Security Scan: Get your refund faster: Tell IRS to direct de

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4b83e4cd-351a-47fb-b362-30c14767bf34 Domain and IP registration (RDAP)/api/v1/rdap/4b83e4cd-351a-47fb-b362-30c14767bf34 Certificate Transparency/api/v1/ct/irs.gov How often this domain was scanned/api/v1/domain/stats/bother-yvz.info Scan history for this domain/api/v1/domain/history/bother-yvz.info?limit=15

This website contacted 30 IPs in 2 countries across 7 domains to perform 45 HTTP transactions. The main domain is irs.gov and was registered 29 years ago.

Submitted URL: http://bother-yvz.info/

Effective URL:

https://www.irs.gov/refunds/get-your-refund-faster-tell-irs-to-direct-...

Redirected

AI Security Verdict

Low Risk

Confidence: 85%

Risk Score

Redirect from an untrusted domain to a legitimate IRS page; no immediate threats detected.

Safety Factors (3)

Redirect leads to an official government website

Domain is long‑standing and not newly registered

No collection of sensitive data on the site

Domain age information unavailable

Details

Page Title

Get your refund faster: Tell IRS to direct deposit your refund to one, two, or three accounts | Internal Revenue Service

Scan Type

public

Favicon Hash

MMH3: 340998907

MD5: e7e7d53fdbc59f9b23b362f41fad8990

Domain Name Analysis

The domain name 'bother-yvz.info' uses the informational generic top-level domain (.info) without a subdomain. The registrable portion 'bother-yvz' spans 10 characters containing 2 vowels alongside 7 consonants; bonus characters include 1 hyphen. Tokenizing the label suggests four words: bother, y, v, z. Median word length is one character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.71s

Total Load Time

1.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:12,140 chars

Detector Agreement:100%

Website Classification

Primary Category

government public service65% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

government public service

65%

finance banking

64%

adult content

52%

government

48%

technology software

45%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
30	23.48.224.165	Secaucus, New Jersey, United States	AS20940Akamai International B.V.
4	142.250.184.200	United States	AS15169GOOGLE
3	104.20.20.192	United States	AS13335CLOUDFLARENET
3	216.239.34.36	United States	AS15169GOOGLE
2	23.197.140.249	Frankfurt am Main, Hesse, Germany	AS16625AKAMAI-AS
1	68.183.137.60	North Bergen, New Jersey, United States	AS14061DIGITALOCEAN-ASN
1	216.239.32.36	United States	AS15169GOOGLE
1	3.174.46.54	United States	AS16509AMAZON-02
1	216.58.206.72	United States	AS15169GOOGLE
1	23.49.250.165	Edison, New Jersey, United States	AS20940Akamai International B.V.
45	30	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T112B3D793B1E41037017383E579D9FB18DA929153D7092882B1EC0B6E9FABE25AD1770F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:d99VVmLwAutSRT4+NS8x2bROGpuoNCuikCn6eEZFRSfk7eciwnztlOr7IAETO2O4:drfmLV6pZg3fPwwmZ7wnCmtPg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:116144:QwBIGBxyknXXsiMODBHiQMwAnBCgEkEQcIrAkQAGjAAKCAA9JAgrUKMeAZC4g4IBADKsGAAyOwdAgBAoZMnppmNDCBgwgEGM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000fffbfbffffff

Perceptual Hash:b11c1647497ab8f9

Difference Hash:dd0c360b030e0c1c

Wavelet Hash:000083e3e3e7e7ef

Color Hash:#2d5b86

Other Hashes

Crop Resistant:dd0c360b030e0c1c,25d3dddc234cc44c

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: bother-yvz.info