Security Scan Report: favoriteshield.com

Submitted: Jan 5, 2026, 10:20:39 PMCompleted: Jan 5, 2026, 10:22:09 PMpubliccompleted
Loading additional data...

Summary

This website contacted 17 IPs in 3 countries across 12 domains to perform 109 HTTP transactions. The main domain is favoriteshield.com and was registered NaN years ago.

Submitted URL: https://favoriteshield.com/collections/fan

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

New, unranked site with a login form; classified as confirmed phishing scam.

Risk Factors
Newly registered domain (<7 days) with credential‑harvesting form
Unranked domain lacking established reputation
Login form on a brand‑agnostic site suggests credential phishing
Domain age information unavailable

Details

Page Title

FAN

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

e-commerce

(40%)

Domain Information

Domain 'favoriteshield.com' uses the commercial generic top-level domain (.com) and has no subdomain. The core label 'favoriteshield' covers 14 characters with 6 vowels and 8 consonants. Tokenizing the label suggests 2 words: favorite, shield. The median word length lands at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://favoriteshield.com/collections/fan

Page Load Overview

16.66s
Total Load Time
80
HTTP Requests
13
Domains
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:4,851 chars
Detector Agreement:67%

Website Classification

Primary Category

e-commerce40% confidence
Type: spa
Method: structural

All Detected Categories

e-commerce
40%

Detected Features

Login Form
Search
Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16151.101.194.137United States
AS54113FASTLY
423.227.38.65Ottawa, Ontario, Canada
AS13335CLOUDFLARENET
434.120.110.54Kansas City, Missouri, United States
AS396982GOOGLE-CLOUD-PLATFORM
434.143.76.2Unknown
4104.26.11.205UnknownUnknown
4104.16.174.226UnknownUnknown
4151.101.66.137UnknownUnknown
4185.146.173.20Sweden
AS13335CLOUDFLARENET
4104.26.10.205United States
AS13335CLOUDFLARENET
4104.16.175.226UnknownUnknown
8017--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T169840CE2803A4573485B31619F43F7A46992F317E2DA4EC0B6CCCB144FA5FEB584266E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Sjo4FoJrc2l4s/Ax2h07Z6vLo4FoJrc2Mbs/Ax2h0EqtvQA2wbzumj+7LfaDhtB9:ScLaNtA2EuU+XyBLd4icHQoMEzHGbJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:406451:MAlABCJAVhiJBJ4qK0UYDGwjMwgsPAQBqYE2OViAIEQggEDEegFjlYFVQGhdawAhggwKnOKEgCEGiIBQAKwJEgF0UV6DMBhI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000fffffdfffff9
Perceptual Hash:cb054b454b95d4fa
Difference Hash:e0f1389b89399189
Wavelet Hash:0000ffc1c1fdddf1
Color Hash:#d2562d

Scan History

Scan history not available

Unable to load historical scan data