterir. ICANN; kayıt, yenileme ve transferlerle bağlantılı yıllık, değişken ve işlem bazlı ücretler tahsil eder.

Akreditasyon: paraya çevrildi. Hesap verebilirlik: lütfen daha sonra tekrar kontrol edin.

Sonra sihir başlar: ICANN RAA §3.18'i yazar, alan adı kayıt kuruluşu kendi müşteri tabanındaki kötüye kullanımı soruşturur ve her katman bir başkasının harekete geçmesini beklerken mağdurlar kanıtları ücretsiz sunar. Bu, mağdurların kendilerini daha güvende hissetmelerini sağlıyorsa harika—demek ki fatura işe yaramış.

Hesap verebilirlik üzerine hicivli not Hiçbir şey otomatik olarak gönderilmez.
Teknolojiler · 20 identified
WordPress
CMS

Open-source CMS powering over 40% of websites worldwide.

A
Apple iCloud Mail
MySQL
Databases

Open-source relational database management system.

PHP
Programming languages

Server-side scripting language designed for web development.

W
WordPress.com

Open-source CMS powering ~40% of the web — also a common phishing clone target.

Stripe

Payment processor — credit card and alt-payment acceptance.

stripe.com
Nginx
Web servers Reverse proxies

High-performance HTTP server and reverse proxy, known for stability and low resource usage.

Sendgrid
MailChimp
Linkedin Insight Tag

Conversion-tracking pixel by LinkedIn — B2B ad audience measurement.

J
jsDelivr
CDN

Free public CDN for open-source projects, serving files from npm and GitHub.

jQuery Migrate
JavaScript libraries

Plugin to detect and restore deprecated jQuery features.

jQuery
JavaScript libraries

Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.

H
HubSpot Analytics
HubSpot
HSTS
Security

HTTP Strict Transport Security — forces browsers to use HTTPS connections only.

Google Tag Manager
Tag managers

Tag management system for deploying marketing and analytics tags.

tagmanager.google.com
Google Analytics
Analytics

Web analytics service tracking website traffic and user behavior.

marketingplatform.google.com
Font Awesome

Icon font library.

HTTP/3
Miscellaneous

Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.

Detected via Cloudflare Radar · Wappalyzer engine
Bu Alan Adını Bildir Kanıt sunun ve başkalarını korumaya yardımcı olun

VirusTotal Analizi

2 / 91 security vendors flagged this domain
View on VT
CRDF
Gridinsoft
Site Performans Analizi

Google PageSpeed Insights — mobile performance audit of zenledger.dev · checked Mar 28, 2026

69
Needs Work
Performance
FCP
2.58s
First Contentful Paint
LCP
4.49s
Largest Contentful Paint
CLS
0.026
Cumulative Layout Shift
TBT
272ms
Total Blocking Time
SI
6.46s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Kanıtlar ve Dış Raporlar Open external tools

Bu Siteden Etkilendiniz mi?

Yalnız değilsin ve utanacak hiçbir şey yok. Dolandırıcılar, güveni suistimal eden sofistike suçlulardır. Yaşadıklarınızı bildirmek, dolandırıcılığa karşı en etkili silahtır — yaptığınız bildirim, başkalarının mağdur olmasını önleyebilir ve kolluk kuvvetlerinin harekete geçmesine yardımcı olabilir. Sessizlik, dolandırıcıların en büyük avantajıdır. Kır şunu.

If you entered account credentials, personal or payment information, or downloaded a file from this domain, take immediate action. Below are resources to help you report the incident and protect yourself.

Kurtarma dolandırıcılarına dikkat edin! Criminals may contact victims again while pretending to be investigators, lawyers, or recovery agents. Do not pay upfront fees or share credentials. Geri ödeme dolandırıcılığı hakkında daha fazla bilgi edinin →

Yerel Yetkililere Bildirin

Bilgi almak için ülkenizi seçin siber suçlarla ilgili resmi irtibat noktaları, or create a complaint draft →

Ülkenizi seçin...
180'den fazla ülke
Zero-PII — verileriniz tarayıcıdan asla dışarı çıkmaz Review and submit it yourself

About This Report: zenledger.dev

This report presents the latest stored evidence available to PhishDestroy. Source timestamps are shown where available; availability and vendor verdicts can change after collection.

The site displays a page titled “Best Crypto Tax Software | Simplify Crypto Taxes with ZenLedger”, which may be designed to impersonate Ledger.

zenledger.dev has been flagged by 2 security vendors as of August 1, 2026.

Bu ilanın yanlış olduğunu düşünüyorsanız, şunları yapabilirsiniz: itirazda bulunmak. Metodolojimiz hakkında daha fazla bilgi için lütfen şu sayfayı ziyaret edin: Sıkça Sorulan Sorular sayfası.

Herhangi Bir Alan Adını Kontrol Et

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

Şimdi Tara

Oltalama Olayını Bildir

Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun

Report

Canlı Tehdit Akışı

Recent phishing reports and observed availability changes

Monitor

Gelişmelerden Haberdar Olun, Güvende Kalın

Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin

Canlı Tehdit Akışı Bu İlanı İtiraz Et
HTML · IFRAME

Bu Raporu Yerleştir

Bu tehdit bilgisini web sitenizde veya blogunuzda paylaşın

embed.html
<iframe
  src="https://phishdestroy.io/tr/embed/domain/zenledger.dev"
  title="PhishDestroy threat report for zenledger.dev"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

Çok İçten Bir Teşekkür Mektubu

Hicivli taslak oluşturucu

Alıcı
Ücret bağlamı

Hicivli taslak. Ücret rakamları tahminidir; bu alan adına kesin olarak atfedildikleri iddia edilmez.