ScanMalware.com

Security Scan Report: docs.google.com

Redirected to: https://docs.google.com/drawings/d/1JNBFYhYmG0g_L_EoN0eeog3C8GNPXDWEX-_4j8OcRMk/edit

Site favicon
Submitted: Nov 23, 2025, 6:07:02 AMCompleted: Nov 23, 2025, 6:08:07 AMpubliccompleted
Loading additional data...

Summary

This website contacted 14 IPs in 2 countries across 7 domains to perform 22 HTTP transactions. The main domain is docs.google.com.

Submitted URL: https://docs.google.com/drawings/d/1JNBFYhYmG0g_L_EoN0eeog3C8GNPXDWEX-_4j8OcRMk

Effective URL: https://docs.google.com/drawings/d/1JNBFYhYmG0g_L_EoN0eeog3C8GNPXDWEX-_4j8OcRMk/editRedirected

The Cisco Umbrella rank of the primary domain is #1 of the top 1 million websitesTop 100 Site

AI Security Verdict

High Risk

Confidence: 85%

7
Risk Score

High‑risk phishing page impersonating Amazon on a Google Docs domain

Risk Factors
Brand impersonation on a non‑official domain
Use of Google Docs drawing to present a fake Amazon security page
Phishing language requesting account verification
Domain age information unavailable

Details

Page Title

7JN45ETGDFH5686EYTDFHDFDF - File 1 - Google Zeichnungen

Scan Type

public

Language

🇩🇪

German

(80% confidence)

Category

documentation technical

(33%)

Domain Information

The domain 'docs.google.com' uses the commercial generic top-level domain (.com), featuring subdomain 'docs'. The registrable portion 'google' spans 6 characters split between three vowels and 3 consonants. Tokenizing the label suggests one word: google. Average segment length settles at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://docs.google.com/drawings/d/1JNBFYhYmG0g_L_EoN0eeog3C8GNPXDWEX-_4j8OcRMk

Page Load Overview

1.95s
Total Load Time
22
HTTP Requests
7
Domains
3.5 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:de
Text Length:410 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical33% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
33%

Detected Features

OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8216.58.206.78United States
AS15169GOOGLE
5142.250.185.227United States
AS15169GOOGLE
3142.250.186.131United States
AS15169GOOGLE
3142.250.186.163United States
AS15169GOOGLE
1142.250.185.170United States
AS15169GOOGLE
1142.250.186.110United States
AS15169GOOGLE
1142.250.185.65United States
AS15169GOOGLE
12a00:1450:4001:82b::2003Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
12a00:1450:4001:831::2003Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
12a00:1450:4001:80b::2001Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
2214--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T137D3E66301205CB6EFA749A2218B25573C1D4077F887507AE3FCCEA92BD6D6E134A76C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:aTLcl0+BLVNnvVaiUUjWfoJBHenf3DKuv4RF/X3vee/bZRB04B/SsTQvs:UBCjAoJ0/+sOr24BKssvs

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:137704:QjoHGASAUA6AglFJQFQIwgBY2wRYD4CQUyAEkHiUQEIgoDKxAELSQnOkAB65Cxc0UpiACDIjJh1wD5gIgCEcAQQnkoDgEBQB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:2ee7efe7e7e7e7ff
Perceptual Hash:b7154d1555159d55
Difference Hash:cc0d484c4c4c4c10
Wavelet Hash:00c4c4c4c7c7c7d7
Color Hash:#b587c5

Other Hashes

Crop Resistant:cc0d484c4c4c4c10

Scan History

Scan history not available

Unable to load historical scan data