Security Scan Report: gr-mygov.web.app

Redirected to:
https://radarperu.com/wp-includes/images/.gov
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 3 domains to perform 10 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://gr-mygov.web.app/

Effective URL:
https://radarperu.com/wp-includes/images/.gov
Redirected

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Greek mygov-branded lure on a free web.app subdomain that redirects into a compromised WordPress site hiding content under a fake .gov path — brand impersonation even though no form was captured.

Risk Factors (5)
Brand impersonation of the Greek government mygov portal on an unrelated hosting subdomain
Final landing page is a compromised WordPress site using a hidden path that mimics an official .gov location
Government/tax-themed Greek-language lure with an indefinite 'please wait' loading state
Datacenter IP received a 403 while a residential client received real content — content gating around the lure
Entry domain subdomain on a free-publishing platform with unknown creation date (age not attributable)
Domain age information unavailable

Details

Page Title

ΟΙΚΟΝΟΜΙΚΗ ΔΙΑΧΕΙΡΙΣΗother network

Scan Type

public

Domain Name Analysis

The domain 'gr-mygov.web.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'gr-mygov'. The core label 'web' covers 3 characters holding one vowel versus two consonants. Tokenizing the label suggests 1 word: web. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

@aeare 9 Παρακαλώ περιμένετε

Page Load Overview

0.47s
Total Load Time
30 KB
Total Size

Language Analysis

Primary Language

🇬🇷Greek
Code: el
Confidence:50%
Script:Unknown
Direction:ltr

Detection Details

Text Length:41 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
22.23.154.27Akamai · CDNVienna, Vienna, Austria
AS20940Akamai International B.V.
22.23.154.18Akamai · CDNVienna, Vienna, Austria
AS20940Akamai International B.V.
2172.67.164.103Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.50.169Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
105--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17B2138954CF5847A009280C0AE676E1D6FC2D51BC65EC84972AD878E9FD7D8BCC1720D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:kxuCrZXoKMthLAqJmraj2x3fhPSP2nafUp6LbqV96LbzvdFV7OTSUG48sYgHT/T7:kNZX7MD9jYZOiacp6PqX6PzVFkTDzZt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1339:EAAAEACIAChCECAAgABAAAYAAogAAAAAAAAgACAgAAAAAEAQAAAgAAABAAAAAQAAABogAAAAADAAACAAEADAhCABAAAAgAAM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffff
Perceptual Hash:b333cccc33338ccc
Difference Hash:0000000808000000
Wavelet Hash:0c0c0000e3f3ffff
Color Hash:07007000080

Other Hashes

Crop Resistant:0000000808000000

Scan History

Scan history not available

Unable to load historical scan data