ScanMalware.com

Security Scan Report: saangeltree.org

Site favicon
Submitted: Mar 4, 2026, 10:01:04 AMCompleted: Mar 4, 2026, 10:02:49 AMpubliccompleted
Loading additional data...

Summary

This website contacted 8 IPs in 1 country across 8 domains to perform 57 HTTP transactions. The main domain is saangeltree.org and was registered NaN years ago.

Submitted URL: https://saangeltree.org

The Cisco Umbrella rank of the primary domain is #497,965 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

The site uses disguised password fields and Unicode evasion to harvest credentials; avoid and report.

Risk Factors
Disguised password fields (type=text with password placeholders)
Unicode evasion technique in form fields
Low domain ranking for a site claiming a charitable service
Social‑engineering prompt to upload photos
Credential collection without clear legitimate purpose
Domain age information unavailable

Details

Page Title

Angel Tree

Scan Type

public

Language

🇺🇸

English

(58% confidence)

Category

unknown

(0%)

Domain Information

Within the non-profit oriented generic top-level domain (.org), 'saangeltree.org' is registered without a subdomain. The core label 'saangeltree' covers 11 characters split between five vowels and six consonants. Tokenizing the label suggests four words: s, a, angel, tree. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://saangeltree.org

Page Load Overview

3.51s
Total Load Time
57
HTTP Requests
9
Domains
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:58%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:58%
Script Type:Latin
Text Length:3,461 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8104.16.80.73United States
AS13335Cloudflare, Inc.
7104.26.6.240United States
AS13335Cloudflare, Inc.
7151.101.194.137United States
AS54113Fastly, Inc.
7104.17.24.14United States
AS13335Cloudflare, Inc.
7142.251.143.104United StatesUnknown
7142.251.140.170United StatesUnknown
7104.16.175.226United StatesUnknown
7142.251.143.99United StatesUnknown
578--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15F033A42FBEC0916112211883E712F55957D8D33EA1F8CA47CBF6258AFC6F8A486768D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:18k+jHNlCDIAwDeFhFKYC1fxjQtoRW+pmvDUcU9:18EEev4V19QNvv2

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:39141:bkJCRC2swCgABUAbAiEFOiJRMYEUqBgYAgjWmIUAglgQxhi8AiAEFoOwoARAYmAYBwc4ALCZU00NFKjWUJGaAAqkdgySAFBE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffffffffff
Perceptual Hash:b6494842c3ddb787
Difference Hash:d1113c1ccdbceccc
Wavelet Hash:000087ff7f07077f
Color Hash:#93271f

Other Hashes

Crop Resistant:d1113c1ccdbceccc,e1d1150125191105

Scan History

Scan history not available

Unable to load historical scan data