Security Scan Report: www.deoc.gov.np

Redirected to:
https://www.deoc.gov.np/
Site favicon
Submitted: May 28, 2026, 11:00:44 AMCompleted: May 28, 2026, 11:02:37 AMpubliccompleted
Loading additional data...

Summary

This website contacted 9 IPs in 3 countries across 9 domains to perform 2 HTTP transactions. The main domain is deoc.gov.np.

Submitted URL: http://www.deoc.gov.np

Effective URL: https://www.deoc.gov.np/Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Confirmed scam due to multiple high‑severity JavaScript keylogger detections despite lack of credential forms.

Risk Factors
Unranked domain with unknown registration age
Multiple high‑severity YARA detections of a keylogger
Right‑click blocking (anti‑analysis)
Presence of external CDN scripts (potential exfiltration vectors)
Lack of legitimate brand verification (government site on new domain)
Domain age information unavailable

Details

Page Title

Department of Cooperative

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

government public service

(55%)

Domain Information

You're looking at domain 'www.deoc.gov.np' on the Nepalese country-code top-level domain (.gov.np); it also runs on subdomain 'www'. Its registrable label 'deoc' stretches across 4 characters with 2 vowels and two consonants. Splitting it apart reveals two words: de, oc. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://www.deoc.gov.np

Page Load Overview

20.47s
Total Load Time
138
HTTP Requests
16
Domains
46.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:9,493 chars
Detector Agreement:60%

Website Classification

Primary Category

government public service55% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
55%
government
48%
news/blog
20%

Detected Features

Search
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18103.69.124.99Nepal
AS131341Department of Information Technology, Government of Nepal
15103.138.160.61Nepal
AS139022NEPAL RASTRA BANK
15104.18.0.22United States
AS13335Cloudflare, Inc.
15157.240.0.6Frankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
15104.17.24.14United States
AS13335Cloudflare, Inc.
15142.250.154.97United States
AS15169Google LLC
15142.251.20.113United States
AS15169Google LLC
15104.26.5.65United States
AS13335Cloudflare, Inc.
15103.69.124.8Nepal
AS131341Department of Information Technology, Government of Nepal
1389--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18754E74AE3F03135011BA29667A93D3CD9A5A123C50A4C85B9FC4B996FD3FB06D4F389

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:kTNMAg9GRMeot6wXGnnOVbLp0DE4qTlIllON6zl9fEgWyWDSE8VhmVuk1ioUeiwG:aRMe81iopeb6XkF+W8+k1BAF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:291096:CERIQYBggUrSKqFwF8QMKQKCIfMCwphyygKEYGkYhUKAUDKKQGxXIVIoBLBkwEQwCJAFQCBBMgGykIIEwIKGrFVDYSYAEVAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffe7ffffff
Perceptual Hash:b7081f6e626f4833
Difference Hash:2b39008c0e4c4c4c
Wavelet Hash:00008fe7c3e7a7af
Color Hash:#783a66

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data