URL THREAT INTELLIGENCE · v0.5.0 · OPERATIONAL

The full anatomy of a phishing site,
one URL at a time.

ZeroPhish renders the page, runs twelve detection signals against the DOM, certificate chain, brand fingerprint and threat feeds, and returns a typed verdict. Built for security teams and product engineers.

scan
100 scans / day · free · typical scan 2–4 s ·
try
Scan another →
CACHED Showing previous scan from 377 d ago. Click Reanalyze to run a fresh scan.
PHISHING · MEDIUM CONFIDENCE

Phishing detected

brand Unknown scan id 129e9ab9 duration signals 0 failing / 0
Risk score 0.80
80 / 100 · —
Tags
https :// .
flagged registered domain path protocol / query
URL hxxps://www[.]berxhsalem[.]shop
Brand Unknown
Screenshot https://cdn.zerophish.ai/d5b10255-016c-4f76-bf36-c419d5f7fa19.jpg
Scan ID 129e9ab9-4413-46a8-b00d-582d3e18c695

No detection signals on this scan — it predates the signal pipeline. Re-analyze to capture them.

Captured page
screenshot · captured at scan live page render

No brand impersonation signals available.

No technical metadata captured for this scan.

Initial scan heuristic + LLM

The URL https://www.berxhsalem.shop contains a non-standard TLD (.shop), which can be a sign of phishing websites. The website tries to seem legitimate by mentioning shipping and discount policies, in addition to displaying a wide variety of products, but the brand name could not be identified, which is suspicious. Also, the copyright statement at the bottom of the page claims copyright until 2025, which can be an attempt to appear more authentic. Plus, there are numerous social engineering flags in the OCR text such as discount offer at the first order and free shipping for a certain order value. The HTML content of the page reveal no well-known brand association to counter the earlier found suspicious activity.