German

__Secure-ENID

COMPASS

Within the .gle top-level domain, 'forms.gle' is registered with no subdomain. The second-level label 'forms' is 5 characters long containing 1 vowel alongside 4 consonants. It segments into 1 word: forms. 'forms' most strongly signals English. Usage also turns up in Chinese (Pinyin) and Tamil contexts. Net impression: English phrase with single-word simplicity.

html/32/1d/321dc9d9-44a7-495d-b6c4-64f5048d682f_fallback.html.gz

Delivery Failed

partialResponse

pageHistory

fbzx

submissionTimestamp

html/32/1d/321dc9d9-44a7-495d-b6c4-64f5048d682f.html.gz

require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport,script-src 'report-sample' 'nonce-EMVVlt2VuzCytu4ONSmX_Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self',script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlist

require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport,script-src 'report-sample' 'nonce-TT2CSaTyhPrzHqPJH-SMqA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self',script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlist

require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport,script-src 'report-sample' 'nonce-MuJoyC8sO85M7LHFaTyurg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self',script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlist

require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt
base-uri 'self';object-src 'none';report-uri https://csp.withgoogle.com/csp/forms/prod;script-src 'report-sample' 'nonce-w9m7SwBwpiAEe6uxy8EJew' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval'

report-uri https://csp.withgoogle.com/csp/forms/prod;frame-ancestors 'none'

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-forms

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/product-feedback-gathering

application/x-www-form-urlencoded;charset=UTF-8

require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt, base-uri 'self';object-src 'none';report-uri https://csp.withgoogle.com/csp/forms/prod;script-src 'report-sample' 'nonce-HRMQ6OI9BdSsRU0UB_BC4w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval'

require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt, base-uri 'self';object-src 'none';report-uri https://csp.withgoogle.com/csp/forms/prod;script-src 'report-sample' 'nonce-SGREs89hS12pesRO0Srmww' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval'

require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt, base-uri 'self';object-src 'none';report-uri https://csp.withgoogle.com/csp/forms/prod;script-src 'report-sample' 'nonce-paDHIJcfRDeKa807BN0k3g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval'

viewport

referrer

//ssl.gstatic.com/docs/forms/device_home/windows_144.png

msapplication-TileImage

msapplication-TileColor

theme-color

https://docs.google.com/forms/d/e/1FAIpQLSeaS6lZfpEONKa04GaMvK8Wz15BFQeXc_LM_TzOY2SwYCUSow/viewform?usp=send_form&usp=embed_facebook

https://lh6.googleusercontent.com/U2OlyNnG6LaOBZlXFAS0I0Ct0l0jsodirKlkCmKQb-Pv9DfdttUOlE6gpuiJmClQavIBbQnpzz3iR6k=w1200-h630-p

We tried to deliver your parcel today but you weren't home or there was no safe place to leave it.

𝗣𝗹𝗲𝗮𝘀𝗲 𝗰𝗼𝗻𝘁𝗶𝗻𝘂𝗲 𝗵𝗲𝗿𝗲: http://79.132.128.235/secure 


𝐂𝐚𝐧𝐚𝐝𝐚 𝐏𝐨𝐬𝐭 𝐓𝐞𝐚𝐦

https://ssl.gstatic.com/docs/spreadsheets/forms/forms_icon_2023q4.ico

https://docs.google.com/forms/d/e/1FAIpQLSeaS6lZfpEONKa04GaMvK8Wz15BFQeXc_LM_TzOY2SwYCUSow/viewform?usp=send_form&usp=embed_googleplus

https://docs.google.com/forms/d/e/1FAIpQLSeaS6lZfpEONKa04GaMvK8Wz15BFQeXc_LM_TzOY2SwYCUSow/viewform?usp=send_form&embedded=true&usp=embed_googleplus

https://ssl.gstatic.com/docs/forms/social/social-forms-big-2.png

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

var DOCS_timing={}; DOCS_timing['pls']=new Date().getTime(); DOCS_timing['sl']=DOCS_timing['pls']; _docs_webfonts_json = {"fontMetadataMap":{"Roboto":{"documentFont":true,"fontFaces":[{"fontDrawSize":

_docs_webfonts_fontFaces = null; _docs_webfonts_iframe_fontFaces = null;(function() {_docs_webfonts_createFontFaces = function(doc) {if (doc && doc.fonts) {var win = window; var fontFaceObject = {}; v

window.WIZ_global_data = {"K1cgmc":"%.@.[null,null,null,[1,1,[1761194380,681860000],4],null,27]]","SpaT4e":"editors","TSDtV":"%.@.[[null,[[45720415,null,true,null,null,null,\"TtOmod\"],[45681910,null,

_docs_flag_initialData={"docs-ails":"docs_warm","docs-fwds":"docs_nf","docs-crs":"docs_crs_tsol","docs-cp-tp":6,"docs-cr-tp":5,"docs-fe-re":2,"docs-fl":1,"docs-hpr":0,"docs-l1lc":4,"docs-l1lm":"FRA","

var FB_PUBLIC_LOAD_DATA_ = [null,["We tried to deliver your parcel today but you weren't home or there was no safe place to leave it.\n\n𝗣𝗹𝗲𝗮𝘀𝗲 𝗰𝗼𝗻𝘁𝗶𝗻𝘂𝗲 𝗵𝗲𝗿𝗲: http://79.132.128.235/secure \n\n\n𝐂𝐚𝐧𝐚𝐝𝐚

Requests	IP Address	Location	AS Autonomous System
15	142.250.186.42	United States	AS15169GOOGLE
1	142.250.186.65	United States	AS15169GOOGLE
1	142.250.181.238	United States	AS15169GOOGLE
1	199.36.158.100	United States	AS54113FASTLY
1	142.250.185.99	United States	AS15169GOOGLE
1	142.250.185.227	United States	AS15169GOOGLE
1	142.250.185.142	United States	AS15169GOOGLE
1	172.217.18.3	United States	AS15169GOOGLE
1	2a00:1450:4001:811::2003	Frankfurt am Main, Hesse, Germany	AS15169GOOGLE
1	2a00:1450:4001:813::2003	Frankfurt am Main, Hesse, Germany	AS15169GOOGLE
30	16	-	-

Security Scan Report: forms.gle

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History