Security Scan Report: savefrom.net

Redirected to:
https://en1.savefrom.net/19wr/
Site favicon
Submitted: Aug 29, 2026, 10:39:59 PMCompleted: Aug 29, 2026, 10:41:27 PMpubliccompleted

Summary

This website contacted 8 IPs in 1 country across 7 domains to perform 2 HTTP transactions. The main domain is en1.savefrom.net and was registered 14 years ago.

Submitted URL: https://savefrom.net

Effective URL: https://en1.savefrom.net/19wr/Redirected

The Cisco Umbrella rank of the primary domain is #61,649 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 68%

4
Risk Score

The site appears legitimate with self‑branding and no credential collection, but an outbound link to a flagged domain and low legitimacy signals warrant caution.

Risk Factors
Outbound link to a domain flagged as a known attacker (generic abuse reputation)
Low legitimacy score (5/100) indicating limited business credibility
Safety Factors
Established domain age and ranking (top 100 K)
Self‑branding aligns with domain
No malicious JavaScript or network alerts
Domain age information unavailable

Details

Page Title

Free Online Video Downloader - SaveFrom.net

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

entertainment media

(72%)

Domain Information

The domain name 'savefrom.net' uses the network infrastructure generic top-level domain (.net) while skipping any subdomain. The second-level label 'savefrom' is 8 characters long holding three vowels versus 5 consonants. Splitting it apart reveals 2 words: save, from. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://savefrom.net

Page Load Overview

2.70s
Total Load Time
80
HTTP Requests
7
Domains
2.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:6,353 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media72% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
72%
social media network
50%
technology software
47%
government public service
39%
download file sharing
38%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10151.101.130.217Fastly · CDNUnited States
AS54113Fastly, Inc.
10192.178.183.97Google · CDNUnited States
AS15169Google LLC
10172.66.159.118Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10216.239.34.36Google · CDNUnited States
AS15169Google LLC
10192.178.183.138Google · CDNUnited States
AS15169Google LLC
10216.239.32.36Google · CDNUnited States
AS15169Google LLC
10151.101.66.217Fastly · CDNUnited States
AS54113Fastly, Inc.
10104.20.20.139Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
808--

Page Statistics

80
Requests
6
Unique Domains
1.2 MB
Total Size

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E531ED1F91144808862587447DCFB209D5299117B248FC869DEF624C9EE2FD2F9F32DB

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:yYhlYJcGqvemo8ryoWcGqvJoroNyorSnSryocGqvJt45g:phlMEllyBEJ8FRnYyoEJt46

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1704:AAAUBBAAAAAAwCQIAkEAAAAAAIAAAAACAAIwAAgQIRAAAAAAAAIAIACJBgAQAAAAAAACAAAAgAAAKAgEAAAAAJAJAQWCAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:97e3c3e7c3c383ff
Perceptual Hash:b4c79c3c9a3c9a2c
Difference Hash:2e4e160e062e1600
Wavelet Hash:80c2c3c3c3c3c3ff
Color Hash:#bf9940

Other Hashes

Crop Resistant:2e4e160e062e1600

Scan History

Scan history not available

Unable to load historical scan data