Potentially Malicious Activity
hrblocks.download
"It directly distributes an executable file (HRBlock_Deluxe_2025_HD-State.exe) under the guise of legitimate HR Block software, indicating a malware distribution attempt. The domain hrblocks.download uses a high-risk TLD and is designed to impersonate the HR Block brand to trick users into downloading malicious content."
Note: This finding is based on scans of specific URLs on the domain, not necessarily the root domain itself.
URLert analyzed recent scan activity for hrblocks.download and found 1 result.
| Status | Target URL | Time |
|---|---|---|
| Malicious | https://hrbdeluxe2025.hrblocks.download/HRBlock_Deluxe_20... | 4w ago |
Historical and current IP address mappings for this domain.
| IP Address / Infrastructure | Status | Subdomains | Last Seen |
|---|---|---|---|
CLOUDFLARENET - Cloudflare, Inc. (AS13335) | Active | hrblocks.download | Today |
CLOUDFLARENET - Cloudflare, Inc. (AS13335) | Active | hrblocks.download | Today |
Run a real-time investigation to understand the specific threats on any URL from this domain.
This assessment is based on automated analysis and may not be definitive.
Always verify independently before taking action.
Real experiences from people who visited this domain