ScanMalware.com

Security Scan Report: watchguard-vpn.es

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0c3b02c8-2f2f-4dcb-9191-3e02563c0358Domain and IP registration (RDAP)/api/v1/rdap/0c3b02c8-2f2f-4dcb-9191-3e02563c0358How often this domain was scanned/api/v1/domain/stats/watchguard-vpn.esScan history for this domain/api/v1/domain/history/watchguard-vpn.es?limit=15
This website contacted 4 IPs in 2 countries across 3 domains to perform 34 HTTP transactions. The main domain is watchguard-vpn.es.

Submitted URL: https://watchguard-vpn.es/

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Non-official WatchGuard VPN 'download' page on watchguard-vpn.es with a single-source malware (bumblebee) indicator on its primary domain; no credential form, but avoid downloading anything from it.

Risk Factors (4)
Content-malware threat-intelligence match on the page's primary domain (bumblebee loader family)
Uses a security vendor's brand and software name on a domain it does not own while offering that vendor's client for download
Domain absent from Cisco Umbrella top 1M ranking
Domain age unknown and legitimacy score low (8/100)
Domain age information unavailable

Details

Page Title

Download WatchGuard Mobile VPN with SSL

Scan Type

public

Domain Name Analysis

The domain name 'watchguard-vpn.es' uses the Spanish country-code top-level domain (.es) and has no subdomain. Count 14 characters in 'watchguard-vpn' holding 3 vowels versus ten consonants, notching one hyphen. Breaking it apart gives three words: watch, guard, vpn. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://watchguard-vpn.es/

Page Load Overview

2.73s
Total Load Time
851 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:8,405 chars
Detector Agreement:60%

Website Classification

Primary Category

corporate business100% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
100%
technology software
99%
documentation technical
83%
government public service
83%
download file sharing
49%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10103.149.169.108Amsterdam, North Holland, Netherlands
AS60781LeaseWeb Netherlands B.V.
8192.178.183.95Google · CDNUnited States
AS15169Google LLC
8142.251.14.94Google · CDNUnited States
AS15169Google LLC
8142.251.20.95Google · CDNUnited States
AS15169Google LLC
344--

Detected Technologies4

Open-Graph-Protocolvwebsite
100%
Bootstrap
50%
Apache HTTP Serverv2
40%
Lightbox
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T102C2C430A4F5253341A361D2BA42AB076DD1E20BD72B446572FC4FEC8FC7D95E82716A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:ez/r/2vU/n7A+S4CUj6NXA8R52SeLpQojrB0K:Q7QVQ6NXAK2SZOd0K

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28128:uxw0Q0hRiUQgdNqGgOzUkBAAyYvUCoAMMI2IAIGwEAgphw4QUEBgUBBOMIxCEQCmJo4iCFYIAXQ1aA6QghCLSvo0RQXZiQEh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff000000007e7e7e
Perceptual Hash:827ec0d2fac0eaea
Difference Hash:79df8fdd0fccc4d4
Wavelet Hash:ff000101017f7f7f
Color Hash:#1f937c

Other Hashes

Crop Resistant:79df8fdd0fccc4d4,ff9fefdfeddcd4dc

Scan History

Scan history not available

Unable to load historical scan data