ScanMalware.com

Security Scan Report: docs.google.com

Site favicon
Submitted: Dec 10, 2025, 4:23:39 AMCompleted: Dec 10, 2025, 4:24:08 AMpubliccompleted
Loading additional data...

Summary

This website contacted 16 IPs in 2 countries across 8 domains to perform 19 HTTP transactions. The main domain is docs.google.com.

Submitted URL: https://docs.google.com/drawings/d/1LJdlpHB2E6Z9tPwMcxw3ykF89rhmfJXC4f31uIuTvfY/edit

The Cisco Umbrella rank of the primary domain is #1 of the top 1 million websitesTop 100 Site

AI Security Verdict

Moderate Risk

Confidence: 70%

5
Risk Score

Brand impersonation detected on a legitimate Google Docs page; no credential collection, moderate risk.

Risk Factors
Brand impersonation (Amazon) on a non‑official domain
Safety Factors
Domain is docs.google.com, a top‑ranked Google service (Cisco Umbrella rank 1)
No credential‑harvesting or payment forms present
No malicious Indicators of Compromise detected
Domain age information unavailable

Details

Page Title

XSDY435EYHDFG345YDFH54EFD - File 1 - Google Zeichnungen

Scan Type

public

Language

🇩🇪

German

(80% confidence)

Category

documentation technical

(33%)

Domain Information

Within the commercial generic top-level domain (.com), 'docs.google.com' is registered; it also runs on subdomain 'docs'. Its registrable label 'google' stretches across 6 characters containing three vowels alongside three consonants. Tokenizing the label suggests one word: google. Median word length comes out to six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://docs.google.com/drawings/d/1LJdlpHB2E6Z9tPwMcxw3ykF89rhmfJXC4f31uIuTvfY/edit

Page Load Overview

2.39s
Total Load Time
19
HTTP Requests
8
Domains
3.3 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:de
Text Length:410 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical33% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
33%

Detected Features

OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4142.250.185.131United States
AS15169GOOGLE
1142.250.186.163United States
AS15169GOOGLE
1142.250.185.206United States
AS15169GOOGLE
1142.250.184.227United States
AS15169GOOGLE
1172.217.18.1United States
AS15169GOOGLE
1216.58.212.142United States
AS15169GOOGLE
1172.217.18.10United States
AS15169GOOGLE
1142.250.186.174United States
AS15169GOOGLE
12a00:1450:4001:81c::200eFrankfurt am Main, Hesse, Germany
AS15169GOOGLE
12a00:1450:4001:82b::2003Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
1916--

Detected Technologies4

X-UA-Compatible
100%
Open-Graph-Protocolvarticle
100%
HTTP/3
40%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17B14087601202CB6DF6788B2218B154A791D4037FA8B4079E3FCCEE56BD69AF0756339

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Mw3F91UfV9tMy46mAWjIslI2iuMZQpEjYmBe7jWAXbwRVV9KudzRj/X3gee/QRBi:T3F91Uvt+6mvj4OJhXnsZM49yywR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:193632:OCMVIJRB0h4LMCiABwIDDmwZAPJCYYEJQgADggSoxVohhIY44ACLY2yFAIIcgIEUROhguiIQhnAkZkAsg4QUlEEYCQ8CARRY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:26e7efe7e7e7e7ff
Perceptual Hash:b3554c5555559d54
Difference Hash:cc0d484c4c4c4c10
Wavelet Hash:00c3c3c3c7c7c7c7
Color Hash:#a1c587

Other Hashes

Crop Resistant:cc0d484c4c4c4c10

Scan History

Scan history not available

Unable to load historical scan data