Security Scan Report: workspacegoogle.pp.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 5 domains to perform 36 HTTP transactions. The main domain is pp.ru and was registered 29 years ago.

Submitted URL: https://workspacegoogle.pp.ru/

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Clone of Google Slides marketing content on a non-Google domain (workspacegoogle.pp.ru) with heavy cross-domain redirects. No credential or payment forms and no malware signals, so misuse is brand impersonation rather than active phishing.

Risk Factors (4)
Brand impersonation of Google Slides on a non-Google domain
Six cross-domain redirects in the navigation chain
Domain not present in Cisco Umbrella top 1M despite claiming a major brand
Subdomain name crafted to resemble an official Google Workspace property
Safety Factors (4)
No credential, login or payment form present on the page
No threat-intelligence matches, YARA hits, IDS alerts or obfuscated/malicious JavaScript
No cross-origin credential exfiltration observed
Domain registration record is old (1997)
Domain age information unavailable

Details

Page Title

Google Slides — Google Презентации для работы и учёбы

Scan Type

public

Domain Name Analysis

Domain 'workspacegoogle.pp.ru' uses the Russian country-code top-level domain (.ru) and includes subdomain 'workspacegoogle'. Its registrable label 'pp' stretches across 2 characters split between zero vowels and two consonants. Breaking it apart gives 1 word: pp. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://workspacegoogle.pp.ru/

Page Load Overview

1.94s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:6,717 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning46% confidence
Type: static
Method: ml+structural

All Detected Categories

education learning
46%
adult content
41%
technology software
41%
documentation technical
32%
healthcare medical
29%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
689.223.7.100Russia
AS210656Yandex.Cloud LLC
6142.251.14.95Google · CDNUnited States
AS15169Google LLC
687.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
6142.251.14.94Google · CDNUnited States
AS15169Google LLC
687.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
677.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
366--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E2D23571A49760FF0117E4FBF815BB493CE640BEAF56062111BC2E7D36F6860D71AA0A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:lhK2Zg9hupXLB3qMPs9rhMhDuViGQi3nWKtiIIIB:lNg9hUXFbWGNGziIIIB

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:29079:BJlRJBEKBBATCTEQyQwQSkAKpUCB0IABN1IzJIBAhGEUiQARVjNAIVHOEgMFpTjABCPZMJOpAQi2oYkgBgEkBhLiYJIRIITQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fcff998991b7ffff
Perceptual Hash:fa5ac2c65a5a1e4a
Difference Hash:6104333323670123
Wavelet Hash:bcf381818191ff99
Color Hash:#97bf40

Other Hashes

Crop Resistant:6104333323670123

Scan History

Scan history not available

Unable to load historical scan data