Security Scan Report: nicosiaportal.web.app

Submitted: Oct 26, 2025, 12:48:17 PMCompleted: Oct 26, 2025, 12:49:12 PMpubliccompleted
Loading additional data...

Summary

This website contacted 11 IPs in 1 country across 4 domains to perform 24 HTTP transactions. The main domain is nicosiaportal.web.app.

Submitted URL: https://nicosiaportal.web.app/

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Impersonates Cyprus tax authority on a new unranked domain; likely phishing.

Risk Factors
Brand impersonation on an unusual, unranked domain
New/unknown domain age combined with government branding
Lack of official government domain (should be *.gov.cy)
Domain age information unavailable

Details

Page Title

Επιστροφή ΦΠΑ

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

documentation technical

(47%)

Domain Information

The domain 'nicosiaportal.web.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'nicosiaportal'. The second-level label 'web' is 3 characters long split between 1 vowel and 2 consonants. Splitting it apart reveals 1 word: web. Average segment length settles at 3 characters. Most frequently, 'web' shows up in Tagalog. You may catch it in Breton and Sinhala as well.

Screenshot

Security scan screenshot of https://nicosiaportal.web.app/

Page Load Overview

28.34s
Total Load Time
24
HTTP Requests
4
Domains
363 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:630 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical47% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
47%
government public service
42%
technology software
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.16.175.226United States
AS13335CLOUDFLARENET
2104.16.174.226United States
AS13335CLOUDFLARENET
2205.234.175.175United States
AS30081CACHENETWORKS
2188.114.96.3United States
AS13335CLOUDFLARENET
2199.36.158.100United States
AS54113FASTLY
22a06:98c1:3120::3United States
AS13335CLOUDFLARENET
2188.114.97.3United States
AS13335CLOUDFLARENET
22606:4700::6810:afe2United States
AS13335CLOUDFLARENET
22a06:98c1:3121::3United States
AS13335CLOUDFLARENET
22606:4700::6810:aee2United States
AS13335CLOUDFLARENET
2411--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BD32A57AA801DE9F98231DE86039EF3D91CAC65FCA52C8D8B3DCC65017C6CB54A92D85

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:TJRDZuknTXNn33ojb22cMNV2N+UyMFsb+wWgnqzcJm0Mt0hPm/vzCa:j1uknTXB33ojb2UUyCsx/Mt0hPm/v7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11920:fLCkOEwAhgDAAgQVnIhdwQX44RCADgpEoFENVCAmQIGTIBA+AYUhkBmCkkElcAkBJAAG0EcpkLhgAVCKSA4BhAUK4jARuMJJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c0ffffffffff0000
Perceptual Hash:f2f578787270f060
Difference Hash:09304c0c0c8c9181
Wavelet Hash:80ffffefff000000
Color Hash:#b679d2

Scan History

Scan history not available

Unable to load historical scan data