Security Scan Report: docs.google.com

Redirected to:
https://docs.google.com/drawings/d/1yT8yuB2I1JaV3882l115d2hOITrod2iEX-...
Site favicon
Submitted: Nov 23, 2025, 2:07:53 AMCompleted: Nov 23, 2025, 2:09:42 AMpubliccompleted
Loading additional data...

Summary

This website contacted 12 IPs in 2 countries across 7 domains to perform 22 HTTP transactions. The main domain is docs.google.com.

Submitted URL: https://docs.google.com/drawings/d/1yT8yuB2I1JaV3882l115d2hOITrod2iEX-ByblMt9L8

Effective URL: https://docs.google.com/drawings/d/1yT8yuB2I1JaV3882l115d2hOITrod2iEX-ByblMt9L8/editRedirected

The Cisco Umbrella rank of the primary domain is #1 of the top 1 million websitesTop 100 Site

AI Security Verdict

High Risk

Confidence: 88%

7
Risk Score

High‑risk phishing page impersonating Amazon hosted on Google Docs.

Risk Factors
Brand impersonation (Amazon) on an unrelated domain
Deceptive content mimicking a legitimate security verification page
Use of a reputable platform (Google Docs) to host phishing‑style messaging
Domain age information unavailable

Details

Page Title

RTMYTRDHNJWNYHDFBHFDHDFH - File 1 - Google Zeichnungen

Scan Type

public

Language

🇩🇪

German

(80% confidence)

Category

documentation technical

(34%)

Domain Information

The domain 'docs.google.com' uses the commercial generic top-level domain (.com) and includes subdomain 'docs'. The core label 'google' covers 6 characters holding 3 vowels versus 3 consonants. Breaking it apart gives 1 word: google. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://docs.google.com/drawings/d/1yT8yuB2I1JaV3882l115d2hOITrod2iEX-ByblMt9L8

Page Load Overview

2.47s
Total Load Time
22
HTTP Requests
7
Domains
3.5 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:de
Text Length:408 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical34% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
34%

Detected Features

OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8142.250.186.131United States
AS15169GOOGLE
8142.250.186.110United States
AS15169GOOGLE
3142.250.186.35United States
AS15169GOOGLE
1216.58.206.33United States
AS15169GOOGLE
1142.251.140.174United States
AS15169GOOGLE
1142.250.186.138United States
AS15169GOOGLE
12a00:1450:4001:82a::2003Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
12a00:1450:4001:812::200eFrankfurt am Main, Hesse, Germany
AS15169GOOGLE
12a00:1450:4001:82a::200aFrankfurt am Main, Hesse, Germany
AS15169GOOGLE
12a00:1450:4001:82f::2001Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
2212--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13ED3E66301205CBADFA749A3218B25573C1D4077F887507AE3FCCEA92BD6C6E134A769

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:aY6mlA5axWfI5UEjWQoJje0Jf3DKu4GRt/X3Hee/yRB04B/Ssbp:vw7kFoJV/+D0P4BKsV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:137479:1ggLyGNBBhgySAERhXFMCCYARqEENSkgAIDINnBDAAMAopCaFKGKeTYGEFqw0T2Ox6AL+BDBAi9QAIBGEgEYQJICAkqxmADM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:2ee7efe7e7e7e7ff
Perceptual Hash:b7154d1715159d55
Difference Hash:cc0d484c4c4c4c10
Wavelet Hash:00c3c3c3c3c3c3ff
Color Hash:#ac8b53

Other Hashes

Crop Resistant:cc0d484c4c4c4c10

Scan History

Scan history not available

Unable to load historical scan data