Security Scan Report: berrienresa.org

Redirected to:
https://www.berrienresa.org/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 23 IPs in 2 countries across 14 domains to perform 81 HTTP transactions. The main domain is berrienresa.org and was registered 20 years ago.

Submitted URL: https://berrienresa.org

Effective URL:
https://www.berrienresa.org/
Redirected

The Cisco Umbrella rank of the primary domain is #264,123 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 95%

0
Risk Score

Legitimate Berrien Regional Education Service Agency site on a 20-year-old domain; self-branded, no credential or payment forms, no threat-intel, YARA or IDS hits.

Safety Factors (5)
20-year-old established domain with documented physical presence
Self-branding consistent with the domain (no third-party brand impersonation)
No credential or payment collection anywhere on the page
Clean threat intelligence, JavaScript and network IDS results
All third-party script hosts are top-1M ranked, mainstream (Google Fonts/Analytics, Cloudflare, AudioEye, Weglot)
Domain age information unavailable

Details

Page Title

Home - Berrien Regional Education Service Agency (RESA)

Scan Type

public

Domain Name Analysis

The domain 'berrienresa.org' uses the non-profit oriented generic top-level domain (.org) with no subdomain. The registrable portion 'berrienresa' spans 11 characters split between 5 vowels and 6 consonants. Tokenizing the label suggests four words: ber, rien, res, a. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://berrienresa.org

Page Load Overview

3.30s
Total Load Time
3.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:10,539 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning71% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

education learning
71%
government public service
35%
entertainment media
28%
news/blog
20%

Detected Features

Search
Articles
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15104.17.164.123Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.17.67.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.38.142Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
33.174.46.11Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.20.97Google · CDNUnited States
AS15169Google LLC
3192.178.183.95Google · CDNUnited States
AS15169Google LLC
3142.251.13.94Google · CDNUnited States
AS15169Google LLC
323.36.162.215Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
3104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8123--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E7D3C751F5D6186FE12FE295FA703BD41077AA26C6270E24F26F07EA27F1DD82413826

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:PP6GIzxy5iWcOYMmdnTuRKjrkaRoIVimKECEZ98Pc2wCQWx/AZli:36tPIkkaRoKimKECEZ9UcJmGi

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:133423:MwB0BaQUWFJEahgIoohuJAHXAEyAAQmdoWScLMWHV1AwAcmUIRgAKgDxk4ABxUOigIMEuxgGEqUE6UpoqaCkqJQZNEQBzQoD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff0000200000fd
Perceptual Hash:eea4d955cb19384a
Difference Hash:2a6465e7c7071141
Wavelet Hash:ffff01202000f8ff
Color Hash:#862d5b

Scan History

Scan history not available

Unable to load historical scan data