ScanMalware.com

Security Scan Report: thriftytraveler.com

Submitted: Oct 27, 2025, 12:27:19 AMCompleted: Oct 27, 2025, 12:30:47 AMpubliccompleted
Loading additional data...

Summary

This website contacted 176 IPs in 6 countries across 56 domains to perform 163 HTTP transactions. The main domain is thriftytraveler.com and was registered NaN years ago.

Submitted URL: https://thriftytraveler.com/news/airlines/delta-riyadh-air-partnership/

AI Security Verdict

Safe Website

Confidence: 92%

1
Risk Score

Legitimate travel news site with no apparent security threats.

Safety Factors
Long‑standing domain registration date (1997‑02‑07)
Absence of credential‑harvesting or payment collection mechanisms
Content appears to be informational (news article) rather than a phishing lure
Domain age information unavailable

Details

Page Title

Delta Will Partner with New Saudi Airline, Fly Nonstop to Riyadh

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

finance banking

(69%)

Domain Information

The domain 'thriftytraveler.com' uses the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'thriftytraveler' is 15 characters long split between four vowels and 11 consonants. Segmentation suggests two words: thrifty, traveler. Average segment length settles at 7.5 characters. 'thrifty' most often appears in English. You will also see it in Chinese (Pinyin) and Bengali contexts.

Screenshot

Security scan screenshot of https://thriftytraveler.com/news/airlines/delta-riyadh-air-partnership/

Page Load Overview

5.92s
Total Load Time
163
HTTP Requests
56
Domains
2.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:13,287 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking69% confidence
Type: webapp
Method: ml+structural

All Detected Categories

finance banking
69%
travel tourism
41%
news/blog
35%
government public service
27%
forum
25%

Detected Features

Search
Articles
Comments
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
46172.67.72.225United States
AS13335CLOUDFLARENET
952.222.136.72United States
AS16509AMAZON-02
552.242.103.142Boydton, Virginia, United States
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
5142.250.184.200United States
AS15169GOOGLE
4172.64.151.42United States
AS13335CLOUDFLARENET
4146.75.121.140Frankfurt am Main, Hesse, Germany
AS54113FASTLY
4142.250.185.66United States
AS15169GOOGLE
3142.250.185.132United States
AS15169GOOGLE
3142.250.185.67United States
AS15169GOOGLE
3185.111.111.157Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
163176--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12D546DB6337103BDA082D3D9FB35F958BA0E10E6EA72C4B6C3AD1D0A55C3452DD6289D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:haMArmK76D1u7qsAO2x3+IU+iCW0Yc+1B58Pw1rJ++OAolvTYSN2Da8A8cDrug/v:h+rQcIW04RuYl9hPbfmy5I3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:279404:RACjA6BwIQidRKrQnE4SQjJSAIKARBkiIRdA3CFBEhEIMAMCVKcBBgobCCApFWzAMUihgAwBH8gCJgMAoUBQOoAUtLmdJYDg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0400397e7e360001
Perceptual Hash:cf69299696929669
Difference Hash:7c3343e864643313
Wavelet Hash:0000b9ffffb78981
Color Hash:#79d2b8

Other Hashes

Crop Resistant:7c3343e864643313,8ec8c9cf8dcdcbdb

Scan History

Scan history not available

Unable to load historical scan data