Security Scan Report: okesense.oketheme.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 3 domains to perform 21 HTTP transactions. The main domain is oketheme.com and was registered 14 years ago.

Submitted URL: https://okesense.oketheme.com/wp-includes/sodium_compat/sodium_compatt4ff1a

AI Security Verdict

High Risk

Confidence: 68%

7
Risk Score

Compromised WordPress install: a /wp-includes/ file with a randomized name is flagged as amadey/wipbot malware. Page itself is a 404 with no forms, but the URL serves malware — avoid.

Risk Factors (3)
Indicators of Compromise: URL reported as amadey/wipbot malware on a WordPress system path (wp-includes)
Malware placed in WordPress core directory with obfuscated random filename suffix
Likely compromised third-party WordPress theme/plugin installation being abused for malware hosting
Domain age information unavailable

Details

Page Title

Page not found | OkeSense – Premium Adsense Theme

Scan Type

public

Domain Name Analysis

Domain 'okesense.oketheme.com' uses the commercial generic top-level domain (.com), featuring subdomain 'okesense'. Its registrable label 'oketheme' stretches across 8 characters containing 4 vowels alongside four consonants. Segmentation suggests 2 words: oke, theme. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://okesense.oketheme.com/wp-includes/sodium_compat/sodium_compatt4ff1a

Page Load Overview

8.09s
Total Load Time
272 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,412 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical52% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
52%
adult content
47%
social media network
41%
real estate property
35%
blog personal website
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6172.67.151.69Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5103.160.37.195Indonesia
AS141584PT Jetorbit Teknologi Indonesia
5188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.21.0.160Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
214--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BDF20BB295AC10367B1E839F28A5B20CE765A724DF055B62B3F5A294C745FF300B721E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:CL4DZdypa93yeB4D4olJ+b0vLBnR7ax/S:CL6ypVM4DzlRnR7ax/S

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:37067:KmQagoAPxUQHKjAJGlyEGSMTJANYag9DEAKqoQFxWBoQwk5qAALUIk5AXcEyASBVAAqoAACCEjTgUQZDCoiJDhVIEiS4CDNE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3c3ffcfcfcfcfcf
Perceptual Hash:b16765613967c632
Difference Hash:9696189e96969e96
Wavelet Hash:c2c3c6c6c7c3c3c3
Color Hash:#3a5078

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data