Security Scan Report: favoriteshield.com

Redirected to: https://favoriteshield.com/collections/new-releases-25-26/products/atletico-nacional-25-26-hombre-version-jugador?variant=52820443857264

Submitted: Jan 5, 2026, 11:09:24 PMCompleted: Jan 5, 2026, 11:10:37 PMpubliccompleted
Loading additional data...

Summary

This website contacted 20 IPs in 4 countries across 15 domains to perform 147 HTTP transactions. The main domain is favoriteshield.com and was registered NaN years ago.

Submitted URL: https://favoriteshield.com/collections/new-releases-25-26/products/atletico-nacional-25-26-hombre-version-jugador

Effective URL: https://favoriteshield.com/collections/new-releases-25-26/products/atletico-nacional-25-26-hombre-version-jugador?variant=52820443857264Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Confirmed phishing site harvesting credentials on a brand‑impersonating, brand‑new domain.

Risk Factors
Newly registered domain (<7 days) with credential collection
Login form harvesting email/password
Impersonation of a well‑known football club on a brand‑new, unranked domain
Domain age information unavailable

Details

Page Title

ATLETICO NACIONAL PLAYER VERSION 25/26 MEN

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

e-commerce

(50%)

Domain Information

Domain 'favoriteshield.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Count 14 characters in 'favoriteshield' containing 6 vowels alongside 8 consonants. Segmentation suggests 2 words: favorite, shield. Expect 7 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://favoriteshield.com/collections/new-releases-25-26/products/atletico-nacional-25-26-hombre-version-jugador

Page Load Overview

4.56s
Total Load Time
97
HTTP Requests
18
Domains
2.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:5,203 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce50% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce
50%
entertainment media
49%
gambling betting
44%
government public service
43%
cryptocurrency blockchain
36%

Detected Features

Login Form
Search
Products
OG: product
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2118.66.102.53United States
AS16509AMAZON-02
4104.21.27.152United States
AS13335CLOUDFLARENET
4142.251.208.10United States
AS15169GOOGLE
4151.101.2.137Germany
4151.101.194.137United States
418.66.102.51Unknown
423.227.38.65Ottawa, Ontario, Canada
AS13335CLOUDFLARENET
423.227.38.32Ottawa, Ontario, Canada
AS13335CLOUDFLARENET
4104.18.0.22United States
AS13335CLOUDFLARENET
434.143.79.2UnknownUnknown
9720--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T118743BA150369433045720AAB74BB96C3DA4A347F295C880F6EC8F442F91FEFA95397D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:SPo4FoJrctl4s/s2h07Z6vSo4FoJrctMbs/s2h0EqtvdA2fGdLBFwZu3k4jbf:SgGLYAA2WB+Ytbf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:348937:CkGShgdCJQydOnChECwAwoQDMUL2GBYAAWwBzPgCgQPkINZgAURQTYUhQgwgBTDRSTeAV6eAbhWqPA0JjIqQOkMwE6PIAKAJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffefefffff
Perceptual Hash:f94e461349c196fa
Difference Hash:e0f16c5313589492
Wavelet Hash:0000ffa9818fcffb
Color Hash:#53acab

Scan History

Scan history not available

Unable to load historical scan data