Security Scan Report: thallfear.org

Redirected to:
https://thallfear.org/
Site favicon
Submitted: Sep 28, 2026, 7:50:39 AMCompleted: Sep 28, 2026, 7:51:17 AMpubliccompleted

This website contacted 5 IPs in 3 countries across 3 domains to perform 9 HTTP transactions. The main domain is thallfear.org and was registered 18 years ago.

Submitted URL: http://thallfear.org/

Effective URL:

https://thallfear.org/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

New 124-day-old site republishing NYT-branded sports content from a non-NYT domain, but with zero forms, no credential handling, and no Indicators of Compromise, YARA, or IDS hits — suspicious content sourcing, not phishing.

Risk Factors (2)
Republishes New York Times-branded content on a non-NYT domain without authorization
Unranked in Cisco Umbrella top 1M reputation ranking
Safety Factors (4)
No forms of any kind — no login, credential, or payment collection
No Indicators of Compromise, no YARA/JS malware patterns, no network IDS alerts
All JavaScript served from the site's own domain; no cross-origin credential exfiltration
Site uses its own brand in title/meta (self-branding, not impersonation of another entity's login)
Domain age information unavailable

Details

Page Title

Home | thallfear.org

Scan Type

public

Domain Name Analysis

Domain 'thallfear.org' uses the non-profit oriented generic top-level domain (.org) with no subdomain. The core label 'thallfear' covers 9 characters holding three vowels versus 6 consonants. Breaking it apart gives three words: th, all, fear. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://thallfear.org/

Page Load Overview

1.68s
Total Load Time
96 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:60%
Script:Latin
Direction:ltr

Detection Details

Text Length:117 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism80% confidence
Type: static
Method: ml+structural

All Detected Categories

news media journalism
80%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5109.75.162.6United Kingdom
AS35425Iomart Managed Services Limited
1185.15.59.240United States
AS14907Wikimedia Foundation Inc.
1146.75.121.164Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
1142.251.20.95Google · CDNUnited States
AS15169Google LLC
1142.251.13.94Google · CDNUnited States
AS15169Google LLC
95--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11703116244F60A771683C1C0ADA17F69EF829B5BCCDA4719BABC168C1F46CF3C523199

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:2v+r6Pll2RvRGKl7M3Xa55QMdPDcNAcoy6SeRQfJVvWe/yazHKvjaEewYSYdi:M+r6PP2tYKl7M3q7QM5DcNAp3lRQoe/i

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:40198:gYEBLOTKkAqNjQAiRpARUAgAuAiK6BICBAEE+ciwAApEIjxiYAQzEMdMABMBADkMYVtgCHcWKYETBFDAmQAUGBkhZAwAMqAQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffff9fff9fbf
Perceptual Hash:be414e1e433e613e
Difference Hash:9920361a2e3e2e2e
Wavelet Hash:009f83cf878f8787
Color Hash:#99bf40

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data