Security Scan Report: www.goodfon.ru

Site favicon
Submitted: Oct 2, 2026, 6:46:23 AMCompleted: Oct 2, 2026, 6:47:20 AMpubliccompleted

This website contacted 13 IPs in 4 countries across 9 domains to perform 85 HTTP transactions. The main domain is goodfon.ru and was registered 21 years ago.

Submitted URL: https://www.goodfon.ru

The Cisco Umbrella rank of the primary domain is #397,781 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 93%

0
Risk Score

Long-established (21-year-old) wallpaper site operating under its own GoodFon brand. No credential or payment forms, no Indicators of Compromise, no malware or IDS hits — normal legitimate content site.

Safety Factors (6)
21-year-old established domain (registered 2005)
Self-branding consistent across title, meta tags, and footer — no third-party brand claim
No credential, login, or payment form; sole form is an on-site search box
No Indicators of Compromise, no YARA hits, no IDS alerts, no malicious JavaScript behavior
Cross-origin requests limited to analytics/CDN hosts (Google Analytics, Yandex Metrica, Googletagmanager) — normal for any website
Ranked #397,781 in Cisco Umbrella top 1M
Domain age information unavailable

Details

Page Title

Обои на телефон и рабочий стол скачать бесплатно - GoodFon

Scan Type

public

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'www.goodfon.ru' is registered with subdomain 'www'. Its registrable label 'goodfon' stretches across 7 characters containing 3 vowels alongside 4 consonants. Tokenizing the label suggests two words: good, fon. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.goodfon.ru

Page Load Overview

2.01s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:2,161 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
50%
forum
40%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13167.233.10.210Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
65.255.255.77Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
665.109.223.20Helsinki, Uusimaa, Finland
AS24940Hetzner Online GmbH
6142.251.20.97Google · CDNUnited States
AS15169Google LLC
688.212.202.52Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
687.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
6216.239.34.36Google · CDNUnited States
AS15169Google LLC
637.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
677.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
677.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
8513--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19D4332F38045E83B1A82F5F4E1307B0EB017625EDE466681DAF856AD72CD8E0AF7215D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:bJOLj8GqSp25tghC5Y8mGg0f1tqjmNRVeiFH/Vdjt/:b7GfqghC2/HGHXt/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:55977:IAqegEIiSQBkCSYeiwBVIQgFnhAkkEInQwEJggzokUuAmEIeBfadd0YseMQAVJQSAQBkWTFgAUAULgGkRJIAiJBJHBMBMuEA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffc7c7e7c7
Perceptual Hash:b24d0f33334f3833
Difference Hash:57269c368d9d0d8d
Wavelet Hash:00f2c3c3c787c7c7
Color Hash:#d22d7a

Scan History

Scan history not available

Unable to load historical scan data