Security Report: protonvpnx.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/87fe97a3-0fcf-4cbd-96af-ac60776e94b4 Domain and IP registration (RDAP)/api/v1/rdap/87fe97a3-0fcf-4cbd-96af-ac60776e94b4How often this domain was scanned/api/v1/domain/stats/protonvpnx.com Scan history for this domain/api/v1/domain/history/protonvpnx.com?limit=15

This website contacted 2 IPs in 1 country across 2 domains to perform 19 HTTP transactions. The main domain is protonvpnx.com and was registered 2 months ago.

Submitted URL: https://protonvpnx.com/

Effective URL:

https://www.protonvpnx.com/

Redirected

AI Security Verdict

High Risk

Confidence: 75%

Risk Score

Unofficial domain impersonating Proton VPN branding, with single-source phishing reports attached to the host and no forms. Treat as untrusted; get the client only from protonvpn.com.

Risk Factors (5)

Brand impersonation of Proton VPN on a mismatched, non-official domain (protonvpnx.com)

Single-source phishing threat-intel reports against the primary domain

Young domain (86 days) with no established reputation

Typosquat-style hostname adding 'x' to the Proton VPN brand name

Domain age information unavailable

Details

Page Title

Proton VPN下载 - Windows、macOS、Android与iOS客户端

Scan Type

public

Favicon Hash

MMH3: 1497027605

MD5: b3a8d4d7eaa0f5663ac05fa564e06a3c

Domain Name Analysis

Domain 'protonvpnx.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Its registrable label 'protonvpnx' stretches across 10 characters containing two vowels alongside eight consonants. Word splitting yields 3 words: proton, vpn, x. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.48s

Total Load Time

980 KB

Total Size

Language Analysis

Primary Language

🇨🇳Chinese

Code: zh

Confidence:60%

Script:Han

Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN

Text Length:2,713 chars

Detector Agreement:40%

Website Classification

Primary Category

technology software98% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

98%

documentation technical

95%

government public service

94%

phishing scam

88%

download file sharing

85%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	172.67.195.74Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	104.21.90.48Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
19	2	-	-

Detected Technologies5

Open-Graph-Protocolvwebsite

100%

HTTP/3

40%

HSTS

40%

Cloudflare Bot Management

40%

Cloudflare

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13DA2E773D3F0B82F122797C57267F36EA2AFA60BD8624484FAB94BD45BD6CD05903046

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:BMC2KjCciIoiQr0Cb33d18mcSGCEQBaBKLqE2PDzrOHMr7za69a9W9BX4tBjqUDo:BiIMvKYLqE2PDfOY+2O6HwSE+

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:23021:sA0AikHANWERcBggjgGQE+BQiIyDMAGUBAUuoHARtwV6ACKBEhOElAk9oDBgAnLzADhuAUAqIkCbARjDAGvCIsEwQFgBICxB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0600766f6f013d01

Perceptual Hash:83a53c3cb1c3e7c1

Difference Hash:d4adccc8d86dd1d5

Wavelet Hash:0703776f6f017d11

Color Hash:#8479d2

Other Hashes

Crop Resistant:564680020000200e,d4acccc8d86dd1d5

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: protonvpnx.com