Security Scan Report: oclobrowser.fun

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 26 HTTP transactions. The main domain is oclobrowser.fun and was registered 1 week ago.

Submitted URL: https://oclobrowser.fun/app/guide

AI Security Verdict

Low Risk

Confidence: 60%

3
Risk Score

Self-branded guide for a week-old crypto compute project. No forms, malware, or impersonation found; caution warranted only because the operator, token, and domain are all unestablished.

Risk Factors (3)
Domain registered 8 days ago with no established reputation or operator identity
Promotes a token ($OCLO) and prepaid USDC slot reservations despite no track record
Outbound link to solscan.io, which a single unverified community report tags as phishing (weak, uncorroborated signal)
Safety Factors (6)
No credential, login, or payment forms present on the page
No JavaScript malware patterns, no kit-roster or high-precision YARA hits
No cross-origin form submissions and no credential exfiltration detected
Extensive, coherent technical documentation (Solana program IDs, slot lifecycle) rather than a lure or credential capture page
IP 'known attacker' reputation match belongs to a third-party Render address, not this site's own hosting (216.198.79.1, Amazon)
Verdict names no specific threat, and DOM analysis found no password field (real or disguised) or payment field and no other hard signal — elevated score unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

Guide | OCLO

Scan Type

public

Domain Name Analysis

Domain 'oclobrowser.fun' uses the .fun top-level domain and has no subdomain. The registrable portion 'oclobrowser' spans 11 characters holding four vowels versus 7 consonants. Tokenizing the label suggests three words: o, clo, browser. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://oclobrowser.fun/app/guide

Page Load Overview

0.84s
Total Load Time
822 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:6,549 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking59% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
59%
documentation technical
47%
government public service
35%
technology software
29%
cryptocurrency blockchain
26%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8216.198.79.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
664.29.17.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
6216.24.57.16United States
AS397273Render
6216.24.57.18United States
AS397273Render
264--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D053C5A6A108DD2AC8271DCD903E3E7B10C9F0ABC7945CA49ADDCE690386CB53767DC5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:4jL8xu+53FNK6pUemihMOq4VR7IZC1jmNtZKoW9n4meAQ+iX+Yop9n4meAQ+K:553OuaOq4VR7IZgNe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:61525:AkAQeAohQQIxDgYJK8w0VsnBBKJIZgDBIWpTIFOoECAFDBCAQgkIFVHaAIwNSMIAAAQCL1cIKAQAINAaYpIG8g6MUicMPZwS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ff7fffffffffdf
Perceptual Hash:a02b2e7a6a6a7a6a
Difference Hash:99b6aa9a9fbd9fbe
Wavelet Hash:00034f4f4f5f4f47
Color Hash:#bc79d2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data