Security Scan Report: ocean-climate.org

Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 2 countries across 3 domains to perform 5 HTTP transactions. The main domain is ocean-climate.org and was registered 12 years ago.

Submitted URL: https://ocean-climate.org/wp-content/themes/futurio/js/pannellum.htm?config=%2F%5C%2Fbsoda.info%2Fu%2F%3Fv%3Dkaroline-leavitt-and-weight-loss-has-she-shared-a-personal-account-of-her-routine_2346f3f9b

AI Security Verdict

Moderate Risk

Confidence: 76%

5
Risk Score

Hijacked WordPress theme file on an established climate site redirects visitors to an external weight-loss clickbait/spam domain via obfuscated JS; IDS flags HIGH. The parent site is likely compromised — do not follow the redirect.

Risk Factors (5)
WordPress system path (/wp-content/themes/...) hosting an injected third-party redirect file
External configuration/redirect target on an unrelated domain (bsoda.info) with a weight-loss/celebrity clickbait slug
Obfuscated eval-style JavaScript flagged HIGH by network IDS
Anti-analysis behavior: right-click/context-menu blocking
Cluster of unrelated spam-looking third-party domains loaded alongside the page
Safety Factors (4)
Domain is well established (registered 2014), so the main site itself is likely a victim of compromise rather than malicious by design
No credential, login or payment form present (0 forms, 0 password fields, 0 payment fields)
No Indicators of Compromise, hunting rule malware or kit-roster matches against the scanned page
Established domain (4382 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

Pannellum

Scan Type

public

Domain Name Analysis

You're looking at domain 'ocean-climate.org' on the non-profit oriented generic top-level domain (.org) without a subdomain. Its registrable label 'ocean-climate' stretches across 13 characters containing 6 vowels alongside 6 consonants; it also includes 1 hyphen. It segments into two words: ocean, climate. Average segment length settles at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Javascript is required to view this panorama. (It could be worse; you could need a plugin.)

Page Load Overview

1.46s
Total Load Time
78 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:51%
Script:Latin
Direction:ltr

Detection Details

Text Length:232 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software63% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
63%
documentation technical
44%
news media journalism
42%
healthcare medical
36%
real estate property
36%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5162.241.253.153Phoenix, Arizona, United States
AS31898Oracle Corporation
0104.21.90.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.21.25.80Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0172.67.137.202Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.21.31.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0172.67.194.85Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
03.174.46.73Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
03.161.82.13Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
0172.66.40.141Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
516--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T192635CBC332129374087A25B54DF050F213A97DFF9836E9869B8E4C84B65D88137FB69

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:uLuLOHXztSIkTsUJcAU3PjDiNcQX1m3x5XkE+STZXE0UM75rb6ojRf:uLuL2zLPEZFmB5XkE+STZXE0UM75rb6W

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:70472:8CYEaYoVIKLqREBEAFUEyAdFEC5ICFINkKQEgGBQUgJAgEkOUkCE1BgEccEutQNAZIQgxaGTCuBJANIULiJAnQmASACDCIAP

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffff
Perceptual Hash:a208882337dddd77
Difference Hash:800c324d4d320c00
Wavelet Hash:00ff00e700ff88ff
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data