Security Scan Report: docs.google.com

Site favicon
Submitted: Oct 16, 2025, 10:33:16 AMCompleted: Oct 16, 2025, 10:33:54 AMpubliccompleted
Loading additional data...

Summary

This website contacted 10 IPs in 2 countries across 5 domains to perform 8 HTTP transactions. The main domain is docs.google.com and was registered NaN years ago.

Submitted URL: https://docs.google.com/presentation/d/e/2PACX-1vSR34b7I1xzRsCGGqw017IxxWObImWRbVSornxlcctZcCLZGCGN9lFw4h3rykka0806beZvAp22TdvU/pub

AI Security Verdict

High Risk

Confidence: 88%

7
Risk Score

Page impersonates AT&T on a Google Docs domain; high‑risk phishing.

Risk Factors
Brand impersonation: AT&T branding displayed on a non‑AT&T domain
Domain mismatch: final_url (docs.google.com) does not match the displayed brand
Unranked status in Cisco Umbrella for the subdomain
Suspicious call‑to‑action encouraging users to click
Domain age information unavailable

Details

Page Title

AT&T UPDATE - Google Präsentationen

Scan Type

public

Language

🇩🇪

German

(50% confidence)

Category

technology software

(70%)

Domain Information

The domain name 'docs.google.com' uses the commercial generic top-level domain (.com) with subdomain 'docs'. The registrable portion 'google' spans 6 characters split between 3 vowels and three consonants. Tokenizing the label suggests 1 word: google. Average segment length settles at 6 characters. 'google' is most common in Sinhala usage. Secondary signals appear in Danish and English. Taken together, it feels Sinhala with single-word simplicity.

Screenshot

Security scan screenshot of https://docs.google.com/presentation/d/e/2PACX-1vSR34b7I1xzRsCGGqw017IxxWObImWRbVSornxlcctZcCLZGCGN9lFw4h3rykka0806beZvAp22TdvU/pub

Page Load Overview

4.82s
Total Load Time
8
HTTP Requests
5
Domains
617 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:50%
Script Type:Latin
HTML Lang Attribute:de
Text Length:190 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software70% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
70%
documentation technical
63%
adult content
37%
government public service
34%
news media journalism
27%

Detected Features

OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8142.250.185.67United States
AS15169GOOGLE
0142.250.184.225United States
AS15169GOOGLE
0142.250.185.174United States
AS15169GOOGLE
0142.250.185.195United States
AS15169GOOGLE
0142.250.185.234United States
AS15169GOOGLE
02a00:1450:4001:811::2003Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
02a00:1450:4001:80f::2001Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
02a00:1450:4001:827::200aFrankfurt am Main, Hesse, Germany
AS15169GOOGLE
02a00:1450:4001:801::200eFrankfurt am Main, Hesse, Germany
AS15169GOOGLE
02a00:1450:4001:810::2003Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
810--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14AC3B69701209CF9AFA24DB3118F18173C1C5037A89790BAE3ED8FEA6B95D5E0356379

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:k5+ChuonGhLexAVxzTyLTRIqDKulYputYpuZV:YA+TRz+7wuwP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:120110:VBGgIgICBQjhIUAwCNGY1Qh+gCBEmeCgGhbLgiAlwAHQIICBISUojAQBYpwBlSIBEgbfmphyM6ECSEcGAAoQw0uwYBDyIasZ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7e7e7e3c38381800
Perceptual Hash:c5f1381cc38f6666
Difference Hash:a292cae8e8e2f284
Wavelet Hash:7efe7e7e3c380000
Color Hash:#c587ba

Scan History

Scan history not available

Unable to load historical scan data