The full anatomy of a phishing site,
one URL at a time.
ZeroPhish renders the page, runs twelve detection signals against the DOM, certificate chain, brand fingerprint and threat feeds, and returns a typed verdict. Built for security teams and product engineers.
Phishing detected
| URL | hxxps://1153002[.]wcomhost[.]com | |
| Brand | web.com | |
| Screenshot | https://cdn.zerophish.ai/9ca82e0c-4c8e-405e-bc27-892bd29f8142.jpg | |
| Scan ID | f0c8197b-34cb-4051-843f-2579b0b3b5fc |
No detection signals on this scan — it predates the signal pipeline. Re-analyze to capture them.
No brand impersonation signals available.
No technical metadata captured for this scan.
The website tries to imitate a legitimate web.com domain, which is a known brand, but the URL does not match the known domain of the actual brand. The URL has a different structure and the domain part includes a numeric string, which is a common sign of phishing websites. Also, there is a fake login form on the website. Although the text extracted doesn’t provide phishing attempts directly, such standards setups are commonly used in phishing attacks.