ScanMalware.com

Security Scan Report: www.collegecompare.com

Submitted: Oct 11, 2025, 11:13:49 PMCompleted: Oct 11, 2025, 11:15:50 PMpubliccompleted
Loading additional data...

Summary

This website contacted 29 IPs in 2 countries across 5 domains to perform 97 HTTP transactions. The main domain is collegecompare.com and was registered NaN years ago.

Submitted URL: https://www.collegecompare.com/northwestern-university

AI Security Verdict

Low Risk

Confidence: 85%

3
Risk Score

Site appears legitimate but the hidden password field and login form warrant caution.

Risk Factors
Hidden password field could be used for credential harvesting
Login form on a site that is not the official university domain
Safety Factors
Domain age > 20 years (well‑established)
No malicious Indicators of Compromise detected
No payment or financial data collection fields
Domain not hosted on IPFS or cloud storage
Domain age information unavailable

Details

Page Title

Northwestern University, Evanston, Illinois - College Overview

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

education learning

(89%)

Domain Information

Domain 'www.collegecompare.com' uses the commercial generic top-level domain (.com) and includes subdomain 'www'. Count 14 characters in 'collegecompare' split between 6 vowels and 8 consonants. It segments into 2 words: college, compare. Expect 7 characters per word on average. Most frequently, 'college' shows up in English. You will also see it in Chinese (Pinyin) and Italian contexts.

Screenshot

Security scan screenshot of https://www.collegecompare.com/northwestern-university

Page Load Overview

30.15s
Total Load Time
97
HTTP Requests
5
Domains
3.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:29,383 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning89% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
89%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13142.250.185.232United States
AS15169GOOGLE
354.231.166.240Ashburn, Virginia, United States
AS16509AMAZON-02
3172.217.18.14United States
AS15169GOOGLE
3188.114.97.3United States
AS13335CLOUDFLARENET
316.15.201.69Ashburn, Virginia, United States
AS14618AMAZON-AES
352.217.234.80Ashburn, Virginia, United States
AS16509AMAZON-02
3188.114.96.3United States
AS13335CLOUDFLARENET
352.217.113.224Ashburn, Virginia, United States
AS16509AMAZON-02
352.217.115.24Ashburn, Virginia, United States
AS16509AMAZON-02
3216.239.32.36United States
AS15169GOOGLE
9729--

Detected Technologies6

X-UA-Compatible
100%
PasswordField
100%
Google-AnalyticsvUniversal
100%
Google Analytics
55%
jQuery
20%
Select2
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10A14BE252A5EDC3310875ACFD463A36632EF6E74DB624809F2BF43E5438BD58DA23056

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:K1p5cNjNhjA+Ha8TxGq2qlllHFFFFeZSj1Uj0I3XoTIx//:9HfllleedIim/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:193330:vEMCJQAakFaaxDOAAqACAJkBRAAQCDhUxKgAtYkyCEihggMAAA2l3gEIFASEgTAboCDjHAwQUWyGBE4AFCK9NIHCBARAQyhU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:10ffe7e3c7999ffd
Perceptual Hash:be64591d603f6b14
Difference Hash:332f2f2f253b2b3b
Wavelet Hash:00c7c783c7819dfd
Color Hash:#b787c5

Other Hashes

Crop Resistant:332f2f2f253b2b3b,4db2b2b2b2b2b24d,13177b2b8b663317,92a468a1a0e0232b

Scan History

Scan history not available

Unable to load historical scan data