URL THREAT INTELLIGENCE · v0.5.0 · OPERATIONAL

The full anatomy of a phishing site,
one URL at a time.

ZeroPhish renders the page, runs twelve detection signals against the DOM, certificate chain, brand fingerprint and threat feeds, and returns a typed verdict. Built for security teams and product engineers.

scan
100 scans / day · free · typical scan 2–4 s ·
try
Scan another →
CACHED Showing previous scan from 302 d ago. Click Reanalyze to run a fresh scan.
PHISHING · MEDIUM CONFIDENCE

Phishing detected

brand birchgroves.top scan id b4037d9e duration signals 0 failing / 0
Risk score 0.90
90 / 100 · —
Tags
https :// .
flagged registered domain path protocol / query
URL hxxps://birchgroves[.]top
Brand birchgroves.top
Screenshot https://cdn.zerophish.ai/2b1f66bd-8b1e-4187-9ed7-8b627efe7f5e.jpg
Scan ID b4037d9e-c84b-4e8a-bb35-4958195bf09f

No detection signals on this scan — it predates the signal pipeline. Re-analyze to capture them.

Captured page
screenshot · captured at scan live page render

No brand impersonation signals available.

No technical metadata captured for this scan.

Initial scan heuristic + LLM

The website ‘birchgroves.top’ displays several red flags that suggest it is likely a phishing website. The URL itself does not contain a known brand in its domain, which is common in phishing attacks. The webpage appears to be an e-commerce store selling various products. However, product images are generic and have no specific association to the alleged brand, ‘birchgroves.top’. Additionally, the website lacks key identity indicators, such as a coherent privacy policy page, contact or customer service information. It’s noteworthy to mention that the website also seems overgenerous with discount and sales claims, which can be used to lure potential victims. The site seems to solely operate under USD, yet the domain name does not suggest any location association by this currency, which typically indicates a phishing attempt. Based on these observations, the phishing_score has been set as 0.9, and it’s marked as a potential phishing website. However, a detailed investigation should be conducted by cybersecurity specialists to confirm this inference.