What happened
Website scanner ScanMalware posted on X on 11 November 2026 a "confirmed scam" verdict for eltapackage[.]firebaseapp[.]com. Its linked report says the page, titled "ΕΛΤΑ - Αποστολή πακέτων" (ELTA - parcel shipping), impersonates the Greek postal service ELTA (Hellenic Post) on a free Firebase subdomain, matches phishing threat intelligence, and contains a Telegram bot token in its script that can send whatever visitors type to the operators. The domain is also on the Phishing Army blocklist. ELTA is the brand being spoofed and is not involved. Fake parcel pages like this are usually reached from texts or emails about a delivery problem or small fee; check deliveries only on the courier's official site.
How the scam works
Parcel-tracking pages on a free host such as Firebase often ask for a name, phone number, address or a small fee, and some send what is entered to a chat bot under the operator's control. ELTA (Hellenic Post) was impersonated and is not involved; Firebase is only the hosting platform. Track a Greek postal item only through ELTA's official site or app, not from a link in a text or email.
A well-known brand name in the address, a logo on the page or a shared host such as Vercel, Netlify, Weebly, Blogger, Firebase, Webflow or Cloudflare R2 does not make the page official. The real company will not send you to a look-alike domain or a free site-builder subdomain to sign in. Type the official address yourself or open the official app, and treat any request to hurry as a reason to stop.
Source
Public post on X, 11 November 2026: https://x.com/scanmalware/status/2120381409978097702
The indicators come from this source and have not been independently checked by scammers.com.
