corporate

English

bSession

XSRF-TOKEN

server-session-bind

svSession

The domain 'incometaxrefund.wixstudio.com' uses the commercial generic top-level domain (.com), featuring subdomain 'incometaxrefund'. The core label 'wixstudio' covers 9 characters with 4 vowels and 5 consonants. Breaking it apart gives 3 words: wi, x, studio. Median word length is 2 characters. 'wi' most often appears in Chinese (Zhuyin). You will also see it in English and Indonesian contexts. Net impression: Chinese (Zhuyin) phrase.

html/b6/67/b66725e3-2726-425a-b3cd-1c6867c4e20e.html.gz

viewport

generator

format-detection

skype_toolbar

https://incometaxrefund.wixstudio.com/feat

twitter:card

twitter:title

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon Technologies Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AT-88-Z


    if (!window.Intl || !window.Intl.Segmenter) {
      (function() {
        var script = document.createElement('script');
        script.src = 'https://static.parastorage.com/unpkg/@formatjs/intl-


    (function () {
      var now = Date.now()
      window.initialTimestamps = {
        initialTimestamp: now,
        initialRequestTimestamp: Math.round(performance.timeOrigin ? performance.timeOr

{"fleetConfig":{"fleetName":"wix-thunderbolt","type":"GA","code":0},"mode":{"qa":false,"enableTestApi":false,"debug":false,"ssrIndicator":false,"ssrOnly":false,"siteAssetsFallback":"enable","versionIn

window.viewerModel = JSON.parse(document.getElementById('wix-essential-viewer-model').textContent)


    window.commonConfig = viewerModel.commonConfig
  

(()=>{"use strict";const e=e=>"string"==typeof e?decodeURIComponent(e).toLowerCase().trimStart():e,o="client-session-bind",t=new Set([o,"client-binding","svSession","smSession","server-session-bind","

(()=>{"use strict";const{ownKeys:e}=Reflect,t=["toString","toLocaleString","valueOf"],r=(r,o)=>{const n=o[r];if(!n)return;let i=!1;try{const e=Object.getOwnPropertyDescriptor(o,r);e&&(i=e.enumerable||


    window.commonConfig = viewerModel.commonConfig

	
  

{"namedChunks":["form-app-checkbox","form-app-wix-ricos-viewer"]}


    var bodyCacheable = true;
    
    var exclusionReason = {"shouldRender":true,"forced":false};
    var ssrInfo = {"cacheExclusionReason":"","renderBodyTime":1392,"renderTimeStamp":1760361182934}



    if (window.ResizeObserver &&
        (!window.PerformanceObserver || !PerformanceObserver.supportedEntryTypes || PerformanceObserver.supportedEntryTypes.indexOf('paint') === -1)) {
        new Re


        const div = document.createElement('div')
        div.style.overflowY = 'scroll'
        div.style.width = '50px'
        div.style.height = '50px'
        div.style.visibility = 'hidden'
   

{"data":{"site":{"metaSiteId":"fe209e87-6f47-428e-87d2-2bd2e35e296c","userId":"a8ade91d-7b94-4b70-bb66-b8726b0d4d5b","siteId":"5949e1cc-e8a2-4597-befd-55782a0d97d8","externalBaseUrl":"https:\/\/income

window.fedops = JSON.parse(document.getElementById('wix-fedops').textContent)

(()=>{"use strict";const e="unknown",r=r=>{const t=(o=r.cache,s=r.varnish,`${o||e},${s||e}`);var o,s;return{caching:t,isCached:t.includes("hit"),...r.microPop?{microPop:r.microPop}:{}}},t=(t,o)=>{cons


		if (
			typeof Promise === 'undefined' ||
			typeof Set === 'undefined' ||
			typeof Object.assign === 'undefined' ||
			typeof Array.from === 'undefined' ||
			typeof Symbol === 'undefined'
		) {


(()=>{"use strict";var e,o,r,a,i,t={},n={};function d(e){var o=n[e];if(void 0!==o)return o.exports;var r=n[e]={id:e,loaded:!1,exports:{}};return t[e].call(r.exports,r,r.exports,d),r.loaded=!0,r.export

(self.webpackJsonp__wix_thunderbolt_app=self.webpackJsonp__wix_thunderbolt_app||[]).push([[592],{17709:function(t,e,n){var i;!function(e){"use strict";var r=function(){},s=e.requestAnimationFrame||e.w

"use strict";(self.webpackJsonp__wix_thunderbolt_app=self.webpackJsonp__wix_thunderbolt_app||[]).push([[8398],{22538:(e,t,i)=>{i.r(t),i.d(t,{STATIC_MEDIA_URL:()=>Xe,alignTypes:()=>d,fileType:()=>v,fit

"use strict";(self.webpackJsonp__wix_thunderbolt_app=self.webpackJsonp__wix_thunderbolt_app||[]).push([[6916],{33842:(e,t,i)=>{i.r(t),i.d(t,{BackgroundParallax:()=>o,BackgroundParallaxZoom:()=>r,Backg


    function _extends(){_extends=Object.assign||function(target){for(var i=1;i<arguments.length;i++){var source=arguments[i];for(var key in source){if(Object.prototype.hasOwnProperty.call(source,key)


