corporate

English

_ga_1S8JR9B2QT

FCCDCF

The domain 'img.thrfun.com' uses the commercial generic top-level domain (.com), featuring subdomain 'img'. Count 6 characters in 'thrfun' containing one vowel alongside 5 consonants. Tokenizing the label suggests 2 words: thr, fun. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

rv_24

hide

html/51/37/5137e871-e773-40c6-af7e-68cfd8b45a5d.html.gz

require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport, script-src 'report-sample' 'nonce-1l9BwKW4m-DLTqCvKZLNKA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:197:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:165:0

require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport, script-src 'report-sample' 'nonce-7RXJq-kP0jxZdyTL33aQfA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist

require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport, script-src 'report-sample' 'nonce-qJavmRiVqmApU4AmrZkkDA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist

require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport, script-src 'report-sample' 'nonce-huYt4o6NikYEJX7BSV10RA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist

script-src 'report-sample' 'nonce-4Dq-d9kjiSuGOI5TS2FafA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport, script-src 'report-sample' 'nonce-H5y28MzzMdsl8QzrArsm7Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist

require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport, script-src 'report-sample' 'nonce-JZa_BQ7HcjY2msDRPqrF6A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist

require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport, script-src 'report-sample' 'nonce-w8q01s3Y9Mwr8mGlhXRW0Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist

__tcfapiLocator

googlefcInactive

googlefcLoaded

946ad374f92252837b38016111f34401d3c6f8257903c7113af18cb4504385b4

ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

be92bb3a8f6a26bdcdc7e062e740d872ffeef1f29469aa8643ea9d9cee080ea0

33e2c445dd4f45b980c15208c447b27a654f475a9e190312a0c5ea9cf12c14f3

0230153122247d57c6cdb361a587278c8eefe11a2527c09862c8dbc126e7204d

ac0df91711b5cfc6f0bb0b0677131491cb075c1362a2d814cab3c2067ada1e44

3a109812f675acb4b40cd41ea11fb223357d69787ad01570634ebba25aac6f69

This is the home page of My Frugal Christmas. Part of the ThriftyFun family of sites. 

Description

robots

width=device-width,minimum-scale=1,initial-scale=1

viewport

https://img.thrfun.com/images/myfrugalchristmas186x48_2.png

AlK2UR5SkAlj8jjdEc9p3F3xuFYlF6LYjAML3EOqw1g26eCwWPjdmecULvBH5MVPoqKYrOfPhYVL71xAXI1IBQoAAAB8eyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiV2ViVmlld1hSZXF1ZXN0ZWRXaXRoRGVwcmVjYXRpb24iLCJleHBpcnkiOjE3NTgwNjcxOTksImlzU3ViZG9tYWluIjp0cnVlfQ==

Amm8/NmvvQfhwCib6I7ZsmUxiSCfOxWxHayJwyU1r3gRIItzr7bNQid6O8ZYaE1GSQTa69WwhPC9flq/oYkRBwsAAACCeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZXN5bmRpY2F0aW9uLmNvbTo0NDMiLCJmZWF0dXJlIjoiV2ViVmlld1hSZXF1ZXN0ZWRXaXRoRGVwcmVjYXRpb24iLCJleHBpcnkiOjE3NTgwNjcxOTksImlzU3ViZG9tYWluIjp0cnVlfQ==

A9nrunKdU5m96PSN1XsSGr3qOP0lvPFUB2AiAylCDlN5DTl17uDFkpQuHj1AFtgWLxpLaiBZuhrtb2WOu7ofHwEAAACKeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiQUlQcm9tcHRBUElNdWx0aW1vZGFsSW5wdXQiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9

A93bovR+QVXNx2/38qDbmeYYf1wdte9EO37K9eMq3r+541qo0byhYU899BhPB7Cv9QqD7wIbR1B6OAc9kEfYCA4AAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZXN5bmRpY2F0aW9uLmNvbTo0NDMiLCJmZWF0dXJlIjoiQUlQcm9tcHRBUElNdWx0aW1vZGFsSW5wdXQiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9

A1S5fojrAunSDrFbD8OfGmFHdRFZymSM/1ss3G+NEttCLfHkXvlcF6LGLH8Mo5PakLO1sCASXU1/gQf6XGuTBgwAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZXRhZ3NlcnZpY2VzLmNvbTo0NDMiLCJmZWF0dXJlIjoiQUlQcm9tcHRBUElNdWx0aW1vZGFsSW5wdXQiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Amazon Registrar, Inc.

