Security Report: eltapackage.web.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1eca538b-eaa6-4a26-a55e-06e1c03099ea Domain and IP registration (RDAP)/api/v1/rdap/1eca538b-eaa6-4a26-a55e-06e1c03099eaHow often this domain was scanned/api/v1/domain/stats/eltapackage.web.app Scan history for this domain/api/v1/domain/history/eltapackage.web.app?limit=15

This website contacted 15 IPs in 2 countries across 10 domains to perform 21 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://eltapackage.web.app/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Fake ΕΛΤΑ postal page on a Firebase subdomain carrying a critical Telegram credential-exfiltration script and a phishing threat-intel report; do not interact or enter any data.

Risk Factors (5)

Critical-severity JavaScript credential-exfiltration pattern (Telegram bot exfiltration)

Impersonation of the ΕΛΤΑ (Hellenic Post) brand on a non-official Firebase subdomain

Phishing threat-intel report on the primary domain

Hosted on a free instant-publishing platform namespace where the page age cannot be established

No legitimate reason for a postal-service lookalike page to embed a Telegram exfiltration channel

Domain age information unavailable

Details

Page Title

ΕΛΤΑ - Αποστολή πακέτων

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'eltapackage.web.app' is registered with subdomain 'eltapackage'. Count 3 characters in 'web' containing 1 vowel alongside two consonants. Splitting it apart reveals 1 word: web. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.20s

Total Load Time

1.6 MB

Total Size

Language Analysis

Primary Language

🇬🇷Greek

Code: el

Confidence:50%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:23 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as el

Website Classification

Primary Category

unknown0% confidence

Type: dynamic

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.217.119.4Google · CDN	United States	AS15169Google LLC
1	142.251.151.119Google · CDN	United States	AS15169Google LLC
1	142.250.154.94Google · CDN	United States	AS15169Google LLC
1	2.16.10.153Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
1	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
21	15	-	-