Security Scan Report: www.doj.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 4 domains to perform 15 HTTP transactions. The main domain is doj.com and was registered 29 years ago.

Submitted URL: https://www.doj.com/

AI Security Verdict

Moderate Risk

Confidence: 55%

5
Risk Score

Independent DOJ news aggregator on the aged but non-official domain doj.com; its 'usdoj.com Department of Justice News' branding mimics the DOJ, though no forms or malware were found.

Risk Factors (2)
Site name/branding mimics the U.S. Department of Justice on a domain that is not the official DOJ domain, creating brand confusion
Domain is unranked in Cisco Umbrella despite claiming association with a major government brand
Safety Factors (4)
No credential, login or payment forms present (0 total forms)
No Indicators of Compromise, no JavaScript YARA malware matches, no network IDS alerts
Well-established domain (registered 1997), no obfuscated JavaScript or credential exfiltration
Page content and disclaimer frame the site as independent reporting aggregating DOJ news rather than an official login/service portal
Domain age information unavailable

Details

Page Title

www.usdoj.com Department of Justice News

Scan Type

public

Domain Name Analysis

The domain 'www.doj.com' uses the commercial generic top-level domain (.com), featuring subdomain 'www'. The core label 'doj' covers 3 characters containing one vowel alongside two consonants. It segments into one word: doj. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.doj.com/

Page Load Overview

1.24s
Total Load Time
741 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:15,394 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence
Type: static
Method: structural

All Detected Categories

corporate
50%
news/blog
40%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
634.111.179.208Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
335.201.95.58Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
154--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E573A37382850F39611383C2DBF5B77466E3825AD0AD1028E6BD137C82CDDDAB8179E6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:ojqCj5KdGMtWdt30tw01YmIlVnALuN3hYEANYx/:g5QGcW33Ew01Ym+JyHYx

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:78108:IwbuBFDCQmBkOQUoUAThmsCmAAAEDwcZTKFBhwjIBAg6JgIGmUGIHBAmoBGNTIREwWQCUziAVEYM9AmAhI2AyBoK0LQYinXA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00cf8bffffffffcf
Perceptual Hash:b81c334f4647673c
Difference Hash:cd32332b311b1b9c
Wavelet Hash:0000009fffd9ffc7
Color Hash:#a0ac53

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data