Security Scan: Download GlobalProtect Client

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e6b13272-928b-4ff4-a5ed-7d6fe94bfd25 Domain and IP registration (RDAP)/api/v1/rdap/e6b13272-928b-4ff4-a5ed-7d6fe94bfd25How often this domain was scanned/api/v1/domain/stats/globalprotect.nl Scan history for this domain/api/v1/domain/history/globalprotect.nl?limit=15

This website contacted 4 IPs in 2 countries across 3 domains to perform 10 HTTP transactions. The main domain is globalprotect.nl and was registered 3 months ago.

Submitted URL: https://globalprotect.nl/

AI Security Verdict

High Risk

Confidence: 65%

Risk Score

Unranked 109-day-old domain posing as a GlobalProtect VPN client download portal for Palo Alto Networks' product, with a primary-domain malicious-host report and a HIGH Spamhaus IDS alert; no credential forms found.

Risk Factors (4)

Third-party domain (globalprotect.nl) framing itself as the download portal for Palo Alto Networks' commercial GlobalProtect VPN client without any attribution to the vendor

Primary domain flagged as a malicious host by a threat-intelligence feed (single-source, unverified)

High-severity IDS alert for Spamhaus DROP-listed inbound traffic

Recent (109 days) and unranked domain offering a download of an enterprise security product

Domain age information unavailable

Details

Page Title

Download GlobalProtect Client

Scan Type

public

Favicon Hash

MMH3: -969387956

MD5: 3e9e68fdbd42def58f27c61544387c40

Domain Name Analysis

Within the Dutch country-code top-level domain (.nl), 'globalprotect.nl' is registered while skipping any subdomain. The core label 'globalprotect' covers 13 characters with four vowels and 9 consonants. Splitting it apart reveals two words: global, protect. Average segment length settles at 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.88s

Total Load Time

260 KB

Total Size

Language Analysis

Primary Language

🇳🇱Dutch

Code: nl

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:nl

Text Length:7,439 chars

Detector Agreement:75%

Website Classification

Primary Category

technology software28% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

28%

corporate

25%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	158.94.209.214	Amsterdam, North Holland, Netherlands	AS202412Omegatech LTD
2	142.251.14.95Google · CDN	United States	AS15169Google LLC
2	142.251.110.94Google · CDN	United States	AS15169Google LLC
2	142.251.20.94Google · CDN	United States	AS15169Google LLC
10	4	-	-