Security Report: firebox-ssl.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1175574c-510c-489c-9769-72d9bf3d46ce Domain and IP registration (RDAP)/api/v1/rdap/1175574c-510c-489c-9769-72d9bf3d46ceHow often this domain was scanned/api/v1/domain/stats/firebox-ssl.com Scan history for this domain/api/v1/domain/history/firebox-ssl.com?limit=15

This website contacted 6 IPs in 3 countries across 4 domains to perform 11 HTTP transactions. The main domain is firebox-ssl.com and was registered 10 months ago.

Submitted URL: https://firebox-ssl.com/

AI Security Verdict

High Risk

Confidence: 72%

Risk Score

Unranked domain offering 'WatchGuard Firebox SSL VPN' downloads is not WatchGuard's site, and the primary domain carries a single-source malware (bumblebee) intelligence match — brand impersonation plus a malware-linked host warrants avoidance.

Risk Factors (4)

Primary domain matched as malware (bumblebee loader) in threat intelligence, albeit single-source and unverified

Impersonation of a different entity's brand (WatchGuard) on a non-official, unranked domain

Software-download themed page adjacent to a malware-family indicator is a classic lure pattern

Domain is 10 months old and has negligible reputation (legitimacy score 20/100)

Domain age information unavailable

Details

Page Title

Download Firebox SSL VPN Client | WatchGuard

Scan Type

public

Favicon Hash

MMH3: 1308053427

MD5: f97524fba85e2fdce40d2f5a50e5e747

Domain Name Analysis

The domain name 'firebox-ssl.com' uses the commercial generic top-level domain (.com) without a subdomain. Count 11 characters in 'firebox-ssl' containing 3 vowels alongside seven consonants; bonus characters include one hyphen. Splitting it apart reveals 2 words: firebox, ssl. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.42s

Total Load Time

107 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:8,347 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software69% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

69%

corporate business

59%

corporate

35%

government public service

29%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	80.249.132.131	Netherlands	AS60781LeaseWeb Netherlands B.V.
1	20.250.198.32Azure · CLOUD	Zurich, Zurich, Switzerland	AS8075Microsoft Corporation
1	150.171.109.106Azure · CLOUD	United States	AS8075Microsoft Corporation
1	52.184.222.228Azure · CLOUD	Boydton, Virginia, United States	AS8075Microsoft Corporation
1	150.171.109.100Azure · CLOUD	United States	AS8075Microsoft Corporation
1	172.212.113.197Azure · CLOUD	Dulles, Virginia, United States	AS8075Microsoft Corporation
11	6	-	-