ScanMalware.com

Security Scan Report: www.hrblock.com

Submitted: Oct 26, 2025, 8:01:35 PMCompleted: Oct 26, 2025, 8:04:28 PMpubliccompleted
Loading additional data...

Summary

This website contacted 162 IPs in 4 countries across 28 domains to perform 180 HTTP transactions. The main domain is hrblock.com and was registered NaN years ago.

Submitted URL: https://www.hrblock.com/tax-center/income/other-income/what-is-adjusted-gross-income-and-taxable-income/?srsltid=AfmBOooFFSf-uQOgtpUVli_4pwDvC67aH-AsGlTzKYHHaRZcTCQHMK0o

AI Security Verdict

Safe Website

Confidence: 95%

1
Risk Score

Legitimate H&R Block page with a standard login form; no security concerns detected.

Safety Factors
Established brand (H&R Block)
Secure HTTPS connection
No payment fields or suspicious redirects
Domain age information unavailable

Details

Page Title

Understanding Your Adjusted Gross Income (AGI) | H&R Block®

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

other

(37%)

Domain Information

The domain 'www.hrblock.com' uses the commercial generic top-level domain (.com), featuring subdomain 'www'. The core label 'hrblock' covers 7 characters with 1 vowel and 6 consonants. Tokenizing the label suggests 2 words: hr, block. Median word length comes out to 3.5 characters. 'hr' is most common in Estonian usage. Usage also turns up in Danish and Icelandic contexts.

Screenshot

Security scan screenshot of https://www.hrblock.com/tax-center/income/other-income/what-is-adjusted-gross-income-and-taxable-income/?srsltid=AfmBOooFFSf-uQOgtpUVli_4pwDvC67aH-AsGlTzKYHHaRZcTCQHMK0o

Page Load Overview

5.29s
Total Load Time
180
HTTP Requests
28
Domains
3.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:14,456 chars
Detector Agreement:100%

Website Classification

Primary Category

other37% confidence
Type: spa
Method: ml+structural

All Detected Categories

other
37%
news/blog
35%
corporate
35%

Detected Features

Login Form
Articles
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6523.46.69.225Schiphol, North Holland, Netherlands
AS16625AKAMAI-AS
4513.226.244.28United States
AS16509AMAZON-02
19142.250.185.142United States
AS15169GOOGLE
923.36.163.27Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
9142.250.186.142United States
AS15169GOOGLE
823.52.181.12Frankfurt am Main, Hesse, Germany
AS16625AKAMAI-AS
7104.18.87.42United States
AS13335CLOUDFLARENET
4142.250.185.195United States
AS15169GOOGLE
3142.250.186.170United States
AS15169GOOGLE
215.197.170.101United States
AS16509AMAZON-02
180162--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17E744B96B5F14234429F63549B3B2300B827B5ABBE56C9D9F08C83345F886B71C976CE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:r+WBlGYaTQ8t3x74nXt0bDCAtMe1fY2VBd7ddSk2srlSuH3RCT0ebPyznYZ2WmBH:r+oZyQdAtM47SuRCT0ebEnYZ2g9gpz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:345865:B1JCeEAINABAHFAVUIAUC0VUqgBiSIhITGUcCZYjAWgDCUEYGAPAZi8cQioQAcA/AiTaBwCyCC6qhDCADOQAgDCgOrAAKQaI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffc7c7f3ffcffd
Perceptual Hash:f5155b6565313b24
Difference Hash:f6001d1606171c19
Wavelet Hash:00ffc7c2c3c3c789
Color Hash:#b679d2

Other Hashes

Crop Resistant:f6001d1606171c19,0101010101010101,4135d9c989996581

Scan History

Scan history not available

Unable to load historical scan data