MYFRUGALCHRISTMAS.COM

THRFUN.COM

Abuse

Google LLC

GOOGLE

if(!window.tf)window.tf={};tf.now=Date.now();document.domain="myfrugalchristmas.com";window.tf.js=function(s,a,c){var e=document.createElement("script");e.src=s;e.type="text/javascript";if(a)e.async=1;var d=false;if(c){e.onload=e.onreadystatechange=function(){if(!d){d=true;c();e.onload=e.onreadystatechange=null;};};};document.head.appendChild(e);};window.tf.rdy=function(fn){if(document.readyState=="complete"){return fn();}if(window.addEventListener){window.addEventListener("load",fn,false);}else if(window.attachEvent){window.attachEvent("onload",fn);}else{window.onload=fn;}};window.imgerr=function(o){if(o.src.indexOf("img.thrfun")>0){setTimeout(function(){o.src=o.src.replace("img.thrfun","images.thriftyfun");o.onerror=null;},250);}else{setTimeout(function(){o.src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7";o.onerror=null;},250);}};window.end=function(e){try{e.preventDefault();e.stopPropagation();}catch(x){};return false;};tf.adsf=function(s){var o=[],h=screen.height,w=screen.width;for(var i=0;i<s.length;i++){if(s[i].length==2&&s[i][0]<=w&&s[i][1]<=h)o.push(s[i]);}return o;};tf.js("https://www.googletagmanager.com/gtag/js?id=G-1S8JR9B2QT",true);window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments);}gtag("js",new Date());gtag("config", "G-1S8JR9B2QT");tf.js("https://securepubads.g.doubleclick.net/tag/js/gpt.js",true);window.googletag=window.googletag||{cmd:[]};googletag.cmd.push(function(){googletag.pubads().set("adsense_channel_ids","5318846141").setTargeting("c","None").setTargeting("m","xms").setTargeting("s","xms").setTargeting("t","home");googletag.pubads().set("adsense_channel_ids","5318846141");googletag.defineSlot("/1005423/any_cat_dsk_v1",tf.adsf([[728,90],[336,280],[300,250]]),"dfp_38").setTargeting("x","3096").addService(googletag.pubads());googletag.defineSlot("/1005423/any_cat_dsk_v1",tf.adsf([[728,90],[336,280],[300,250]]),"dfp_40").setTargeting("n","1").setTargeting("x","5657").addService(googletag.pubads());googletag.defineSlot("/1005423/any_cat_dsk_v1",tf.adsf([[728,90],[336,280],[300,250]]),"dfp_42").setTargeting("n","2").setTargeting("x","4911").addService(googletag.pubads());googletag.pubads().enableLazyLoad({fetchMarginPercent:500,renderMarginPercent:200,mobileScaling:2.0});googletag.pubads().addEventListener("slotRenderEnded",function(e){if(e.isEmpty){var i=e.slot.getSlotElementId(),d=document.getElementById(i);if(d){d.parentNode.style.display="none";console.log("Hide Empty Ad",i,e.slot.getAdUnitPath());}}});googletag.enableServices();});tf.js("https://code.jquery.com/jquery-3.6.0.min.js",true,function(){/* lazy() */tf.rdy(function(){if(!window.tf.cat)window.tf.cat={};tf.cat.top=0;tf.cat.hom="home";tf.cat.dat="2024-08-09T08:03:57";$(document).on("click","#rv_21,#rv_22",function(e){$("#rv_20").click();return end(e);});$(document).on("click","#rv_25,#rv_26",function(e){$("#rv_24").click();return end(e);});googletag.cmd.push(function(){googletag.display("dfp_38");});googletag.cmd.push(function(){googletag.display("dfp_40");});googletag.cmd.push(function(){googletag.display("dfp_42");});if(!window.tf.hdr)window.tf.hdr={};window.tf.hdr.scroll=0;window.tf.hdr.scrdir="";window.tf.prt_bsy=false;window.tf.prt=function(){if(tf.prt_bsy){return end(e);}tf.prt_bsy=true;console.log("TF Preparing Print Layout");tf.dovis("img");tf.exvis("ad");tf.exvis("slk");tf.exvis("shf");$("#tf_hdr_ftr,#tf_hdr_arw,#tf_pr_msg").hide();$("#tf_hdr_bkg").show();try{$(".slick-slideshow").slick("unslick");}catch(x){};setTimeout(function(){tf.prt_bsy=false},1000);};if(!window.tf.img)window.tf.img={};window.tf.img.lzd=function(el,cb){$(el).each(function(){var $i=$(this),s=$i.data("src"),z=$i.data("sizes"),c=$i.data("srcset");if(z!="")$i.attr("sizes",z);if(c!="")$i.attr("srcset",c);if(s!