The full anatomy of a phishing site,
one URL at a time.
ZeroPhish renders the page, runs twelve detection signals against the DOM, certificate chain, brand fingerprint and threat feeds, and returns a typed verdict. Built for security teams and product engineers.
Review required
| URL | hxxps://escaping[.]work/sora-invites/ | |
| Brand | escaping.work | |
| Screenshot | https://cdn.zerophish.ai/355eaf75-98ad-4d58-ad3c-ccde105810ba.jpg | |
| Scan ID | 04c4ebe6-ac1c-491a-beff-44a54eaca3a3 |
No detection signals on this scan — it predates the signal pipeline. Re-analyze to capture them.
No brand impersonation signals available.
No technical metadata captured for this scan.
The site appears to be a service set up to generate codes for another site, Sora. The website itself, escaping.work, does not appear to be trying to impersonate another brand, and while the purpose of the site is somewhat unclear, it does not appear to incorporate common social engineering techniques generally used in phishing attacks, such as fake login prompts or alerts about the user’s account. The site seems legitimate, but because the purpose is unclear, it is suggested to proceed with caution when using such sites.