Security Scan Report: watchguard-mobile.it

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 3 domains to perform 22 HTTP transactions. The main domain is watchguard-mobile.it and was registered 2 months ago.

Submitted URL: https://watchguard-mobile.it/

AI Security Verdict

High Risk

Confidence: 60%

7
Risk Score

Unaffiliated 73-day-old site using the WatchGuard brand and 'download' SEO to rank for VPN search terms; no forms, malware or exfiltration found, but brand misuse plus a Spamhaus IDS alert and single-source threat-intel report warrant caution.

Risk Factors (4)
Unauthorized use of the WatchGuard brand in the domain and site naming by a party declaring no affiliation
Download-lure framing ('Download WatchGuard Mobile VPN with SSL') on a young, unranked third-party domain
Single-source threat-intel report on the primary domain
HIGH IDS alert referencing Spamhaus DROP-listed traffic
Domain age information unavailable

Details

Page Title

Download WatchGuard Mobile VPN with SSL

Scan Type

public

Domain Name Analysis

Within the Italian country-code top-level domain (.it), 'watchguard-mobile.it' is registered and has no subdomain. The core label 'watchguard-mobile' covers 17 characters holding 6 vowels versus ten consonants; it also includes 1 hyphen. Tokenizing the label suggests three words: watch, guard, mobile. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://watchguard-mobile.it/

Page Load Overview

3.45s
Total Load Time
578 KB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it
Text Length:9,054 chars
Detector Agreement:80%

Website Classification

Primary Category

documentation technical95% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
95%
corporate business
76%
download file sharing
70%
phishing scam
59%
adult content
57%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6158.94.209.214Amsterdam, North Holland, Netherlands
AS202412Omegatech LTD
4142.251.14.95Google · CDNUnited States
AS15169Google LLC
4142.251.20.94Google · CDNUnited States
AS15169Google LLC
4142.250.154.95Google · CDNUnited States
AS15169Google LLC
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
225--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C5B2F9B69482203B499373E1B731BB1BB0E2E444EB67201452FEC75D03DAEC5A65F25B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:Zzrcy/L6I2dtNwBzdn703im8eMASLOQYtsYwoK/7/tLJWgSr+4+PK8rM:AW703/8PWsl4g8+tPK8rM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:23451:xWZSsEDQYMkAAWkgA/jkARmhiDDhWyQBJGY5VEAwAgVtg0kxOgRJcY5SCBADAYAIEhMMqyAGEAqJIGCh8cAQEgCSaATSSQAy

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0000000040ffff
Perceptual Hash:e006bd1b9b96c4e5
Difference Hash:78c7c48dc7813217
Wavelet Hash:ff00000000ffffff
Color Hash:#821f93

Scan History

Scan history not available

Unable to load historical scan data