ScanMalware.com

Security Scan Report: www.studyu.org

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f98dc075-c861-482c-b94b-78ddc2a79aa8Domain and IP registration (RDAP)/api/v1/rdap/f98dc075-c861-482c-b94b-78ddc2a79aa8How often this domain was scanned/api/v1/domain/stats/studyu.orgScan history for this domain/api/v1/domain/history/studyu.org?limit=15
This website contacted 7 IPs in 3 countries across 5 domains to perform 39 HTTP transactions. The main domain is studyu.org and was registered 3 years 4 months ago.

Submitted URL: https://www.studyu.org/en/university-university-of-central-florida

AI Security Verdict

High Risk

Confidence: 68%

7
Risk Score

Legit-looking StudyU university guide with lead form and no credential/payment fields, but its own hosting IP carries an unverified single-source cobaltstrike-2 malware report; warrants caution.

Risk Factors (2)
Content-malware threat-intel match (cobaltstrike-2) on the IP the scanned domain resolves to, single-source and unverified
Six cross-domain redirects observed before the final page
Domain age information unavailable

Details

Page Title

University of Central Florida (UCF) | StudyU

Scan Type

public

Domain Name Analysis

Within the non-profit oriented generic top-level domain (.org), 'www.studyu.org' is registered and includes subdomain 'www'. The registrable portion 'studyu' spans 6 characters holding two vowels versus four consonants. Word splitting yields 2 words: study, u. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.studyu.org/en/university-university-of-central-florida

Page Load Overview

1.13s
Total Load Time
582 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:14,591 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning86% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
86%
documentation technical
78%
government public service
72%
blog personal website
70%
corporate business
61%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
981.28.12.12Amsterdam, North Holland, Netherlands
AS199524G-Core Labs S.A.
5142.251.110.97Google · CDNUnited States
AS15169Google LLC
587.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
5216.239.34.36Google · CDNUnited States
AS15169Google LLC
577.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
587.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
5216.239.32.36Google · CDNUnited States
AS15169Google LLC
397--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16A53C6236900D93902DF46DDA533975566BE434AE6430A88FAF8C3F853AFC9CE633615

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:5twyTRZPS7eJ0NaYJ0QobgZoCoj/3pqRLvSokoe7eMxl8a2IWf:5PWeXpRvcx6u5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:65653:G4CkxQAGEJbCYgOKxgEMkDTiwWIguRAUMACMWsKUAHyyZKGCAQMsCYIOQwNSAAanFYQLggARIDYiaYuFDCQ8hcUEFK0jsCBv

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff1f1f1f1ffe3c3
Perceptual Hash:ecccb293634b9e60
Difference Hash:5127232323200f0f
Wavelet Hash:bd9191b181fbc1c3
Color Hash:#50931f

Other Hashes

Crop Resistant:5127232323200f0f,f1f0f1f586f276e6,4191eaaa8593934d

Scan History

Scan history not available

Unable to load historical scan data