Security Report: uprava-eporezna.web.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fd1a7540-ed0a-4eb1-a04b-c7a287755a34 Domain and IP registration (RDAP)/api/v1/rdap/fd1a7540-ed0a-4eb1-a04b-c7a287755a34How often this domain was scanned/api/v1/domain/stats/uprava-eporezna.web.app Scan history for this domain/api/v1/domain/history/uprava-eporezna.web.app?limit=15

This website contacted 10 IPs in 2 countries across 7 domains to perform 51 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://uprava-eporezna.web.app/

Effective URL:

https://e-porezna.porezna-uprava.hr/Prijava.aspx?ReturnUrl=%2f

Redirected

AI Security Verdict

High Risk

Confidence: 80%

Risk Score

The web.app redirector embeds a Telegram bot token for potential data exfiltration and shows a financial-refund lure; the final official tax page has no credential fields. Avoid the redirector link.

Risk Factors (4)

Telegram bot token embedded in client-side script on the redirecting web.app host enables exfiltration to an external Telegram chat.

Suspicious content mismatch: official ePorezna title shown to scanner versus financial-refund-themed title shown to residential client.

Brand-themed hostname uprava-eporezna.web.app is not the official porezna-uprava.hr domain.

Redirector is hosted on the shared web.app platform with unknown subdomain creation date.

Domain age information unavailable

Details

Page Title

Porežna Uprava - UPRAVA ZA FINANCIJSKI POVRAT RH

Scan Type

public

Favicon Hash

MMH3: -17751815

MD5: 437910dba1257d223c5a4679fcaa6eef

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'uprava-eporezna.web.app' is registered, featuring subdomain 'uprava-eporezna'. The registrable portion 'web' spans 3 characters with 1 vowel and 2 consonants. It segments into 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.56s

Total Load Time

2.3 MB

Total Size

Language Analysis

Primary Language

🇸🇮SL

Code: sl

Confidence:50%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:48 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as sl

Website Classification

Primary Category

technology software68% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

68%

finance banking

66%

government public service

54%

documentation technical

45%

corporate business

36%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
5	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
5	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	172.217.116.4Google · CDN	United States	AS15169Google LLC
5	185.20.29.73	Croatia	AS199401APIS IT d.o.o.
5	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
5	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	172.217.113.4Google · CDN	United States	AS15169Google LLC
51	10	-	-