ScanMalware.com

Security Scan Report: ghdx.healthdata.org

Site favicon
Submitted: Jul 30, 2026, 11:20:09 AMCompleted: Jul 30, 2026, 11:21:51 AMpubliccompleted

Summary

This website contacted 2 IPs in 1 country across 2 domains to perform 2 HTTP transactions. The main domain is ghdx.healthdata.org and was registered NaN years ago.

Submitted URL: https://ghdx.healthdata.org/organizations/gavi-vaccine-alliance

The Cisco Umbrella rank of the primary domain is #500,653 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 80%

3
Risk Score

The page is a legitimate health data site with no credential collection, but it links to a flagged malicious domain and has a low reputation ranking, warranting moderate risk.

Risk Factors
External link to a known malicious domain (gavi.org)
Low Cisco Umbrella ranking (rank #500,653) for a site claiming a well‑known brand name
Safety Factors
Domain age > 5 years (well‑established)
No JavaScript malware matches or behavioral threats
No credential or payment collection forms
Self‑branding, not impersonating another entity
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

Gavi, the Vaccine Alliance | GHDx

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

healthcare medical

(40%)

Domain Information

The domain 'ghdx.healthdata.org' uses the non-profit oriented generic top-level domain (.org), featuring subdomain 'ghdx'. The core label 'healthdata' covers 10 characters containing 4 vowels alongside six consonants. Word splitting yields 2 words: health, data. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ghdx.healthdata.org/organizations/gavi-vaccine-alliance

Page Load Overview

7.01s
Total Load Time
107
HTTP Requests
6
Domains
1.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:4,869 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical40% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

healthcare medical
40%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
54142.251.110.95Google · CDNUnited States
AS15169Google LLC
53104.20.3.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1072--

Page Statistics

107
Requests
6
Unique Domains
1.5 MB
Total Size

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D553E712F6A4087B011395C67474F31BE692F157EF560900F3EE4B9A9BDAE8C9C5332A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:UUOQtpCeX9QMLzZ7B8KHO4WkWAWU4SBsGp9MJmAFV/Ms/+0w3pThac5FqUlOUSzo:UUOQtpCeX9QMLzZ7B8KHO4WkWAWU4SB9

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:61009:LUmECjCEIRMoIhAsOyBFgBBUAIiAAQKFWqWwVAZEASwF0lnAV2AeEIllVaIWEAax0ZgnMwqEBFsSDFUhCEOhRMQAmGZMikAk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffff8181ff
Perceptual Hash:bc96667996691616
Difference Hash:3d22303b30030380
Wavelet Hash:00839f9f8f8181ff
Color Hash:#bf408c

Other Hashes

Crop Resistant:3d22313b30030380,522dcdcccccd2d12,9018644448009080

Scan History

Scan history not available

Unable to load historical scan data