The full anatomy of a phishing site,
one URL at a time.
ZeroPhish renders the page, runs twelve detection signals against the DOM, certificate chain, brand fingerprint and threat feeds, and returns a typed verdict. Built for security teams and product engineers.
Review required
| URL | hxxps://whatsmyname[.]app/ | |
| Brand | WhatsMyName | |
| Screenshot | https://cdn.zerophish.ai/d838d98a-2edd-4901-b9de-b53da6ca5192.jpg | |
| Scan ID | 5326a301-8955-4ce8-b804-1028fe730599 |
No detection signals on this scan — it predates the signal pipeline. Re-analyze to capture them.
No brand impersonation signals available.
No technical metadata captured for this scan.
The site appears to be a legitimate service known as WhatsMyName used for username enumeration across various platforms. The domain whatsmyname.app does not show signs or techniques often used in phishing attacks such as alerting the user to a problem with their account or offering unexpected rewards. Furthermore, the HTML contains numerous functional elements, category filters, and seems to be in association with the OSINT Combine. The authors don’t include notorious or famous phishing groups and the site contains rich metadata and relevant interactivity. Therefore, it’s unlike to be a phishing site.