ScanMalware.com

Security Scan Report: fortivpn.es

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1fc9524c-cdb7-43de-8bb8-45e312491c61Domain and IP registration (RDAP)/api/v1/rdap/1fc9524c-cdb7-43de-8bb8-45e312491c61How often this domain was scanned/api/v1/domain/stats/fortivpn.esScan history for this domain/api/v1/domain/history/fortivpn.es?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 13 HTTP transactions. The main domain is fortivpn.es.

Submitted URL: https://fortivpn.es

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Download site for a 'FortiVPN Client' whose primary domain has an unverified single-source 'bumblebee' malware report. No forms or script threats found, but do not download or install the offered executable.

Risk Factors (3)
Malware-family threat-intelligence match (bumblebee) on the primary domain, albeit single-source and unverified
Site solicits downloading and installing a client executable while using a Fortinet-style 'Forti' product name on a non-Fortinet domain
Unranked domain with no verifiable publisher identity, corporate address or support channels
Domain age information unavailable

Details

Page Title

Download FortiVPN Client

Scan Type

public

Domain Name Analysis

The domain 'fortivpn.es' uses the Spanish country-code top-level domain (.es) without a subdomain. The second-level label 'fortivpn' is 8 characters long containing 2 vowels alongside 6 consonants. Segmentation suggests three words: for, ti, vpn. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

FortiVPN Inicio Historia Guías SobreNosotros . - Proteja sus datos sensibles con la solución más fiable de Descargar Forti VPN Client acceso remoto del mercado. Con cifrado AES-256 y E protocolos d...

Page Load Overview

1.29s
Total Load Time
424 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:13,185 chars
Detector Agreement:100%

All Detected Languages

🇪🇸es(99%)🇵🇹pt(1%)🇺🇸en(0%)🇪🇪et(0%)

Website Classification

Primary Category

technology software86% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
86%
corporate business
73%
government public service
51%
documentation technical
46%
phishing scam
41%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1393.174.4.202Pozuelo de Alarcón, Madrid, Spain
AS48348Cloud Builders SA
131--

Detected Technologies4

Open-Graph-Protocolvwebsite
100%
PHPv8.4.27
40%
Apache HTTP Server
40%
jQuery
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16003D63859F24423509390C4BB52D7576ED0E103A50EC269B3EE57AC9FCEDCAE92B25C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:uBHB1ldis5PYHCFGiH3y7TTNT+ZIJ3FN2tP:uBHB1usmHCQ23yjNaZCFN2R

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:38973:R0BCQJGISCphCCdVMgkSFTpSASisRZQJCMgDREQFByiz+yoOUEEgpEkDFAQDFCgQ4QEKKghljM6ACEAgALNQwxLOJmQyBBow

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff000000001fffff
Perceptual Hash:aa02fcc4b9c3b9c6
Difference Hash:37ffcdcbefff0017
Wavelet Hash:ff00000000ffffff
Color Hash:030000005c0

Other Hashes

Crop Resistant:37ffcdcbefff0017,ffffcdddebcfdfff

Scan History

Scan history not available

Unable to load historical scan data