Security Scan Report: ivanti-secure-vpn.com

Submitted: Completed: publiccompleted
This website contacted 20 IPs in 8 countries across 10 domains to perform 21 HTTP transactions. The main domain is ivanti-secure-vpn.com and was registered 1 year 1 month ago.

Submitted URL: https://ivanti-secure-vpn.com

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Expired/parked domain named after security vendor Ivanti, flagged by two threat-intel feeds as fakeapp malware; do not visit or click its links.

Risk Factors (3)
Content-malware Indicator of Compromise (fakeapp/malware) on the primary domain, corroborated by two independent feeds
Brand impersonation of Ivanti in the hostname with VPN/enterprise-access lures
Parked/expired domain serving search-spam teaser links via ad/parking infrastructure
Domain age information unavailable

Details

Page Title

ivanti-secure-vpn.comother network

Scan Type

public

Domain Name Analysis

You're looking at domain 'ivanti-secure-vpn.com' on the commercial generic top-level domain (.com) while skipping any subdomain. Its registrable label 'ivanti-secure-vpn' stretches across 17 characters containing 6 vowels alongside nine consonants; it also includes two hyphens. Tokenizing the label suggests four words: iv, anti, secure, vpn. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ivanti-secure-vpn.com

Page Load Overview

11.71s
Total Load Time
299 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:63%
Script:Latin
Direction:ltr

Detection Details

Text Length:120 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software31% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2103.224.212.142Australia
AS133618Trellian Pty. Limited
118.245.60.53Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
154.88.44.186Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1103.224.182.90San Diego, California, United States
AS133618Trellian Pty. Limited
1185.152.64.17Datacamp · CDNPrague, Prague, Czech Republic
AS60068Datacamp Limited
187.248.119.251United Kingdom
AS203220Yahoo-UK Limited
1150.171.109.101Azure · CLOUDUnited States
AS8075Microsoft Corporation
134.243.127.89Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
146.137.126.110Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
113.69.116.106Azure · CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
2120--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T198E2C51846F2081105972075DEBF6AC837755A63658CEC08BD8CAA40EFADAB74DB77F0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:tBZBsjBjrAyhtbgt4MiIO/5/9SL50Aaf/HGbm0GbmiQjGG:BMMzanHz0zi8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:33561:AUWiJgQTDSSgMKQAKEEcBBgpoDmgkBhE8SWhkaRpbARemgQ0RgYEACIRMBZQRiTAFRyoDCCAAQKCREwKJB5KQGFY4FCLvAhh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000c300000000ff
Perceptual Hash:a8609f4a9f4ab335
Difference Hash:71969697b7b3b33b
Wavelet Hash:0042e7f75b1818ff
Color Hash:#612dd2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data