Security Scan Report: edrl.berkeley.edu

Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 3 domains to perform 6 HTTP transactions. The main domain is berkeley.edu and was registered 41 years ago.

Submitted URL: https://edrl.berkeley.edu/wp-content/uploads/pannellum.htm?config=%2F%5C%2Fvideo.unkk.top%2Fpanvape2%2FQPjHnBJYdz9

The Cisco Umbrella rank of the primary domain is #29,723 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 78%

5
Risk Score

Legitimate Berkeley page appears compromised: an uploaded Pannellum viewer is configured to load content from a hostile unranked .top domain, corroborated by HIGH IDS alerts and eval usage. Not credential phishing (no forms), but injected spam/malicious content — avoid.

Risk Factors (4)
Compromised WordPress installation: uploaded viewer file redirects content requests to an external untrusted .top domain
Network IDS reports hostile .top domain traffic and string-obfuscation/eval patterns
Page loads JavaScript from several unranked, unrelated third-party hosts
Obfuscated/encoded external config path and right-click blocking
Safety Factors (4)
Established 41-year-old university domain ranked ~29,723
No credential, password or payment forms present
No brand impersonation detected
Established domain (15153 days old) with no strong malicious indicators — risk clamped from 8 to 5
Domain age information unavailable

Details

Page Title

Pannellum

Scan Type

public

Domain Name Analysis

Within the sponsored educational top-level domain (.edu), 'edrl.berkeley.edu' is registered, featuring subdomain 'edrl'. The second-level label 'berkeley' is 8 characters long split between three vowels and 5 consonants. Word splitting yields one word: berkeley. The median word length lands at 8 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://edrl.berkeley.edu/wp-content/uploads/pannellum.htm?config=%2F%5C%2Fvideo.unkk.top%2Fpanvape2%2FQPjHnBJYdz9

Page Load Overview

2.06s
Total Load Time
81 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:51%
Script:Latin
Direction:ltr

Detection Details

Text Length:232 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software63% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
63%
education
45%
documentation technical
44%
news media journalism
42%
healthcare medical
36%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6169.229.226.23Oakland, California, United States
AS25University of California at Berkeley
0172.67.209.156Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
065.8.131.21Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
0188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0146.75.121.91Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
034.128.128.0Google · CDNKansas City, Missouri, United States
AS396982Google LLC
03.228.246.202Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
0104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
610--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DB635CBC332129374087A25B54DF050F203A97DFF9836E9869B8E4D84B65D88127FB69

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:uLuLOHXztSIkTsUJcAU3PjDiNcQX1m3x5XkE+STZXE0UM75rb6ojMf:uLuL2zLPEZFmB5XkE+STZXE0UM75rb6f

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:70476:JwAOJwG0MMYgOZ0lIAQQgAGUFUnIcnKqRhFGgxcIA0QS5GpBDTRJVhhIIaghBABCDBFNqQQSoQ4BGEYCuGEOwV4QCWAIIYCC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffff
Perceptual Hash:a208882337dddd77
Difference Hash:800c324d4d320c00
Wavelet Hash:00ff00e700ff88ff
Color Hash:#931f3c

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data