Security Report: invoice-elta.web.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/08d75e85-08be-43d4-8f95-263bede25274 Domain and IP registration (RDAP)/api/v1/rdap/08d75e85-08be-43d4-8f95-263bede25274How often this domain was scanned/api/v1/domain/stats/invoice-elta.web.app Scan history for this domain/api/v1/domain/history/invoice-elta.web.app?limit=15

This website contacted 19 IPs in 2 countries across 10 domains to perform 21 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://invoice-elta.web.app/

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Firebase-hosted page impersonating Greek postal service ΕΛΤΑ, with a critical hunting rule stealer pattern embedding a Telegram bot token for exfiltrating collected data; also reported as phishing.

Risk Factors (6)

Brand impersonation of ΕΛΤΑ (Hellenic Post) on a non-official web.app subdomain

Critical hunting rule stealer pattern: Telegram credential exfiltration

Hardcoded Telegram bot token in page scripts enabling live exfiltration of collected data

Phishing threat-intel report on the primary domain

Unranked, shared-hosting platform subdomain with unknown creation date

Third-party ELTA-related courier domain referenced from the page

Domain age information unavailable

Details

Page Title

ΕΛΤΑ - Αποστολή πακέτων

Scan Type

public

Favicon Hash

MMH3: -735791270

MD5: ce593aeb3bd691547691be0745cf2bcc

Domain Name Analysis

You're looking at domain 'invoice-elta.web.app' on the application-focused generic top-level domain (.app) with subdomain 'invoice-elta'. The second-level label 'web' is 3 characters long holding 1 vowel versus 2 consonants. Splitting it apart reveals 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.77s

Total Load Time

1.6 MB

Total Size

Language Analysis

Primary Language

🇬🇷Greek

Code: el

Confidence:50%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:23 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as el

Website Classification

Primary Category

unknown0% confidence

Type: dynamic

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.217.116.4Google · CDN	United States	AS15169Google LLC
1	142.251.156.119Google · CDN	United States	AS15169Google LLC
1	142.251.14.94Google · CDN	United States	AS15169Google LLC
1	18.156.16.255Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
21	19	-	-