There was only one file that loaded from https://secure3.convio.net in a website I visited and it was a googleanalytics tracking script. If they wanted a donation for a worthy cause then where is the other script for that. Dont seem too trustworthy to me.