Security Scan Report: netextender-download.de

Redirected to:
https://www.netextender-download.de/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 2 domains to perform 18 HTTP transactions. The main domain is netextender-download.de and was registered 7 months ago.

Submitted URL: https://netextender-download.de

Effective URL:
https://www.netextender-download.de/
Redirected

AI Security Verdict

Low Risk

Confidence: 72%

3
Risk Score

Unofficial SonicWall NetExtender download portal; primary domain carries a content-malware (bumblebee) threat-intel match. Do not download software from this site — obtain the VPN client only from SonicWall directly.

Risk Factors (4)
Indicators of Compromise: primary domain flagged as bumblebee malware (single-source, unverified but content-malware typed)
Unofficial download portal distributing a branded security client (SonicWall NetExtender)
Brand use on a non-official, unranked domain
Software download site with no verifiable publisher identity
Safety Factors (7)
No credential, login or payment forms present (0 forms, 0 password fields)
Page explicitly states it is not an official site
No JavaScript hunting rule malware patterns detected
No network IDS alerts
No cross-origin credential exfiltration detected
Domain is 189 days old (not brand-new)
No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 3
Domain age information unavailable

Details

Page Title

Download SonicWall NetExtender VPN

Scan Type

public

Domain Name Analysis

The domain 'netextender-download.de' uses the German country-code top-level domain (.de) without a subdomain. Its registrable label 'netextender-download' stretches across 20 characters with seven vowels and twelve consonants; it also includes 1 hyphen. It segments into 3 words: net, extender, download. Median word length is 8 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://netextender-download.de

Page Load Overview

1.56s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:11,088 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software82% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
82%
corporate business
65%
corporate
35%
phishing scam
33%
download file sharing
30%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18188.241.222.114Romania
AS5606GTS Telecom SRL
181--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T121A3FA5353B098F63A6F876AD449F718B208EA02CE45A2E5F0F5D155A4CCDF608B7B0B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:y/fgA8zetozUyp5W8UGOshTwZ3bcemlUVuXwRm7gDOcXRLtp8MNuA+3RA:5PytozF78Z3bcemlUVugRmSH8fA+3q

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:106045:BHxIQQJWFAghVyQoMBKGqEgCTBStgiEZgSRDEIIIBIQCQghAYACQXJEZhiYAESFJAAEokoYRHQjYmYYErOiQwCyhAnAgDlWQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0000000000ffff
Perceptual Hash:8808f735e5c99ec3
Difference Hash:71e9f1b1b130d90c
Wavelet Hash:ff0018181818ffff
Color Hash:#1f6793

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data