Security Scan Report: stjudefriends.org

Redirected to:
https://www.stjude.org/
Site favicon
Submitted: May 8, 2026, 3:10:48 AMCompleted: May 8, 2026, 3:12:27 AMpubliccompleted
Loading additional data...

Summary

This website contacted 12 IPs in 2 countries across 12 domains to perform 102 HTTP transactions. The main domain is stjude.org and was registered NaN years ago.

Submitted URL: https://stjudefriends.org

Effective URL: https://www.stjude.org/Redirected

The Cisco Umbrella rank of the primary domain is #222,254 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Site shows strong signs of malware/C2 activity despite being old and legitimate‑looking; avoid and report.

Risk Factors
Critical IDS alerts suggesting malware and command‑and‑control activity
Domain mismatch with a high‑profile brand
Low domain reputation ranking
Domain age information unavailable

Details

Page Title

St. Jude Children's Research Hospital

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

healthcare medical

(57%)

Domain Information

The domain name 'stjudefriends.org' uses the non-profit oriented generic top-level domain (.org) without a subdomain. Its registrable label 'stjudefriends' stretches across 13 characters with four vowels and nine consonants. Breaking it apart gives three words: st, jude, friends. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://stjudefriends.org

Page Load Overview

0.81s
Total Load Time
126
HTTP Requests
15
Domains
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:4,861 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical57% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
57%
news/blog
35%
corporate
35%

Detected Features

Search
Articles
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16159.135.20.253United States
AS53824Liquid Web, L.L.C
10142.251.154.119United States
AS15169Google LLC
103.167.227.54United States
AS16509Amazon.com, Inc.
1023.45.238.90Frankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
1063.140.62.120United States
AS16509Amazon.com, Inc.
10104.18.87.42United States
AS13335Cloudflare, Inc.
1023.52.181.12Frankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
10142.250.154.94United States
AS15169Google LLC
10104.126.37.179Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
103.161.82.28United States
AS16509Amazon.com, Inc.
12612--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CB8418226677B266132B543BAB6A7B88F423C2C3D10024C8F8DDC7555FC9B9B9D53E09

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:GM5/ip6RMMIoopAtK68osZ66mHWJq0ZLf3MtXyW86n7sASwugs2Ro1IVkpDS8X5K:GlpMcWflX2oGYIqx1IBxRVC98TK0KFb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:377490:UjEOIcEACKrcrdYRMCDLBIM50KsQCFJTUSUCEAIYQMJyAAWTGAgErIYnQGkK+gQEIAAVSaDpNKRiFGKCAZRQsVupIEBAlis6

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data