The full anatomy of a phishing site,
one URL at a time.
ZeroPhish renders the page, runs twelve detection signals against the DOM, certificate chain, brand fingerprint and threat feeds, and returns a typed verdict. Built for security teams and product engineers.
Review required
| URL | hxxps://github[.]com/ | |
| Brand | GitHub | |
| Screenshot | https://cdn.zerophish.ai/bc1ccc5c-e0d9-4336-934b-afd74344f832.jpg | |
| Scan ID | 11059c62-7ffd-4356-beb8-2708ce044ba3 |
No detection signals on this scan — it predates the signal pipeline. Re-analyze to capture them.
No brand impersonation signals available.
No technical metadata captured for this scan.
The initial analysis shows that the website belongs to GitHub, a well-known and widely used platform for software development. The website does not demonstrate obvious signs of phishing. The URL ‘https://github.com/‘ matches the known legitimate domain for the GitHub brand. HTML content appears normal and has no evident suspicious activities. OCR-extracted text content aligns with legitimate GitHub content, mentioning legitimate services and features such as GitHub Copilot, GitHub Actions, and GitHub Advanced Security. There are no emergency warnings, requests for personal information, or other common phishing techniques evident in the text. Based on these observations, it can be concluded that the site is legitimate.