The full anatomy of a phishing site,
one URL at a time.
ZeroPhish renders the page, runs twelve detection signals against the DOM, certificate chain, brand fingerprint and threat feeds, and returns a typed verdict. Built for security teams and product engineers.
Phishing detected
| URL | hxxps://blockxplorers[.]com/form[.]html | |
| Brand | not applicable | |
| Screenshot | https://cdn.zerophish.ai/5db617b0-1674-42dc-ae40-822391fe1d7b.jpg | |
| Scan ID | f20b712a-19d1-419d-b4e2-bf6fa794e979 |
No detection signals on this scan — it predates the signal pipeline. Re-analyze to capture them.
No brand impersonation signals available.
No technical metadata captured for this scan.
This site https://blockxplorers.com/form.html provides a form requesting sensitive wallet details, such as the recovery phrase or private key, with suspicious elements present in the HTML. The brand name is not identifiable, and the domain name does not correlate with any known legitimate service. A number of features suggest that this is potentially a phishing site: the form requesting recovery phrase or private key (information that should not be shared), the lack of reputable brand identification, and the use of generic terms and anonymized domains to avoid detection.