Security Scan Report: dopomoeys.com

Redirected to:
https://dopomoeys.com/en/home-en/
Site favicon
Submitted: Sep 22, 2026, 8:47:27 PMCompleted: Sep 22, 2026, 8:48:14 PMpubliccompleted

This website contacted 21 IPs in 2 countries across 11 domains to perform 146 HTTP transactions. The main domain is dopomoeys.com and was registered 18 years ago.

Submitted URL: https://dopomoeys.com

Effective URL:

https://dopomoeys.com/en/home-en/
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Legitimate-looking Cambodian education site, but a CRITICAL EtherHiding exfiltration IDS alert, a blockchain RPC connection, and a multi-source malware-flagged external resource (xaz2.com) indicate the page is compromised or serving malware.

Risk Factors
CRITICAL ET MALWARE EtherHiding Exfil M2 IDS alert indicating network-trojan activity
Blockchain RPC connection reported alongside an EtherHiding exfiltration alert
Malware-flagged third-party script/resource (xaz2.com) loaded by the page
Primary domain itself carries a malware (RAT) threat-intel indicator
Domain age information unavailable

Details

Page Title

Dopomoeys – Ensure policy and research development with high quality and on time to provide to leaders, policy developers, planners, and legislators

Scan Type

public

Domain Name Analysis

You're looking at domain 'dopomoeys.com' on the commercial generic top-level domain (.com) without a subdomain. The second-level label 'dopomoeys' is 9 characters long holding 4 vowels versus five consonants. It segments into 3 words: dopo, moe, ys. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dopomoeys.com

Page Load Overview

11.84s
Total Load Time
6.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:15,229 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service81% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
81%
news media journalism
48%
education learning
46%
adult content
33%
news/blog
20%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
26198.23.51.224United States
AS14555LiquidNet US LLC
638.58.176.104Draper, Utah, United States
AS26042FiberState, LLC
6104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.156.119Google · CDNUnited States
AS15169Google LLC
6142.251.14.120Google · CDNUnited States
AS15169Google LLC
6172.217.115.4Google · CDNUnited States
AS15169Google LLC
6172.217.116.4Google · CDNUnited States
AS15169Google LLC
6172.217.112.4Google · CDNUnited States
AS15169Google LLC
6172.217.119.4Google · CDNUnited States
AS15169Google LLC
14621--

Detected Technologies6

WordPressv7.1.1
100%
JQueryv3.7.1
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T160D20A319059058D3F1ED759F2E2722CD6889956C512BBBBB0BD211CD9789F700A3D2F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:Fv9fNwMKDfNQ62Ho/xE6x4aUg/5j/nfnDylcWfilp1r/ZdSZUaAhDkWzN:J9i5Q62I/xE6x4g5bn/4iljZdypaRh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:30778:oCEg8IRBXk4AImFBJgQQERIEwRwEMWN9ClAAWFAAtrxViAo6V0gQjwgIBpoABhAoAgAnmyiAEEFBQGAJwZiOgBTCgwwAQqIg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:df8383c38187c79f
Perceptual Hash:bc699cc1cb929a69
Difference Hash:3b070f2f2b2f0d2e
Wavelet Hash:cb81c7838387879f
Color Hash:#784f3a

Scan History

Scan history not available

Unable to load historical scan data