Security Scan Report: favoriteshield.com

Submitted: Jan 9, 2026, 3:18:24 PMCompleted: Jan 9, 2026, 3:19:51 PMpubliccompleted
Loading additional data...

Summary

This website contacted 12 IPs in 3 countries across 12 domains to perform 117 HTTP transactions. The main domain is favoriteshield.com and was registered NaN years ago.

Submitted URL: https://favoriteshield.com/collections/liga-mx

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Confirmed phishing scam; newly registered site harvesting user credentials.

Risk Factors
Critical domain age (<7 days)
Credential harvesting login form on a newly registered domain
Unranked, low‑reputation domain
Domain age information unavailable

Details

Page Title

LIGA MX

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

e-commerce

(40%)

Domain Information

The domain 'favoriteshield.com' uses the commercial generic top-level domain (.com). Count 14 characters in 'favoriteshield' split between 6 vowels and 8 consonants. It segments into 2 words: favorite, shield. Median word length is seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://favoriteshield.com/collections/liga-mx

Page Load Overview

9.80s
Total Load Time
81
HTTP Requests
13
Domains
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:4,839 chars
Detector Agreement:67%

Website Classification

Primary Category

e-commerce40% confidence
Type: spa
Method: structural

All Detected Categories

e-commerce
40%

Detected Features

Login Form
Search
Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15104.16.175.226United States
6104.17.25.14Canada
6151.101.65.91Sweden
6104.26.11.205Unknown
634.120.110.54Kansas City, Missouri, United States
AS396982GOOGLE-CLOUD-PLATFORM
6185.146.173.20Sweden
AS13335CLOUDFLARENET
618.66.102.106UnknownUnknown
6151.101.130.137United States
AS54113FASTLY
6172.67.142.245UnknownUnknown
634.143.74.2UnknownUnknown
8112--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15B841AE294365837081B3495AB52FAB42D91F313E2DB4EC0B7DCC7444F91FA798528AE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:tso4FoJrc2Khwc12h07Z6vdo4FoJrc2ruwc12h0EqtveA2wHDZui7TwVrk4ub0:tHZwxLA2BVr0b0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:376953:IQlBwsAd3oELGBGieEAYMgAIuaRAuwCRW5KAQiyQCWFgDYyC6AjAgFADwmEBLQSAAJAhMcQHkacSkqSBG6wBlzAiRcMTuAQA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffc9fffff9
Perceptual Hash:e90647496996d6f8
Difference Hash:e0f1289393939b93
Wavelet Hash:0000ffc1c1f9f7e9
Color Hash:#d2a32d

Scan History

Scan history not available

Unable to load historical scan data