Research On Phishing URLs

I occasionally get notifications that BitDefender/Box has blocked a phishing URL on one of my devices but no other info except the URL. Is there a way to see why BitDefender flagged a URL as a phishing site or more information about the site itself? And is there a way to trace the URL back to the source on the device - an e-mail, an app, etc.?

As an example, I got a block to "http://stest.zimperium.com/stest" but virustotal.com shows it as "clean", including the BitDefender scanning engine and it looks like it might be some type of a keep-alive/check-in connection but I don't know why BitDefender flagged it as phishing or how to research further to see what on the device was attempting to connect to that URL

Answers