Security Scan Report: gr-mygov.firebaseapp.com

Redirected to:
https://radarperu.com/wp-includes/images/.gov
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 3 domains to perform 10 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://gr-mygov.firebaseapp.com/

Effective URL:
https://radarperu.com/wp-includes/images/.gov
Redirected

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Greek government (MyGov/finance) impersonation served via a Firebase subdomain that redirects to a compromised WordPress path faked to end in '.gov'. No form on this loading page, but the infrastructure is a phishing chain — avoid.

Risk Factors (5)
Government brand impersonation on mismatched domains (firebaseapp.com subdomain and radarperu.com)
Redirect across unrelated registrable domains to a compromised WordPress path
URL path crafted to end in '.gov' to fake an official government address
Final hosting domain unranked and not attributable to any government entity
Bot-protection mismatch concealing content from scanners
Domain age information unavailable

Details

Page Title

ΟΙΚΟΝΟΜΙΚΗ ΔΙΑΧΕΙΡΙΣΗother network

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'gr-mygov.firebaseapp.com' is registered; it also runs on subdomain 'gr-mygov'. Its registrable label 'firebaseapp' stretches across 11 characters with five vowels and six consonants. Splitting it apart reveals three words: fire, base, app. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://gr-mygov.firebaseapp.com/

Page Load Overview

0.54s
Total Load Time
30 KB
Total Size

Language Analysis

Primary Language

🇬🇷Greek
Code: el
Confidence:50%
Script:Unknown
Direction:ltr

Detection Details

Text Length:41 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
22.16.10.154Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
2104.21.50.169Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22.16.10.149Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
104--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17B2138954CF5847A009280C0AE676E1D6FC2D51BC65EC84972AD878E9FD7D8BCC1720D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:kxuCrZXoKMthLAqJmraj2x3fhPSP2nafUp6LbqV96LbzvdFV7OTSUG48sYgHT/T7:kNZX7MD9jYZOiacp6PqX6PzVFkTDzZt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1339:EAAAEACIAChCECAAgABAAAYAAogAAAAAAAAgACAgAAAAAEAQAAAgAAABAAAAAQAAABogAAAAADAAACAAEADAhCABAAAAgAAM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffff
Perceptual Hash:b333cccc33338ccc
Difference Hash:0000000808000000
Wavelet Hash:0c0c0000e3f3ffff
Color Hash:#1f5393

Other Hashes

Crop Resistant:0000000808000000

Scan History

Scan history not available

Unable to load historical scan data