Security Report: porezna-uprava-f0415.firebaseapp.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/437929d8-50dd-4237-a316-56673cb6bc94 Domain and IP registration (RDAP)/api/v1/rdap/437929d8-50dd-4237-a316-56673cb6bc94How often this domain was scanned/api/v1/domain/stats/porezna-uprava-f0415.firebaseapp.com Scan history for this domain/api/v1/domain/history/porezna-uprava-f0415.firebaseapp.com?limit=15

This website contacted 13 IPs in 2 countries across 11 domains to perform 20 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://porezna-uprava-f0415.firebaseapp.com/

AI Security Verdict

Confirmed Scam

Confidence: 90%

Risk Score

Confirmed scam: a firebaseapp.com subdomain impersonating Croatia's Porezna Uprava while its JavaScript contains a critical Telegram-based credential-exfiltration stealer with an embedded bot token.

Risk Factors (5)

Malicious JavaScript: Telegram credential-exfiltration stealer pattern (CRITICAL severity) with embedded Telegram bot token

Brand impersonation of a national tax authority on a non-official, platform-hosted subdomain

Free/instant hosting subdomain with unknown creation date — cannot be treated as established or reputable

Unranked domain claiming to be a major government brand

Off-screen rendering of the page is broken ('ERROR fo Invalid de'), consistent with a hastily deployed or half-broken phishing kit

Domain age information unavailable

Details

Page Title

Porežna Uprava - UPRAVA ZA FINANCIJSKI POVRAT RH

Scan Type

public

Favicon Hash

MMH3: -325578512

MD5: 756197bd41ba823644f8c9d52e790f32

Domain Name Analysis

Domain 'porezna-uprava-f0415.firebaseapp.com' uses the commercial generic top-level domain (.com) and includes subdomain 'porezna-uprava-f0415'. The second-level label 'firebaseapp' is 11 characters long split between five vowels and 6 consonants. Segmentation suggests three words: fire, base, app. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.44s

Total Load Time

1.8 MB

Total Size

Language Analysis

Primary Language

🇸🇮SL

Code: sl

Confidence:50%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:48 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as sl

Website Classification

Primary Category

unknown0% confidence

Type: dynamic

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.217.113.4Google · CDN	United States	AS15169Google LLC
1	142.251.154.119Google · CDN	United States	AS15169Google LLC
1	142.250.154.94Google · CDN	United States	AS15169Google LLC
1	85.209.13.103	Croatia	AS41336Financijska agencija
1	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.217.118.4Google · CDN	United States	AS15169Google LLC
20	13	-	-