Security Scan Report: favoritexpress.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 21 IPs in 4 countries across 20 domains to perform 133 HTTP transactions. The main domain is favoritexpress.ru and was registered 10 years ago.

Submitted URL: https://favoritexpress.ru

AI Security Verdict

Low Risk

Confidence: 87%

2
Risk Score

Established Russian freight company with contact forms only and no credential, payment, malware, or threat-intel signals. Minor concern is an unusually long redirect chain.

Risk Factors (1)
Unusually long redirect chain (12 redirects with 11 cross-domain hops) with no clear explanation in the scan data
Safety Factors (5)
Domain age is well-established, reducing phishing likelihood
No credential or payment forms; only standard contact/request fields
No brand impersonation detected; self-branding matches the domain
No Indicators of Compromise, hunting rule malware, IDS alerts, or JavaScript credential exfiltration
External scripts are common third-party services such as Yandex, Rutube, and Jivo
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'favoritexpress.ru' is registered. The core label 'favoritexpress' covers 14 characters split between five vowels and 9 consonants. Tokenizing the label suggests 2 words: favorite, xpress. Average segment length settles at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://favoritexpress.ru

Page Load Overview

80.10s
Total Load Time
18.2 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:10,099 chars
Detector Agreement:67%

Website Classification

Primary Category

government public service73% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
73%
corporate business
51%
adult content
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1392.53.96.132St Petersburg, St.-Petersburg, Russia
AS9123Jsc timeweb
65.101.71.73Yerevan, Yerevan, Armenia
AS201589edgeam LLC
677.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
6109.238.90.239Russia
AS201706Servicepipe LLC
687.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
65.252.32.145Slovakia
AS59796StormWall s.r.o.
6178.248.233.148Russia
AS51115HLL LLC
687.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
689.248.230.8Russia
AS207353Ruform LLC
6142.251.14.97Google · CDNUnited States
AS15169Google LLC
13321--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C1D361B1A1F11433025282C5AA646B0ABFA1D47FDA4F671432EC5AE85FE7CE1CD1B11D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:b5S8NaO643b7GQWBRElBqpMzMFV3GDSVhC+nwr:lND643b7GQWBulUpMzMvnwr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:132822:AtQhILEA2yZihQ9OGoQRFBUqQCBoASAAmgKCaFAoERIBAWJihb1RgSCQKWPFkFKRiCTJGQykLASgQUBgSTaE5Ao2nHIBIgAu

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000003c3c180000
Perceptual Hash:8a7732cdcd3232e2
Difference Hash:2105317171710d31
Wavelet Hash:010181fdfdbddf01
Color Hash:#8d53ac

Scan History

Scan history not available

Unable to load historical scan data