There's tension between this law and the 14th, 5th and 1st amendments.

Due process doctrine from the 5th and 14th establish unconstitutional vagueness. A law cannot be so vague as to be impossible to comply with. This law requires websites to enforce a ban based on information they don't have access to. Without explain how they might possibly achieve that aim, it can be considered unconstitutionally vague.

The 1st amendment requires that a law restricting free speech use the least restrictive means possible to achieve it's aim. Due to the vagueness of how to comply on a technical level, the only possible way to comply would be to require global identity verification based on Utah's standards. I don't think that would pass a least restrictive means test.