Security Scan Report: www.cheapflightsfares.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 75 IPs in 5 countries across 52 domains to perform 263 HTTP transactions. The main domain is cheapflightsfares.com and was registered 13 years ago.

Submitted URL: https://www.cheapflightsfares.com/deals/cheap-domestic-flights

The Cisco Umbrella rank of the primary domain is #522,474 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

An established (13-year-old) self-branded flight-deals site. Its PIN sign-in/sign-up forms are its own same-origin account system, with no payment fields, no credential exfiltration, and no threat-intel, hunting rule or IDS hits. Only weak signals (redirect hops, promo funnel); low risk.

Risk Factors (2)
Five cross-domain redirect hops recorded in the capture chain (weak signal, common in misconfigured marketing/SSO redirects)
Aggressive promo/subscribe/callback lead-gen funnel (marketing practice, not malicious)
Safety Factors (4)
Domain age ~13 years with matching self-branding
Account PIN login/sign-up is the site's own, on its own domain, with no exfiltration
No payment fields present and no threat-intelligence or malware-detection hits
Legitimacy indicators: physical address, legal pages, review integrations
Domain age information unavailable

Details

Page Title

Domestic Flight Deals: Book Air Tickets Within USA

Scan Type

public

Domain Name Analysis

The domain 'www.cheapflightsfares.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'www'. The second-level label 'cheapflightsfares' is 17 characters long with five vowels and 12 consonants. Splitting it apart reveals three words: cheap, flights, fares. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Off Cheapfiightsfares Best Air Fares for Domestic Travel Subscribe & get up to $10 off. Now! dd @ Roundtrip Oor y O Direct FI A Trustpilot @REVIEWSio © Google © ResellerRatings @ © ESESESESE Fot...

Page Load Overview

7.05s
Total Load Time
4.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:54%
Script:Latin
Direction:ltr

Detection Details

Text Length:19,715 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(98%)🇫🇷fr(1%)🇷🇴ro(1%)🇮🇩id(1%)

Website Classification

Primary Category

healthcare medical68% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
68%
technology software
68%
finance banking
68%
cryptocurrency blockchain
66%
documentation technical
62%

Detected Features

Login Form
Products
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
94104.17.159.55Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
25146.75.122.133Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
1552.222.236.60Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
9157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
83.216.193.110Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
7216.198.54.3Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
6216.239.32.36Google · CDNUnited States
AS15169Google LLC
620.119.121.103Azure · CLOUDDulles, Virginia, United States
AS8075Microsoft Corporation
5157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
5146.75.120.84Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
26375--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18334B75292DE183B013312CA2565676A32EF493BD6234956F7FF47642FCAD82BC0352B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:FkQugi+7GTB0D1RPK7YDMHrP9qZ8GDvhqw82OsbvE+rvGRg+wkp9QYHG3:eQe+7GTBcWHxg+KYHG3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:248257:GjpINdcAgpMUDILlQqFgEswAjBhM0EIZgJkqqdRaBzQQhwjPMgoajYOjKABAgSIgcIYEAihAUCFQMGqOUURnOxgMw4VQSUAa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8f2f0300ffffffff
Perceptual Hash:8303b9fc5c5cace1
Difference Hash:7ecacef8e934380a
Wavelet Hash:8f27030083ffffc0
Color Hash:07400000080

Scan History

Scan history not available

Unable to load historical scan data