URL THREAT INTELLIGENCE · v0.5.0 · OPERATIONAL

The full anatomy of a phishing site,
one URL at a time.

ZeroPhish renders the page, runs twelve detection signals against the DOM, certificate chain, brand fingerprint and threat feeds, and returns a typed verdict. Built for security teams and product engineers.

scan
100 scans / day · free · typical scan 2–4 s ·
try
Scan another →
CACHED Showing previous scan from 517 d ago. Click Reanalyze to run a fresh scan.
PHISHING · MEDIUM CONFIDENCE

Phishing detected

brand SUMUP scan id 52f34064 duration signals 0 failing / 0
Risk score 0.90
90 / 100 · —
Tags
https :// .
flagged registered domain path protocol / query
URL hxxps://rehuay[.]com/it/sumup/web/login[.]php
Brand SUMUP
Scan ID 52f34064-5e87-41d9-90d5-9ab310cfe2e6

No detection signals on this scan — it predates the signal pipeline. Re-analyze to capture them.

no screenshot
screenshot · captured at scan live page render

No brand impersonation signals available.

No technical metadata captured for this scan.

Initial scan heuristic + LLM

The URL https://rehuay.com/it/sumup/web/login.php does not match the brand SUMUP indicated in the HTML. A webpage is imitating SUMUP’s login page which is a common technique used in phishing attacks. The form data is also sent to an unexpected URL send.php this might indicate that it is designed to capture and send login credential data for misuse. Therefore, it is assessed with a high phishing risk of 0.9.