ScanMalware.com

Security Scan Report: deportation-research.buffett.northwestern.edu

Site favicon
Submitted: Aug 22, 2026, 11:08:15 AMCompleted: Aug 22, 2026, 11:09:07 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/16f5cc21-21e0-4f11-a98e-06c077a1e489Domain and IP registration (RDAP)/api/v1/rdap/16f5cc21-21e0-4f11-a98e-06c077a1e489Certificate Transparency/api/v1/ct/deportation-research.buffett.northwestern.eduHow often this domain was scanned/api/v1/domain/stats/deportation-research.buffett.northwestern.eduScan history for this domain/api/v1/domain/history/deportation-research.buffett.northwestern.edu?limit=15

This website contacted 3 IPs in 1 country across 8 domains to perform 43 HTTP transactions. The main domain is deportation-research.buffett.northwestern.edu and was registered 21 years ago.

Submitted URL: https://deportation-research.buffett.northwestern.edu/us-citizens/

The Cisco Umbrella rank of the primary domain is #32,548 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 96%

1
Risk Score

The site appears legitimate, with an old university domain and no malicious indicators.

Safety Factors
Well‑established university subdomain
No forms collecting credentials or payments
No malicious IoC or YARA detections
Low‑severity informational IDS alert only
Domain age information unavailable

Details

Page Title

US Citizens Detained and Deported: Deportation Research Clinic - Northwestern Universitysecondary capture

Scan Type

public

Domain Name Analysis

The domain name 'deportation-research.buffett.northwestern.edu' uses the sponsored educational top-level domain (.edu) with subdomain 'deportation-research.buffett'. The core label 'northwestern' covers 12 characters with 3 vowels and 9 consonants. It segments into one word: northwestern. Expect 12 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://deportation-research.buffett.northwestern.edu/us-citizens/

Page Load Overview

6.50s
Total Load Time
876 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:46,277 chars
Detector Agreement:100%

Website Classification

Primary Category

education90% confidence
Type: dynamic
Method: structural

All Detected Categories

education
90%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15129.105.136.48Evanston, Illinois, United States
AS103Northwestern University
14192.178.183.97Google · CDNUnited States
AS15169Google LLC
14142.250.154.95Google · CDNUnited States
AS15169Google LLC
433--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AD4184F3956A8D2D4116865214B0B50CD5634A1EC62158A2BCEEA26A8FCDFDBCC9750C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:TnANwwgN540YnbNR//ht/dht/NfYnbNR/qXxEMaAUWUtyY9wmA:TnAKn5Xkpbp1kpJFt16mA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2325:AAAEgIoIAgQEIAAACAgAAAAFIAAAAAAAAAAAACQEAAwBCEEABAgAAgALgEAApEAAAEAAAIIEgAAAAAAUEQQICACAABAAQALA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00dfdfefcfdfc7ff
Perceptual Hash:b04b434367674767
Difference Hash:cd30960c1e1e1e1e
Wavelet Hash:0082dfc7c3c7c3c7
Color Hash:#1f9361

Other Hashes

Crop Resistant:cd30960c1e1e1e1e,31c9cbd4c4cbd5d1

Scan History

Scan history not available

Unable to load historical scan data