ScanMalware.com

Security Scan Report: connect-client.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cd1472df-2f8d-478e-a977-7f80825a686eDomain and IP registration (RDAP)/api/v1/rdap/cd1472df-2f8d-478e-a977-7f80825a686eHow often this domain was scanned/api/v1/domain/stats/connect-client.comScan history for this domain/api/v1/domain/history/connect-client.com?limit=15
This website contacted 5 IPs in 2 countries across 4 domains to perform 27 HTTP transactions. The main domain is connect-client.com and was registered 5 months ago.

Submitted URL: https://connect-client.com

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Unofficial Sophos Connect Client page on a young unranked domain, with a single-source threat-intel report tying the primary domain to Bumblebee malware. Avoid downloading or interacting.

Risk Factors (4)
Primary domain reported as Bumblebee malware in a single-source threat-intel feed.
Unofficial site uses Sophos branding and offers Sophos Connect Client downloads without official affiliation.
Unranked domain with limited history and no established reputation.
Potentially modified/unofficial VPN client download could deliver malware.
Domain age information unavailable

Details

Page Title

Download Sophos Connect Client VPN

Scan Type

public

Domain Name Analysis

The domain 'connect-client.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Count 14 characters in 'connect-client' with 4 vowels and 9 consonants; it also includes one hyphen. Tokenizing the label suggests two words: connect, client. Median word length comes out to 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://connect-client.com

Page Load Overview

2.51s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,877 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software58% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
58%
corporate
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
793.174.4.202Pozuelo de Alarcón, Madrid, Spain
AS48348Cloud Builders SA
5142.251.14.95Google · CDNUnited States
AS15169Google LLC
5104.18.1.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.250.154.94Google · CDNUnited States
AS15169Google LLC
5104.18.0.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
275--

Detected Technologies5

Open-Graph-Protocolvwebsite
100%
Bootstrap
50%
PHPv7.2.34
40%
Apache HTTP Server
40%
jQuery
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T148D2B532A5E12037126340D5A4125B4E76E2854BE61B1704B2FE47BE5FE3C86CD6B7CB

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:JKFk4TEA/Q1E5++GZOp5gAvhzraK1MFKkvKbKLHlK4e6agDtM48dCOxhCyJA:uTr/QK5++0MvvhzraCydU+h7TOxhCyJA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28662:g4osJAgEEWCA7AU7VQAIQaABwEAWAbmIBIABFAQiXohDIgP1EG4MwHSlIZAIYXIGCCYqMnHOAA4nTEgBDCrhAZ4INqoiDIJg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:43c3ffff59180000
Perceptual Hash:a8f1334dd6939c4c
Difference Hash:8f8fb4ccb3b31505
Wavelet Hash:43c3ffff59190101
Color Hash:#35d22d

Other Hashes

Crop Resistant:464680020000200e,8e8e94ccb3b31505

Scan History

Scan history not available

Unable to load historical scan data