ScanMalware.com

Security Scan Report: watchguard-vpn.org

Redirected to:
https://www.watchguard-vpn.org/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9b9197fe-ea6c-4863-894d-79cb2858ccd9Domain and IP registration (RDAP)/api/v1/rdap/9b9197fe-ea6c-4863-894d-79cb2858ccd9How often this domain was scanned/api/v1/domain/stats/watchguard-vpn.orgScan history for this domain/api/v1/domain/history/watchguard-vpn.org?limit=15
This website contacted 3 IPs in 2 countries across 4 domains to perform 55 HTTP transactions. The main domain is watchguard-vpn.org and was registered 10 months ago.

Submitted URL: https://watchguard-vpn.org

Effective URL:
https://www.watchguard-vpn.org/
Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

WatchGuard-branded download page on a non-official domain flagged by two corroborating feeds as fakeapp malware; no forms, but brand impersonation plus malware IoC make it unsafe.

Risk Factors (4)
Primary domain carries a corroborated 'fakeapp (malware)' threat-intelligence classification
Brand impersonation of WatchGuard on a non-official, unranked domain
Offers a security-product client download with no verifiable official vendor channel
Fan-site disclaimer buried while the page functions as an official-looking download page
Domain age information unavailable

Details

Page Title

Download and Install WatchGuard Mobile VPN with SSL

Scan Type

public

Domain Name Analysis

The domain 'watchguard-vpn.org' uses the non-profit oriented generic top-level domain (.org) and has no subdomain. The second-level label 'watchguard-vpn' is 14 characters long split between 3 vowels and ten consonants, plus 1 hyphen. Segmentation suggests 3 words: watch, guard, vpn. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://watchguard-vpn.org

Page Load Overview

5.47s
Total Load Time
917 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:12,851 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software79% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
79%
corporate business
46%
government public service
32%
corporate
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1980.249.132.131Netherlands
AS60781LeaseWeb Netherlands B.V.
18142.251.14.95Google · CDNUnited States
AS15169Google LLC
18142.251.13.94Google · CDNUnited States
AS15169Google LLC
553--

Detected Technologies4

Open-Graph-Protocolvwebsite
100%
Bootstrap
50%
LiteSpeed
40%
HTTP/3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T176F2D871A1E42233419310E2BB666B9B6ED2E10BC727045431FC0BBC4FD3DD5953B6AA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:JIoA4BYB2iB+/PkOHEcKVPirP66LYDN5g3lVWf1a5a8Wph:JI+yMiM/M56YcHe1Aa84h

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:35964:YBAQogUg7RCjtgQDCgBQgSEhA/DRgphxiMIcAAC0CIwE+AlDJIFwCAYOFAUcAIAMgrYcY6iXLM6iKEQZUMAwFg0pVh4RoAZD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fdc3c3c3e5ff83ff
Perceptual Hash:e272c9dad2c8da62
Difference Hash:61968e8fcdd033d2
Wavelet Hash:fd434341657f810f
Color Hash:#783a3a

Other Hashes

Crop Resistant:61968e8fcdd033d2

Scan History

Scan history not available

Unable to load historical scan data