ScanMalware.com

Security Scan Report: givetosave.org

Redirected to:
https://support.savethechildren.org/site/Donation2?mfc_pref=T&df_id=11...
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/44175c1a-fdaf-4b3c-937d-9d26c96955a7Domain and IP registration (RDAP)/api/v1/rdap/44175c1a-fdaf-4b3c-937d-9d26c96955a7How often this domain was scanned/api/v1/domain/stats/givetosave.orgScan history for this domain/api/v1/domain/history/givetosave.org?limit=15
This website contacted 100 IPs in 4 countries across 53 domains to perform 389 HTTP transactions. The main domain is givetosave.org and was registered 12 years ago.

Submitted URL: https://givetosave.org/

Effective URL:
https://support.savethechildren.org/site/Donation2?mfc_pref=T&df_id=11...
Redirected

AI Security Verdict

Safe Website

Confidence: 87%

1
Risk Score

Redirect from givetosave.org ends on Save the Children's own support domain serving a standard donation form to the same organization. No impersonation, no credential theft, no threat-intel or malware signals.

Safety Factors (5)
Final destination is the brand owner's own established domain, so the brand claim is legitimate
Donation form posts back to the same organization's domain and uses recognized payment processors
No credential-harvesting fields on the page
Page states the organization is a 501(c)(3) with tax-deductible donations
No Indicators of Compromise, malware patterns, network IDS alerts, or malicious JavaScript behavior detected
Domain age information unavailable

Details

Page Title

DONATE NOW: 10X YOUR IMPACT FOR CHILDREN - Save the Children

Scan Type

public

Domain Name Analysis

The domain 'givetosave.org' uses the non-profit oriented generic top-level domain (.org) with no subdomain. Its registrable label 'givetosave' stretches across 10 characters with five vowels and five consonants. Splitting it apart reveals 3 words: give, to, save. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://givetosave.org/

Page Load Overview

24.34s
Total Load Time
12.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Text Length:87,406 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain37% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
37%
technology software
33%
government public service
33%
documentation technical
30%
healthcare medical
29%

Detected Features

Payment
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9220.9.0.176Azure · CLOUDDes Moines, Iowa, United States
AS8075Microsoft Corporation
33.33.251.168Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
318.172.111.221Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
323.52.181.12Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
399.84.152.121Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
363.32.238.99Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
3144.24.190.49Oracle · CLOUDFrankfurt am Main, Hesse, Germany
AS31898Oracle Corporation
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
3142.250.154.94Google · CDNUnited States
AS15169Google LLC
389100--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FE8429ADF900553119D303E6F5BFD616B67281A8B3048084F5DDC2F413D9EE9963BBA8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:EgkqiJw/mp/3xT0WP+Kg9jrV9KJ1DyzMTFJ1+gmg6VrqrOYT5xmFi9:+/hh+KgjBESzNVrYWFi9

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:371221:oQmxERBOAKCUepABKPUVLIjJOCsKKIKVZAJylqDlBQDZNsLLJaABKkQiDAgg/y1hKFBBBMHCYKsTYkUqDAAAKeEoI1DoIzoQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:008f838fdffbffff
Perceptual Hash:bc394747474f6134
Difference Hash:6337163337273626
Wavelet Hash:0083838b87d3d3ff
Color Hash:#40bf57

Other Hashes

Crop Resistant:6337163337273626,0000000206020000,850f9d99998b81e0,4321414163ce1c4c

Scan History

Scan history not available

Unable to load historical scan data