Security Scan Report: cawatercolor.org

Redirected to:
https://cawatercolor.org/?password-protected=login&redirect_to=https%3...
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 3 domains to perform 24 HTTP transactions. The main domain is cawatercolor.org and was registered 1 month ago.

Submitted URL: http://cawatercolor.org/

Effective URL:
https://cawatercolor.org/?password-protected=login&redirect_to=https%3...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

New domain (12 days) with a WordPress password-protected login form. No impersonation or exfiltration detected. Likely legitimate but unproven; use caution.

Risk Factors (3)
Very new domain (12 days old)
Password field without username (credential harvesting pattern)
Login form on a very new domain
Safety Factors (6)
No Indicators of Compromise matches
No hunting rule malware patterns
No network IDS alerts
No cross-origin credential exfiltration
Form action is same-origin
External scripts from reputable CDNs
Domain age information unavailable

Details

Page Title

California Watercolor Association

Scan Type

public

Domain Name Analysis

The domain name 'cawatercolor.org' uses the non-profit oriented generic top-level domain (.org) without a subdomain. Count 12 characters in 'cawatercolor' with five vowels and seven consonants. Word splitting yields 2 words: ca, watercolor. Median word length comes out to six characters. No strong language cues emerged from the frequency lists.

Screenshot

Password O Remember Me

Page Load Overview

0.75s
Total Load Time
182 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:88 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service40% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
40%
documentation technical
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8194.1.147.41Manchester, England, United Kingdom
AS210250K Media Tech Ltd.
4104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4194.1.147.77Manchester, England, United Kingdom
AS210250K Media Tech Ltd.
4104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
245--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T128C164A3C41C5C2F13039AD97185E61CA58E840397568554B6BEC27DAFB3FC5818ED0A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:7czpvLpzVaK1LnkeXEbNlCwwtANtRlTWraJ/JaYEtR+csH1wbDbV/i9Id9rMlbTX:QTcNlCdAD8PAGWMoA812AOTAVVdMLM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5819:xQEYEQgKBCpQIGBkBABMCjQEwMYMAABAQQQAiDEMVWgAALiiGCAIhUAiEA1ALKSggIEj0AAABIgDMAMQFggRoEDASQhAlBAo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7d7f7ffffffff
Perceptual Hash:e6663333334ccccc
Difference Hash:0c28242400000000
Wavelet Hash:0404141c0f0f0f0f
Color Hash:N/A

Other Hashes

Crop Resistant:0c28242400000000

Scan History

Scan history not available

Unable to load historical scan data