The full anatomy of a phishing site,
one URL at a time.
ZeroPhish renders the page, runs twelve detection signals against the DOM, certificate chain, brand fingerprint and threat feeds, and returns a typed verdict. Built for security teams and product engineers.
Phishing detected
| URL | hxxps://newwebserv561651[.]hosted[.]phplist[.]com/ | |
| Brand | phpList | |
| Scan ID | 3e07bfc8-66b9-41f6-9931-af05b776a64c |
No detection signals on this scan — it predates the signal pipeline. Re-analyze to capture them.
No brand impersonation signals available.
No technical metadata captured for this scan.
The website is likely to be a phishing site. Although the HTML content does not exhibit any typical phishing social engineering techniques, the URL is highly suspicious. The legitimate URL for phpList is ‘https://www.phplist.com’, however, the examined site’s URL is ‘https://newwebserv561651.hosted.phplist.com/‘ which is different from the legitimate one. Furthermore, the domain name ‘newwebserv561651.hosted.phplist.com’ does not seem to be a domain associated with the official phpList brand. Also, it is unusual for an official site to use an email from different domain ‘@outlook.fr’ for contacting the system administrator.