The domain name 'www.ird.govt.nz' uses the New Zealand country-code top-level domain (.govt.nz) and includes subdomain 'www'. Its registrable label 'ird' stretches across 3 characters with 1 vowel and 2 consonants. Tokenizing the label suggests 2 words: i, rd. Average segment length settles at 1.5 characters. No strong language cues emerged from the frequency lists.

html/25/23/25236810-153d-41c0-80f0-c40d412d4707_fallback.html.gz

Inland Revenue - Te Tari Taake

html/25/23/25236810-153d-41c0-80f0-c40d412d4707.html.gz

default-src 'self' 'unsafe-inline'  'nonce-2LMxUZMFUxXRdyKTu4yZNQpDzaw=';form-action 'self' data: *.irdnz.localhost *.irdnz.net *.microsoftonline.com *.irdnz *.ird.govt.nz *.qualtrics.com ;script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.newrelic.com *.irdnz *.ird.govt.nz *.irdnz.localhost *.irdnz.net *.nr-data.net *.coveo.com *.zscalertwo.net *.windows.net *.google-analytics.com *.googletagmanager.com *.gstatic.com *.google.com *.hotjar.com *.qualtrics.com *.googleapis.com *.cloudflare.com *.youtube.com *.vimeo.com *.clarity.ms  'nonce-2LMxUZMFUxXRdyKTu4yZNQpDzaw=';img-src 'self' data: *.googletagmanager.com *.google-analytics.com staticcdn.co.nz *.staticcdn.co.nz *.sharepoint.com australiaeast1-mediap.svc.ms australiasoutheast1-mediap.svc.ms *.newrelic.com *.nr-data.net *.coveo.com *.zscalertwo.net *.windows.net *.ird.govt.nz *.gstatic.com *.google.com *.google.com.au *.google.co.nz *.doubleclick.net *.cloudfront.net *.qualtrics.com *.office.net *.ytimg.com *.clarity.ms *.c.bing.com c.bing.com ;connect-src 'self' data: *.qualtrics.com *.google-analytics.com *.nr-data.net *.zscalertwo.net *.coveo.com *.doubleclick.net *.signify.nz *.ird.govt.nz *.clarity.ms *.google.com; upgrade-insecure-requests; block-all-mixed-content ;frame-src 'self' data: *.ird.govt.nz *.irdnz *.irdnz.net *.irdnz.localhost staticcdn.co.nz *.staticcdn.co.nz *.google.com *.youtube.com *.cloudfront.net *.googletagmanager.com *.hotjar.com *.slideshare.net *.qualtrics.com *.zscalertwo.net *.coveo.com *.openstreetmap.org *.vimeo.com *.sharepoint.com ;font-src 'self' data: *.typekit.net *.gstatic.com *.ird.govt.nz *.coveo.com ;style-src 'self' 'unsafe-inline' data: *.typekit.net *.coveo.com *.zscalertwo.net *.googleapis.com *.ird.govt.nz *.googletagmanager.com ;style-src-elem 'self' 'unsafe-inline' data: *.typekit.net *.zscalertwo.net *.coveo.com *.googleapis.com *.ird.govt.nz *.googletagmanager.com ;style-src-attr 'self' 'unsafe-inline' ;frame-ancestors 'none' ;media-src 'self' data: *.sharepoint.com *.microsoftonline.com *.youtube.com  ;object-src 'none' ;manifest-src 'self'

appId=cid-v1:0900009a-205e-44ec-ae9a-de4eb24153af

inline; filename="logo-landscape-black.png"

inline; filename="logo-landscape-black.svg"

inline; filename="NZGovt-logo-Expanded-3x.png"

inline; filename="Homepage banner background V2.jpg"

inline; filename="covid-red-resized-3.jpg"

inline; filename="IRD0124-ECE-FamilyBoost-web-banners-1000x480.jpg"

inline; filename="Desktop avoid scams bait.jpg"

appId=cid-v1:24dd0b7c-7995-45d6-b3b6-925639dc2d30

default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com; upgrade-insecure-requests; block-all-mixed-content;

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:106:0

appId=cid-v1:7d42d046-dcef-4ece-9958-25d0ee39f9a0

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Requests	IP Address	Location	AS Autonomous System
18	13.226.244.14	United States	AS16509AMAZON-02
6	13.226.244.28	United States	AS16509AMAZON-02
6	20.250.198.32	Zurich, Zurich, Switzerland	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
6	13.226.244.50	United States	AS16509AMAZON-02
6	216.58.212.136	United States	AS15169GOOGLE
6	2.16.168.125	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
6	13.107.213.44	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
6	142.250.184.232	United States	AS15169GOOGLE
6	172.64.149.224	United States	AS13335CLOUDFLARENET
6	184.24.77.144	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
138	21	-	-

Security Scan Report: www.ird.govt.nz

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History