Security Scan Report: onchainsaver.org

Redirected to:
https://onchainsaver.org/#/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 8 domains to perform 42 HTTP transactions. The main domain is onchainsaver.org and was registered 8 months ago.

Submitted URL: https://onchainsaver.org/

Effective URL:
https://onchainsaver.org/#/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 78%

5
Risk Score

New site with heavily obfuscated script; no obvious malicious activity but caution advised.

Risk Factors (2)
Newly registered domain (only 4 days old)
Highly obfuscated JavaScript (potentially hiding malicious behavior)
Safety Factors (4)
No forms or credential collection on the page
No external domains or cross‑origin requests detected
No malicious Indicators of Compromise matches
No hunting rule JavaScript malware patterns detected
Domain age information unavailable

Details

Page Title

Onchainsave

Scan Type

public

Domain Name Analysis

Domain 'onchainsaver.org' uses the non-profit oriented generic top-level domain (.org) while skipping any subdomain. Count 12 characters in 'onchainsaver' split between five vowels and seven consonants. Splitting it apart reveals three words: on, chain, saver. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

‘Oni sStore Small, Bilders & wz ‘ata mingilipasengagennang och aba StS Sait Ui kal analysand nit Vara Wanster anvanas echt ‘Om'dit'valjer knappén‘Awisa alla anvander vi inté cookies (dessa ee ing...

Page Load Overview

4.38s
Total Load Time
612 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:66%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:115 chars
Detector Agreement:100%
Language mismatch: Declared as zh-CN but detected as en

Website Classification

Primary Category

gambling betting72% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
72%
cryptocurrency blockchain
61%
finance banking
51%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
618.66.147.127China
AS15169Google LLC
6142.251.36.100China
AS45090Shenzhen Tencent Computer Systems Company Limited
6142.251.37.3China
AS16509Amazon.com, Inc.
652.53.161.147San Jose, California, United States
AS16509Amazon.com, Inc.
6142.251.141.67ChinaUnknown
6216.58.206.42ChinaUnknown
6142.251.36.110ChinaUnknown
427--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T147545C726300393B64238E90A2BF6F4E3C76E52BDD1746F8A691E530DFE2EB21515319

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Zwxy9d6bwJrApr77er/q5RU2dp8GkdIHEhdpHnl:Zwxyn6bwJrApr7AqbUTGkdISbF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:284360:Yj4qGBoMZYAEQpUBgQzgUA1rdgMJhAZAHEYGBRUA0DwqtQIAoziSyjlTCAEIwQAE4GHKmMMiBcBwFsA0GswAKYAgAmIRhKAa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:183c3c3c3c3c3c18
Perceptual Hash:9bd96464717364d1
Difference Hash:6069697969696969
Wavelet Hash:3c3c3c3c3c3c3c3c
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data