ScanMalware.com

Security Scan Report: www.irs.gov

Site favicon
Submitted: Nov 28, 2025, 10:53:32 AMCompleted: Nov 28, 2025, 10:54:57 AMpubliccompleted
Loading additional data...

Summary

This website contacted 27 IPs in 2 countries across 6 domains to perform 72 HTTP transactions. The main domain is irs.gov and was registered NaN years ago.

Submitted URL: https://www.irs.gov/

The Cisco Umbrella rank of the primary domain is #20,490 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 95%

0
Risk Score

The site is a legitimate IRS website with no security concerns.

Safety Factors
Official United States government domain (irs.gov)
Well‑established domain age (over 28 years)
No malicious Indicators of Compromise matches found
No credential or payment forms present
Cisco Umbrella ranking within top 100 k for a known government site
Domain age information unavailable

Details

Page Title

Internal Revenue Service | An official website of the United States government

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

government public service

(77%)

Domain Information

The domain 'www.irs.gov' uses the United States government-restricted top-level domain (.gov); it also runs on subdomain 'www'. The core label 'irs' covers 3 characters holding one vowel versus two consonants. It segments into one word: irs. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.irs.gov/

Page Load Overview

1.93s
Total Load Time
72
HTTP Requests
6
Domains
2.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:9,049 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service77% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
77%
finance banking
65%
adult content
49%
government
48%
technology software
44%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5723.209.72.203Secaucus, New Jersey, United States
AS20940Akamai International B.V.
4142.250.185.104United States
AS15169GOOGLE
4216.239.34.36United States
AS15169GOOGLE
223.41.252.169Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
223.209.72.196Secaucus, New Jersey, United States
AS20940Akamai International B.V.
2172.66.171.172United States
AS13335CLOUDFLARENET
23.174.46.115United States
AS16509AMAZON-02
2216.239.32.36United States
AS15169GOOGLE
23.174.46.54United States
AS16509AMAZON-02
22606:4700:10::ac42:abacUnited States
AS13335CLOUDFLARENET
7227--

Detected Technologies3

MetaGenerator
100%
Google-AnalyticsvUniversal
100%
Drupalv10
60%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T116C3B552A1F42437013343C9B99AEB29FA93A157DB061841B2FD0BAE1FDBD219D5730E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Qf1SSAAPKCnomWikCr/6eEZFRSfk7eciwnztlOr7IAETOeOnzUuaHZ5Phio1SCy6:Q1Su6pz63fu0rlZfKEUUkMDkJmAPh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:124322:NdKKaKsZamQMFDUSzAeEqCAUng+AEQBMwARFivRSUCoQWbyQ+KaEAL0ASEKYAhBwYYIBHUADDGggZbNWE/TAighsppxPIlER

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00000000ffffffff
Perceptual Hash:a23067df9d3f2281
Difference Hash:3f8989bd60ede7e7
Wavelet Hash:00000000ffffffff
Color Hash:#3e1f93

Other Hashes

Crop Resistant:3f8989bd60ede7e7,fcce8ab262248cc9,3abab2b2b2b6b232,2626898d8d99adb5

Scan History

Scan history not available

Unable to load historical scan data