Security Scan: Correos

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e8c3819c-6b2f-49df-9326-9a5591d48fce Domain and IP registration (RDAP)/api/v1/rdap/e8c3819c-6b2f-49df-9326-9a5591d48fceHow often this domain was scanned/api/v1/domain/stats/correosdecr.web.app Scan history for this domain/api/v1/domain/history/correosdecr.web.app?limit=15

This website contacted 2 IPs in 2 countries across 3 domains to perform 17 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://correosdecr.web.app/

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Fake Correos de Costa Rica shipment-status page on a free Firebase subdomain that mimics the postal brand to harvest names, phones and home addresses; no official-domain link. Avoid entering data.

Risk Factors (5)

Impersonation of Correos de Costa Rica's brand and visual identity on a domain it does not own

Free shared-hosting subdomain (web.app) with unknown creation date, not the official correos.go.cr domain

Form requests full name, phone number, street address, city and postal code under a fake shipment pretext

Unranked domain with no verifiable ownership tie to the impersonated postal operator

Reference to unrelated third-party domain rivelpas.online

Domain age information unavailable

Details

Page Title

Correos

Scan Type

public

Domain Name Analysis

The domain 'correosdecr.web.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'correosdecr'. Its registrable label 'web' stretches across 3 characters split between one vowel and 2 consonants. Splitting it apart reveals one word: web. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.98s

Total Load Time

147 KB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:51%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:509 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as es

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
8	51.77.64.70	Germany	AS16276OVH SAS
17	2	-	-

Detected Technologies3

HTTP/3

40%

HSTS

40%

Firebase

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FE7234B09221519D4EE7EDA0A9E27F0A30A6CDE7F58FCADC659C089D1FC5BA5C4D0290

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:h/0h+37JXGpf9wSXaD8N//p+mt+6GR+3JtwyWwzbyym9laLvtFM4XMQF4esMGMPu:h/A+dyLXp/MR+3JSym4FspMzZMAQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:16601:GTCAo0BAbAhgwGhOAAQIJuRQQA40OCPSAdBDDhABRwWAZPSDGDSCIgmmgfCQJAiYEmhAPKiIMDNqAYehgviQSKDIvhU4EETY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7e00dbdfffffff00

Perceptual Hash:dc5443c398bce3e1

Difference Hash:80f03232300a0205

Wavelet Hash:0000909fffffff00

Color Hash:#c59487

Other Hashes

Crop Resistant:80f03232300a0205

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: correosdecr.web.app