Security Report: porezna-upirava.web.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/78ced450-935a-456a-ba4e-ac7c4a2c5340 Domain and IP registration (RDAP)/api/v1/rdap/78ced450-935a-456a-ba4e-ac7c4a2c5340How often this domain was scanned/api/v1/domain/stats/porezna-upirava.web.app Scan history for this domain/api/v1/domain/history/porezna-upirava.web.app?limit=15

This website contacted 10 IPs in 2 countries across 7 domains to perform 51 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://porezna-upirava.web.app/

Effective URL:

https://e-porezna.porezna-uprava.hr/Prijava.aspx?ReturnUrl=%2f

Redirected

AI Security Verdict

High Risk

Confidence: 68%

Risk Score

Typosquatted tax-authority hostname with an embedded Telegram bot token exfiltration channel; it forwards to the real government portal, but the redirector itself shows malicious infrastructure and should be avoided.

Risk Factors (4)

Typosquatted hostname mimicking the Croatian tax authority on a free hosting namespace

Telegram bot token embedded in a page script (out-of-band data exfiltration channel)

Differential content served to datacenter vs residential clients

No verifiable ownership link between the web.app redirector and the government domain it forwards to

Domain age information unavailable

Details

Page Title

Porežna Uprava - UPRAVA ZA FINANCIJSKI POVRAT RH

Scan Type

public

Favicon Hash

MMH3: 1636130961

MD5: 66f91747ddad248dc48d465f46b4e329

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'porezna-upirava.web.app' is registered; it also runs on subdomain 'porezna-upirava'. The second-level label 'web' is 3 characters long holding one vowel versus two consonants. Segmentation suggests one word: web. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.71s

Total Load Time

2.3 MB

Total Size

Language Analysis

Primary Language

🇸🇮SL

Code: sl

Confidence:50%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:48 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as sl

Website Classification

Primary Category

technology software68% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

68%

finance banking

66%

government public service

54%

documentation technical

45%

corporate business

36%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
5	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
5	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	172.217.113.4Google · CDN	United States	AS15169Google LLC
5	185.20.29.73	Croatia	AS199401APIS IT d.o.o.
5	151.101.193.155Fastly · CDN	United States	AS54113Fastly, Inc.
5	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	172.217.117.4Google · CDN	United States	AS15169Google LLC
5	172.217.118.4Google · CDN	United States	AS15169Google LLC
51	10	-	-