The full anatomy of a phishing site,
one URL at a time.
ZeroPhish renders the page, runs twelve detection signals against the DOM, certificate chain, brand fingerprint and threat feeds, and returns a typed verdict. Built for security teams and product engineers.
No phishing signals detected
| URL | Https://pandorex[.]info | |
| Host | https | |
| Brand | Pandorex | |
| Screenshot | https://cdn.zerophish.ai/8360d8c4-9ddd-4ff0-ade6-cad25550e4fa.jpg | |
| Scan ID | c0ff31cc-9e69-487d-b2a3-7dafed0bb1e2 |
|
9 h ago
|
SAFE | www.instagram.com | safe |
|
1 d ago
|
SAFE | www.20min.ch | safe |
|
1 d ago
|
SAFE | golem.de | safe |
|
1 d ago
|
PHISHING | bradesco.ativacaodechat.com | view → |
|
1 d ago
|
PHISHING | vendageral-rockinrio.com | view → |
|
11 d ago
|
SAFE | nemonicon.com | safe |
|
12 d ago
|
SAFE | login.microsoftonline.com | safe |
|
12 d ago
|
SAFE | www.paypal.com | safe |
| Host | https |
| Registered domain | https |
| Scheme | https |
| Content length | 192618 B |
| HTTP | 200 · text/html |
The page presents itself as a German “Pandorex” tech news site (e.g., page title “Pandorex — Tech News”, navigation categories like “Security”, “KI & Chips”, and multiple article cards). The content is informational and does not display typical phishing bait such as account-lockout messages, fake payment prompts, or links urging urgent action.
Suspicious elements were minimal: there is a newsletter signup area (“Newsletter… Anmelden… Double Opt-In”), but no visible password/login or credential-collection form in the provided HTML snippet. The URL uses a generic domain (pandorex.info) that matches the site’s own branding, with no evidence of impersonating a major financial brand (e.g., PayPal) or mismatched domain/branding.
Overall, based on the provided HTML/OCR, this looks like a legitimate content/news landing page rather than a credential-harvesting phishing site, though the confidence is kept low because only a portion of the page was provided and we cannot verify backend behaviors or redirect targets.