Security Scan Report: pvyk.bestredirservsafe.com

Redirected to: https://www.google.com/

Submitted: Dec 20, 2025, 11:06:57 AMCompleted: Dec 20, 2025, 11:07:24 AMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 1 country across 7 domains to perform 43 HTTP transactions. The main domain is google.com and was registered NaN years ago.

Submitted URL: http://pvyk.bestredirservsafe.com/?kw=doceonline.com&s1=dl

Effective URL: https://www.google.com/Redirected

AI Security Verdict

High Risk

Confidence: 88%

7
Risk Score

Impersonates Google on a suspicious domain before redirecting to real Google – likely a phishing lure.

Risk Factors
Brand impersonation on an unranked, suspicious domain
Use of a non‑whitelisted redirect domain to present a fake Google consent page
Potential click‑jacking to lure users before redirecting to the real site
Domain age information unavailable

Details

Page Title

Google

Scan Type

public

Language

🇩🇪

German

(80% confidence)

Category

adult content

(55%)

Domain Information

The domain 'pvyk.bestredirservsafe.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'pvyk'. The second-level label 'bestredirservsafe' is 17 characters long with 6 vowels and 11 consonants. It segments into five words: best, redir, ser, v, safe. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://pvyk.bestredirservsafe.com/?kw=doceonline.com&s1=dl

Page Load Overview

4.92s
Total Load Time
43
HTTP Requests
7
Domains
971 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:de
Text Length:3,638 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content55% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
55%
social media network
35%
corporate business
35%
documentation technical
34%
news media journalism
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11216.58.209.195United States
AS15169GOOGLE
8142.251.38.74United States
AS15169GOOGLE
874.50.97.226Tampa, Florida, United States
AS29802HVC-AS
8216.58.209.174United States
AS15169GOOGLE
8216.58.209.164United States
AS15169GOOGLE
435--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13A645C316300B83BB823DA90B5BE7F4E3C39E51BDD1706F8A591E5708FE29B1192665C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:w3B2ZZSYl5TALfN4+lQ9sSrIfpSjIWLJQa717O:w3B2ZZSW5TALfK9frLI7H

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:317767:8kBDYOAAvhIACGXQsLdJSCAhgCQgyJDioCCwSgZCBAoJQDCEQRAAChGNAAFGAGsREJOhSw5AweaZhsUAhG4PCBbKoUBPCRFI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:183c3c3c3c3c3c18
Perceptual Hash:9bd9646475736464
Difference Hash:6869696969696969
Wavelet Hash:3c3c3c3c3c3c3c3c
Color Hash:#d2799d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data