URL THREAT INTELLIGENCE · v0.5.0 · OPERATIONAL

The full anatomy of a phishing site,
one URL at a time.

ZeroPhish renders the page, runs twelve detection signals against the DOM, certificate chain, brand fingerprint and threat feeds, and returns a typed verdict. Built for security teams and product engineers.

scan
100 scans / day · free · typical scan 2–4 s ·
try
Scan another →
CACHED Showing previous scan from 183 d ago. Click Reanalyze to run a fresh scan.
REVIEW · MEDIUM CONFIDENCE

Review required

brand Defense.com scan id c2272299 duration signals 0 failing / 0
Risk score 0.00
0 / 100 · —
Tags
https :// .
flagged registered domain path protocol / query
URL hxxp://defense[.]com
Brand Defense.com
Screenshot https://cdn.zerophish.ai/4ae05ce1-10a4-43fe-a2a2-fdf4f6402bfa.jpg
Scan ID c2272299-1763-423e-89ac-adb452a0e86d

No detection signals on this scan — it predates the signal pipeline. Re-analyze to capture them.

Captured page
screenshot · captured at scan live page render

No brand impersonation signals available.

No technical metadata captured for this scan.

Initial scan heuristic + LLM

The website ‘http://defense.com’ does not exhibit typical phishing or suspicious characteristics. Rather, it appears to be a legitimate website of a cybersecurity service provider named Defense.com. The brand correctly matches the domain, and there are no signs of social engineering tactics often used in phishing attacks. The website’s content is related to the provision of various security solutions like Extended Detection and Response (XDR), Managed Security Services, Threat Recon services, etc. Furthermore, the presence of a customer review section implicates legitimacy.