Security Scan Report: amanda.ece.utah.edu

Redirected to:
https://interactives-broker.com/spacex/?verified=1&click_id=dbac0gm5i2...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 8 domains to perform 69 HTTP transactions. The main domain is utah.edu and was registered 39 years ago.

Submitted URL: https://amanda.ece.utah.edu/2026/10/17/what-etf-means-and-how-it-works-explained-i1710a11/

Effective URL:
https://interactives-broker.com/spacex/?verified=1&click_id=dbac0gm5i2...
Redirected

The Cisco Umbrella rank of the primary domain is #47,320 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 75%

3
Risk Score

A 4-day-old domain, reached via redirect from a University of Utah lab page, reuses university branding and cloaks different content to different visitors while pulling in a hostile *.top host. No credential or payment forms were found, but the funnel structure and new domain make it unsafe to engage with.

Risk Factors (6)
Final landing domain registered 4 days ago (CRITICAL age category)
University of Utah / AMANDA Lab branding displayed on an unrelated, newly registered domain
Cross-domain redirect from an academic host to a commercial domain carrying click_id / verified tracking parameters
Divergent content served to scanner versus residential visitor (SpaceX 'Automatic Earnings' page vs ETF article)
HIGH-severity IDS alerts for a hostile *.top domain contacted by the page
Auto-generated, future-dated financial content with no verifiable authorship beyond a name string
Safety Factors (5)
Verified form facts show 0 password fields, 0 disguised password fields and 0 payment fields across 3 forms
No JavaScript YARA malware patterns and no native-YARA high-precision hits
No threat-intelligence Indicators of Compromise matched against the page or its resources
No credential exfiltration detected; cross-origin posts go to the page's own landing domain
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 8 to 3
Domain age information unavailable

Details

Page Title

What ETF Means and How It Works Explained – AMANDAother network

Scan Type

public

Domain Name Analysis

Within the sponsored educational top-level domain (.edu), 'amanda.ece.utah.edu' is registered with subdomain 'amanda.ece'. Its registrable label 'utah' stretches across 4 characters holding 2 vowels versus two consonants. Splitting it apart reveals 1 word: utah. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://amanda.ece.utah.edu/2026/10/17/what-etf-means-and-how-it-works-explained-i1710a11/

Page Load Overview

91.31s
Total Load Time
11.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:15,136 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning85% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
85%
news media journalism
67%
corporate business
67%
adult content
62%
government public service
53%

Detected Features

Articles
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15155.98.110.18Salt Lake City, Utah, United States
AS17055University of Utah
6142.251.20.95Google · CDNUnited States
AS15169Google LLC
6192.0.77.2San Francisco, California, United States
AS2635Automattic, Inc
6192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
6104.21.70.98Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6172.67.220.133Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6185.111.111.156Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
6172.67.222.125Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.21.17.38Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6185.111.111.157Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
6910--

Detected Technologies13

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C0A328A2EB690505721386D4B165B36067799155CB0AEFBCFAFC113C9FC8AE800B774E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:lrgZqc1M5dgf0jzJdvhybEbUbc9gGWRV1H/uj2HAkxJjVF:JgbEbUbnG2N6K

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:99020:lhGWIgATJGAxALA0IWoZLpSZyucCQ4KCgkJgcHWSGWFpgEEmgFAiEMhBQFgaASTCABglyIqpYG0hDkEMNAjiAgDAyULWs1wt

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9f82ffcfc3c3c7df
Perceptual Hash:bc1e1e3e1c9cc2c6
Difference Hash:323a303a360f3e36
Wavelet Hash:9e00df8f838387cb
Color Hash:#931f3c

Other Hashes

Crop Resistant:323a303a360f3e36

Scan History

Scan history not available

Unable to load historical scan data