The full anatomy of a phishing site,
one URL at a time.
ZeroPhish renders the page, runs twelve detection signals against the DOM, certificate chain, brand fingerprint and threat feeds, and returns a typed verdict. Built for security teams and product engineers.
Review required
| URL | hxxp://cashback[.]governofederal[.]ru/inicio[.]php | |
| Brand | ||
| Scan ID | 0dff2cd8-34fd-4737-8646-6c8a509ce5fb |
No detection signals on this scan — it predates the signal pipeline. Re-analyze to capture them.
No brand impersonation signals available.
No technical metadata captured for this scan.
The HTML given shows elements of the Google home page, including the Google logo, Gmail and Images links, and a search bar. This suggests that the site is attempting to mimic Google’s interface, a common phishing technique. However, the URL does not match Google’s domain (google.com), and instead links to a ‘.ru’ site. This mismatch between the visual branding and the URL suggests that the site might be a phishing attempt.