Security Report: eltapackage.web.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4f35e9cb-cb26-4344-929d-184d1370144b Domain and IP registration (RDAP)/api/v1/rdap/4f35e9cb-cb26-4344-929d-184d1370144bHow often this domain was scanned/api/v1/domain/stats/eltapackage.web.app Scan history for this domain/api/v1/domain/history/eltapackage.web.app?limit=15

This website contacted 15 IPs in 2 countries across 10 domains to perform 21 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://eltapackage.web.app/

AI Security Verdict

Confirmed Scam

Confidence: 90%

Risk Score

Fake ΕΛΤΑ parcel page on a free Firebase subdomain using a Telegram-token exfiltration script flagged by critical YARA; branded phishing infrastructure — avoid and report.

Risk Factors (5)

Brand impersonation of the Greek postal service ΕΛΤΑ on a non-official domain

Critical YARA hit for Telegram-based credential/data exfiltration in page scripts

Telegram bot token embedded in client-side script enabling covert data exfiltration

Phishing label reported by threat intelligence for the primary domain

Free hosting subdomain (.web.app) with unknown creation date and no domain reputation

Domain age information unavailable

Details

Page Title

ΕΛΤΑ - Αποστολή πακέτων

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'eltapackage.web.app' is registered and includes subdomain 'eltapackage'. The second-level label 'web' is 3 characters long containing one vowel alongside two consonants. Segmentation suggests 1 word: web. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.67s

Total Load Time

1.6 MB

Total Size

Language Analysis

Primary Language

🇬🇷Greek

Code: el

Confidence:50%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:23 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as el

Website Classification

Primary Category

unknown0% confidence

Type: dynamic

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.217.118.4Google · CDN	United States	AS15169Google LLC
1	142.251.155.119Google · CDN	United States	AS15169Google LLC
1	142.251.13.94Google · CDN	United States	AS15169Google LLC
1	2.16.10.155Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
1	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
21	15	-	-