="")$i.attr("src",s);});if(cb)cb();};window.tf.img.lzy=function(el,tg){var cb=(tg?function(){tf.img.lzd(tg)}:tf.img.lzd);$(el).each(function(){tf.onvis($(this),cb,9,"img");});};window.tf.vis=[];window.tf.vis_bsy=false;window.tf.ifvis=function(el,cb,mn){var $w=$(window),wt=$w.scrollTop(),wh=$w.height();if(mn&&mn>0&&wt<mn)return false;var $el=$(el);for(var i=0;i<$el.length;i++){if($($el[i]).offset().top<wt+(2*wh)){if(cb)cb($($el[i]));return true;}}return false;};window.tf.scvis=function(e){if(tf.vis_bsy){return end(e);}tf.vis_bsy=true;if(tf.vis.length>0){for(var i=tf.vis.length-1;i>=0;i--){if(tf.ifvis(tf.vis[i][0],tf.vis[i][1],tf.vis[i][2]))tf.vis.splice(i,1);}}setTimeout(function(){tf.vis_bsy=false},250);if(tf.vis.length==0)$(window).off("scroll.tf.scvis");return end(e);};window.tf.onvis=function(el,cb,mn,tg){if(!mn)var mn=0;if(!tg)var tg="default";if(!tf.ifvis(el,cb,mn)){$(window).off("scroll.tf.scvis").on("scroll.tf.scvis",tf.scvis);tf.vis.push([el,cb,mn,tg]);}};window.tf.dovis=function(tg){if(tf.vis.length>0){for(var j=tf.vis.length-1;j>=0;j--){if(tf.vis[j][3]==tg){var $el=$(tf.vis[j][0]),cb=tf.vis[j][1];for(var i=0;i<$el.length;i++){if(cb)cb($($el[i]));}tf.vis.splice(j,1);}}}};window.tf.exvis=function(tg){if(tf.vis.length>0){for(var j=tf.vis.length-1;j>=0;j--){if(tf.vis[j][3]==tg)tf.vis.splice(j,1);}}};$(function(){$(document).on("click",".nxt_prv",function(e){history.back();return end(e);});if(navigator&&navigator.appVersion&&navigator.appVersion.indexOf("Android 4")>0)$("#tf_hdr_arg").css("width","100%");$(window).on("scroll",function(e){var s=$(window).scrollTop(),d="",$div=$("#tf_hdr_bkg");var $tog1=$("#hdr_54"),$tog2=$("#hdr_55");
if(s<tf.hdr.scroll)d="u";else if(s>tf.hdr.scroll)d="d";if(s==0)$div.show().css("position","absolute");else if(d=="d"&&s>72){if(d!=tf.hdr.scrdir)$div.stop(true,false);$div.slideUp("fast");}else if(d=="u"){if(d!=tf.hdr.scrdir)$div.stop(true,false);$div.css("position","fixed").slideDown("fast");}if(s>288){$("#tf_hdr_arw").fadeIn("fast");}else{$("#tf_hdr_arw").fadeOut("fast");$("#tf_hdr_ftr").hide("slide down");}tf.hdr.scroll=s;tf.hdr.scrdir=d;});$(document).on("click",".sw_cr",function(e){if(caches){console.log("Servicer Worker Clear HTML Cache");caches.delete("html");}});$(window).on("keydown",function(e){if(e.metaKey&&e.keyCode==80){tf.prt();}});window.addEventListener("beforeprint",function(e){tf.prt()});if(window.matchMedia)window.matchMedia("print").addListener(function(m){if(m.matches)tf.prt();});tf.img.lzy(".tf_img_lzy");$(document).on("click",".jump,.jumplink",function(e){var $t=$(this),v=$t.attr("href")||$t.data("href")||$t.attr("value");if(v)window.open(v,(e.altKey||e.ctrlKey||e.metaKey?"_blank":"_self"),"location,menubar,status,toolbar");return end(e);});window.tf.esc_cnt=0;window.tf.esc_bsy=false;window.tf.rld_cnt=0;window.tf.rld_bsy=false;$(window).on("keypress",function(e){if(e.which==96){if(tf.esc_bsy)return end(e);tf.esc_cnt++;if(tf.esc_cnt>3){tf.esc_bsy=true;setTimeout(function(){tf.esc_cnt=0;tf.esc_bsy=false},60000);location.href="//www2.thriftyfun.com/_dialogs/info.lasso?c=0&h=home&m=2024-08-09T08%3a03%3a57&s=xms";}}else{tf.esc_cnt=0;}if(e.which==126){if(tf.rld_bsy)return end(e);tf.rld_cnt++;if(tf.rld_cnt>3){tf.rld_bsy=true;setTimeout(function(){tf.rld_cnt=0;tf.rld_bsy=false},60000);location.href="https://wwwsrc.thriftyfun.com/_generator/tf_home.lasso?site=xms";}}else{tf.rld_cnt=0;}});});});});

Requests	IP Address	Location	AS Autonomous System
11	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
10	3.160.150.68Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
10	142.251.14.156Google · CDN	United States	AS15169Google LLC
10	142.251.20.97Google · CDN	United States	AS15169Google LLC
10	65.9.175.58Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
51	5	-	-

Security Scan Report: img.thrfun.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History