Security Scan Report: gr-mygov.web.app

Redirected to:
https://radarperu.com/wp-includes/images/.gov
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 3 domains to perform 10 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://gr-mygov.web.app/

Effective URL:
https://radarperu.com/wp-includes/images/.gov
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Government-branded lure on a web.app subdomain redirecting through a compromised WordPress site to a fake '.gov' path — a cloaked phishing redirect chain impersonating gov.gr. Avoid and report.

Risk Factors (5)
Brand impersonation of the Greek government (gov.gr) on a non-official hosting-platform subdomain
Redirect into a compromised WordPress site using wp-includes/wp-content paths
Fake '.gov' path segment appended to the final URL to feign an official government address
Content cloaking / bot-protection bypass between scanner and real visitors
No credential or payment form in the captured DOM — consistent with an intermediate redirect stage of a multi-step phishing chain rather than a benign page
Domain age information unavailable

Details

Page Title

ΟΙΚΟΝΟΜΙΚΗ ΔΙΑΧΕΙΡΙΣΗother network

Scan Type

public

Domain Name Analysis

The domain 'gr-mygov.web.app' uses the application-focused generic top-level domain (.app) with subdomain 'gr-mygov'. Count 3 characters in 'web' split between one vowel and 2 consonants. Splitting it apart reveals 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://gr-mygov.web.app/

Page Load Overview

0.52s
Total Load Time
30 KB
Total Size

Language Analysis

Primary Language

🇬🇷Greek
Code: el
Confidence:50%
Script:Unknown
Direction:ltr

Detection Details

Text Length:41 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
22.16.10.149Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
223.48.23.37Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
2172.67.164.103Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.50.169Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
105--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17B2138954CF5847A009280C0AE676E1D6FC2D51BC65EC84972AD878E9FD7D8BCC1720D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:kxuCrZXoKMthLAqJmraj2x3fhPSP2nafUp6LbqV96LbzvdFV7OTSUG48sYgHT/T7:kNZX7MD9jYZOiacp6PqX6PzVFkTDzZt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1339:EAAAEACIAChCECAAgABAAAYAAogAAAAAAAAgACAgAAAAAEAQAAAgAAABAAAAAQAAABogAAAAADAAACAAEADAhCABAAAAgAAM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffff
Perceptual Hash:b333cc8c3333cccc
Difference Hash:0000000808000000
Wavelet Hash:0f0f2f27070f0f0f
Color Hash:#d279cc

Other Hashes

Crop Resistant:0000000808000000

Scan History

Scan history not available

Unable to load historical scan data