    !function(n,e,r,t,o,i,a,c,s){for(var u=s,f=0;f<document.scripts.length;f++)if(document.scripts[f].src.indexOf(i)>-1){u&&"no"===document.scripts[f].getAttribute("data-lazy")&&(u=!1);break}var p=[]


    !function(n){var r={},t=function(){return t=Object.assign||function(n){for(var r,t=1,e=arguments.length;t<e;t++)for(var o in r=arguments[t])Object.prototype.hasOwnProperty.call(r,o)&&(n[o]=r[o]);


	window.resolveExternalsRegistryPromise = null
    const externalRegistryPromise = new Promise((r) => window.resolveExternalsRegistryPromise = r)
    window.resolveExternalsRegistryModule = (name) =>

"use strict";(self.webpackJsonp__wix_thunderbolt_app=self.webpackJsonp__wix_thunderbolt_app||[]).push([[9420],{42243:()=>{window.__imageClientApi__=window.__imageClientApi__||{sdk:{}};const{lodash:e,r

{"siteAssetsTestModuleVersion":"1.334.0","requestUrl":"https:\/\/incometaxrefund.wixstudio.com\/feat","siteFeatures":["appMonitoring","assetsLoader","businessLogger","captcha","clickHandlerRegistrar",

window.viewerModel = JSON.parse(document.getElementById('wix-viewer-model').textContent)

["location","window","site","seo","user"]

window.usedPlatformApis = JSON.parse(document.getElementById('used-platform-apis-data').textContent)

"use strict";(self.webpackJsonp__wix_thunderbolt_app=self.webpackJsonp__wix_thunderbolt_app||[]).push([[4198],{20826:(e,o,r)=>{r.d(o,{O:()=>s});const s=(e,o="")=>o.toLowerCase().includes("forcereduced

"use strict";(self.webpackJsonp__wix_thunderbolt_app=self.webpackJsonp__wix_thunderbolt_app||[]).push([[3169],{11682:(e,t,r)=>{r.r(t),r.d(t,{platformWorkerPromise:()=>i});const{viewerModel:{siteAssets

"use strict";(self.webpackJsonp__wix_thunderbolt_app=self.webpackJsonp__wix_thunderbolt_app||[]).push([[8800],{1643:()=>{!function(e){const n=new Set,a=[],s=e=>{const a=[];n.forEach(n=>{e.canHandleEve

"use strict";(self.webpackJsonp__wix_thunderbolt_app=self.webpackJsonp__wix_thunderbolt_app||[]).push([[507],{48631:(e,t,r)=>{r.d(t,{L:()=>i});var o=r(77748),s=r(26778),a=r(89330);const i=(0,o.Og)([],

"use strict";(self.webpackJsonp__wix_thunderbolt_app=self.webpackJsonp__wix_thunderbolt_app||[]).push([[4017],{16992:(e,i,n)=>{n.d(i,{K:()=>h});var t=n(25196);const r=e=>{let i=!1;if(!/\(iP(hone|ad|od

"use strict";(self.webpackJsonp__wix_thunderbolt_app=self.webpackJsonp__wix_thunderbolt_app||[]).push([[4017,7257],{42466:(e,i,n)=>{n(16992).K.sendBeat(12,"Partially visible",{pageId:window.firstPageI


    window.firstPageId = 'c1dmp'

    if (window.requestCloseWelcomeScreen) {
        window.requestCloseWelcomeScreen()
    }
	if (!window.__browser_deprecation__) {
		window.fedops.phaseStarted('pa


			const wixAdsOffsetHeight = document.getElementById('WIX_ADS')?.offsetHeight || 0;
			const header = document.getElementsByTagName('header')[0];

			let headerOffsetHeight = 0;

			if (header) {
		

{"platform":{"ssrPropsUpdates":[],"ssrStyleUpdates":[],"ssrStructureUpdates":[]},"pages":{"compIdToTypeMap":{"masterPage":"MasterPage","SITE_HEADER":"HeaderContainer","PAGES_CONTAINER":"PagesContainer

Requests	IP Address	Location	AS Autonomous System
4	34.201.196.32	Ashburn, Virginia, United States	AS14618AMAZON-AES
4	34.192.203.197	Ashburn, Virginia, United States	AS14618AMAZON-AES
4	99.86.4.90	United States	AS16509AMAZON-02
4	99.86.4.125	United States	AS16509AMAZON-02
4	34.49.229.81	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
4	99.86.4.79	United States	AS16509AMAZON-02
4	98.91.97.160	Ashburn, Virginia, United States	AS14618AMAZON-AES
4	34.144.206.118	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
4	34.149.206.255	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
4	151.101.66.217	San Francisco, California, United States	AS54113FASTLY
120	30	-	-

Security Scan Report: incometaxrefund.wixstudio.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History