Security Scan Report: watchguard-mobile.org

Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 5 domains to perform 17 HTTP transactions. The main domain is watchguard-mobile.org and was registered 3 months ago.

Submitted URL: https://watchguard-mobile.org

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Static, form-free fan guide to WatchGuard Mobile VPN, but its primary domain carries a single-source malware indicator of compromise; treat downloads/invitations with caution pending corroboration.

Risk Factors (3)
Single-source (unverified) malware-family indicator of compromise reported against the primary domain
Recent domain (113 days) with no established reputation
Download-oriented title/meta on a non-official domain for a commercial security brand, conflicting with the page's own disclaimer
Domain age information unavailable

Details

Page Title

Download WatchGuard Mobile VPN with SSL

Scan Type

public

Domain Name Analysis

Within the non-profit oriented generic top-level domain (.org), 'watchguard-mobile.org' is registered while skipping any subdomain. Its registrable label 'watchguard-mobile' stretches across 17 characters with six vowels and 10 consonants, notching 1 hyphen. Segmentation suggests three words: watch, guard, mobile. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://watchguard-mobile.org

Page Load Overview

2.59s
Total Load Time
6.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,956 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business74% confidence
Type: static
Method: ml+structural

All Detected Categories

corporate business
74%
government public service
46%
documentation technical
38%
technology software
36%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
993.174.4.202Pozuelo de Alarcón, Madrid, Spain
AS48348Cloud Builders SA
1151.101.1.229Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.13.95Google · CDNUnited States
AS15169Google LLC
1142.250.154.94Google · CDNUnited States
AS15169Google LLC
1151.101.193.229Fastly · CDNUnited States
AS54113Fastly, Inc.
1192.178.183.95Google · CDNUnited States
AS15169Google LLC
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.20.94Google · CDNUnited States
AS15169Google LLC
179--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A7929572A185323B421709DAB715A39FF1F3A04DE667290472FE87EC0BD2C54E5365E2

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:Wj+CdlCV6FY9ZQPM2Ue0t3/gzbIKVLKM5K6UKfKnUBrKv4zz3jJz:Wj+CdEV6FY//kksdiOXrwuJz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:20216:4IAkAEIYcKgAgSgIhCEDECFRodQQkMwYEBJTx6JMHwIGywCIAotyQtoOKpJIY4UewFYHVMQSs8QACEmgOMjAAWqRUEnDJiJA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000e2e0c0000ffff
Perceptual Hash:9213ed6cec5a9ad0
Difference Hash:87dcd8d9cde7cd30
Wavelet Hash:006f7f0d0000ffff
Color Hash:#e0da6c

Scan History

Scan history not available

Unable to load historical scan data