ScanMalware.com

Security Scan Report: favoriteshield.com

Submitted: Jan 6, 2026, 11:40:45 AMCompleted: Jan 6, 2026, 11:42:55 AMpubliccompleted
Loading additional data...

Summary

This website contacted 17 IPs in 3 countries across 12 domains to perform 85 HTTP transactions. The main domain is favoriteshield.com and was registered NaN years ago.

Submitted URL: https://favoriteshield.com/search

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Confirmed phishing site harvesting credentials; do not trust.

Risk Factors
Newly registered domain (<7 days) – high likelihood of malicious intent
Presence of login/password fields on a brand‑new, low‑reputation domain
Unranked domain with no established reputation
Multiple forms collecting credentials without clear legitimate purpose
Domain age information unavailable

Details

Page Title

Search

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

e-commerce shopping

(52%)

Domain Information

The domain 'favoriteshield.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The registrable portion 'favoriteshield' spans 14 characters with six vowels and 8 consonants. Segmentation suggests two words: favorite, shield. Expect seven characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://favoriteshield.com/search

Page Load Overview

58.48s
Total Load Time
57
HTTP Requests
13
Domains
910 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:2,175 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping52% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

e-commerce shopping
52%
government public service
37%
news media journalism
29%
healthcare medical
26%
finance banking
25%

Detected Features

Login Form
Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9185.146.173.20Sweden
AS13335CLOUDFLARENET
3104.17.24.14United States
AS16509
3104.16.174.226Canada
AS396982
3151.101.194.137Unknown
AS13335
3172.67.142.245UnknownUnknown
334.143.72.2UnknownUnknown
323.227.39.200Ottawa, Ontario, Canada
AS13335CLOUDFLARENET
318.66.102.51UnknownUnknown
3151.101.1.91UnknownUnknown
3172.67.68.221UnknownUnknown
5717--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B8F35B71103260770483149DBB52F6693D359117F25AC840BBED8B582FC2FAB99A3DBE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:ZNo4FoJrcul4s/C2h07Z6vIo4FoJrcuMbs/C2h0EqtvJA2I5h1ZFk4Bb5:ZWvNVkA26F3b5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:161064:UJACkvBNCRiZB6bxikQIRTYAoIAUgQ12FhGMRkCKQslNBJBEB9IIGhMwvJgAtKYIFBtTYUBMkCAgRaXSmlQwsirMgyWIEAoM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000fffffffffffb
Perceptual Hash:cd4349424dd3d9f4
Difference Hash:e0f10a4e44a85773
Wavelet Hash:0000ffe7e7ffa500
Color Hash:#372d86

Other Hashes

Crop Resistant:e0f10a4e44a85773,a08082c2c2020081,2009f2e2f0947371,6141837001010101

Scan History

Scan history not available

Unable to load historical scan data