Security Scan Report: www.goodfon.ru

Site favicon
Submitted: Sep 20, 2026, 1:59:41 AMCompleted: Sep 20, 2026, 2:01:46 AMpubliccompleted

This website contacted 102 IPs in 9 countries across 72 domains to perform 222 HTTP transactions. The main domain is goodfon.ru and was registered 29 years ago.

Submitted URL: https://www.goodfon.ru

The Cisco Umbrella rank of the primary domain is #397,781 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 85%

1
Risk Score

GoodFon.ru is a long-established self-branded wallpaper site with no credential/payment forms, no malware, and only a generic abuse-reputation tag on a third-party resource IP; the noise is limited to ad-heavy redirects.

Safety Factors
Established 5+ year old domain with stable self-branding
Ranks inside Cisco Umbrella top 1M (#397,781)
Only form is an internal search box — no credential or payment collection
No YARA malware, no JavaScript behavioral sinks, no cross-origin credential submission
Threat-intel hit is reputation-only and belongs to a third-party resource IP, not the scanned domain
Domain age information unavailable

Details

Page Title

Обои на телефон и рабочий стол скачать бесплатно - GoodFon

Scan Type

public

Domain Name Analysis

The domain 'www.goodfon.ru' uses the Russian country-code top-level domain (.ru) with subdomain 'www'. Its registrable label 'goodfon' stretches across 7 characters containing three vowels alongside 4 consonants. Segmentation suggests two words: good, fon. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.goodfon.ru

Page Load Overview

85.19s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:2,200 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
50%
forum
40%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20167.233.10.210Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
25.255.255.77Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
265.109.223.20Helsinki, Uusimaa, Finland
AS24940Hetzner Online GmbH
2142.251.127.97Google · CDNUnited States
AS15169Google LLC
277.88.55.88Yandex · CLOUDRussia
AS13238YANDEX LLC
288.212.202.52Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
287.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
2216.239.34.36Google · CDNUnited States
AS15169Google LLC
237.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
277.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
222102--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F6023DF38164810F24E0F1B8E5F07D0D7856A15EE860D7A7CD74297F91CA6F4A2623AD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Dls5tdOGc2+uTqlzOpMEphXA/ktR+blpS8:BOjOL6XpM8hXA/9fJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:8829:NOKmxANaoF6AAVooBAITCnZACiSB6Ak9CIjnIBEEGICUYhKIgIbBwUUoEHmQIE4JodICCgEBZGiUR40EtEG/CAI0FBiEJgSs

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffc7cfcfc7
Perceptual Hash:b04f380f334f3a33
Difference Hash:57269c1e2dbd9d9d
Wavelet Hash:00f2c3c3c7c7c787
Color Hash:#93821f

Scan History

Scan history not available

Unable to load historical scan data