URL THREAT INTELLIGENCE · v0.5.0 · OPERATIONAL

The full anatomy of a phishing site,
one URL at a time.

ZeroPhish renders the page, runs twelve detection signals against the DOM, certificate chain, brand fingerprint and threat feeds, and returns a typed verdict. Built for security teams and product engineers.

scan
100 scans / day · free · typical scan 2–4 s ·
try
Scan another →
CACHED Showing previous scan from 517 d ago. Click Reanalyze to run a fresh scan.
PHISHING · MEDIUM CONFIDENCE

Phishing detected

brand LATAM scan id 5ec073d7 duration signals 0 failing / 0
Risk score 0.85
85 / 100 · —
Tags
https :// .
flagged registered domain path protocol / query
URL hxxps://reservaslatamtiquetesnacionales[.]up[.]railway[.]app/index[.]php
Brand LATAM
Scan ID 5ec073d7-2d95-43a1-bbbc-4f30ab5e30fa

No detection signals on this scan — it predates the signal pipeline. Re-analyze to capture them.

no screenshot
screenshot · captured at scan live page render

No brand impersonation signals available.

No technical metadata captured for this scan.

Initial scan heuristic + LLM

The URL of the website is not from the original domain of LATAM. The original domain of LATAM airlines is ‘latam.com’. The current url ‘reservaslatamtiquetesnacionales.up.railway.app’ is seeking to represent LATAM airlines and could potentially be phishing users by capturing their login information when they try to ‘sign in’. Hence, it qualifies as a suspicious domain.