URL THREAT INTELLIGENCE · v0.5.0 · OPERATIONAL
The full anatomy of a phishing site,
one URL at a time.
ZeroPhish renders the page, runs twelve detection signals against the DOM, certificate chain, brand fingerprint and threat feeds, and returns a typed verdict. Built for security teams and product engineers.
100 scans / day · free
·
typical scan 2–4 s
·
try
PHISHING · MEDIUM CONFIDENCE
Phishing detected
Risk score
0.90
90 / 100 · —
URL anatomy
https
://
.
flagged
registered domain
path
protocol / query
Indicators of compromise
| URL | hxxps://registro-digital-ahop-2026[.]cr-web[.]workers[.]dev/ | |
| Brand | Citas CR | |
| Screenshot | https://cdn.zerophish.ai/ebd2fe44-b02f-44e8-8e5e-bc5cfe9c4537.jpg | |
| Scan ID | 1214782a-4ca2-4880-ba8e-0e5e61ab71c5 |
Detection signals
No detection signals on this scan — it predates the signal pipeline. Re-analyze to capture them.
Captured page
Brand impersonation
No brand impersonation signals available.
Technical profile
No technical metadata captured for this scan.
Analyst summary
Initial scan
The URL of the site does not align with a recognized domain of the brand ‘Citas CR’. The site tries to force user registration and account protection, which are common tactics used in phishing attacks. Hence, it can be concluded that this might be a phishing site.