Security Scan Report: easytaxrelief.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 45 IPs in 3 countries across 31 domains to perform 154 HTTP transactions. The main domain is easytaxrelief.com and was registered 20 years ago.

Submitted URL: https://easytaxrelief.com

AI Security Verdict

Confirmed Scam

Confidence: 94%

10
Risk Score

Established tax-relief site appears compromised: page code matches ClickFix/FakeCAPTCHA clipboard-execution kits, 16 CRITICAL EtherHiding exfiltration alerts and Safe Browsing unwanted-software flag. Do not visit or follow any on-screen verification instructions.

Risk Factors (5)
Page code matches known ClickFix/FakeCAPTCHA clipboard-execution kits (fake 'verify you are human' overlay instructing Win+R, Win+X, Win+E or macOS Terminal paste)
EtherHiding malware exfiltration alerts firing repeatedly on blockchain RPC traffic from the page's scripts
Primary domain flagged as containing ClickFix malware; Google Safe Browsing Unwanted Software detection
Multiple unranked third-party script hosts on the page are independently reported as Clearfake / macOS infostealer distribution infrastructure
Obfuscated dynamically generated JavaScript (eval/Function constructor) alongside a network sink, consistent with an injected loader on what appears to be a legitimate WordPress site
Domain age information unavailable

Details

Page Title

Easy Tax Relief – Real Tax Solutions for Real People

Scan Type

public

Domain Name Analysis

You're looking at domain 'easytaxrelief.com' on the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'easytaxrelief' spans 13 characters containing six vowels alongside 7 consonants. Splitting it apart reveals 3 words: easy, tax, relief. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

> > EASY TAX RELIEF Find out if you qualify for the FRESH START INITIATIVE Fill out this form to get started : The IRS Settled $178 Million in 2022 Approximately, how much does the IRS or state...

Page Load Overview

23.77s
Total Load Time
4.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:8,535 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service36% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
36%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22151.101.130.159Fastly · CDNUnited States
AS54113Fastly, Inc.
3142.250.154.95Google · CDNUnited States
AS15169Google LLC
3192.178.183.97Google · CDNUnited States
AS15169Google LLC
3151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
3184.197.143.123Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
334.111.29.236Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3172.67.130.228Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
352.222.214.83Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.16.249.249Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15445--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1096517E32792073B23C14AE0C175BB2F15A4D817D121897AFFAD5ADDEB18AD04274BB1

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:lRsozUg8fid1Hz3FTit7WbWzrzXzidzHrMU+oya22QubU4Agi0Duf0O0MvhySPa+:dH7T3FTPuSLRsa2TBN2afLvAIalg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1497220:pGMSZCEhjFiAQBkARgHHBJAIEWEPBwBEJw0AqrswNNWjxkxJjiEJAEEMAIYNEAxEUQFMwgCUBEyPIMpDYhixAIUyiJwwjglo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018001818000000
Perceptual Hash:99666699cc663399
Difference Hash:00304cb2b24c3000
Wavelet Hash:02430018d8c0fffc
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data