zendonline[.]com

PhishDestroy first observed zendonline.com on Aug 30, 2026. Current evidence score: 66/100 (high).

Positive findings are stored from 2 sources: VirusTotal and URLQuery. VirusTotal recorded 4 detections among 91 engines: CRDF, Forcepoint ThreatSeeker, Netcraft, SOCRadar on Aug 30, 2026 at 05:23 UTC. URLQuery recorded 2 detections; no observation timestamp was retained. Non-positive and contextual checks: AlienVault OTX listed 4 community pulse references (not vendor detections) on Aug 30, 2026 at 05:26 UTC. The separate external-blocklist snapshot contained no matches on Aug 29, 2026 at 22:20 UTC. Google Safe Browsing returned no flag on Aug 30, 2026 at 05:25 UTC. URLScan captured the page on Aug 30, 2026 at 02:45 UTC.

The collector marked the hostname reachable on Aug 30, 2026 at 02:45 UTC, but did not retain the HTTP response code. Registration records for the domain list TuringSign Inc. d/b/a Cosmotown as the registrar and Oct 25, 2025 as the creation date. At collection time, the hostname resolved to 89.233.107.58. The evidence archive retains 2 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance.

The record contains 2 positive source findings supporting the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.