Security Scan: Download GlobalProtect Client

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a5cdf073-660d-476c-8f42-7283c1192d4d Domain and IP registration (RDAP)/api/v1/rdap/a5cdf073-660d-476c-8f42-7283c1192d4dHow often this domain was scanned/api/v1/domain/stats/globalprotect.nl Scan history for this domain/api/v1/domain/history/globalprotect.nl?limit=15

This website contacted 4 IPs in 2 countries across 3 domains to perform 10 HTTP transactions. The main domain is globalprotect.nl and was registered 3 months ago.

Submitted URL: https://globalprotect.nl/

AI Security Verdict

Low Risk

Confidence: 55%

Risk Score

Informational Dutch fan page about the GlobalProtect VPN client with no forms, no credential harvesting and no Indicators of Compromise. Risk is limited to an unranked, 109-day-old domain and a generic Spamhaus DROP IDS alert on the host.

Risk Factors (3)

ET DROP Spamhaus IDS alert on the hosting address (generic abuse-reputation, not page content)

Unranked, 109-day-old domain referencing a commercial product (GlobalProtect / Palo Alto Networks) rather than the vendor's own domain

Independent fan-site framing around a security/VPN product could invite users to seek clients from an unofficial source

Safety Factors (6)

No forms at all — no login, password or payment fields to harvest credentials or card data

Self-branding detected: title/meta name matches the domain, no impersonation of another entity's login portal

No Indicators of Compromise on the page or its resources

No JavaScript malware/YARA hits, no obfuscated scripts, no credential exfiltration, no cross-origin credential handling

Content is informational (product explanation and FAQ), not a deceptive capture page

Verdict names no specific threat, and DOM analysis found no password field (real or disguised) or payment field and no other hard signal — elevated score unsupported; risk adjusted from 4 to 3

Domain age information unavailable

Details

Page Title

Download GlobalProtect Client

Scan Type

public

Favicon Hash

MMH3: -969387956

MD5: 3e9e68fdbd42def58f27c61544387c40

Domain Name Analysis

Domain 'globalprotect.nl' uses the Dutch country-code top-level domain (.nl) without a subdomain. The core label 'globalprotect' covers 13 characters split between 4 vowels and nine consonants. It segments into 2 words: global, protect. Expect 6.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.57s

Total Load Time

260 KB

Total Size

Language Analysis

Primary Language

🇳🇱Dutch

Code: nl

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:nl

Text Length:7,439 chars

Detector Agreement:75%

Website Classification

Primary Category

technology software28% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

28%

corporate

25%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	158.94.209.214	Amsterdam, North Holland, Netherlands	AS202412Omegatech LTD
2	142.251.14.95Google · CDN	United States	AS15169Google LLC
2	192.178.183.94Google · CDN	United States	AS15169Google LLC
2	142.251.20.94Google · CDN	United States	AS15169Google LLC
10	4	-	-