Security Scan Report: sofavpn.com

Submitted: Mar 31, 2026, 11:34:07 AMCompleted: Mar 31, 2026, 11:36:22 AMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 3 countries across 3 domains to perform 74 HTTP transactions. The main domain is sofavpn.com and was registered NaN years ago.

Submitted URL: https://sofavpn.com

The Cisco Umbrella rank of the primary domain is #305,149 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 85%

7
Risk Score

The site pretends to be Sofascore, uses many redirects and a low‑ranked domain; no credential collection but likely malicious impersonation.

Risk Factors
Brand impersonation (domain mismatch with claimed Sofascore brand)
Low domain ranking for a site claiming a major brand
Excessive number of redirects (30)
Domain age information unavailable

Details

Page Title

Football Live Scores, Fixtures & Odds | Sofascore | Championship League, Premier League

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

The domain name 'sofavpn.com' uses the commercial generic top-level domain (.com) without a subdomain. Count 7 characters in 'sofavpn' holding 2 vowels versus five consonants. Splitting it apart reveals 4 words: s, of, a, vpn. Average segment length settles at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sofavpn.com

Page Load Overview

37.90s
Total Load Time
611
HTTP Requests
175
Domains
3.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:5,146 chars
Detector Agreement:80%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
205142.250.154.157Netherlands
203151.101.131.52United States
AS54113Fastly, Inc.
203146.75.123.52Frankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
6113--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T134C46D2B461D1B7A4987C3CDF94FBE6DB3F9504ABF151401FCDC9B2C2385A42A22B919

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:In2TKniLO9dByYIFCaHZhCU5ptEMMRDs5UIvsIzL666B0mvBiOleNQY997B:In2Ep4YEZhCmpw66B0mvBVMCYd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:562805:oEDAPAAUMWP0AIwjOsZIPFCR2KAQhxBGAFQgHZ4KGIIb5OSfgCQABHpcxSgQcBCPIQYJBSGKGkSQEGEAGGDC6QEQQ3QZi/gA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff
Perceptual Hash:cb1d4d4d4c4d4d4d
Difference Hash:f248c0e9c5c9c9c9
Wavelet Hash:003c7c7c707c7c7c
Color Hash:#8fd279

Scan History

Scan history not available

Unable to load historical scan data