Security Scan Report: sms.rhea.scoolaid.net

Redirected to:
https://sms.rhea.scoolaid.net/bin/subscriber/subscriberInfo?sId=0
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 3 countries across 4 domains to perform 72 HTTP transactions. The main domain is scoolaid.net and was registered 23 years ago.

Submitted URL: https://sms.rhea.scoolaid.net

Effective URL:
https://sms.rhea.scoolaid.net/bin/subscriber/subscriberInfo?sId=0
Redirected

The Cisco Umbrella rank of the primary domain is #240,702 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Established 23-year-old domain hosting its own subscriber-database login form on the same origin. No threat-intel, hunting rule, IDS, impersonation or exfiltration signals. Ordinary account login; low risk.

Safety Factors (4)
23-year-old established domain with minimal age risk
Login form posts to the site's own /bin/login endpoint (same origin)
No threat-intelligence matches, hunting-rule hits, IDS alerts, or phishing indicators
No payment fields, no disguised password fields, no cross-origin credential handling
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain 'sms.rhea.scoolaid.net' on the network infrastructure generic top-level domain (.net) and includes subdomain 'sms.rhea'. The core label 'scoolaid' covers 8 characters containing 4 vowels alongside 4 consonants. Breaking it apart gives 3 words: s, cool, aid. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sms.rhea.scoolaid.net

Page Load Overview

7.10s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Text Length:112 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service30% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
30%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12199.202.101.6Canada
AS22652Videotron Ltee
12142.251.127.95Google · CDNUnited States
AS15169Google LLC
12104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1223.53.40.209Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
1223.53.40.42Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
1223.53.40.57Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
726--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11B021E1AAC97C856C01118E495BEDA19E864F11B8313CD48BAEC92F54FA9FDD0C37B98

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:XPDaFPsuFnifxebDVxrQLlWbMqCaT9fOsnJzvIObpyJvQaRbhu3cS2:fePsuFnifxebDVxrofqCW9fOsnJzvIOO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:8997:KKABBGHAoDEiIDZkIga4NHRIzQAFYIATF0Egg8gKIHSQIoAoJQEHJlsABBJkOSJuRigAIdwAqFBwFwjCgElDYFA92FQGMCnu

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffefffffff0000
Perceptual Hash:b1332a2e6e6e2e2a
Difference Hash:459c8e8e80800100
Wavelet Hash:00efe7ffff0e0000
Color Hash:#8c40bf

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data