URL THREAT INTELLIGENCE · v0.5.0 · OPERATIONAL

The full anatomy of a phishing site,
one URL at a time.

ZeroPhish renders the page, runs twelve detection signals against the DOM, certificate chain, brand fingerprint and threat feeds, and returns a typed verdict. Built for security teams and product engineers.

scan
100 scans / day · free · typical scan 2–4 s ·
try
Scan another →
CACHED Showing previous scan from 460 d ago. Click Reanalyze to run a fresh scan.
PHISHING · MEDIUM CONFIDENCE

Phishing detected

brand Rolex scan id 535fe2de duration signals 0 failing / 0
Risk score 0.90
90 / 100 · —
Tags
https :// .
flagged registered domain path protocol / query
URL hxxps://rolex-replica[.]me
Brand Rolex
Screenshot https://cdn.zerophish.ai/eec548bd-3fbc-43a3-8c32-6ec487ff7065.jpg
Scan ID 535fe2de-c1ab-48f7-a0c4-150b0756cdf8

No detection signals on this scan — it predates the signal pipeline. Re-analyze to capture them.

Captured page
screenshot · captured at scan live page render

No brand impersonation signals available.

No technical metadata captured for this scan.

Initial scan heuristic + LLM

The provided website is almost certainly a phishing site, given multiple suspicious elements. Firstly, the domain name (rolex-replica.me) is a tell-tale sign of a phishing site. Legitimate brands, especially well-known ones like Rolex, do not generally use hyphenated or ‘replica’ in their URL. Furthermore, the entire site is dedicated to selling ‘replica’ Rolex watches, which is a common scam tactic. Another important factor is the insecure ‘http://‘ protocol, which suggests the website does not use secure connections to protect user data - this is often the case with phishing sites. The HTML reveals plenty of links, which are possibly misleading or malicious. Lastly, the summary constructed in markdown format communicates that these replicas are of high quality and benefit the user by building confidence and looking professional, which is misleading, thereby indicating malicious intent.