The full anatomy of a phishing site,
one URL at a time.
ZeroPhish renders the page, runs twelve detection signals against the DOM, certificate chain, brand fingerprint and threat feeds, and returns a typed verdict. Built for security teams and product engineers.
Review required
| URL | hxxps://amigo-ai-6df06[.]firebaseapp[.]com/__/auth/action?mode=verifyEmail&oobCode=_tPoWvXgMwYkUvjnV3Kv7RTK2g8VfBNfudPnTdhcf0oAAAGaEsmPEw&apiKey=AIzaSyAG1Lkem2Skl8X0R7xEQ7pkwL8M361hcDE&lang=en | |
| Brand | firebase | |
| Screenshot | https://cdn.zerophish.ai/165bbd0c-2d86-49c5-8e60-31122a37ed2a.jpg | |
| Scan ID | 00da3de9-dd93-444b-8ba8-55f0761666d7 |
No detection signals on this scan — it predates the signal pipeline. Re-analyze to capture them.
No brand impersonation signals available.
No technical metadata captured for this scan.
The URL and HTML code belong to a service hosted on Firebase, a Google cloud service, which is usually used for legitimate purposes. The HTML code represents a typical page that users see after they have successfully verified their email address. No domain mismatch has been found which is usually a symptom of phishing websites. Hence, it is very unlikely that this is a phishing website.