Security Scan Report: postia-slovenija.firebaseapp.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 2 countries across 10 domains to perform 19 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://postia-slovenija.firebaseapp.com/

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Misspelled 'Pošta Slovenije' impersonation on a free Firebase subdomain carrying a critical YARA hit for Telegram credential exfiltration with an embedded bot token. Avoid; report.

Risk Factors (4)
Brand impersonation of Pošta Slovenije on a non-official, misspelled lookalike domain
Critical YARA malware match: Telegram credential exfiltration (stealer)
Telegram bot token embedded in page script, enabling covert exfiltration of collected data
Free instant-publish Firebase subdomain with unknown real age and no domain reputation
Domain age information unavailable

Details

Page Title

Pošta Slovenije

Scan Type

public

Domain Name Analysis

Domain 'postia-slovenija.firebaseapp.com' uses the commercial generic top-level domain (.com) and includes subdomain 'postia-slovenija'. Count 11 characters in 'firebaseapp' split between 5 vowels and six consonants. It segments into three words: fire, base, app. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://postia-slovenija.firebaseapp.com/

Page Load Overview

1.92s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:15 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1151.101.129.155Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.217.113.4Google · CDNUnited States
AS15169Google LLC
1142.251.153.119Google · CDNUnited States
AS15169Google LLC
1142.251.13.94Google · CDNUnited States
AS15169Google LLC
1151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1916--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F891E9B32E24C006A9434FDAB872B54C9852D51FF543C9D4B5FA87346BC6AFFC806929

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:nk256uVJVePqfe/fxLRMwV6AEM0uA1qigLDUyny:k2tfzfe/w3vJQigLI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4377:BAAEwiiACAQhICKZoAAVISgBAAHAIQAARCkSHYCFUEIEAAQARg6AQCQBQAFQAQISIwG1JQICEAAAiAhRCBAoQkBEIEEBKkRA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffffffffffffffe
Perceptual Hash:d5aa55aa55aa55a8
Difference Hash:0000000000000000
Wavelet Hash:0f0f0f0f0f0f0f0e
Color Hash:#d22d9b

Other Hashes

Crop Resistant:0000000000000000

Scan History

Scan history not available

Unable to load historical scan data