Security Scan Report: fortivpn.it

Redirected to:
https://www.fortivpn.it/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 5 domains to perform 26 HTTP transactions. The main domain is fortivpn.it and was registered 6 months ago.

Submitted URL: https://fortivpn.it

Effective URL:
https://www.fortivpn.it/
Redirected

AI Security Verdict

High Risk

Confidence: 70%

7
Risk Score

Unranked 185-day-old site offering a 'FortiVPN' Windows client that mimics Fortinet naming; primary domain carries a single-source BumbleBee malware threat-intel hit. Do not download the installer.

Risk Factors (4)
Content-malware threat-intel match on the primary domain (BumbleBee malware family)
Executable software download offer branded to resemble a major security vendor's VPN product
Unranked domain with minimal legitimacy footprint (no evidence of corporate identity, legal entity, or contact details)
Testimonial-heavy copy pushing a single binary download
Domain age information unavailable

Details

Page Title

Download FortiVPN Client

Scan Type

public

Domain Name Analysis

Within the Italian country-code top-level domain (.it), 'fortivpn.it' is registered without a subdomain. Count 8 characters in 'fortivpn' split between two vowels and 6 consonants. Word splitting yields three words: for, ti, vpn. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

ACCESSO REMOTO SICURO PER LA TUA ORGANIZZAZIONE Crittografia SSL VPN i Integrazione con firewall Piattaforme multiple

Page Load Overview

1.82s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it
Text Length:12,556 chars
Detector Agreement:100%

All Detected Languages

🇮🇹it(100%)🇺🇸en(0%)

Website Classification

Primary Category

corporate business99% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
99%
technology software
99%
download file sharing
90%
news media journalism
89%
government public service
88%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1889.46.110.15Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
5142.251.110.95Google · CDNUnited States
AS15169Google LLC
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5104.18.0.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.1.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
265--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C903A53168F42127559382989A11AB4ABF95D497F90E3248B2EF4BBD1FCBCC2DC5B109

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:jMBGoKaowPV/WLeQkGwXJJMG+MzoLOxhCyJA:kowYQzSOxhCyJA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:40916:QANgCJNA4WAYSFBQAHhg/AIYZRENBIATQ6NQRSAQ7AAQLMAD2gj0cQUT1bQD0kQKUSCWhMFEWgBEwRAliEpRQAEgkADY0ehB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000000ffffff
Perceptual Hash:a800ffb72ed9dc02
Difference Hash:37a9d1354d940233
Wavelet Hash:000018006fffffff
Color Hash:03007000000

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data