Security Scan Report: sa.www4.irs.gov

Redirected to: https://www.irs.gov/help/tools

Submitted: Mar 20, 2026, 5:21:21 PMCompleted: Mar 20, 2026, 5:22:53 PMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 1 country across 4 domains to perform 35 HTTP transactions. The main domain is irs.gov and was registered NaN years ago.

Submitted URL: https://sa.www4.irs.gov

Effective URL: https://www.irs.gov/help/toolsRedirected

The Cisco Umbrella rank of the primary domain is #20,490 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 96%

0
Risk Score

The site is a legitimate IRS subdomain with no malicious activity detected.

Safety Factors
Official government brand and consistent meta tags
Well‑established domain with long registration history
No credential‑harvesting or payment collection forms
No suspicious redirects or cross‑origin credential submissions
No malicious Indicators of Compromise or malware signatures
Domain age information unavailable

Details

Page Title

Tools | Internal Revenue Service

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

government public service

(65%)

Domain Information

You're looking at domain 'sa.www4.irs.gov' on the United States government-restricted top-level domain (.gov) with subdomain 'sa.www4'. The second-level label 'irs' is 3 characters long containing 1 vowel alongside 2 consonants. Breaking it apart gives one word: irs. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sa.www4.irs.gov

Page Load Overview

3.40s
Total Load Time
41
HTTP Requests
7
Domains
1.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:10,156 chars
Detector Agreement:80%

Website Classification

Primary Category

government public service65% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
65%
finance banking
52%
government
48%
technology software
44%
adult content
37%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1523.62.33.166Elk Grove Village, Illinois, United States
AS20940Akamai International B.V.
13104.20.20.192United States
13172.217.16.200United States
AS15169Google LLC
413--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17CB3D853A2F42433017343DAB999F729DAA2A193C7092942B2FC0B5E5FD7E256D4730E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:IGEb+ZAtLSOoM43bSP/2UnOTPuxrCJIkzMTvSEZFRSfk7eciwnztlqr7IAETOeo1:Cb+ov1/iTQpj2H6+8tkiCmxPm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:116563:JVqOQoAABMRhUQEABBPBLDFAFBMAB1SghvBFCMChO0oSQCQLIkABxJD6yQcoEkIE8YA3ihQATAOYXMEBAQiIw0MCgChmgxmq

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffffffffff
Perceptual Hash:b6461613697ae9c9
Difference Hash:9d6c000e1b1e2c1c
Wavelet Hash:0000ffc3abe787c7
Color Hash:#783a41

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data